last executing test programs: 14.277224537s ago: executing program 1 (id=2073): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file1\x00'}) signalfd(r2, &(0x7f0000000b40), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[], 0x0, 0x7e4d4a24, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) chdir(&(0x7f0000000140)='./file0\x00') r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e2b, @multicast2}, 0x2, 0x0, 0x4, 0x1}}, 0x1e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x0, @private1}}}, 0x32) sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 12.192219895s ago: executing program 1 (id=2075): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x40000891}, 0x2004c8c1) 10.995675428s ago: executing program 1 (id=2077): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250100060b050002000a00000a06000a004e220000140009"], 0x38}, 0x1, 0x0, 0x0, 0xb3d5140d19f17ccd}, 0x40080) (fail_nth: 4) 10.451668892s ago: executing program 1 (id=2080): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000000740)={0x2020}, 0x2020) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x64) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r5, &(0x7f0000000340), 0x11000) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) splice(r1, 0x0, r8, 0x0, 0x80, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) 9.515906996s ago: executing program 4 (id=2082): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 9.3933402s ago: executing program 4 (id=2083): io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f0000004940)=[&(0x7f0000004900)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f00000048c0)="d73bbc689173", 0x6, 0x5, 0x0, 0x1}]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x22100, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0xaa202, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3d, &(0x7f0000002780)=""/4096, &(0x7f0000003780)=0x1000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x2, 0x69, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="01851c001800140006"], 0x37) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f00000037c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8, r10, 0x0, 0x0, 0x6508d016}]) 9.215643947s ago: executing program 4 (id=2084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x68}}, 0x0) (fail_nth: 4) 8.914529712s ago: executing program 4 (id=2085): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000040c0)='9p\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, 0x0, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000004c0)={0x5, @sliced={0x7, [0x9, 0x745, 0x4, 0x400, 0x7, 0x2, 0x101, 0x2, 0x6, 0x0, 0x6, 0x9, 0x2, 0x1, 0x6, 0x1e55, 0x3754, 0x1, 0x1000, 0x1, 0xea8, 0xff4c, 0x7, 0x8, 0x6, 0x6, 0xcc, 0x101, 0x8, 0x40, 0xb, 0x1, 0x2, 0xffff, 0x1, 0x3, 0x5b3b, 0x8000, 0xfff9, 0x3ff, 0xff, 0x2, 0x0, 0x400, 0x5, 0xc, 0xff7f], 0x4058}}) close(r2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, &(0x7f0000000040)) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100]}, 0x8) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = syz_open_dev$mouse(&(0x7f0000000080), 0x401, 0x2000) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r4, @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x814) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004804) r7 = socket(0x1f, 0x3, 0x0) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='binder\x00', 0x2000012, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x0, 0x600) 8.894927672s ago: executing program 2 (id=2086): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f00000040c0)='9p\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, 0x0, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000004c0)={0x5, @sliced={0x7, [0x9, 0x745, 0x4, 0x400, 0x7, 0x2, 0x101, 0x2, 0x6, 0x0, 0x6, 0x9, 0x2, 0x1, 0x6, 0x1e55, 0x3754, 0x1, 0x1000, 0x1, 0xea8, 0xff4c, 0x7, 0x8, 0x6, 0x6, 0xcc, 0x101, 0x8, 0x40, 0xb, 0x1, 0x2, 0xffff, 0x1, 0x3, 0x5b3b, 0x8000, 0xfff9, 0x3ff, 0xff, 0x2, 0x0, 0x400, 0x5, 0xc, 0xff7f], 0x4058}}) close(r2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, &(0x7f0000000040)) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100]}, 