last executing test programs: 9m57.851045805s ago: executing program 0 (id=1763): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e0, 0x0, 0x502, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20c, 0x11d, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x4, 0xc, 0x48, 0x4c, 0x6c, 0xc, 0x1, 0x6, 0x6, 0x3, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7, 0xa, 0x9, 0x7, 0x5, 0x0, 0x5566]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x1b, 0x36, 0x62, 0x9, 0x4, 0x16, 0x3, 0x18, 0x16, 0x3, 0xc, 0x30, 0x6c, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x4, 0xd6, 0x27cd, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0xa}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x6}, {}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x6}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x5}, {0x0, 0x9}, {0x1}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x4}, {0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa483, 0x4, 0xf7d9, 0xe, 0x5, 0x40, 0x7, 0x400]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9038}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd0}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x43e}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x79}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) write(r5, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TCSETS(r0, 0x80044704, &(0x7f0000000040)={0x8, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0x0, 0xa, 0x5, 0x40, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @generic={0x3, 0xc, 0x5, 0x8, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1400}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x87b}], &(0x7f0000000140)='GPL\x00', 0x8000, 0x5f, &(0x7f0000000180)=""/95, 0x100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x7b, 0x44}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x5, 0x4, 0x4, 0x2}], 0x10, 0xffffffff}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@private0}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x4, 0x1, 0xe3, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0]}, 0x40) 9m53.48969622s ago: executing program 0 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0xa) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380001000314017a00001da10438383d6f0000000000000000000000000000001600000000000000000000000000000000001d0000028c8dd0058e82cb38821a64c651e0e13e5a124aabaa513d5164d88cbfcb82dcb619c287027b14a592ec1e2aeb38bb37db72f88732782fcc6ef3f65dbfaecf57e33bdee39023a4bdb912e41f0181686732085e45e032d6ca50a496ee7f4ba7b2eba7bcacc50aaea238e9079b7cd221d371d6eb748f16f2d3c54b4e5dca5ca68ba1f5eb9e2c636ebd2ecfc2ae7136744b8c7fa7add9cf8cb9d7086b816dbe1fae2927d2e5f17f5ccb8d7c8e1594df3c2340c9965f0d0943703ecb9fa9a9085e19c51d"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000000), 0x4) 9m52.384912205s ago: executing program 0 (id=1771): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0xbf, 0x1, 0x0, 0x20, @private2, @local, 0x1, 0x80, 0x7, 0x7}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_newvlan={0x28, 0x70, 0x2, 0x5, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7}}}]}, 0x28}}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000340)=[@nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x4, 0x4}}, @nested_load_code={0x12e, 0x4d, {0x0, "67f2a7f2452ac3440f01c3450f07dbddc481235847000f7925c900000044dbc166ba4300b8782a62a3ef8fa850a3a48a520000004e"}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x9, 0xc39, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x6004, 0xf, 0xc, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x691, 0x5, 0x0, 0x1}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0xcaf3}}, @uexit={0x0, 0x18, 0x200}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x280b, 0x2, 0x8, 0xd9}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x3}, @uexit={0x0, 0x18, 0x9f8}, @rdmsr={0x66, 0x18, {0x9fc}}, @cpuid={0x64, 0x18, {0x87, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x6000, 0x6, 0x55, 0xff}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x373}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x64, 0x18, {0x2, 0xff}}, @nested_amd_vmload={0x182, 0x18}], 0x325}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000006c0)={0x9, 0x7, 0x4b}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) getpeername$tipc(r4, &(0x7f0000000080)=@id, &(0x7f00000001c0)=0x10) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x4008414}, 0x4800) 9m48.450513415s ago: executing program 0 (id=1775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0xa) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r7 = socket(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x100e, @loopback}, 0x10) 9m47.128241429s ago: executing program 0 (id=1776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$igmp(0x2, 0x3, 0x2) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 9m43.998428411s ago: executing program 0 (id=1783): prlimit64(0x0, 0x14, &(0x7f0000000200)={0x20000006, 0x400060000000000}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fallocate(r1, 0x0, 0x5, 0x8ffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/name\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='./sys\x00', 0x90000020) read(r3, &(0x7f0000000200)=""/128, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) socket(0x840000000002, 0x3, 0x100) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) read(r5, 0x0, 0x0) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000f02000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1000}) pipe2$watch_queue(&(0x7f0000000300), 0x80) 9m28.769974662s ago: executing program 32 (id=1783): prlimit64(0x0, 0x14, &(0x7f0000000200)={0x20000006, 0x400060000000000}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fallocate(r1, 0x0, 0x5, 0x8ffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/name\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='./sys\x00', 0x90000020) read(r3, &(0x7f0000000200)=""/128, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) socket(0x840000000002, 0x3, 0x100) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) read(r5, 0x0, 0x0) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000f02000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1000}) pipe2$watch_queue(&(0x7f0000000300), 0x80) 1m26.376678856s ago: executing program 3 (id=2976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x8001, 0x0) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001d80)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1, 0xd, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, &(0x7f00000007c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc4d, 0x0, 0x0, 0x1000, 0x7ff, r2, 0x0, 0x8a}}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x51, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x94000000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0), {0x23}, &(0x7f0000000500)=""/225, 0xe1, &(0x7f0000000600)=""/197, &(0x7f0000000700)=[r3, r3, r3, r3, r3, r3], 0x6}, 0x58) 1m25.082664771s ago: executing program 3 (id=2980): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x21, 0x803, 0x9) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r0}]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) r1 = socket(0x400000000010, 0x5, 0x9) process_vm_writev(0x0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000001800)=""/148, 0x94}, {&(0x7f00000018c0)=""/18, 0x12}, {&(0x7f0000001900)=""/242, 0xf2}, {&(0x7f0000001a00)=""/151, 0x97}], 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x10, 0x0, 0x0) r2 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) r4 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score\x00') preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) 1m23.916303083s ago: executing program 3 (id=2981): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000080)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x53c9}}], 0x30}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000005680)={0xa, 0x4e20, 0xa7, @ipv4={'\x00', '\xff\xff', @local}, 0xdbe2}, 0x1c, 0x0}}], 0x2, 0x8080) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) open_tree(r4, &(0x7f0000000780)='./sys_mnt\x00', 0x88000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x20, 0x31, 0x1e, {0x1e, 0xe, "0b944ded4f6a458eb33c27d563cc31c1225c888bb2d15331e1694062"}}, &(0x7f0000000200)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "b4f86ef8da677107662bd77d30922dd8d3f81298c5a1123d51bc58346d93e504692b39bb8bdc5fd8f30ba8e7f9f15575501496de64c8288225e729a37029c062003a63f4f332d3c224aa8b36dd5aeaf87a1a844daee6e68074a91556efc8aa496a756adf328e6c014947aee4192220a398911f421f4201a7fc594401ad52b5a647c4a7dcece6e52623d3da2c1e24dded2478435c1e4d655222d35e01ba77fc39325046fb9acf2d7619b52b4bc9a86123c8f2fbd12449af51ad40b4c5fba371fd47078817261ca68a7b315c7965ff5592bb163831d7b2aca32df594de366a4ad0a6451bb0e8f9948d64ef1b77f4b4f36bad2b"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000340)={0x40, 0x0, 0xf1, "6edf58d8cf5f6d4797cdf7af3b5038c60e2a759e8048dea9abb19ae8397b5607bb595f37d87439b16a52fb5d4d5d8bd4e1a0288fb90f59ecbde9c0ed5dca1a8e1db0e37fc8c94aefea59de9989c18cea580f8d4a7768ab2d4725952388098372b780b7e89f180b70a0c9ef80aeb7aec38dcb4a0da5fbc689bc622b8c0b5f142832f9a90622aa45e736dfdbbb8d113c0ae79cf7e54fa130481dcce6587de70a37b1d59d2c5e2f60d077b4f66c2fd9255cd2ace0a3c245e3a46eb6aa29953e989dbdbcc1bcc809d642e7fcc9438fc3dabe6d4daad2467c9a57010a3d6741a183dccaa4ef710922df28d9bda2200d34eb0d65"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x17}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x0, 0xba, {0xb8, "d87dbd10e574e4976b3ba3c7098ef308e595d0b0c266ba314b9e2e0a790cd325e877fe6e31780f14847557dcd37d49e4d33187001bceb89c52975ec497692f8e78faff9e0d29e4be24ba8e8b3deba53b95501bfb2b592abbd3cee0314e9e517e8624dedab39472fd13531b375c46b09250ae402b48c25d2123ee429cb32db8050598815a9f7cc80b1286fdb58a794790876aebd3c80d1d087e2bb7d29e0b2200ecd88175f36cc7581c36d8d103b1cb59eada4515e04420ca"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x4}}) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000080)=ANY=[], 0x30) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x80) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000008c0)={@multicast1, @multicast2}, 0xc) 1m21.441487415s ago: executing program 3 (id=2985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x8001, 0x0) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001d80)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1, 0xd, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, &(0x7f00000007c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc4d, 0x0, 0x0, 0x1000, 0x7ff, r2, 0x0, 0x8a}}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x51, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab28746fd56874b87c28bc4cdfa320269de5360dd0dff0d375e8ed9c91"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000480)={0x1, 0x0, [{0xfff, 0x18f7, 0x6, [0x1, 0xff, 0x6b, 0x3, 0xb, 0xe5e, 0x1, 0x7]}]}) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x94000000, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0), {0x23}, &(0x7f0000000500)=""/225, 0xe1, &(0x7f0000000600)=""/197, &(0x7f0000000700)=[r3, r3, r3, r3, r3, r3], 0x6}, 0x58) 1m17.026234997s ago: executing program 3 (id=2990): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="05000000010001", 0x7) write(r0, &(0x7f0000000140)="0d000000010001", 0x7) write(r0, &(0x7f0000000180)="3e0000000b000141000000000000000000", 0x11) write(r0, &(0x7f00000001c0)="290000000100", 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e04010a2000"], 0x7) write(r0, &(0x7f0000000300)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0401130c00"], 0x7) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="61646420206f6f73797a205b95", 0xd) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) 1m16.587343873s ago: executing program 3 (id=2992): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b0002c1aad25609043d0600518e3f0009"], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) socket(0x1, 0x803, 0x0) socket(0x8d03550eea222302, 0x5, 0x7c644) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000000206010800000000020000000000000005000100070000000900020073797a3000000000240007800800134000000001050015000c00000008001340000a04ff0800064041002b0c13000300686173683a6e65742c69666163650000050005000a000000050004"], 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) read$dsp(r2, &(0x7f0000000280)=""/189, 0xbd) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x3b) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x98fa9f1007185d7c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='tcp 20', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) mount(&(0x7f0000000240)=@filename='proc\x00', 0x0, &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r6, 0x0, 0x0) close(r6) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 1m1.514773192s ago: executing program 33 (id=2992): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b0002c1aad25609043d0600518e3f0009"], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) socket(0x1, 0x803, 0x0) socket(0x8d03550eea222302, 0x5, 0x7c644) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000000206010800000000020000000000000005000100070000000900020073797a3000000000240007800800134000000001050015000c00000008001340000a04ff0800064041002b0c13000300686173683a6e65742c69666163650000050005000a000000050004"], 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) read$dsp(r2, &(0x7f0000000280)=""/189, 0xbd) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x3b) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x98fa9f1007185d7c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='tcp 20', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) mount(&(0x7f0000000240)=@filename='proc\x00', 0x0, &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r6, 0x0, 0x0) close(r6) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 21.421701708s ago: executing program 1 (id=3108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="8000010018000000180034801400350069703665727370616e", @ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r3, &(0x7f0000000040), &(0x7f000009de80), 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0) 21.170115378s ago: executing program 1 (id=3110): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_setup_io_uring(0x1a3b, &(0x7f0000000540)={0x0, 0xbe8, 0x400, 0x7, 0x2af, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000600), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x2, 0x3ce, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x81}}}, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = syz_clone(0x7a48180, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r7, 0x5, &(0x7f0000000040)=0x5, &(0x7f00000009c0)=0x272) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x20004800) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000080)={0x10, 0xeeef0000, 0x0, 0xffffffffffffffff, 0x20}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000640)={r0, &(0x7f0000000080)='+\\%+#@^:$\x00', 0x100, &(0x7f0000000380)={@_ha_fsid={[0x7, 0xfffffffc]}, {0x5, 0x7f, 0xb1d, 0x40000}}, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0xffffff3b}) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0xfffffffffffffdf0) 20.219363252s ago: executing program 1 (id=3111): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x20, &(0x7f00000007c0)={0x0, 0xfffffee0, 0x0, 0x0}}, 0x10) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20045008}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f00000000c0)='],.(\x00', 0x80, 0x152, &(0x7f0000000140)={0x9, 0xd, 0x8f3, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002300), 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000007000000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB='.