0x8) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = syz_open_dev$mouse(&(0x7f0000000080), 0x401, 0x2000) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r4, @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x814) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004804) r7 = socket(0x1f, 0x3, 0x0) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='binder\x00', 0x2000012, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x0, 0x600) 8.769515003s ago: executing program 3 (id=2087): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe", @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8.623278925s ago: executing program 3 (id=2088): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = socket(0x10, 0x6, 0xfffffffc) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000002a00090027bd7000000000020400002c"], 0x14}, 0x1, 0x3000000}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x8, "b546baa5cc590d30d4d8b40d29968173b959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r7}) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) copy_file_range(r3, &(0x7f0000000180)=0xa, r8, &(0x7f0000000140)=0x81, 0x7, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_usb_connect(0x3, 0x37, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2, @ANYRESDEC], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x7, [{0xd1, &(0x7f0000000400)=@string={0xd1, 0x3, "9023e7dc96c9fc711bbcef18fa3c9b5ec4770c74a382d5d1ae9f060ad7f53fe8897a71242350a9d60fb401372548155df4dce2372fbbea0ec60bab9ac3549b02ea778527d33425922a79649e168eb76a0bd05b90c8b0e0df0bb541b6f738089b14cc2d28c45bb32ba37b0a20b2cc719bd97d81478ddb53be81db482bedd7f649f9b318c8ddf49929e656458764d70f3b03f10adc768521cd888d010d4fa83cbd62120011a1b21e419498128d9c2730a76d2fe8f22aab8ae88120ad6746873aa66a817f0a6214be5d71170a723ff854"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x441}}, {0x2d, &(0x7f0000000540)=@string={0x2d, 0x3, "dcdbfd0e8d7c16986907049684809c872166bba292e4a2ef7768f459c8dc3d239a60dc932df724233d38ed"}}, {0xf8, &(0x7f0000000580)=@string={0xf8, 0x3, "b4356a628e36d80304819454a0f3a5b0042324a9d17c3f440a6d7c7e1cd7642be540464d6a0d4a6022df3d00518fb4d9b0b133fbe5649f68b554a40dff8b40171ea961572d738727e5c20b656a088492891b0ad6f89110f6874b48224195be51523e77e3ead2d625fb3c6f6c0694712fa3fab0dedd18020dc12b6fc0a932df5a4bacb83001786291e05f190efe11de3d99087698aba01195ce7b5c8658253af18f17da4a267bae2f3b593c21bb17f61960cb3b8ff87d5266b8e83e7ca765e7682d45c75620d6d117c31cca12badd49442a94305f8bc7009ee4adff2549988194eeb71a54b135d7a3a98985e42851a913a075ef4dc159"}}, {0xa2, &(0x7f00000006c0)=@string={0xa2, 0x3, "f415a33a4d38a2df8f3b1944c5bba5e23b8fa1216be0cd19ef065e97d6d70c18ed3769a5f04d545563a0c4330ac619974f02f33b285cd3f08e8cad3c234f2471e50ad062206c6d37149f5463425490e424adbd2ce7a7de1e03a0bd976f047c8c08d685c573aa8458a535bc081d6a2bce1df4ef34c55c2933b7cb734c484a1e8c184316487267c843c53bd2f5e444f1e759ce6f3e8bf50e015432ebefe7b8b393"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x240a}}]}) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x791d82, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000680)=0x72bdc6b5) process_mrelease(0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r10, 0x0, r11, 0x0, 0x7ffff000, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 7.704779925s ago: executing program 4 (id=2089): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r4, &(0x7f0000000740)={0x2020}, 0x2020) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x64) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r5, &(0x7f0000000340), 0x11000) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) splice(r1, 0x0, r8, 0x0, 0x80, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) 7.384915315s ago: executing program 1 (id=2090): r0 = socket(0x6, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x20, r6, 0x101, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x2300) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x50) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x5000003, 0x82011, r8, 