\x00'], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 15.838033759s ago: executing program 1 (id=3121): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r1, 0x100, 0x0) getdents64(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14}}}]}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000040) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r7, &(0x7f0000001380)="8bb918fc1b58bceed62ac0a662fb418355cb60f8c46f030650eb13b6433d1f247d54bc9f58f5e25935e89d0e12954aa9c15dea46a070367f8a950cb7a09ad2b8bedab0e4edaabdff60fff05dff7194f22ae5857588070000000000000026ce1b48ce7decac35f66c23b8c5c1b083bb5e991737f8554baa84cf6849569f9dadda0274f9096777294c69326039216e9cf22777ca47132811070fb0bc7995c63b740e7a10a9d0503bfa87c535a9da2205473434627ce5ab9f5dd54d12b62829120a3bbd77b204907587032e26e0e9b88d5878d17a2f2dd7eaa45fd044eb95ad5ee39bde55cd7d66f4289ce1a57a938f3b37d9671be746e0b934e5f48fcddec36a71bf5494a34d00bbf5170a9244ad55058e305f0def379c05f26b11300cb60ec54a9acd92741fed268dad17160189127c8206b89e9c4797df5e9d4dbf6d77115c9d32a2e405ac39145856865d88f78cd2a074e52fcf39016aef8b7dbb1c5863d861a8ea27464a1dff050f9f0ddadc0d37567c5445333a1eb406ca1ba4f877a68d52a0bfce42abbc7b07ccd911dff411ea9f84f23bcac4c62b290dc2c671a1b9da0f7319d36381ca3e1a66a756fbcc09c81115cc8be28928d972d966ab068a3b34530ebb5fa17f32e113ba8dc129fde7b6e8a8115defd32fab3009d5097eb4ce8e10cf11c6e4353a8f563f892705a8107c95604bdf9193a5f911a4e2674d46768446e706d304366efe82d1873742a3e171543015603c7df9357bf3de225003b3c9aeccdcdcfd", 0xffffff28) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x169e41, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @local}}}, 0x108) 14.88051182s ago: executing program 1 (id=3126): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x7, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "46222bf8cf7e724a1b79c944b9d28504"}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_ublk_setup_queues(r3, 0x0, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x190}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdab8, 0x2000, 0xe, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10, 0x10080000, 0x365}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x2, 0x219}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x82, 0xbd}}], 0x1, 0x0, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) 14.614887513s ago: executing program 1 (id=3127): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000000c0)={0x9, 0x400, 0x13e, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 14.061728918s ago: executing program 34 (id=3127): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000000c0)={0x9, 0x400, 0x13e, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 13.029710607s ago: executing program 6 (id=3132): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x3e0241) mkdir(&(0x7f0000000140)='./sys\x00', 0x196) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='[', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x0, 0x4, 0x0}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) syz_usb_connect(0x5, 0x2b, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x20000) 11.877612609s ago: executing program 5 (id=3133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x2004) 9.823416683s ago: executing program 5 (id=3134): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) io_setup(0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0xc0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x5, @private0, 0x9a6}}, [0xfffffffffffffff9, 0x2, 0xffffffffffffffff, 0x7fff, 0x5, 0x7, 0x100000000, 0xc, 0x7, 0xfffffffffffffff9, 0xffff, 0x0, 0x0, 0x7, 0x4]}, 0x0) 9.685828918s ago: executing program 2 (id=3135): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x80, 0x2, 0x80, "3cc6dab511e0f5fe5e8677ca3434de812f0e39d1a9e60c44439d29b02a95f877", 0x32314247}) 9.684515584s ago: executing program 6 (id=3136): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x21, 0x803, 0x9) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) r1 = socket(0x400000000010, 0x5, 0x9) process_vm_writev(0x0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000001800)=""/148, 0x94}, {&(0x7f00000018c0)=""/18, 0x12}, {&(0x7f0000001900)=""/242, 0xf2}, {&(0x7f0000001a00)=""/151, 0x97}], 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x10, 0x0, 0x0) r2 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) r4 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score\x00') preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) 9.616051962s ago: executing program 4 (id=3137): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x7, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "46222bf8cf7e724a1b79c944b9d28504"}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_ublk_setup_queues(r4, 0x0, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x190}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdab8, 0x2000, 0xe, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10, 0x10080000, 0x365}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x2, 0x219}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x82, 0xbd}}], 0x1, 0x0, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) 9.441184241s ago: executing program 2 (id=3138): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20004080) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.104716277s ago: executing program 6 (id=3139): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4000ca}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_connect$uac3(0x3, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040cd0c14004000010203010902a100030101c010080b0002010130070904000000010130000a2401103d0007000000132403050101060250ff07000007000900ff050c240b0701fcffffff08060014240202040405075dc2"], 0x0) 8.885898439s ago: executing program 5 (id=3140): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) utime(&(0x7f0000000000)='.\x00', 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402104341200010000000109023100020100c032090400000002fe000005240600010324ab"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)}}], 0x1, 0x200040c0) shutdown(r0, 0x1) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x0) getsockname$packet(r1, &(0x7f0000000100), &(0x7f0000000140)=0x14) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6, 0x3}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@loopback, 0x72, r5}) write(r3, &(0x7f0000000000)="2e000000010002", 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) shutdown(r6, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=@gettaction={0x14, 0x32, 0x2, 0x270bd31, 0xffffffff}, 0x14}}, 0x4000004) 8.059856549s ago: executing program 2 (id=3141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0xf4, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x80, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x0, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdfefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x25040002) mknodat$null(0xffffffffffffff9c, 0x0, 0x100, 0x103) close(0x3) r6 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r6, 0x2) 7.745779084s ago: executing program 4 (id=3142): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_procfs(0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400)) pwritev(r0, &(0x7f0000000500)=[{}, {0x0}], 0x2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20004080) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x38, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.645313217s ago: executing program 6 (id=3143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 7.50649464s ago: executing program 2 (id=3144): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x20, &(0x7f00000007c0)={0x0, 0xfffffee0, 0x0, 0x0}}, 0x10) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20045008}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f00000000c0)='],.(\x00', 0x80, 0x152, &(0x7f0000000140)={0x9, 0xd, 0x8f3, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002300)=[{0x0, &(0x7f00000002c0)="6c0bb21a84841b6137f3ad09e59e94b61d8e2adf7c93fee850a34988e7cf44a6daea8ba2a54f9330a02c9bd4f1df8e43dba89c734147f2dcc6592ba5a2630b6973ae4fae8a139d0c9411dd8791757e8c8518c03ded3720997321b3adae65015b4bb04a506f7eb876304c8ef1638a5ed8e01d27e467e342bc2042d3f51a564b8e78b06e9bdafd21110e7aa21b7ebac0f3de2eb90607392f", 0x2, 0x97}, {&(0x7f0000000740)={&(0x7f0000000440)={0x0, &(0x7f0000000380)="3e2380b2d79179ca9ff0c3b8f2d169a9d49ea76f8a7d735c63bb516a0af55333d9a3f2053dae7bb5eb72a7075de104bbf7a20fee900ec1febaebba6f4a4bef9063d337b51804872c809bbb20c2ca301caf18e7c65e7cddc0a454b9b876e2cb504d6279f5cc47cc0ae8d7c553fdfa859693deb830abc29773c58fd84ecf482029e107fb03223b4590314b0a024f8e41ad7a858618ce", 0x1, 0x95}, &(0x7f0000000640)="748f68e5c594b425850ee465edc7a6b1ffc89c9368f1093618e9314792a16637ac123ac217b721fde401b95f34b7b7c67f634e5c107dad8feccc874def3ccecb6a37a4d8b23375382af936a16069933f14cb517e0f4564b69bb8d201c50117e315b3e7af75c582be5e937164ad5d75432212600b7dfb5f0c032e8a546ec127bb3d048ec966dd22bc1302152450b1a6f8e5d455276ae2a894b8a7f5333a2054260c23196ba2cd369485e5b5754e9173df85b91a2b873072a8505fc32120cbebc915f129", 0x2, 0xc3}, &(0x7f0000000780)="52d28dad3638c0", 0x2, 0x7}, {&(0x7f00000009c0)={&(0x7f00000008c0)={0x0, &(0x7f0000000800)="058d3b2b23bdad87ef6786e801a10566352fa4291b41b5b4d4362a1c150af000a245f3bf2c23ae7f9e0299c82a6686c4a99493eaec3112a291b066aeb2128533b164194c21aeca29fde421ced0db48bef4628c8fcdc00008c5476ce988a3db92a15122089ef0401eda2bc1bd67db32177768de79eccb8fface64d09c9aacc9dc418fc356641c1cd97594224a477f528730a353a01fd00e38a3720c42d76509a9258e7282dfc3f42cab9bf49115b346a144e3226b720c22fd64", 0x1, 0xb9}, &(0x7f0000000900)="52497cf12237d426b0f42dff83df122a539b02f98c72866caab23d7547f91bf83eab390703211bffb4e5d8bebc33bfc5c87c974e727618f6c2a43d97a3896c994a25bb79a69961c57d5630cd9b0a4833ce32ac3e95b06541d3bb104fb124c007fc52f7cdb85c63abb8d12ab2cad262a3d813ea0dfb7bc33e1de41ffda775e5e04d6627dfe95dba4f857866822e37faac2bd9df75ec9457e75ea9291807148b6d97c8c422440ad89e3592a62a20e3fe", 0x1, 0xaf}, &(0x7f0000000a00)="4a406164f68c06d0c33e807fb47fdd48368a61537adc092b56bf562553f15fc66adce8e6893443de15b7d7f10c1da52b6b778e1dcf2889dccf925d718319772341815181120c7c87fa1ea5825a285ec6ab7cd5031f3f22b7ffbe97ad338cdb09d6ecb10c111436c7c2a0181ec1581fe3eb1a08288198595926753a0a460b32ac706d750c94fbc1c2892ba59e5362748b3d47744a357d77de93042dce50324e8e95ff9eab56d9bf23b4d59b6940c37a65da90652eefd56b3feb8e2dc4a01e182084cb84bc", 0x0, 0xc4}, {&(0x7f0000000c00)={&(0x7f0000000b40)={0x0, &(0x7f0000000b00)="11ab915536671d18978a5f458bc2686978f5326b1069", 0x1, 0x16}, &(0x7f0000000b80)="7d5888630f5f48ab3ea7af4c7d99596e27eea82593487014a22bc03ca3a7128dfcefb0c7260d8a1ff0bdf551221065e68bfb490f9505def5564d05897f2237132d964625a7daecc0d3abd6b8dfb6538a8eb40f5220be214b917ac0d37b4cafda358b1db469f87aeaf574c6ad9f50bef8fb61", 0x1, 0x72}, &(0x7f0000000c40)="1bdb7023c7af2651553e393db568d6e692ae51c1336462ba5024b14d", 0x2, 0x1c}, {&(0x7f0000000f00)={&(0x7f0000000d00)={0x0, &(0x7f0000000c80)="a303e36b90f7ad279fa19bfd2731dc811ff18807753f8a2d9d2e36ecea7650d895f5b34ae7108dcddb76e8f1637d97c835c8c13918d56aa44379278781c4b461ea7b64e18546ba4e4234dea201", 0x2, 0x4d}, &(0x7f0000000e40)="e6c0a8c2ce75599c31501718f67f42b4511498b3c18309b33bf9a71936f5bc19e0bfd3d75e1bd2b77b3faa499f23d5cc1ad3cfc4cd836f003e241c300c6e20351073af92c33dd9a28227e4ff6cb68efa8c3f6f3eafef772d6a749bda24c12b28c347b57d41a120e8209ec9e2707f732475ec81aaf5ff4aae34f445621f2d072f85c3abc08e4fda59", 0x0, 0x88}, &(0x7f0000000f40)="033a3cc86d80937e8ebd84bb6e675ed0d9496df3dad6ebda6e96", 0x2, 0x1a}, {&(0x7f0000000fc0)={0x0, &(0x7f0000000f80)="ceff184ada17a8cb62aa170dcdb146dec453fce6c98ab4accc92dd62f1973eb264feae8a", 0x0, 0x24}, &(0x7f0000001000)="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", 0x2, 0x1000}, {0x0, &(0x7f0000002000)="261c2c1652796a89a1b2cb35479b48d65c789b089be4abbdd0a03c3ce55118e52e8239578debd38356156a19aea8a6e33d81061745d5b1a7bf28decda4d2", 0x1, 0x3e}], 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000007000000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB='.\x00'], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6.52042272s ago: executing program 6 (id=3145): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x9) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @remote, 0x6}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000040)) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2450100140000fb727affa3f9d64600000029907800000000ffffffffb9e28c6a534377fa69774f78dc08ad38829b10638f777d8d26a58288f6513b4485b5653af705955e054433e53b0f94bc663f98deb244dcc384fa7e32b8c4ec45aa8ffede6e170ebe2372b4a1414f9e399c62919b26f6b1b37974bb8923f5d4643792e8adcc7221e07fe40dd377"], 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r6 = fcntl$dupfd(r5, 0x406, r5) sendto$inet(r5, 0x0, 0x0, 0x2000477d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 3.83348982s ago: executing program 4 (id=3146): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0x3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (fail_nth: 7) 3.492747651s ago: executing program 5 (id=3147): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x7, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "46222bf8cf7e724a1b79c944b9d28504"}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_ublk_setup_queues(r3, 0x0, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x190}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdab8, 0x2000, 0xe, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10, 0x10080000, 0x365}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x2, 0x219}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x82, 0xbd}}], 0x1, 0x0, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) 3.38250152s ago: executing program 2 (id=3148): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x21, 0x803, 0x9) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) r1 = socket(0x400000000010, 0x5, 0x9) process_vm_writev(0x0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000001800)=""/148, 0x94}, {&(0x7f00000018c0)=""/18, 0x12}, {&(0x7f0000001900)=""/242, 0xf2}, {&(0x7f0000001a00)=""/151, 0x97}], 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x10, 0x0, 0x0) r2 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) r4 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score\x00') preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) 3.090173532s ago: executing program 4 (id=3149): r0 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0x45025415}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) listns(&(0x7f0000000040)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x4000010) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x9, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x2d5, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x81}}}, &(0x7f00000000c0)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x196}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20008000, 0x327, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x20, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2002, 0x20, 0x1, 0x258}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r13, '\x00', {0xfff9, 0x9, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) 2.336564918s ago: executing program 6 (id=3150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000200001001568cddd504b3985cf008000090000031e800200ff000200fc020000000000000000000000000000080017004ea24e1d"], 0x38}}, 0x480d0) connect$unix(0xffffffffffffffff, &(0x7f0000000780)=@file={0x0, './cgroup.cpu/memory.force_empty\x00'}, 0x6e) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) syz_clone3(0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r6, &(0x7f0000000000)={0x0, 0x26}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="2015a2000000941339e399fb0d5322214275e2487f41868d71455ab0e637e29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b51a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9ff3b21bcec5c914ce06caedd105670f1b1be2815d4c7baf9c2a807d456f98618179ff02f8cdabedf4f2bf4efeb0b827fd69d7a55582728e4dd721d63ab50000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000004000007000000000c000480fd7c0001000005606b31b4aa4900ecff088008000100ffffffff000000000000000000f02832796a943fc199ca14291b668599f7f301abd23337f62474313748b8fc2b2e7784b0f1bd091777dd07fee16d335924ca5288c77455a5a2ec3200db23b185be5c38e8d0efb0c38b13"], 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/130, 0x82}], 0x3, 0x9, 0x6, 0x16) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000ecdffffc00000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc0100000000000000009bee0000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020091000000000000001c001700000000002abd7000000000002abd7000000000000000000005002100020000004c0014"], 0x160}}, 0x4004004) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.167419345s ago: executing program 4 (id=3151): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.894819987s ago: executing program 2 (id=3152): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x489, 0x0, 0x100000005}]}) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x3, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x84043, 0x0) shutdown(r7, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000, 0x40080) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/4\x00') ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) gettid() setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00') 1.111124144s ago: executing program 4 (id=3153): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000040)) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) fcntl$dupfd(r6, 0x406, r6) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000480)='scalable', 0x8) 1.083535131s ago: executing program 5 (id=3154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 0s ago: executing program 5 (id=3155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf81}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$FIONREAD(r3, 0x541b, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x70, &(0x7f00000016c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4e, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "2000000000000013d3dd829d9eec0ff80c6fb74be2eca86a7266ef4a715a133795f74cfce845a5573e9a252e12454b6a3fdd22679ff3bfee212abf5d3b018d66bf89"}}}}}}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000004780)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004740)={0x0}, 0x1, 0x0, 0x0, 0x8045}, 0x4000000) kernel console output (not intermixed with test programs): oduct=8b4e, bcdDevice=9c.08 [ 1231.317745][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.319238][ T5734] usb 3-1: config 0 descriptor?? [ 1231.575550][ T5734] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1231.617528][T22772] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1231.827189][ T31] audit: type=1400 audit(1789661481.526:3278): avc: denied { write } for pid=22777 comm="syz.3.2944" name="mjpeg" dev="configfs" ino=10251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1231.868086][ T5734] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1231.868102][ T5734] [drm] Initialized udl on minor 1 [ 1231.880447][ T5739] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1232.057701][ T5739] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1232.057735][ T5739] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1232.058918][ T5739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.058941][ T5739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1232.085392][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.085406][ T5739] usb 2-1: Product: syz [ 1232.085431][ T5739] usb 2-1: Manufacturer: syz [ 1232.085441][ T5739] usb 2-1: SerialNumber: syz [ 1232.153546][ T5739] usb 2-1: selecting invalid altsetting 1 [ 1232.153953][ T5739] usb 2-1: unit 6 not found! [ 1232.539723][T22800] netlink: 'syz.5.2953': attribute type 1 has an invalid length. [ 1233.348471][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.633243][ T5739] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 1235.007417][ T5739] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1235.031361][ T5739] usb 2-1: USB disconnect, device number 92 [ 1235.104535][T21922] udevd[21922]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.271956][T22821] ip_tables: iptables: counters copy to user failed while replacing table [ 1235.906123][T22831] netlink: 'syz.1.2956': attribute type 21 has an invalid length. [ 1235.906140][T22831] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2956'. [ 1235.906203][T22831] netlink: 'syz.1.2956': attribute type 5 has an invalid length. [ 1235.906212][T22831] netlink: 'syz.1.2956': attribute type 6 has an invalid length. [ 1235.906219][T22831] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2956'. [ 1236.385845][ T5788] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1236.536628][ T5788] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1236.539148][ T5788] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.539191][ T5788] usb 