0x3000) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, 0x0) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x34e, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000640)={r9, 0xb}, 0x0, &(0x7f00000000c0)="518d00000000000000fcff", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}]}, &(0x7f00000005c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000001500)={r10, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 7.274512182s ago: executing program 0 (id=2091): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102000109022a00010100c0000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x50, r2, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r3 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000800000000020000004c000480480001800a000100696e6e65720000003800028008000240000000e2080003400000000a080004400000000f080001400000000014000580090001006d65746100000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x11}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0x2c}}, 0x24000804) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r8, &(0x7f0000000300)='0', 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0xa, 0x4ea1, 0xffffffff, @local, 0x7}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0000400781ecc0f", 0x8}], 0x1}}], 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x4, [@restrict={0x1, 0x0, 0x0, 0xb, 0x4}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0x2, 0x5}]}, @struct={0x4, 0x5, 0x0, 0x4, 0x0, 0x8, [{0xa, 0x2, 0x1}, {0x1, 0x4, 0x8}, {0x2, 0x0, 0xd9e}, {0x7, 0x0, 0x8001}, {0x10, 0x1, 0x7fff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x3}}, @func={0x4, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000480)=""/211, 0xc0, 0xd3, 0x1, 0xffff}, 0x28) io_setup(0x80000001, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000680)={0x8, 0x0, 0x10000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x4, 0x800000000, 0x5, 0xa64a, 0x369e411b, 0x3, 0x8, 0x4, 0x100, 0x32f, 0x9, 0x80000000, 0x3, 0x5e24, 0xc26]}, &(0x7f0000000800)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000880)=ANY=[@ANYRES32=r12, @ANYBLOB="00000200030009007e028fda0036582961119109b2950bc46ba1d4"], 0xc) ioctl$DRM_IOCTL_AGP_FREE(r8, 0x40206435, &(0x7f00000006c0)={0x0, r11}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xe3, 0x1000, 0x9, 0x10, 0x1, 0x9, '\x00', r9, r10, 0x0, 0x5, 0x5, 0x8}, 0x50) 6.97384593s ago: executing program 2 (id=2092): r0 = socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a31000000000500010007"], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000005ac0)=""/114) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xb61f) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = gettid() capget(&(0x7f00000000c0)={0x19980330, r6}, &(0x7f0000000400)={0xe27b, 0x1ff, 0x10, 0x0, 0x4, 0xffffff6e}) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r9, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, 0x1ff}}, [0x7, 0x6, 0x10, 0x80000003, 0x8000, 0x40, 0x2, 0x4000b, 0x4, 0x3, 0x9, 0x5, 0x8, 0x200100000000, 0x3]}, &(0x7f0000000180)=0x100) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b0000014e2200000000000000000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="0000000000006900000400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) 5.373439487s ago: executing program 2 (id=2093): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 5.260485962s ago: executing program 3 (id=2094): clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0xffffffff}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040050) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) syz_ublk_setup_io_uring(0x26d1, 0x0, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 5.001892188s ago: executing program 2 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xde2d0d9d080546f8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x12c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54570d05}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc0}, 0x20004044) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000006c0)={0x50, 0x0, 