6-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1236.551376][ T5788] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1236.551402][ T5788] usb 6-1: Manufacturer: syz [ 1236.551417][ T5788] usb 6-1: SerialNumber: syz [ 1236.972328][ T5734] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1236.972662][ T5734] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1237.111971][ T5739] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1237.163128][ T25] usb 3-1: USB disconnect, device number 28 [ 1237.175161][ T5739] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1237.175308][ T5739] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1237.394507][T22872] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(56) [ 1237.394524][T22872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1237.422962][T22872] vhci_hcd vhci_hcd.0: Device attached [ 1237.497225][T22880] netlink: 'syz.2.2964': attribute type 1 has an invalid length. [ 1237.656412][ T30] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1237.844666][ T5739] kernel read not supported for file /video0 (pid: 5739 comm: kworker/0:7) [ 1238.199788][T22877] vhci_hcd: connection reset by peer [ 1238.261215][ T1023] vhci_hcd vhci_hcd.3: stop threads [ 1238.263783][ T1023] vhci_hcd vhci_hcd.3: release socket [ 1238.282661][ T1023] vhci_hcd vhci_hcd.3: disconnect device [ 1239.195281][T22889] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1239.476268][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1239.597484][ T5788] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 1239.614354][ T5788] usb 6-1: USB disconnect, device number 45 [ 1239.628251][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1239.637568][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1239.639279][ T25] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.639308][ T25] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.639330][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1239.639359][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.668551][ T25] usb 3-1: config 0 descriptor?? [ 1240.719278][T22918] ip_tables: iptables: counters copy to user failed while replacing table [ 1240.849146][ T25] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1240.849170][ T25] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1240.849185][ T25] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1240.849201][ T25] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1240.849215][ T25] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 1240.849592][ T25] mcp2221 0003:04D8:00DD.0011: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1242.795801][ T30] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1242.855740][ T25] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 1243.205769][ T5712] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1243.377531][ T5712] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1243.378296][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.418759][ T5712] usb 2-1: config 0 descriptor?? [ 1243.678500][ T5788] usb 3-1: USB disconnect, device number 29 [ 1243.746651][ T31] audit: type=1400 audit(1789661493.446:3279): avc: denied { bind } for pid=22953 comm="syz.1.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1243.759610][T22954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.784592][T22954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.217744][ T5712] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1244.218162][ T5712] [drm:udl_init] *ERROR* Selecting channel failed [ 1244.789736][ T5712] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1244.789763][ T5712] [drm] Initialized udl on minor 1 [ 1244.798053][ T5712] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1244.798421][ T5712] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1244.805114][ T5712] usb 2-1: USB disconnect, device number 93 [ 1244.807273][ T5788] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1245.106518][T20399] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1245.267019][T20399] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1245.267846][T20399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.267867][T20399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.267888][T20399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1245.267910][T20399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.269409][T20399] usb 3-1: config 0 descriptor?? [ 1245.469129][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1245.474087][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1245.484996][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1245.508861][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1245.512651][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1245.703451][T20399] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 1245.703484][T20399] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1245.703501][T20399] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1245.774981][T20399] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1245.938286][ T4581] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.198069][T23029] syzkaller0: entered promiscuous mode [ 1246.198085][T23029] syzkaller0: entered allmulticast mode [ 1246.302865][T22995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.361987][T22995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.363219][T22995] netlink: 'syz.2.2977': attribute type 1 has an invalid length. [ 1246.395786][ T5734] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1246.466485][ T5739] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1246.546196][ T5734] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1246.548438][ T4581] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.548999][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.549023][ T5734] usb 6-1: Product: syz [ 1246.549039][ T5734] usb 6-1: Manufacturer: syz [ 1246.549055][ T5734] usb 6-1: SerialNumber: syz [ 1246.609279][ T5734] usb 6-1: config 0 descriptor?? [ 1246.621155][ T5739] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1246.636509][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.636535][ T5739] usb 4-1: Product: syz [ 1246.636551][ T5739] usb 4-1: Manufacturer: syz [ 1246.636567][ T5739] usb 4-1: SerialNumber: syz [ 1246.697507][ T5739] usb 4-1: config 0 descriptor?? [ 1246.924541][ T4581] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.137529][ T5734] usb 6-1: Firmware: major: 110, minor: 223, hardware type: UNKNOWN (88) [ 1247.156603][ T5712] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1247.196556][ T4581] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.201764][ T5739] usb 4-1: Firmware: major: 110, minor: 223, hardware type: UNKNOWN (88) [ 1247.307139][ T5712] usb 2-1: device descriptor read/64, error -71 [ 1247.357433][ T5734] usb 6-1: failed to fetch extended address, random address set [ 1247.357447][ T5734] usb 6-1: atusb_probe: initialization failed, error = -524 [ 1247.357562][ T5734] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 1247.395843][ T5734] usb 6-1: USB disconnect, device number 46 [ 1247.424443][ T5739] usb 4-1: failed to fetch extended address, random address set [ 1247.424467][ T5739] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1247.424647][ T5739] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 1247.463546][ T5739] usb 4-1: USB disconnect, device number 9 [ 1247.558230][ T5712] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1247.585880][ T9545] Bluetooth: hci0: command tx timeout [ 1247.595740][ T5611] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 1247.705815][ T5712] usb 2-1: device descriptor read/64, error -71 [ 1247.817326][ T5712] usb usb2-port1: attempt power cycle [ 1248.460060][T23110] ip_tables: iptables: counters copy to user failed while replacing table [ 1248.656484][ T5712] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1248.676243][ T5712] usb 2-1: device descriptor read/8, error -71 [ 1249.689178][ T9545] Bluetooth: hci0: command tx timeout [ 1249.708045][ T2264] usb 3-1: USB disconnect, device number 30 [ 1249.815734][ T5712] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1249.977350][ T5712] usb 2-1: device descriptor read/8, error -71 [ 1250.173294][ T5712] usb usb2-port1: unable to enumerate USB device [ 1250.982159][ T31] audit: type=1400 audit(1789661500.676:3280): avc: denied { write } for pid=23146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.111322][ T31] audit: type=1400 audit(1789661500.806:3281): avc: denied { write } for pid=23171 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.473595][ T4581] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1251.605516][T23174] ip_tables: iptables: counters copy to user failed while replacing table [ 1251.726741][ T4581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.729057][ T4581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.733801][ T4581] bond0 (unregistering): Released all slaves [ 1251.745693][ T9545] Bluetooth: hci0: command tx timeout [ 1252.784036][ T4581] bond1 (unregistering): Released all slaves [ 1252.825698][ T30] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1252.826720][ T4581] bond2 (unregistering): Released all slaves [ 1252.854347][ T4581] bond3 (unregistering): (slave bond4): Releasing active interface [ 1252.866330][ T4581] bond3 (unregistering): Released all slaves [ 1252.887003][ T4581] bond4 (unregistering): Released all slaves [ 1252.920631][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1253.018880][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 1253.039633][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1253.039677][ T30] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1253.062500][ T30] usb 6-1: config 9 has an invalid interface number: 57 but max is 0 [ 1253.062526][ T30] usb 6-1: config 9 has no interface number 0 [ 1253.062551][ T30] usb 6-1: config 9 interface 57 has no altsetting 0 [ 1253.064979][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.065003][ T30] usb 6-1: Product: syz [ 1253.065018][ T30] usb 6-1: Manufacturer: syz [ 1253.065033][ T30] usb 6-1: SerialNumber: syz [ 1253.192232][ T4581] tipc: Left network mode [ 1253.204764][T23190] Bluetooth: MGMT ver 1.23 [ 1253.214305][ T9545] Bluetooth: hci4: unexpected event for opcode 0x200a [ 1253.239544][ T52] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 1253.242944][T23190] kAFS: bad VL server IP address [ 1253.441449][T23213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.446933][T23213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.560501][T23209] syzkaller0: entered promiscuous mode [ 1253.560523][T23209] syzkaller0: entered allmulticast mode [ 1253.595277][ T30] usbhid 6-1:9.57: couldn't find an input interrupt endpoint [ 1253.605095][ T30] usb 6-1: USB disconnect, device number 47 [ 1253.775739][ T5734] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1253.834521][ T52] Bluetooth: hci0: command tx timeout [ 1253.935984][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 1253.938771][ T5734] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1253.947667][ T5734] usb 4-1: config 193 has an invalid interface number: 61 but max is 1 [ 1253.947691][ T5734] usb 4-1: config 193 has 1 interface, different from the descriptor's value: 2 [ 1253.947712][ T5734] usb 4-1: config 193 has no interface number 0 [ 1253.947739][ T5734] usb 4-1: config 193 interface 61 has no altsetting 0 [ 1253.953471][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.953493][ T5734] usb 4-1: Product: syz [ 1253.953515][ T5734] usb 4-1: Manufacturer: syz [ 1253.953530][ T5734] usb 4-1: SerialNumber: syz [ 1254.294906][T23267] FAULT_INJECTION: forcing a failure. [ 1254.294906][T23267] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.294954][T23267] CPU: 0 UID: 0 PID: 23267 Comm: syz.2.2989 Tainted: G L syzkaller #0 PREEMPT(full) [ 1254.294985][T23267] Tainted: [L]=SOFTLOCKUP [ 1254.294993][T23267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1254.295006][T23267] Call Trace: [ 1254.295013][T23267] [ 1254.295022][T23267] dump_stack_lvl+0x100/0x190 [ 1254.295055][T23267] should_fail_ex.cold+0x5/0xa [ 1254.295084][T23267] should_failslab+0xc2/0x120 [ 1254.295110][T23267] __kvmalloc_node_noprof+0x113/0x9b0 [ 1254.295136][T23267] ? io_alloc_cache_init+0x38/0x170 [ 1254.295170][T23267] io_alloc_cache_init+0x38/0x170 [ 1254.295199][T23267] io_uring_setup.cold+0x4b5/0x1cde [ 1254.295223][T23267] ? lock_acquire+0x1d1/0x380 [ 1254.295244][T23267] ? avc_has_perm_noaudit+0x56/0x3b0 [ 1254.295271][T23267] ? __pfx_io_uring_setup+0x10/0x10 [ 1254.295294][T23267] ? find_held_lock+0x2b/0x80 [ 1254.295320][T23267] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1254.295346][T23267] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1254.295402][T23267] __x64_sys_io_uring_setup+0xc2/0x170 [ 1254.295427][T23267] do_syscall_64+0x123/0x790 [ 1254.295456][T23267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.295482][T23267] RIP: 0033:0x7f075339e159 [ 1254.295500][T23267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.295518][T23267] RSP: 002b:00007f07515d4ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1254.295538][T23267] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f075339e159 [ 1254.295552][T23267] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 1254.295565][T23267] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 1254.295578][T23267] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1254.295591][T23267] R13: 0000200000000b10 R14: 00007f07515d4fd8 R15: 0000000000000000 [ 1254.295618][T23267] [ 1254.760236][ T31] audit: type=1400 audit(1789661504.456:3282): avc: denied { write } for pid=23200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1255.248930][ T31] audit: type=1400 audit(1789661504.946:3283): avc: denied { write } for pid=23283 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1255.279384][ T9545] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1255.329965][T23300] FAULT_INJECTION: forcing a failure. [ 1255.329965][T23300] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.330012][T23300] CPU: 0 UID: 0 PID: 23300 Comm: syz.1.2994 Tainted: G L syzkaller #0 PREEMPT(full) [ 1255.330040][T23300] Tainted: [L]=SOFTLOCKUP [ 1255.330047][T23300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1255.330060][T23300] Call Trace: [ 1255.330067][T23300] [ 1255.330075][T23300] dump_stack_lvl+0x100/0x190 [ 1255.330108][T23300] should_fail_ex.cold+0x5/0xa [ 1255.330137][T23300] should_failslab+0xc2/0x120 [ 1255.330163][T23300] __kmalloc_noprof+0xfc/0x840 [ 1255.330184][T23300] ? __pfx_dynamic_dname+0x10/0x10 [ 1255.330205][T23300] ? tomoyo_encode2+0xfb/0x3c0 [ 1255.330235][T23300] tomoyo_encode2+0xfb/0x3c0 [ 1255.330263][T23300] tomoyo_encode+0x29/0x50 [ 1255.330285][T23300] tomoyo_realpath_from_path+0x18c/0x690 [ 1255.330316][T23300] tomoyo_path_number_perm+0x23c/0x580 [ 1255.330336][T23300] ? tomoyo_path_number_perm+0x22e/0x580 [ 1255.330359][T23300] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1255.330385][T23300] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1255.330420][T23300] ? __lock_acquire+0x5c0/0x1f40 [ 1255.330457][T23300] ? __fget_files+0x34/0x3d0 [ 1255.330482][T23300] ? find_held_lock+0x2b/0x80 [ 1255.330508][T23300] ? hook_file_ioctl_common+0x140/0x440 [ 1255.330541][T23300] ? __fget_files+0x21f/0x3d0 [ 1255.330571][T23300] security_file_ioctl+0xd3/0x230 [ 1255.330595][T23300] __x64_sys_ioctl+0xb7/0x210 [ 1255.330618][T23300] do_syscall_64+0x123/0x790 [ 1255.330649][T23300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.330670][T23300] RIP: 0033:0x7f52a759e159 [ 1255.330687][T23300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.330705][T23300] RSP: 002b:00007f52a84ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1255.330725][T23300] RAX: ffffffffffffffda RBX: 00007f52a7826180 RCX: 00007f52a759e159 [ 1255.330739][T23300] RDX: 0000200000000000 RSI: 0000000000008b0b RDI: 0000000000000009 [ 1255.330752][T23300] RBP: 00007f52a84ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.330765][T23300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.330777][T23300] R13: 00007f52a7826218 R14: 00007f52a7826180 R15: 00007ffc1cd4e4e8 [ 1255.330808][T23300] [ 1255.330903][T23300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1255.521014][ T5712] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1255.677305][ T5611] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1255.706543][ T5712] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1255.709943][ T5712] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.710030][ T5712] usb 6-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1255.711570][ T5712] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1255.711593][ T5712] usb 6-1: Manufacturer: syz [ 1255.711609][ T5712] usb 6-1: SerialNumber: syz [ 1255.837323][ T5611] usb 3-1: Using ep0 maxpacket: 16 [ 1255.837998][ T5611] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1255.839078][ T5611] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.839108][ T5611] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.839131][ T5611] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1255.839161][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.870841][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1255.908582][ T9545] Bluetooth: hci0: command 0x0c13 tx timeout [ 1256.009622][ T5611] usb 3-1: config 0 descriptor?? [ 1256.057950][ T5712] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 1256.078244][ T5712] usb 6-1: USB disconnect, device number 48 [ 1256.139315][ T4581] hsr_slave_0: left promiscuous mode [ 1256.144103][ T4581] hsr_slave_1: left promiscuous mode [ 1256.144721][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.144734][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.145359][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.145376][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.198572][ T4581] veth1_macvtap: left allmulticast mode [ 1256.198630][ T4581] veth1_macvtap: left promiscuous mode [ 1256.198653][ T4581] veth0_macvtap: left promiscuous mode [ 1256.198702][ T4581] veth1_vlan: left promiscuous mode [ 1256.198828][ T4581] veth0_vlan: left promiscuous mode [ 1256.408635][ T4581] team0 (unregistering): Port device team_slave_1 