0x0, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) 4.879783131s ago: executing program 0 (id=2096): uname(&(0x7f0000000000)=""/33) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x184) write(r4, &(0x7f0000000640)='0', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xd5dbf10a6580bbf2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 4.532979079s ago: executing program 1 (id=2097): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001280)='/sys/power/freeze_filesystems', 0x121a02, 0x41) sendfile(r1, r1, 0x0, 0xb) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="0eeed0bb55e455566d0fc82cd291", @ANYBLOB="91c16bd90837c73174193ce4d8414ca8bef035a47f166c5fbd0ba4229799e54b82587d326a0dc599feb5e22350a555c7966b3b514dd7cfe7c7a8dfebf786f4032c74b4ab6928a63e1ed7d5d533a8a97e9de1cbde44ac2135be0b6622448357a508d336b4c9b3e9c9b7000000000381b79008793440651b3bd102b3fb1ee56052e9190abe52764bbe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0xffffffffffffff77, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000080)='net/connector\x00') 3.717957598s ago: executing program 3 (id=2098): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) waitid(0x2, 0x0, 0x0, 0x8, 0x0) syz_emit_ethernet(0x83, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209476", 0x4d, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}, {"f25c01e9f96729ff664d31538f5506173fa50b9825847ac062f7a04c55dcc87d23f4f4d2773b098c5ee178826a9d83eceedb53f210aa1ad151"}}}}}}}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x5, @loopback, 0x5e69}, {0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0xffffffffffffffff, {[0x0, 0x6, 0x7, 0x5, 0xffff4d06, 0x5, 0x5, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x20000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r2, 0xa}, 0x8) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 3.495502044s ago: executing program 0 (id=2099): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000ad00)={&(0x7f000000ab40)=[0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0xfffffffffffff29d, 0x9}, {0x6, 0x2}, {0x6, 0xd}, {0xffffffff, 0x56}, {0x4, 0x7}, {0x3, 0x16}, {0x2, 0x9}, {0x9, 0xfb4}, {0x6, 0x800}, {0xad, 0x8}, {0x9, 0x2}, {0x0, 0x4}, {0x8, 0x5}, {0x3, 0xd}, {0x554, 0x100000001}, {0x6, 0x2d7}, {0x8, 0x100000000003}, {0x7, 0x9}, {0xfffffffffffffffd, 0x6}, {0x8, 0x7ffffffc}, {0x5, 0x2}, {0xffffffffffffffff, 0x5}, {0x1, 0xfffffffffffffffd}, {0x4f, 0x5}, {0xac, 0x5}, {0x0, 0x1}, {0xa00, 0x406}, {0xefffffff, 0x6}, {0x8, 0x1}, {0x5, 0x7fff}, {0x7, 0xfffffffffffffff4}, {0x100000000, 0x400}, {0x7, 0x1}, {0x8000000000000001, 0x101}, {0x0, 0x7}, {0x5c, 0x1}, {0x8, 0xbfa}, {0x6, 0xfffffffffffffff3}, {0x6dc, 0x7fa1}, {0xffffffffffffffff, 0x7}, {0xc42, 0xb}, {0xc12, 0x10000}, {0x80000001, 0x3b84e570}, {0x400, 0x7}, {0x307d88f5, 0x9}, {0x8000, 0x8000000000000001}, {0x3, 0x3}, {0xc00, 0x3}, {0x9, 0x2dac}, {0x9, 0x8}, {0x5, 0x9}, {0x101, 0xd6}, {0x8, 0x3}, {0xc, 0xa93}, {0x7, 0x68e}, {0x200, 0x8000}, {0x8000, 0x7}, {0x8000000000000001, 0x280}, {0x8}, {0xf, 0x4c}, {0x0, 0x80}, {0x5, 0xab5}, {0x1ff, 0xfffffffffffffffe}, {0x9, 0x5}, {0x8, 0x800000000000004}, {0x18000, 0x53f78878}, {0x2, 0x5}, {0x81, 0x7b0}, {0x6, 0x6}, {0x3, 0xffffffff}, {0x9, 0x800}, {0x6, 0x7}, {0x1000}, {0xfffffffffffffff9, 0x8c}, {0x9e5, 0x7fffffffffffffff}, {0x2, 0x9}, {0x8, 0xffffffffffffff01}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x76, 0x3}, {0x388, 0x4}, {0x80000000, 0x433c50c9}, {0x4, 0x100000000}, {0x7fffffff, 0x6}, {0x7a63fbff, 0x7}, {0x1, 0x4}, {0x2, 0x5c8}, {0x8, 0x8}, {0x8, 0x8}, {0x7}, {0x1, 0xb84d}, {0x2, 0x1}, {0x9, 0xb52f}, {0xff, 0x9}, {0x1, 0x1}, {0x200, 0x4}, {0x10, 0x5}, {0x5, 0x9}, {0xf}, {0x4d, 0x9}, {0x7, 0x6}, {0x9, 0xc742}, {0xd}, {0x4, 0x7}, {0x8, 0x5}, {0x2, 0x5}, {0xbd0c, 0x80000000}, {0x1, 0x4}, {0x0, 0x8}, {0x8000000000000001, 0xfffffffffffffff3}, {0x3, 0x6}, {0x0, 0x1000}, {0x7fffffffffffffff, 0x9}, {0x7, 0x401}, {0x7fffffff}, {0x2, 0x18}, {0x8b, 0x40b4421f}, {0x800, 0x2}, {0xf2, 0x6}, {0x80, 0x853d}, {0xf3e, 0x3522dbc3}, {0xdad, 0x5}, {0x7, 0x3}, {0x1da, 0x8000000000000000}, {0x6, 0x1}, {0xb, 0x6}, {0x3, 0x1ff}, {0x2, 