removed [ 1256.425582][ T4581] team0 (unregistering): Port device team_slave_0 removed [ 1256.450878][ T5611] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1256.450929][ T5611] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1256.450953][ T5611] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1256.450977][ T5611] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1256.451000][ T5611] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1256.451783][ T5611] mcp2221 0003:04D8:00DD.0013: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1256.517853][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1256.617917][T23025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.618051][T23025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.618167][T23025] bridge_slave_0: entered allmulticast mode [ 1256.619981][T23025] bridge_slave_0: entered promiscuous mode [ 1256.665854][T23025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.665939][T23025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.666059][T23025] bridge_slave_1: entered allmulticast mode [ 1256.671210][T23025] bridge_slave_1: entered promiscuous mode [ 1256.926467][ T5712] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1257.064625][T23362] syzkaller0: entered promiscuous mode [ 1257.064640][T23362] syzkaller0: entered allmulticast mode [ 1257.065894][ T5712] usb 6-1: device descriptor read/64, error -71 [ 1257.068021][T23363] tipc: Started in network mode [ 1257.068058][T23363] tipc: Node identity 72dc56e1b7f1, cluster identity 4711 [ 1257.068261][T23363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.068293][T23363] tipc: Enabled bearer , priority 0 [ 1257.114278][T23366] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1257.132750][T23342] tipc: Resetting bearer [ 1257.139754][ T30] usb 3-1: USB disconnect, device number 31 [ 1257.189280][T23342] tipc: Disabling bearer [ 1257.223980][T23025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.228821][T23025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.298912][T23025] team0: Port device team_slave_0 added [ 1257.302915][T23025] team0: Port device team_slave_1 added [ 1257.338588][ T5712] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1257.378731][T23025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.378744][T23025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.378767][T23025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.382363][T23025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.382376][T23025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.382397][T23025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.486280][ T5712] usb 6-1: device descriptor read/64, error -71 [ 1257.505160][T23025] hsr_slave_0: entered promiscuous mode [ 1257.506199][T23025] hsr_slave_1: entered promiscuous mode [ 1257.506721][T23025] debugfs: 'hsr0' already exists in 'hsr' [ 1257.506737][T23025] Cannot create hsr debugfs directory [ 1257.596184][ T5712] usb usb6-port1: attempt power cycle [ 1257.619498][T23483] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1258.344320][ T5712] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1258.408712][ T5712] usb 6-1: device descriptor read/8, error -71 [ 1258.745696][ T5712] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1258.773197][ T5712] usb 6-1: device descriptor read/8, error -71 [ 1258.886009][ T5712] usb usb6-port1: unable to enumerate USB device [ 1259.104440][ T5734] viperboard 4-1:193.61: version 0.00 found at bus 004 address 010 [ 1259.221294][ T4581] IPVS: stop unused estimator thread 0... [ 1259.790736][ T5734] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1259.790769][ T5734] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1260.132102][T23570] netlink: zone id is out of range [ 1260.132115][T23570] netlink: zone id is out of range [ 1260.148673][ T31] audit: type=1400 audit(1789661509.836:3284): avc: denied { append } for pid=23586 comm="syz.2.3002" name="video8" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1260.248612][ T31] audit: type=1400 audit(1789661509.946:3285): avc: denied { write } for pid=23438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.269723][T23595] syzkaller0: entered promiscuous mode [ 1260.269741][T23595] syzkaller0: entered allmulticast mode [ 1260.530352][T23604] ip_tables: iptables: counters copy to user failed while replacing table [ 1260.847643][ T31] audit: type=1400 audit(1789661510.536:3286): avc: denied { write } for pid=23599 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1261.075350][T23615] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ' [ 1264.336629][ T31] audit: type=1400 audit(1789661514.036:3287): avc: denied { write } for pid=23630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.374342][T23025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1264.392127][T23025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1264.400232][T23025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1264.443617][T23025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1264.450510][T23025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1264.470417][T23025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1264.476540][T23025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1264.500916][T23025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1264.653501][ T31] audit: type=1400 audit(1789661514.346:3288): avc: denied { write } for pid=23670 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.727992][T23674] netlink: 'syz.2.3012': attribute type 1 has an invalid length. [ 1264.816439][T23025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.876799][T23025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.906944][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.907006][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.933548][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.933640][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.075932][ T5734] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1265.226875][ T5734] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1265.229728][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.229752][ T5734] usb 2-1: Product: syz [ 1265.229767][ T5734] usb 2-1: Manufacturer: syz [ 1265.229782][ T5734] usb 2-1: SerialNumber: syz [ 1265.232363][ T5734] usb 2-1: config 0 descriptor?? [ 1265.635009][T23704] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1266.413648][ T5734] usb 2-1: Firmware: major: 110, minor: 223, hardware type: UNKNOWN (88) [ 1266.774600][ T5734] usb 2-1: failed to fetch extended address, random address set [ 1266.784688][ T5734] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1266.806184][ T5734] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 1266.984231][ T5734] usb 2-1: USB disconnect, device number 98 [ 1267.721291][ T31] audit: type=1400 audit(1789661517.416:3289): avc: denied { write } for pid=23685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.833689][ T31] audit: type=1400 audit(1789661517.526:3290): avc: denied { write } for pid=23720 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.992917][T23727] syzkaller0: entered promiscuous mode [ 1267.992940][T23727] syzkaller0: entered allmulticast mode [ 1268.053299][T23025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.224934][T23753] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 1268.260559][ T5712] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1268.300669][ T31] audit: type=1400 audit(1789661517.996:3291): avc: denied { write } for pid=23732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1268.364062][T23025] veth0_vlan: entered promiscuous mode [ 1268.381516][T23025] veth1_vlan: entered promiscuous mode [ 1268.412471][ T31] audit: type=1400 audit(1789661518.106:3292): avc: denied { write } for pid=23760 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1268.426131][ T5712] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1268.428892][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.428914][ T5712] usb 3-1: Product: syz [ 1268.428929][ T5712] usb 3-1: Manufacturer: syz [ 1268.428944][ T5712] usb 3-1: SerialNumber: syz [ 1268.444164][ T5712] usb 3-1: config 0 descriptor?? [ 1268.520251][T23025] veth0_macvtap: entered promiscuous mode [ 1268.541874][T23025] veth1_macvtap: entered promiscuous mode [ 1268.577499][T23025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.606739][T23025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.631673][T23767] netlink: 'syz.5.3018': attribute type 1 has an invalid length. [ 1268.703201][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.830464][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.830917][T12836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.830933][T12836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.831129][T12836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.857066][ T4705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.052940][T18896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1269.070489][T18896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1269.074008][T18896] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1269.075088][T18896] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1269.093153][T18896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1269.093555][ T5712] usb 3-1: Firmware: major: 110, minor: 223, hardware type: UNKNOWN (88) [ 1269.097394][ T4705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.097411][ T4705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.243052][ T31] audit: type=1400 audit(1789661518.936:3293): avc: denied { write } for pid=23765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.320089][ T5712] usb 3-1: failed to fetch extended address, random address set [ 1269.320113][ T5712] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1269.320288][ T5712] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 1269.340792][ T5712] usb 3-1: USB disconnect, device number 32 [ 1269.381237][ T31] audit: type=1400 audit(1789661519.076:3294): avc: denied { write } for pid=23803 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.556372][ T30] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1269.707921][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 1269.725095][ T30] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1269.739247][ T30] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.739281][ T30] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.739310][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1269.739407][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.831514][ T30] usb 2-1: config 0 descriptor?? [ 1269.832661][T23827] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1270.862874][ T30] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 1270.863099][ T30] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 1270.863193][ T30] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 1270.863372][ T30] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 1270.863466][ T30] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 1271.170766][ T30] mcp2221 0003:04D8:00DD.0014: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1271.185728][ T9545] Bluetooth: hci2: command tx timeout [ 1272.326619][ T30] usb 2-1: reset high-speed USB device number 99 using dummy_hcd [ 1272.535523][ T9545] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1272.625710][T20399] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1272.699687][T23788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.699756][T23788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.699821][T23788] bridge_slave_0: entered allmulticast mode [ 1272.700620][T23788] bridge_slave_0: entered promiscuous mode [ 1272.730492][T23788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.730574][T23788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.730637][T23788] bridge_slave_1: entered allmulticast mode [ 1272.731485][T23788] bridge_slave_1: entered promiscuous mode [ 1272.776129][T20399] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1272.779002][T20399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.779025][T20399] usb 3-1: Product: syz [ 1272.779038][T20399] usb 3-1: Manufacturer: syz [ 1272.779053][T20399] usb 3-1: SerialNumber: syz [ 1272.781632][T23788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.784209][T20399] usb 3-1: config 0 descriptor?? [ 1272.832989][T23788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.922736][T23788] team0: Port device team_slave_0 added [ 1272.927017][T23788] team0: Port device team_slave_1 added [ 1272.980285][T23788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.980299][T23788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.980322][T23788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.981966][T23788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.981979][T23788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.982002][T23788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.017968][T24030] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1273.091769][T24055] devpts: Bad value for 'max' [ 1273.092158][T23788] hsr_slave_0: entered promiscuous mode [ 1273.093897][T23788] hsr_slave_1: entered promiscuous mode [ 1273.094535][T23788] debugfs: 'hsr0' already exists in 'hsr' [ 1273.094552][T23788] Cannot create hsr debugfs directory [ 1273.276149][ T9545] Bluetooth: hci2: command tx timeout [ 1273.298381][T20399] usb 3-1: Firmware: major: 110, minor: 223, hardware type: UNKNOWN (88) [ 1273.419467][T23788] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1273.488911][T23788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1273.489882][T23788] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1273.492702][T23788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1273.493738][T23788] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1273.506552][ T30] usb 2-1: device descriptor read/64, error -71 [ 1273.531907][T23788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1273.533027][T23788] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1273.533440][T20399] usb 3-1: failed to fetch extended address, random address set [ 1273.533460][T20399] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1273.533634][T20399] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 1273.543962][T20399] usb 3-1: USB disconnect, device number 33 [ 1273.563397][T23788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1274.015810][ T30] usb 2-1: reset high-speed USB device number 99 using dummy_hcd [ 1274.018603][ T30] usb 2-1: device reset changed ep0 maxpacket size! [ 1274.071483][ T5712] usb 2-1: USB disconnect, device number 99 [ 1274.144151][T23788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.164036][T23788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.187599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.187689][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.190207][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.190297][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.376001][ T5712] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1274.526974][ T5712] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1274.528087][ T5712] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1274.530248][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.530271][ T5712] usb 2-1: Product: syz [ 1274.530286][ T5712] usb 2-1: Manufacturer: syz [ 1274.530302][ T5712] usb 2-1: SerialNumber: syz [ 1274.586021][ T5788] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1274.627911][T23788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.635717][T20399] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1274.737113][ T5788] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1274.742397][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.742421][ T5788] usb 3-1: Product: syz [ 1274.742437][ T5788] usb 3-1: Manufacturer: syz [ 1274.742452][ T5788] usb 3-1: SerialNumber: syz [ 1274.746041][ T5788] usb 3-1: config 0 descriptor?? [ 1274.755888][ T5712] usb 2-1: USB disconnect, device number 100 [ 1274.788343][T20399] usb 6-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 1274.789461][T20399] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.789504][T20399] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1274.789546][T20399] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.872377][T23788] veth0_vlan: entered promiscuous mode [ 1274.882760][T23788] veth1_vlan: entered promiscuous mode [ 1274.907919][T23788] veth0_macvtap: entered promiscuous mode [ 1274.911339][T23788] veth1_macvtap: entered promiscuous mode [ 1274.939023][T23788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.949141][T23788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.999527][ T4654] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.999566][ T4654] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.999597][ T4654] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.999629][ T4654] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.119712][ T4705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.119730][ T4705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.190301][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.190320][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.223683][ T5788] usb 3-1: Firmware: major: 110, minor: 223, hardware type: UNKNOWN (88) [ 1275.346183][ T9545] Bluetooth: hci2: command tx timeout [ 1275.432382][ T5788] usb 3-1: failed to fetch extended address, random address set [ 1275.432408][ T5788] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1275.432545][ T5788] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 1275.442029][ T5788] usb 3-1: USB disconnect, device number 34 [ 1275.472209][ T2264] usb 6-1: USB disconnect, device number 53 [ 1275.575744][ T25] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1275.646251][ T5712] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1275.726486][ T25] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1275.727358][ T25] usb 7-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1275.728662][ T25] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1275.728684][ T25] usb 7-1: Manufacturer: syz [ 1275.728700][ T25] usb 7-1: SerialNumber: syz [ 1275.796606][ T5712] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1275.797343][ T5712] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1275.798454][ T5712] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1275.798468][ T5712] usb 2-1: Manufacturer: syz [ 1275.798490][ T5712] usb 2-1: SerialNumber: syz [ 1276.089725][T24266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'. [ 1276.138677][ T5712] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 1276.154132][ T5712] usb 2-1: USB disconnect, device number 101 [ 1277.413408][T24276] ip_tables: iptables: counters copy to user failed while replacing table [ 1277.436714][ T9545] Bluetooth: hci2: command tx timeout [ 1277.816371][ T5788] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1277.995748][ T5788] usb 6-1: Using ep0 maxpacket: 32 [ 1277.997702][ T5788] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1277.998698][ T5788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.001175][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.001198][ T5788] usb 6-1: Product: syz [ 1278.001213][ T5788] usb 6-1: Manufacturer: syz [ 1278.001228][ T5788] usb 6-1: SerialNumber: syz [ 1278.005172][ T5788] usb 6-1: config 0 descriptor?? [ 1278.011589][ T5788] cdc_ether 6-1:0.0: Descriptor too short [ 1278.012448][ T5788] usb 6-1: unsupported MDLM descriptors [ 1278.111269][ T25] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 1278.117055][ T25] usb 7-1: USB disconnect, device number 2 [ 1278.217324][ T5611] usb 6-1: USB disconnect, device number 54 [ 1278.464122][T24320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1279.455832][ T5611] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1279.620589][ T2264] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1279.636917][ T5611] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 1279.640528][ T5611] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.640551][ T5611] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1279.670618][ T5611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.670648][ T5611] usb 6-1: Product: syz [ 1279.670688][ T5611] usb 6-1: Manufacturer: syz [ 1279.670734][ T5611] usb 6-1: SerialNumber: syz [ 1279.798856][ T2264] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1279.861654][ T2264] usb 2-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1279.891470][ T2264] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1279.891540][ T2264] usb 2-1: Manufacturer: syz [ 1279.891571][ T2264] usb 2-1: SerialNumber: syz [ 1280.351699][ T5611] usb 6-1: 0:1 : does not exist [ 1280.368301][ T5611] usb 6-1: cannot request logical cluster ID: 0 (err: -71) [ 1280.392097][ T5611] usb 6-1: unit 80 not found! [ 1281.133455][ T2264] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 1281.252488][ T2264] usb 2-1: USB disconnect, device number 102 [ 1281.648985][T24344] netlink: 'syz.6.3048': attribute type 19 has an invalid length. [ 1281.649898][T24344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3048'. [ 1281.910869][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1281.911036][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1281.911085][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1281.918161][ T1023] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1281.982183][ T5611] usb 6-1: USB disconnect, device number 55 [ 1282.050821][T21922] udevd[21922]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.861991][T24383] kAFS: bad VL server IP address [ 1283.865996][ T9545] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 1284.621668][T24385] ip_tables: iptables: counters copy to user failed while replacing table [ 1284.895838][ T5788] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1285.085711][ T5788] usb 3-1: Using ep0 maxpacket: 8 [ 1285.086246][ T5788] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1285.088163][ T5788] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1285.090083][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.090106][ T5788] usb 3-1: Product: syz [ 1285.090121][ T5788] usb 3-1: Manufacturer: syz [ 1285.090136][ T5788] usb 3-1: SerialNumber: syz [ 1285.101561][ T5788] usb 3-1: config 0 descriptor?? [ 1285.168565][ T5788] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1285.169102][ T5788] usb 3-1: setting power ON [ 1285.283797][ T5788] dvb-usb: bulk message failed: -22 (2/0) [ 1285.640282][ T5788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1285.642166][ T5788] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1285.642197][ T5788] usb 3-1: media controller created [ 1285.769773][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1285.798286][ T5788] usb 3-1: selecting invalid altsetting 6 [ 1285.798308][ T5788] usb 3-1: digital interface selection failed (-22) [ 1285.798322][ T5788] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1285.798968][ T5788] usb 3-1: setting power OFF [ 1285.798988][ T5788] dvb-usb: bulk message failed: -22 (2/0) [ 1285.799003][ T5788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1285.799015][ T5788] (NULL device *): no alternate interface [ 1285.889645][ T5788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1285.894093][ T5788] usb 3-1: USB disconnect, device number 35 [ 1289.175976][T24446] ip_tables: iptables: counters copy to user failed while replacing table [ 1289.237809][ T5788] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1289.846555][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1289.996072][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1290.001089][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1290.001213][ T25] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1290.043526][ T25] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1290.043576][ T25] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1290.043605][ T25] usb 3-1: config 14 has no interface number 0 [ 1290.043651][ T25] usb 3-1: config 14 has no interface number 1 [ 1290.043925][ T25] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1290.043959][ T25] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1290.044019][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1290.044052][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1290.044085][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1290.044136][ T25] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1290.044166][ T25] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1290.044185][ T25] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1290.077397][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.077428][ T25] usb 3-1: Product: syz [ 1290.077478][ T25] usb 3-1: Manufacturer: syz [ 1290.077522][ T25] usb 3-1: SerialNumber: syz [ 1290.115044][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1291.114943][ T25] legousbtower 3-1:14.57: interrupt endpoints not found [ 1291.400659][ T25] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1291.405791][ T5788] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1291.408691][ T25] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1291.618761][T24456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.622648][T24456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.646570][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0492 instead [ 1292.646596][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5747 instead [ 1292.646613][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x3760 instead [ 1292.646630][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x61ea instead [ 1292.646647][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xac25 instead [ 1292.646665][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xbdca instead [ 1292.646701][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xed01 instead [ 1292.646718][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x56f4 instead [ 1292.646743][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x59f9 instead [ 1292.646760][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xe012 instead [ 1292.646777][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.652364][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x8322 instead [ 1292.652385][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xa711 instead [ 1292.652403][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xc4b9 instead [ 1292.652420][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xe814 instead [ 1292.652437][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x50ef instead [ 1292.659351][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x44d0 instead [ 1292.659371][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xee1c instead [ 1292.659388][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x56da instead [ 1292.659404][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x6fc3 instead [ 1292.659421][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xb1b6 instead [ 1292.659457][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.662555][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4aff instead [ 1292.662575][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x2c9d instead [ 1292.662592][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xc6fc instead [ 1292.662609][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xffb6 instead [ 1292.662626][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xf423 instead [ 1292.662641][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x1598 instead [ 1292.662656][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x9883 instead [ 1292.662691][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x8e25 instead [ 1292.662707][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x74b2 instead [ 1292.662729][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xaf81 instead [ 1292.662745][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.663205][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x0afe instead [ 1292.663243][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x7969 instead [ 1292.663260][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xcae0 instead [ 1292.663277][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x0d22 instead [ 1292.663292][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x4f76 instead [ 1292.663309][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x9f5f instead [ 1292.663326][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xeb91 instead [ 1292.663342][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x6c72 instead [ 1292.663359][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xaa08 instead [ 1292.663393][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xdcc7 instead [ 1292.663409][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.663876][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xce86 instead [ 1292.663894][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x7806 instead [ 1292.663911][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xcaad instead [ 1292.663946][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x93bf instead [ 1292.663963][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x1587 instead [ 1292.663979][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x52f9 instead [ 1292.663996][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xa5f7 instead [ 1292.664012][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xfd7e instead [ 1292.664027][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x825b instead [ 1292.664043][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xe021 instead [ 1292.664058][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.683117][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xb728 instead [ 1292.683139][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x96b9 instead [ 1292.683156][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xcda6 instead [ 1292.683191][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xd920 instead [ 1292.683207][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x66cd instead [ 1292.683222][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xa936 instead [ 1292.683237][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xeef8 instead [ 1292.683252][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x16e0 instead [ 1292.683267][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x3e21 instead [ 1292.683282][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xc4cd instead [ 1292.683298][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.683774][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x06a4 instead [ 1292.683791][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x4bd7 instead [ 1292.683808][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x0bac instead [ 1292.683826][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x6c5f instead [ 1292.683843][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xb107 instead [ 1292.683859][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xe495 instead [ 1292.683893][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x45fa instead [ 1292.683909][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x04d6 instead [ 1292.683925][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x14de instead [ 1292.683940][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x7df7 instead [ 1292.683955][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.684405][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x268a instead [ 1292.684442][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xd84e instead [ 1292.684458][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x5f9a instead [ 1292.684475][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x1201 instead [ 1292.684492][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x6505 instead [ 1292.684508][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x0489 instead [ 1292.684523][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5875 instead [ 1292.684539][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x6182 instead [ 1292.684554][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xe806 instead [ 1292.698995][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x62b3 instead [ 1292.699016][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.699510][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xd7eb instead [ 1292.699528][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xedd5 instead [ 1292.699545][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xa0cd instead [ 1292.699561][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x8485 instead [ 1292.699596][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x2671 instead [ 1292.699612][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x324a instead [ 1292.699627][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xff46 instead [ 1292.699642][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xd5a8 instead [ 1292.699657][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x21e0 instead [ 1292.699671][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xb313 instead [ 1292.699686][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.700167][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x5f0e instead [ 1292.700187][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x4000 instead [ 1292.700204][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x0cf5 instead [ 1292.700220][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x4bac instead [ 1292.700236][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x8f03 instead [ 1292.700251][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xafcc instead [ 1292.700267][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf90a instead [ 1292.700301][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x22a4 instead [ 1292.700316][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xe741 instead [ 1292.700331][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xbe85 instead [ 1292.700347][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.717429][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x8738 instead [ 1292.717450][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xb80d instead [ 1292.717467][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x6bf5 instead [ 1292.717483][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xba07 instead [ 1292.717500][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x3315 instead [ 1292.717536][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x20c2 instead [ 1292.717554][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x0ffc instead [ 1292.717570][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xd8b8 instead [ 1292.717585][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x16b0 instead [ 1292.717601][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x5f5a instead [ 1292.717616][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.718092][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4021 instead [ 1292.718110][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x609b instead [ 1292.718127][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x8d22 instead [ 1292.718142][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x1801 instead [ 1292.718157][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xc024 instead [ 1292.718172][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x361c instead [ 1292.718187][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xa057 instead [ 1292.718221][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xba63 instead [ 1292.718237][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x3acf instead [ 1292.718252][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xb8f0 instead [ 1292.718266][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.718724][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x3b2d instead [ 1292.718741][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x99aa instead [ 1292.718775][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xe19f instead [ 1292.718790][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x112a instead [ 1292.718805][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xcc27 instead [ 1292.718821][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x8aad instead [ 1292.718836][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x68a5 