0x5}, {0x3d, 0x9}, {0xac99, 0x10000}, {0x10000, 0x9}, {0xfffffffffffffff7, 0x8}, {0x1000, 0x653}, {0x4bcbe926, 0x5}, {0x3, 0x1}, {0x40, 0x6}, {0x7, 0x2}, {0xf5a5, 0x4}, {0x73, 0x3}, {0x4, 0x74f0}, {0x7, 0xffffffff}, {0xb, 0x8}, {0x1, 0xcc}, {0x5ae5d7cb, 0xffffffffffffffff}, {0x5, 0x1}, {0x8, 0xe}, {0x80000000, 0xfffffffffffff68c}, {0x5, 0x1}, {0x15, 0x7}, {0xfffffffffffffffa, 0xf740}, {0x5, 0x2}, {0x800, 0x8}, {0x7ff, 0x6}, {0x1, 0x1}, {0x59bd5112, 0x3b7}, {0x3, 0x8}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0xa9}, {0x9, 0xf81}, {0x3}, {0x8, 0x3}, {0x18, 0x7ff}, {0xfffffffffffffff9, 0x3}, {0x5, 0x7fffffffffffffff}, {0x3, 0x4}, {0x7, 0xd}, {0x4, 0x5}, {0x1, 0x100000001}, {0x3, 0xffff}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x6}, {0x88, 0x6}, {0x4, 0x3}, {0x4, 0x79}, {0x0, 0x5}, {0xffffffffffffffff, 0x1}, {0x490, 0x37}, {0xb, 0x9}, {0x9, 0x62b60558}, {0x1, 0xffffffffffffffff}, {0x0, 0x5}, {0x100000000, 0x2}, {0x28000000000, 0xffffffffffffffff}, {0x8, 0x5}, {0x690b, 0x8}, {0xffffffff, 0xd}, {0x9, 0xe132}, {0x10, 0x498e6a20}, {0x101, 0x3b}, {0x3, 0x3}, {0x5}, {0xc, 0x7}, {0x1, 0x9}, {0xb3, 0x8b}, {0x200, 0x80}, {0x8}, {0x8001, 0x2}, {0x3, 0x1}, {0x7, 0x4000000007}, {0x3, 0x3}, {0x7d, 0x7}, {0x0, 0x7ff}, {0x6, 0x5a}, {0x5, 0xfffffffffffffff8}, {0x2, 0xb}, {0x7, 0xfffffffffffffffa}, {0x2, 0x8}, {0x0, 0x80000000}, {0x3, 0xb22d}, {0x2, 0x5}, {0xffffffff, 0x4}, {0x7b0, 0xc306}, {0x100, 0x10}, {0x3, 0x1}, {0xa540, 0x8000000000000000}, {0xfffffffffffffff8}, {0x3, 0x5}, {0x821f, 0x8}, {0x7f, 0x3}, {0x9, 0x3}, {0xce, 0x9}, {0x9, 0xffffffffffffffff}, {0xaa, 0x7fffffffffffffff}, {0x387, 0x400000ffff}, {0xc, 0x1}, {0x702, 0x7e3ed378}, {0x5, 0x8}, {0x3, 0x4}, {0x6367d524, 0xbbb3}, {0x5e265bbc, 0x1}, {0x6, 0x1}, {0x4, 0x3}, {0x100, 0x8}, {0x1, 0x3}, {0x1, 0xfffffffffffffffe}, {0x2, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x8000, 0xffffffffffffff01}, {0x3, 0x6}, {0x2}, {0x3, 0x1}, {0x9, 0x400}, {0x10, 0x3}, {0x9, 0x8d}, {0x99f, 0x2}, {0x1, 0x7f}, {0xffffffffffff8001, 0x1751}, {0x6d}, {0x7, 0x7}, {0x9, 0x400000000}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000feffffffffffffff0010000000000000000000000000000000000000000000000000000800000000000200000000000000"], 0x1a4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x3) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) io_setup(0xfff, &(0x7f0000000140)=0x0) io_getevents(r6, 0x3a, 0x80000000000012c, &(0x7f0000000400), &(0x7f0000000200)={0x0, 0x3938700}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.58744797s ago: executing program 3 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000000c0)) 2.471616691s ago: executing program 3 (id=2101): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/sockstat6\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000ac0)=""/78, 0x4e}], 0x1, 0x9, 0x7ffffffe) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="653a6d795f67bfca2f5b522a6031206d", 0x10) syz_usb_control_io(r2, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0xfe, 0x9, 0xf, 0x20000000006}, {0x2, 0x2, 0x77, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000010820514014000010203010902a60003010110020904000000010100000a2401020029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_connect$uac1(0x7, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="052fe5ff00286e88e2d59ffe53535739133310925b659f8906d4b75fb8791acbd0fb65b14cf3caa8a70a65657423323fdcb2dcf799087e38bd3a98ed138116"]}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=@unlock_all, 0xb) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r8, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x2, @qpsk={0x6, 0x10}}) 2.331037579s ago: executing program 0 (id=2102): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c9"], 0xe) mmap(&(0x7f00003e8000/0x1000)=nil, 0x1000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f00000000c0)='./proc\x00', 0x6a2000, 0x22) mkdirat(r0, &(0x7f00000001c0)='./proc\x00', 0x192) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x42002, 0x124) write(r0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000280)=0x7e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x2000000000000021, 