instead [ 1292.718851][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xebb3 instead [ 1292.718867][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x78cd instead [ 1292.718882][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x680d instead [ 1292.718914][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.749851][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x633d instead [ 1292.749873][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xdb99 instead [ 1292.749907][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x5c30 instead [ 1292.749923][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x9d4b instead [ 1292.749939][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x75df instead [ 1292.749954][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x455b instead [ 1292.749970][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x59ca instead [ 1292.749985][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xc650 instead [ 1292.750001][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xa8e6 instead [ 1292.750016][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xde1f instead [ 1292.750050][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.750507][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x1844 instead [ 1292.750523][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x32a7 instead [ 1292.750538][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xf585 instead [ 1292.750553][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x3bbb instead [ 1292.750569][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x4170 instead [ 1292.750603][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xe244 instead [ 1292.750618][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x7aed instead [ 1292.750633][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xe7f9 instead [ 1292.750649][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x3eee instead [ 1292.750664][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xb0c3 instead [ 1292.750679][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.751154][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x7790 instead [ 1292.751170][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x7430 instead [ 1292.751186][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xfffe instead [ 1292.751201][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x8827 instead [ 1292.751216][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x8879 instead [ 1292.751231][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x678c instead [ 1292.751247][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x2df1 instead [ 1292.751262][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x97f1 instead [ 1292.751296][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xd0df instead [ 1292.751311][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x22c7 instead [ 1292.751326][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.796300][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x3965 instead [ 1292.796322][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xb52a instead [ 1292.796338][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x8cb4 instead [ 1292.796354][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0xbf58 instead [ 1292.796388][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xc3a8 instead [ 1292.796404][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0xd983 instead [ 1292.796419][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5e6b instead [ 1292.796435][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x5906 instead [ 1292.796450][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xadcc instead [ 1292.796466][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xaa95 instead [ 1292.796481][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.796956][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xe972 instead [ 1292.796973][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xc4f9 instead [ 1292.796988][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x9636 instead [ 1292.797004][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xf1e5 instead [ 1292.797019][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x1fed instead [ 1292.797034][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xa9a6 instead [ 1292.797050][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x906e instead [ 1292.797084][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0xb7a3 instead [ 1292.797099][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x06a5 instead [ 1292.797115][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0xf666 instead [ 1292.797130][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.797584][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xaf1d instead [ 1292.797600][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xc217 instead [ 1292.797634][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x5b16 instead [ 1292.797650][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xd116 instead [ 1292.797665][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0xc819 instead [ 1292.797681][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xf430 instead [ 1292.797696][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x7dd5 instead [ 1292.797716][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xb43f instead [ 1292.797732][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x66a8 instead [ 1292.797747][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x57cb instead [ 1292.797777][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.810530][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x8629 instead [ 1292.810726][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x7136 instead [ 1292.810742][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x8379 instead [ 1292.810757][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x3b9c instead [ 1292.810772][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xb6ac instead [ 1292.810788][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x1747 instead [ 1292.810802][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x3463 instead [ 1292.810818][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xfe91 instead [ 1292.810833][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x0558 instead [ 1292.810869][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x0d9d instead [ 1292.810885][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.811343][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x14fa instead [ 1292.811359][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x8238 instead [ 1292.811375][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x3721 instead [ 1292.811390][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x99de instead [ 1292.811424][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x9727 instead [ 1292.811440][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x9362 instead [ 1292.811455][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x2dfd instead [ 1292.811470][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x4ac1 instead [ 1292.811486][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x7d7d instead [ 1292.811502][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x25a0 instead [ 1292.811517][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.827254][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x147c instead [ 1292.827274][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0xc7f9 instead [ 1292.827290][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x6e5a instead [ 1292.827305][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xd2e7 instead [ 1292.827321][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0xfc7f instead [ 1292.827336][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x3ab5 instead [ 1292.827351][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x23a5 instead [ 1292.827385][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x3920 instead [ 1292.827401][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x17c6 instead [ 1292.827416][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x08a5 instead [ 1292.827430][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.827894][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x59bc instead [ 1292.827910][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xd200 instead [ 1292.827944][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x95da instead [ 1292.827959][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x7d39 instead [ 1292.827975][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xdcc6 instead [ 1292.827990][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x1f8a instead [ 1292.828005][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3827 instead [ 1292.828021][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x3fc2 instead [ 1292.828036][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xef3e instead [ 1292.828050][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x15c6 instead [ 1292.828083][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.828535][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x8583 instead [ 1292.828552][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x85d7 instead [ 1292.828567][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x71f4 instead [ 1292.828582][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xe12a instead [ 1292.828598][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x214f instead [ 1292.828631][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x61a6 instead [ 1292.828647][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xebdf instead [ 1292.828662][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x731f instead [ 1292.828677][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x831d instead [ 1292.828692][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x060e instead [ 1292.828712][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.837261][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xad4a instead [ 1292.837280][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0xe049 instead [ 1292.837296][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x4aee instead [ 1292.837312][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xf922 instead [ 1292.837328][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x6eae instead [ 1292.837343][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x4232 instead [ 1292.837359][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x7312 instead [ 1292.837374][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xb0ac instead [ 1292.837389][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x1319 instead [ 1292.837404][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0xf1c8 instead [ 1292.837420][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.846553][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xd2d6 instead [ 1292.846573][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x100f instead [ 1292.846589][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xecd5 instead [ 1292.846605][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x0bd6 instead [ 1292.846620][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x5421 instead [ 1292.846636][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x39ae instead [ 1292.846650][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x4766 instead [ 1292.846665][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x2d99 instead [ 1292.846681][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x911a instead [ 1292.846696][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x2113 instead [ 1292.846717][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.852898][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x0a60 instead [ 1292.852917][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x649f instead [ 1292.852933][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x69dd instead [ 1292.858928][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x1c6d instead [ 1292.858968][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xd257 instead [ 1292.858984][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x3735 instead [ 1292.859000][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xed03 instead [ 1292.861322][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x517e instead [ 1292.861341][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xc895 instead [ 1292.861357][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x01b0 instead [ 1292.861372][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.861781][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x7cac instead [ 1292.861798][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x7a67 instead [ 1292.861813][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0xf725 instead [ 1292.861829][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x1653 instead [ 1292.861844][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x8acd instead [ 1292.861859][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0xe89a instead [ 1292.861874][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x2037 instead [ 1292.861890][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x11b5 instead [ 1292.861906][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x25e3 instead [ 1292.861921][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x682c instead [ 1292.861936][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.879816][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x1063 instead [ 1292.879836][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x2790 instead [ 1292.879852][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xbd83 instead [ 1292.879868][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x1796 instead [ 1292.879884][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x7aae instead [ 1292.879900][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x1765 instead [ 1292.879916][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd475 instead [ 1292.879932][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x746a instead [ 1292.879948][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xd3fc instead [ 1292.879963][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x472f instead [ 1292.879979][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.906994][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x2aa1 instead [ 1292.907014][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x7e19 instead [ 1292.907029][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xd8bd instead [ 1292.907045][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x0ef7 instead [ 1292.907060][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x25b5 instead [ 1292.907075][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0xbc8a instead [ 1292.907091][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xa61c instead [ 1292.907107][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x8ca1 instead [ 1292.907122][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xc401 instead [ 1292.907137][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x3f9f instead [ 1292.907152][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.907550][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4478 instead [ 1292.907568][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x86e8 instead [ 1292.907584][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x9337 instead [ 1292.907599][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x1653 instead [ 1292.907615][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0xfaaa instead [ 1292.907631][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x43a9 instead [ 1292.907646][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x264e instead [ 1292.907662][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xeb26 instead [ 1292.907678][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0xe6fe instead [ 1292.907692][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x8053 instead [ 1292.907713][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.911530][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xcd9e instead [ 1292.911550][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0be6 instead [ 1292.911567][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xba8f instead [ 1292.911582][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0xeaf0 instead [ 1292.911597][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0xc844 instead [ 1292.911614][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xbb6f instead [ 1292.914780][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x4412 instead [ 1292.914798][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x8e92 instead [ 1292.914814][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0xc58a instead [ 1292.914829][T24456] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xf86a instead [ 1292.914844][T24456] jffs2: Further such events for this erase block will not be printed [ 1292.915234][T24456] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1292.915242][T24456] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1293.275827][ T9545] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1293.682496][ T25] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1293.847074][T24523] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3073'. [ 1293.852548][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 1293.863281][ T5788] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1293.886796][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.886819][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1293.936268][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.936287][ T25] usb 2-1: Product: syz [ 1293.936296][ T25] usb 2-1: Manufacturer: syz [ 1293.936304][ T25] usb 2-1: SerialNumber: syz [ 1294.119178][ T5788] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1294.174652][ T5788] usb 7-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1294.234692][ T5611] usb 3-1: USB disconnect, device number 36 [ 1294.235770][ T5788] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1294.235821][ T5788] usb 7-1: Manufacturer: syz [ 1294.235837][ T5788] usb 