0x2, 0x2) shutdown(0xffffffffffffffff, 0x2) acct(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00') shutdown(r3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @flow_dissector}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xc3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fe4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x24006084) r7 = io_uring_setup(0x1895, &(0x7f00000003c0)={0x0, 0x10ed, 0x4000, 0x8000003, 0x259, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) dup2(r4, r5) 2.095460014s ago: executing program 2 (id=2103): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r3, &(0x7f0000000980)=[{&(0x7f0000000080)=""/68, 0x44}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4a, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c8001c001800010005031400"], 0x21) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0', 0xb) 1.963722418s ago: executing program 0 (id=2104): syslog(0x2, &(0x7f0000000040), 0x0) (fail_nth: 1) 1.865342008s ago: executing program 4 (id=2105): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x2000, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="64000000020601080000000000000000001900000900020073797a3000000000050004000000000015000300686173683a69702c706f72742c6e657400000000140007800500150000000000080011400000001e050005000a0000000500010006"], 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.605356025s ago: executing program 0 (id=2106): syz_emit_ethernet(0xe2, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @multicast1, {[@rr={0x7, 0x17, 0x53, [@private=0xa010101, @empty, @rand_addr=0x64010100, @remote, @empty]}, @ssrr={0x89, 0xf, 0xc7, [@local, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x54, 0x8f, 0x3, 0x0, [{@multicast2, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x25}, {@remote}, {@loopback, 0xb048}, {@empty, 0x200}, {@loopback, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010100, 0x8e}, {@multicast1, 0x4}, {@remote, 0x8}]}, @noop, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x5f, 0x3, 0x5, [{@empty, 0xb02c}, {@private=0xa010100}]}, @generic={0x86, 0x4, "dce9"}, @timestamp={0x44, 0x28, 0xc7, 0x0, 0x0, [0x3, 0xffe, 0x905, 0x8, 0x80000000, 0x2, 0x2, 0x1, 0x1000]}]}}}}}}, 0x0) pipe2(&(0x7f0000000200), 0x800) io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) exit(0x5) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000780)=0xfffffffd, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a0003a16000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) listen(r6, 0x6) ioctl$sock_SIOCINQ(r6, 0x541b, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r8, 0x80045430, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="3b000e00"], 0x74}}, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x94, 0x0, 0x3}]}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000600), 0x0) 0s ago: executing program 2 (id=2107): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e2b, @multicast2}, 0x2, 0x0, 0x4, 0x1}}, 0x1e) kernel console output (not intermixed with test programs): your ipvs configuration [ 400.572337][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.375914][ T31] audit: type=1400 audit(2000000103.546:221231): avc: denied { append } for pid=14390 comm="syz.0.1975" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 401.545821][T14394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1975'. [ 402.523963][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.942094][ T31] audit: type=1400 audit(2000000105.015:221232): avc: denied { write } for pid=14405 comm="syz.1.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 403.021937][ T31] audit: type=1400 audit(2000000105.081:221233): avc: denied { getopt } for pid=14405 comm="syz.1.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 403.199804][T12646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.949644][ T31] audit: type=1400 audit(2000000105.951:221234): avc: denied { getopt } for pid=14431 comm="syz.2.