7-1: SerialNumber: syz [ 1294.294055][ T5611] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1294.787463][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.101651][ T25] usb 2-1: 0:1 : does not exist [ 1295.134313][ T25] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 1295.137487][ T25] usb 2-1: unit 80 not found! [ 1295.139919][ T5788] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 1295.145385][ T5788] usb 7-1: USB disconnect, device number 4 [ 1295.170501][ T25] usb 2-1: USB disconnect, device number 104 [ 1295.299152][T24567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3075'. [ 1295.320325][T21121] udevd[21121]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1296.695018][T24583] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [229] [ 1296.695073][T24583] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1296.695143][T24583] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1296.695172][T24583] One or more global auth toks could not properly register; rc = [-22] [ 1296.696635][T24583] Error validating options; rc = [-22] [ 1298.291826][ T9545] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1299.355706][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1299.377334][ T5611] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1299.532771][ T5611] usb 3-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 1299.535490][ T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1299.536354][ T5611] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.536397][ T5611] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1299.536440][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.541379][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.541460][ T9] usb 6-1: Product: syz [ 1299.541477][ T9] usb 6-1: Manufacturer: syz [ 1299.541492][ T9] usb 6-1: SerialNumber: syz [ 1299.657999][ T9] usb 6-1: config 0 descriptor?? [ 1300.244389][ T9] usb 6-1: Firmware: major: 110, minor: 223, hardware type: UNKNOWN (88) [ 1300.452831][ T9] usb 6-1: failed to fetch extended address, random address set [ 1300.452857][ T9] usb 6-1: atusb_probe: initialization failed, error = -524 [ 1300.453049][ T9] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 1300.486427][ T9] usb 6-1: USB disconnect, device number 56 [ 1301.035418][T24645] ip_tables: iptables: counters copy to user failed while replacing table [ 1301.792592][ T5788] usb 3-1: USB disconnect, device number 37 [ 1302.403708][T24660] ip_tables: iptables: counters copy to user failed while replacing table [ 1304.650159][ T5734] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1304.706689][ T2264] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1304.846262][ T5734] usb 6-1: Using ep0 maxpacket: 8 [ 1304.857079][ T5734] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1305.030287][ T5734] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1305.030335][ T5734] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1305.030363][ T5734] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1305.030388][ T5734] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1305.030413][ T5734] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1305.030436][ T5734] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1305.030473][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.050212][ T2264] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1305.093125][ T2264] usb 2-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1305.195904][ T2264] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1305.195952][ T2264] usb 2-1: Manufacturer: syz [ 1305.195968][ T2264] usb 2-1: SerialNumber: syz [ 1305.298782][ T5734] usb 6-1: usb_control_msg returned -32 [ 1305.298826][ T5734] usbtmc 6-1:16.0: can't read capabilities [ 1305.458499][ T2264] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 1305.466506][ T2264] usb 2-1: USB disconnect, device number 105 [ 1306.302727][T24677] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1306.398347][T24727] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3102'. [ 1306.970755][T24735] ip_tables: iptables: counters copy to user failed while replacing table [ 1307.246297][ T2264] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1307.406151][ T2264] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 1307.407060][ T2264] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.407084][ T2264] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1307.410230][ T2264] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.410253][ T2264] usb 7-1: Product: syz [ 1307.410268][ T2264] usb 7-1: Manufacturer: syz [ 1307.410289][ T2264] usb 7-1: SerialNumber: syz [ 1307.646794][ T2264] usb 7-1: 0:1 : does not exist [ 1307.651893][ T2264] usb 7-1: cannot request logical cluster ID: 0 (err: -71) [ 1307.653165][ T2264] usb 7-1: unit 80 not found! [ 1307.658666][ T5712] usb 6-1: USB disconnect, device number 57 [ 1307.748318][ T2264] usb 7-1: USB disconnect, device number 5 [ 1308.370431][T21922] udevd[21922]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.826749][T24787] ip6erspan0: entered allmulticast mode [ 1308.828000][T24787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3108'. [ 1308.865994][ T2264] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1308.867824][ T5611] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1309.016183][ T5611] usb 6-1: Using ep0 maxpacket: 16 [ 1309.016398][ T2264] usb 7-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 1309.016686][ T5611] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1309.017389][ T2264] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.017410][ T2264] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1309.017454][ T2264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.019594][ T5611] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.019614][ T5611] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1309.021724][ T5611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1309.021747][ T5611] usb 6-1: SerialNumber: syz [ 1309.088081][ T5734] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1309.104495][ T5611] usb 6-1: 0:2 : does not exist [ 1309.267016][ T5734] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1309.267941][ T5734] usb 3-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1309.269465][ T5734] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1309.269489][ T5734] usb 3-1: Manufacturer: syz [ 1309.269504][ T5734] usb 3-1: SerialNumber: syz [ 1309.373276][ T5788] usb 7-1: USB disconnect, device number 6 [ 1309.455430][ T5611] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1309.460891][ T5611] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1309.503324][ T5734] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 1309.505098][ T5611] usb 6-1: USB disconnect, device number 58 [ 1309.518757][ T5734] usb 3-1: USB disconnect, device number 38 [ 1310.561108][T24859] ip_tables: iptables: counters copy to user failed while replacing table [ 1310.576470][ T5788] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1310.735702][ T2264] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1310.899645][ T2264] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1310.900666][ T2264] usb 7-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1310.901966][ T2264] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1310.901990][ T2264] usb 7-1: Manufacturer: syz [ 1310.902006][ T2264] usb 7-1: SerialNumber: syz [ 1310.917372][ T5788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1310.917412][ T5788] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1310.918884][ T5788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.918905][ T5788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1310.920645][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.920668][ T5788] usb 2-1: Product: syz [ 1310.920683][ T5788] usb 2-1: Manufacturer: syz [ 1310.920698][ T5788] usb 2-1: SerialNumber: syz [ 1310.931554][ T5788] usb 2-1: selecting invalid altsetting 1 [ 1310.932155][ T5788] usb 2-1: unit 6 not found! [ 1311.418725][ T2264] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 1311.420699][ T2264] usb 7-1: USB disconnect, device number 7 [ 1313.710716][ T9545] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 1313.732176][ T5788] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 1314.377163][T24906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3121'. [ 1314.950254][ T5788] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1314.954368][ T5788] usb 2-1: USB disconnect, device number 106 [ 1314.993081][T21922] udevd[21922]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1315.276262][ T5611] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1315.276370][ T2264] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1315.300839][ T5734] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1315.425875][ T2264] usb 7-1: Using ep0 maxpacket: 32 [ 1315.429651][ T2264] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1315.430893][ T5611] usb 3-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 1315.433584][ T2264] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 1315.433609][ T2264] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1315.433629][ T2264] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.433648][ T2264] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1315.433718][ T2264] usb 7-1: config 1 has no interface number 0 [ 1315.433757][ T2264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.434917][ T5611] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.434938][ T5611] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1315.434975][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.521502][ T5734] usb 6-1: Using ep0 maxpacket: 16 [ 1315.531541][ T5734] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1315.556039][ T5734] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.556061][ T5734] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1315.566740][ T2264] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1315.567069][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1315.567094][ T5734] usb 6-1: SerialNumber: syz [ 1315.612929][ T5734] usb 6-1: 0:2 : does not exist [ 1315.640332][ T4683] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1315.640364][ T4683] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.792490][ T4683] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1315.792524][ T4683] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.825398][T24950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.834387][T24950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.848920][T24928] netlink: 'syz.6.3123': attribute type 10 has an invalid length. [ 1315.898438][T24928] team0 (unregistering): Port device team_slave_0 removed [ 1315.902486][ T2264] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 1315.902862][ T2264] snd_usb_pod 7-1:1.1: invalid control EP [ 1315.902878][ T2264] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 1315.903080][ T2264] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1315.903636][ T2264] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1315.939170][T24928] team0 (unregistering): Port device team_slave_1 removed [ 1316.034677][ T5734] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1316.050270][ T5734] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1316.096457][ T5734] usb 6-1: USB disconnect, device number 59 [ 1316.111158][ T4683] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1316.111189][ T4683] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.170147][ T5788] usb 3-1: USB disconnect, device number 39 [ 1316.197381][T21922] udevd[21922]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1316.241667][T18896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1316.244499][T18896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1316.265120][T18896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1316.275175][T18896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1316.290002][T18896] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1316.392302][ T4683] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1316.392332][ T4683] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.422692][ T5788] usb 7-1: USB disconnect, device number 8 [ 1316.666979][ T4683] bridge_slave_1: left allmulticast mode [ 1316.667004][ T4683] bridge_slave_1: left promiscuous mode [ 1316.667177][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.674077][ T4683] bridge_slave_0: left allmulticast mode [ 1316.674097][ T4683] bridge_slave_0: left promiscuous mode [ 1316.674268][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.991482][ T31] audit: type=1400 audit(1789661566.686:3295): avc: denied { mounton } for pid=25027 comm="syz.4.3130" path="/" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1317.017954][ T2264] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1317.093283][T25029] FAULT_INJECTION: forcing a failure. [ 1317.093283][T25029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.093318][T25029] CPU: 1 UID: 0 PID: 25029 Comm: syz.4.3130 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.093355][T25029] Tainted: [L]=SOFTLOCKUP [ 1317.093364][T25029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1317.093377][T25029] Call Trace: [ 1317.093385][T25029] [ 1317.093394][T25029] dump_stack_lvl+0x100/0x190 [ 1317.093428][T25029] should_fail_ex.cold+0x5/0xa [ 1317.093457][T25029] _copy_to_user+0x32/0xd0 [ 1317.093482][T25029] copy_siginfo_to_user+0x27/0xc0 [ 1317.093510][T25029] x64_setup_rt_frame+0xa03/0xce0 [ 1317.093547][T25029] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1317.093575][T25029] ? __pfx_force_sig_fault+0x10/0x10 [ 1317.093604][T25029] arch_do_signal_or_restart+0x5ee/0x7e0 [ 1317.093634][T25029] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1317.093675][T25029] irqentry_exit+0x402/0xa10 [ 1317.093707][T25029] asm_exc_page_fault+0x26/0x30 [ 1317.093726][T25029] RIP: 0033:0x7f60b7052d1d [ 1317.093742][T25029] Code: 89 4c 24 10 4c 89 44 24 08 48 8b 74 24 28 48 8b 5c 24 20 4c 8b 74 24 18 4c 8b 64 24 10 4c 8b 6c 24 08 48 89 da e8 23 b4 14 00 <8b> 13 49 89 1e b9 01 80 00 00 48 89 c5 8b 43 40 41 89 e8 8d 14 90 [ 1317.093767][T25029] RSP: 002b:00007f60b810efc0 EFLAGS: 00010286 [ 1317.093783][T25029] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: ffffffffffffffe8 [ 1317.093797][T25029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000110 [ 1317.093810][T25029] RBP: 00007f60b723506b R08: 0000000000000000 R09: 0000000000000000 [ 1317.093822][T25029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1317.093836][T25029] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffb2703278 [ 1317.093863][T25029] [ 1317.264371][ T2264] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1317.286154][ T2264] usb 6-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1317.287517][ T2264] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1317.287541][ T2264] usb 6-1: Manufacturer: syz [ 1317.287556][ T2264] usb 6-1: SerialNumber: syz [ 1317.331378][ T31] audit: type=1400 audit(1789661567.026:3296): avc: denied { write } for pid=25024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1317.332377][ T4683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.369884][ T5734] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1317.385590][ T4683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.389950][ T4683] bond0 (unregistering): Released all slaves [ 1317.506555][ T5712] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1317.549052][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1317.549095][ T5734] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1317.550264][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.550288][ T5734] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1317.553113][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.553136][ T5734] usb 3-1: Product: syz [ 1317.553152][ T5734] usb 3-1: Manufacturer: syz [ 1317.553167][ T5734] usb 3-1: SerialNumber: syz [ 1317.615994][ T31] audit: type=1400 audit(1789661567.266:3297): avc: denied { write } for pid=25053 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1317.618859][ T4683] tipc: Left network mode [ 1317.655988][ T5712] usb 7-1: device descriptor read/64, error -71 [ 1317.662694][ T5734] usb 3-1: selecting invalid altsetting 1 [ 1317.664673][ T5734] usb 3-1: unit 6 not found! [ 1317.666259][ T2264] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 1317.692629][ T2264] usb 6-1: USB disconnect, device number 60 [ 1317.788768][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1317.915698][ T5712] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1318.055692][ T5712] usb 7-1: device descriptor read/64, error -71 [ 1318.167052][ T5712] usb usb7-port1: attempt power cycle [ 1318.406095][ T9545] Bluetooth: hci1: command tx timeout [ 1318.505692][ T5712] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1318.527332][ T5712] usb 7-1: device descriptor read/8, error -71 [ 1318.855868][ T5712] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1318.877533][ T5712] usb 7-1: device descriptor read/8, error -71 [ 1318.996977][ T5712] usb usb7-port1: unable to enumerate USB device [ 1320.300129][ T5734] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1320.418913][ T31] audit: type=1400 audit(1789661570.116:3298): avc: denied { write } for pid=25070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.465815][ T9545] Bluetooth: hci1: command tx timeout [ 1320.469044][ T5734] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1320.479543][ T5734] usb 3-1: USB disconnect, device number 40 [ 1320.517460][ T4683] hsr_slave_0: left promiscuous mode [ 1320.518988][ T4683] hsr_slave_1: left promiscuous mode [ 1320.519683][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1320.519701][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.523238][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1320.523255][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.612459][ T4683] veth1_macvtap: left promiscuous mode [ 1320.612482][ T4683] veth0_macvtap: left promiscuous mode [ 1320.614043][ T4683] veth1_vlan: left promiscuous mode [ 1320.614094][ T4683] veth0_vlan: left promiscuous mode [ 