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 403.970060][T14432] FAULT_INJECTION: forcing a failure. [ 403.970060][T14432] name failslab, interval 1, probability 0, space 0, times 0 [ 403.970088][T14432] CPU: 0 UID: 0 PID: 14432 Comm: syz.2.1984 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.970110][T14432] Tainted: [L]=SOFTLOCKUP [ 403.970116][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 403.970125][T14432] Call Trace: [ 403.970132][T14432] [ 403.970138][T14432] dump_stack_lvl+0x100/0x190 [ 403.970168][T14432] should_fail_ex.cold+0x5/0xa [ 403.970192][T14432] should_failslab+0xc2/0x120 [ 403.970214][T14432] __kmalloc_noprof+0xfc/0x840 [ 403.970232][T14432] ? tomoyo_encode2+0xfb/0x3c0 [ 403.970256][T14432] tomoyo_encode2+0xfb/0x3c0 [ 403.970278][T14432] tomoyo_encode+0x29/0x50 [ 403.970296][T14432] tomoyo_realpath_from_path+0x18c/0x690 [ 403.970321][T14432] tomoyo_path_number_perm+0x23c/0x580 [ 403.970337][T14432] ? tomoyo_path_number_perm+0x22e/0x580 [ 403.970355][T14432] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 403.970384][T14432] ? __lock_acquire+0x5c0/0x1f40 [ 403.970412][T14432] ? __fget_files+0x34/0x3d0 [ 403.970433][T14432] ? find_held_lock+0x2b/0x80 [ 403.970454][T14432] ? hook_file_ioctl_common+0x140/0x440 [ 403.970480][T14432] ? __fget_files+0x21f/0x3d0 [ 403.970503][T14432] security_file_ioctl+0xd3/0x230 [ 403.970523][T14432] __x64_sys_ioctl+0xb7/0x210 [ 403.970541][T14432] do_syscall_64+0x123/0x790 [ 403.970564][T14432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.970582][T14432] RIP: 0033:0x7fe72bd9e159 [ 403.970596][T14432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.970611][T14432] RSP: 002b:00007fe72cc91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.970628][T14432] RAX: ffffffffffffffda RBX: 00007fe72c025fa0 RCX: 00007fe72bd9e159 [ 403.970639][T14432] RDX: 0000200000000040 RSI: 000000004008af04 RDI: 0000000000000005 [ 403.970649][T14432] RBP: 00007fe72cc91090 R08: 0000000000000000 R09: 0000000000000000 [ 403.970659][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.970669][T14432] R13: 00007fe72c026038 R14: 00007fe72c025fa0 R15: 00007fffafaad028 [ 403.970692][T14432] [ 403.973691][T14432] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.321678][T14435] FAULT_INJECTION: forcing a failure. [ 404.321678][T14435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.327368][T14435] CPU: 0 UID: 0 PID: 14435 Comm: syz.1.1985 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.327405][T14435] Tainted: [L]=SOFTLOCKUP [ 404.327412][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 404.327424][T14435] Call Trace: [ 404.327431][T14435] [ 404.327440][T14435] dump_stack_lvl+0x100/0x190 [ 404.327472][T14435] should_fail_ex.cold+0x5/0xa [ 404.327499][T14435] _copy_from_user+0x2e/0xd0 [ 404.327522][T14435] kstrtouint_from_user+0xd6/0x1d0 [ 404.327547][T14435] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 404.327579][T14435] ? preempt_schedule_thunk+0x16/0x40 [ 404.327609][T14435] proc_fail_nth_write+0x83/0x220 [ 404.327634][T14435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 404.327665][T14435] vfs_write+0x2aa/0x1050 [ 404.327686][T14435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 404.327709][T14435] ? lock_acquire+0x1d1/0x380 [ 404.327730][T14435] ? __fget_files+0x34/0x3d0 [ 404.327753][T14435] ? __pfx_vfs_write+0x10/0x10 [ 404.327770][T14435] ? find_held_lock+0x2b/0x80 [ 404.327797][T14435] ? __fget_files+0x215/0x3d0 [ 404.327824][T14435] ? __fget_files+0x21f/0x3d0 [ 404.327855][T14435] ksys_write+0x12a/0x250 [ 404.327874][T14435] ? __pfx_ksys_write+0x10/0x10 [ 404.327901][T14435] do_syscall_64+0x123/0x790 [ 404.327930][T14435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.327950][T14435] RIP: 0033:0x7f5d8f75e98e [ 404.327966][T14435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 404.327983][T14435] RSP: 002b:00007f5d90613fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.328002][T14435] RAX: ffffffffffffffda RBX: 00007f5d906146c0 RCX: 00007f5d8f75e98e [ 404.328015][T14435] RDX: 0000000000000001 RSI: 00007f5d906140a0 RDI: 0000000000000004 [ 404.328027][T14435] RBP: 