1320.618519][T21922] udevd[21922]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.720949][ T31] audit: type=1400 audit(1789661570.416:3299): avc: denied { write } for pid=25158 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.906582][ T5734] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1321.057191][ T5734] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1321.058067][ T5734] usb 3-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1321.059297][ T5734] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1321.059312][ T5734] usb 3-1: Manufacturer: syz [ 1321.059320][ T5734] usb 3-1: SerialNumber: syz [ 1321.192111][T25170] netlink: 'syz.4.3137': attribute type 1 has an invalid length. [ 1321.215737][ T5788] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1321.359916][ T5734] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 1321.362947][ T5734] usb 3-1: USB disconnect, device number 41 [ 1321.380472][ T5788] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 1321.390236][ T5788] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.390250][ T5788] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1321.431016][ T5788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.431040][ T5788] usb 7-1: Product: syz [ 1321.431056][ T5788] usb 7-1: Manufacturer: syz [ 1321.431071][ T5788] usb 7-1: SerialNumber: syz [ 1321.467662][T20399] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1321.563085][ T4683] team0 (unregistering): Port device team_slave_1 removed [ 1321.594932][ T4683] team0 (unregistering): Port device team_slave_0 removed [ 1321.627132][T20399] usb 6-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 1321.628364][T20399] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.628387][T20399] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1321.628428][T20399] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.689370][ T5788] usb 7-1: 0:1 : does not exist [ 1321.690186][ T5788] usb 7-1: cannot request logical cluster ID: 0 (err: -71) [ 1321.692614][ T5788] usb 7-1: unit 80 not found! [ 1321.813514][ T5788] usb 7-1: USB disconnect, device number 13 [ 1321.879818][T21922] udevd[21922]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1322.148837][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1322.546075][ T9545] Bluetooth: hci1: command tx timeout [ 1322.827227][ T31] audit: type=1400 audit(1789661572.516:3300): avc: denied { write } for pid=25230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1323.311115][T24976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.311233][T24976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.311318][T24976] bridge_slave_0: entered allmulticast mode [ 1323.339343][T24976] bridge_slave_0: entered promiscuous mode [ 1323.343490][T24976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.343599][T24976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.343693][T24976] bridge_slave_1: entered allmulticast mode [ 1323.345510][T24976] bridge_slave_1: entered promiscuous mode [ 1323.421878][T24976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.430551][T24976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.464851][ T31] audit: type=1400 audit(1789661573.146:3301): avc: denied { write } for pid=25314 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1323.549590][T24976] team0: Port device team_slave_0 added [ 1323.552332][T24976] team0: Port device team_slave_1 added [ 1323.556237][ T5734] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1323.613381][T24976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.613396][T24976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.613418][T24976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.615189][T24976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.615202][T24976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.615224][T24976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.727820][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1323.727862][ T5734] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1323.729495][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.729519][ T5734] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1323.731880][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.731903][ T5734] usb 3-1: Product: syz [ 1323.731918][ T5734] usb 3-1: Manufacturer: syz [ 1323.731934][ T5734] usb 3-1: SerialNumber: syz [ 1323.802673][ T5734] usb 3-1: selecting invalid altsetting 1 [ 1323.803056][ T5734] usb 3-1: unit 6 not found! [ 1324.017207][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1324.044567][T24976] hsr_slave_0: entered promiscuous mode [ 1324.052568][T24976] hsr_slave_1: entered promiscuous mode [ 1324.838403][ T9545] Bluetooth: hci1: command tx timeout [ 1325.032748][T20399] usb 6-1: USB disconnect, device number 61 [ 1326.456860][T25378] ip_tables: iptables: counters copy to user failed while replacing table [ 1326.622047][ T5734] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1326.669089][T25471] FAULT_INJECTION: forcing a failure. [ 1326.669089][T25471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.669119][T25471] CPU: 0 UID: 0 PID: 25471 Comm: syz.4.3146 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.669152][T25471] Tainted: [L]=SOFTLOCKUP [ 1326.669159][T25471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1326.669172][T25471] Call Trace: [ 1326.669179][T25471] [ 1326.669187][T25471] dump_stack_lvl+0x100/0x190 [ 1326.669223][T25471] should_fail_ex.cold+0x5/0xa [ 1326.669252][T25471] _copy_to_user+0x32/0xd0 [ 1326.669277][T25471] simple_read_from_buffer+0xcb/0x170 [ 1326.669305][T25471] proc_fail_nth_read+0x1af/0x230 [ 1326.669332][T25471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.669358][T25471] ? rw_verify_area+0xce/0x6d0 [ 1326.669386][T25471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.669409][T25471] vfs_read+0x1e4/0xb40 [ 1326.669431][T25471] ? lock_acquire+0x1d1/0x380 [ 1326.669451][T25471] ? __fget_files+0x34/0x3d0 [ 1326.669475][T25471] ? __pfx_vfs_read+0x10/0x10 [ 1326.669493][T25471] ? find_held_lock+0x2b/0x80 [ 1326.669520][T25471] ? __fget_files+0x215/0x3d0 [ 1326.669548][T25471] ? __fget_files+0x21f/0x3d0 [ 1326.669580][T25471] ksys_read+0x12a/0x250 [ 1326.669600][T25471] ? __pfx_ksys_read+0x10/0x10 [ 1326.669629][T25471] do_syscall_64+0x123/0x790 [ 1326.669658][T25471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.669680][T25471] RIP: 0033:0x7f60b715e98e [ 1326.669697][T25471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1326.669715][T25471] RSP: 002b:00007f60b810efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1326.669734][T25471] RAX: ffffffffffffffda RBX: 00007f60b810f6c0 RCX: 00007f60b715e98e [ 1326.669748][T25471] RDX: 000000000000000f RSI: 00007f60b810f0a0 RDI: 0000000000000004 [ 1326.669760][T25471] RBP: 00007f60b810f090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.669772][T25471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.669784][T25471] R13: 00007f60b7426038 R14: 00007f60b7425fa0 R15: 00007fffb2703278 [ 1326.669814][T25471] [ 1326.969557][ T5734] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1327.000210][ T5734] usb 3-1: USB disconnect, device number 42 [ 1327.131508][T21922] udevd[21922]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1327.267244][T25504] xt_hashlimit: max too large, truncated to 1048576 [ 1328.978233][ T31] audit: type=1400 audit(1789661578.666:3302): avc: denied { write } for pid=25445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1329.110773][T25525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1330.030085][T24976] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1330.083305][ T31] audit: type=1400 audit(1789661579.776:3303): avc: denied { write } for pid=25540 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1330.085326][T24976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1330.127157][T24976] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1330.175875][T24976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1330.184272][T24976] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1330.215534][T24976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1330.226546][T24976] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1330.271778][T24976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1330.394161][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1330.455543][T24976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.505034][T24976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.517366][T25546] ------------[ cut here ]------------ [ 1330.517377][T25546] current_phy->suspended [ 1330.517392][T25546] WARNING: drivers/net/ieee802154/mac802154_hwsim.c:266 at hwsim_hw_xmit+0xcbf/0x1540, CPU#0: syz.5.3155/25546 [ 1330.521687][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.521773][ T4654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.554018][T25546] Modules linked in: [ 1330.558767][T25546] CPU: 0 UID: 0 PID: 25546 Comm: syz.5.3155 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.569799][T25546] Tainted: [L]=SOFTLOCKUP [ 1330.572276][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.572364][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.589104][T25546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1330.599205][T25546] RIP: 0010:hwsim_hw_xmit+0xcbf/0x1540 [ 1330.604692][T25546] Code: 48 c7 c2 40 3f c0 8c be 52 03 00 00 48 c7 c7 a0 3f c0 8c c6 05 0f 22 c6 09 01 e8 bc 1b 80 fa e9 c6 f8 ff ff e8 32 5a a5 fa 90 <0f> 0b 90 e9 11 f4 ff ff e8 24 5a a5 fa e8 5f 0a 89 fa 31 ff 89 c5 [ 1330.624327][T25546] RSP: 0018:ffffc90006b274d0 EFLAGS: 00010283 [ 1330.630392][T25546] RAX: 0000000000000219 RBX: ffff888029866d20 RCX: ffffc90020005000 [ 1330.638373][T25546] RDX: 0000000000080000 RSI: ffffffff8766c51e RDI: ffff8880380a0000 [ 1330.646352][T25546] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1330.654301][T25546] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8766b860 [ 1330.662280][T25546] R13: 1ffff92000d64ea4 R14: ffff888029866720 R15: 000000000000000f [ 1330.670247][T25546] FS: 00007f0e434586c0(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 1330.679191][T25546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1330.685773][T25546] CR2: 0000200000004780 CR3: 0000000027dcc000 CR4: 00000000003526f0 [ 1330.693723][T25546] Call Trace: [ 1330.696998][T25546] [ 1330.699919][T25546] ? lock_acquire+0x1d1/0x380 [ 1330.704596][T25546] ? ieee802154_hold_queue+0x100/0x450 [ 1330.710057][T25546] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 1330.715148][T25546] ? ieee802154_hold_queue+0x2a4/0x450 [ 1330.720612][T25546] ? find_held_lock+0x2b/0x80 [ 1330.725273][T25546] ? mark_held_locks+0x40/0x70 [ 1330.730038][T25546] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1330.735866][T25546] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 1330.740969][T25546] ieee802154_tx.isra.0+0x29f/0x570 [ 1330.746166][T25546] ieee802154_subif_start_xmit+0xc8/0xf0 [ 1330.751777][T25546] dev_hard_start_xmit+0x121/0x760 [ 1330.756888][T25546] sch_direct_xmit+0x1b2/0xc70 [ 1330.761635][T25546] ? lock_acquire+0x1d1/0x380 [ 1330.766309][T25546] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1330.771586][T25546] ? do_raw_spin_lock+0x230/0x260 [ 1330.776611][T25546] __dev_queue_xmit+0x27ac/0x4970 [ 1330.781631][T25546] ? lock_acquire+0x1d1/0x380 [ 1330.786303][T25546] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1330.791648][T25546] ? __might_fault+0xc5/0x140 [ 1330.796328][T25546] ? __might_fault+0xc5/0x140 [ 1330.800993][T25546] ? _copy_from_iter+0x270/0x1690 [ 1330.806020][T25546] ? ieee802154_header_create+0x3bf/0x5e0 [ 1330.811719][T25546] ? __pfx__copy_from_iter+0x10/0x10 [ 1330.817031][T25546] dgram_sendmsg+0xa0d/0xf50 [ 1330.821607][T25546] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1330.826720][T25546] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1330.832245][T25546] ____sys_sendmsg+0xa4d/0xbe0 [ 1330.837007][T25546] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1330.842972][T25546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1330.848270][T25546] ___sys_sendmsg+0x190/0x1e0 [ 1330.852931][T25546] ? __pfx____sys_sendmsg+0x10/0x10 [ 1330.858132][T25546] ? futex_wait+0x11e/0x370 [ 1330.862620][T25546] ? find_held_lock+0x2b/0x80 [ 1330.867306][T25546] __sys_sendmsg+0x160/0x210 [ 1330.871876][T25546] ? __pfx___sys_sendmsg+0x10/0x10 [ 1330.876991][T25546] do_syscall_64+0x123/0x790 [ 1330.881569][T25546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.887458][T25546] RIP: 0033:0x7f0e4259e159 [ 1330.891853][T25546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.911453][T25546] RSP: 002b:00007f0e43458028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1330.919859][T25546] RAX: ffffffffffffffda RBX: 00007f0e42825fa0 RCX: 00007f0e4259e159 [ 1330.927829][T25546] RDX: 0000000004000000 RSI: 0000200000004780 RDI: 0000000000000009 [ 1330.935795][T25546] RBP: 00007f0e4263506b R08: 0000000000000000 R09: 0000000000000000 [ 1330.943758][T25546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.951723][T25546] R13: 00007f0e42826038 R14: 00007f0e42825fa0 R15: 00007ffcb7647758 [ 1330.959697][T25546] [ 1330.962702][T25546] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1330.969970][T25546] CPU: 0 UID: 0 PID: 25546 Comm: syz.5.3155 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.980883][T25546] Tainted: [L]=SOFTLOCKUP [ 1330.985177][T25546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1330.995221][T25546] Call Trace: [ 1330.998477][T25546] [ 1331.001388][T25546] dump_stack_lvl+0x100/0x190 [ 1331.006046][T25546] vpanic+0x553/0x970 [ 1331.010004][T25546] ? __pfx_vpanic+0x10/0x10 [ 1331.014482][T25546] panic+0xd1/0xe0 [ 1331.018178][T25546] ? __pfx_panic+0x10/0x10 [ 1331.022579][T25546] check_panic_on_warn.cold+0x19/0x34 [ 1331.027936][T25546] ? hwsim_hw_xmit+0xcbf/0x1540 [ 1331.032762][T25546] __warn.cold+0x191/0x318 [ 1331.037155][T25546] __report_bug+0x30f/0x440 [ 1331.041638][T25546] ? hwsim_hw_xmit+0xcbf/0x1540 [ 1331.046465][T25546] ? __pfx___report_bug+0x10/0x10 [ 1331.051468][T25546] ? stack_trace_save+0x8e/0xc0 [ 1331.056310][T25546] ? __pfx_stack_trace_save+0x10/0x10 [ 1331.061657][T25546] ? check_noncircular+0x97/0x160 [ 1331.066660][T25546] ? hwsim_hw_xmit+0xcbf/0x1540 [ 1331.071489][T25546] report_bug+0xb3/0x220 [ 1331.075710][T25546] ? hwsim_hw_xmit+0xcbf/0x1540 [ 1331.080536][T25546] handle_bug+0x16a/0x2a0 [ 1331.084845][T25546] exc_invalid_op+0x17/0x50 [ 1331.089327][T25546] asm_exc_invalid_op+0x1a/0x20 [ 1331.094149][T25546] RIP: 0010:hwsim_hw_xmit+0xcbf/0x1540 [ 1331.099582][T25546] Code: 48 c7 c2 40 3f c0 8c be 52 03 00 00 48 c7 c7 a0 3f c0 8c c6 05 0f 22 c6 09 01 e8 bc 1b 80 fa e9 c6 f8 ff ff e8 32 5a a5 fa 90 <0f> 0b 90 e9 11 f4 ff ff e8 24 5a a5 fa e8 5f 0a 89 fa 31 ff 89 c5 [ 1331.119163][T25546] RSP: 0018:ffffc90006b274d0 EFLAGS: 00010283 [ 1331.125205][T25546] RAX: 0000000000000219 RBX: ffff888029866d20 RCX: ffffc90020005000 [ 1331.133151][T25546] RDX: 0000000000080000 RSI: ffffffff8766c51e RDI: ffff8880380a0000 [ 1331.141096][T25546] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1331.149042][T25546] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8766b860 [ 1331.156988][T25546] R13: 1ffff92000d64ea4 R14: ffff888029866720 R15: 000000000000000f [ 1331.164940][T25546] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 1331.170036][T25546] ? hwsim_hw_xmit+0xcbe/0x1540 [ 1331.174868][T25546] ? lock_acquire+0x1d1/0x380 [ 1331.179530][T25546] ? ieee802154_hold_queue+0x100/0x450 [ 1331.185012][T25546] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 1331.190128][T25546] ? ieee802154_hold_queue+0x2a4/0x450 [ 1331.195580][T25546] ? find_held_lock+0x2b/0x80 [ 1331.200244][T25546] ? mark_held_locks+0x40/0x70 [ 1331.204981][T25546] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1331.210763][T25546] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 1331.215856][T25546] ieee802154_tx.isra.0+0x29f/0x570 [ 1331.221052][T25546] ieee802154_subif_start_xmit+0xc8/0xf0 [ 1331.226669][T25546] dev_hard_start_xmit+0x121/0x760 [ 1331.231767][T25546] sch_direct_xmit+0x1b2/0xc70 [ 1331.236514][T25546] ? lock_acquire+0x1d1/0x380 [ 1331.241186][T25546] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1331.246474][T25546] ? do_raw_spin_lock+0x230/0x260 [ 1331.251479][T25546] __dev_queue_xmit+0x27ac/0x4970 [ 1331.256481][T25546] ? lock_acquire+0x1d1/0x380 [ 1331.261135][T25546] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1331.266484][T25546] ? __might_fault+0xc5/0x140 [ 1331.271161][T25546] ? __might_fault+0xc5/0x140 [ 1331.275826][T25546] ? _copy_from_iter+0x270/0x1690 [ 1331.280825][T25546] ? ieee802154_header_create+0x3bf/0x5e0 [ 1331.286535][T25546] ? __pfx__copy_from_iter+0x10/0x10 [ 1331.291801][T25546] dgram_sendmsg+0xa0d/0xf50 [ 1331.296369][T25546] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1331.301463][T25546] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1331.306982][T25546] ____sys_sendmsg+0xa4d/0xbe0 [ 1331.311723][T25546] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1331.317698][T25546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1331.322971][T25546] ___sys_sendmsg+0x190/0x1e0 [ 1331.327630][T25546] ? __pfx____sys_sendmsg+0x10/0x10 [ 1331.332808][T25546] ? futex_wait+0x11e/0x370 [ 1331.337294][T25546] ? find_held_lock+0x2b/0x80 [ 1331.341959][T25546] __sys_sendmsg+0x160/0x210 [ 1331.346526][T25546] ? __pfx___sys_sendmsg+0x10/0x10 [ 1331.351626][T25546] do_syscall_64+0x123/0x790 [ 1331.356200][T25546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.362069][T25546] RIP: 0033:0x7f0e4259e159 [ 1331.366463][T25546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.386061][T25546] RSP: 002b:00007f0e43458028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1331.394448][T25546] RAX: ffffffffffffffda RBX: 00007f0e42825fa0 RCX: 00007f0e4259e159 [ 1331.402392][T25546] RDX: 0000000004000000 RSI: 0000200000004780 RDI: 0000000000000009 [ 1331.410336][T25546] RBP: 00007f0e4263506b R08: 0000000000000000 R09: 0000000000000000 [ 1331.418282][T25546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1331.426230][T25546] R13: 00007f0e42826038 R14: 00007f0e42825fa0 R15: 00007ffcb7647758 [ 1331.434187][T25546] [ 1331.437455][T25546] Kernel Offset: disabled [ 1331.441773][T25546] Rebooting in 86400 seconds..