00007f5d90614090 R08: 0000000000000000 R09: 0000000000000000 [ 404.328038][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.328050][T14435] R13: 00007f5d8fa26038 R14: 00007f5d8fa25fa0 R15: 00007ffde59e0608 [ 404.328076][T14435] [ 404.630754][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.262133][ T4132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.345522][T14215] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 405.637871][T14215] usb 3-1: unable to get BOS descriptor or descriptor too short [ 405.638320][T14215] usb 3-1: not running at top speed; connect to a high speed hub [ 405.638347][T14215] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 405.648856][T14215] usb 3-1: string descriptor 0 read error: -22 [ 405.648943][T14215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.100878][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb776 instead [ 406.100965][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x3c11 instead [ 406.100980][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x1922 instead [ 406.100994][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x3e06 instead [ 406.101017][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xcda6 instead [ 406.101084][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x27cd instead [ 406.101128][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x299a instead [ 406.101143][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8caa instead [ 406.101178][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf3e9 instead [ 406.101247][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xbfda instead [ 406.101304][T14477] jffs2: Further such events for this erase block will not be printed [ 406.254603][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xb910 instead [ 406.254664][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x57c3 instead [ 406.254688][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x8bd8 instead [ 406.254722][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xb4a6 instead [ 406.254757][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x8d67 instead [ 406.254794][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xafed instead [ 406.254822][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x9798 instead [ 406.254845][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x7327 instead [ 406.254880][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xf6eb instead [ 406.254917][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x39ff instead [ 406.254939][T14477] jffs2: Further such events for this erase block will not be printed [ 406.344812][T14215] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 406.434368][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x840c instead [ 406.434483][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x7331 instead [ 406.434509][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x3698 instead [ 406.434550][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x9ac5 instead [ 406.434605][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xf961 instead [ 406.434620][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x5281 instead [ 406.434643][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf7ce instead [ 406.434807][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xdabf instead [ 406.434834][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xc745 instead [ 406.434968][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x3540 instead [ 406.435349][T14477] jffs2: Further such events for this erase block will not be printed [ 406.564635][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4319 instead [ 406.564714][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xf5e5 instead [ 406.564728][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x3840 instead [ 406.566234][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x871a instead [ 406.578678][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x9f1e instead [ 406.581475][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x097b instead [ 406.590561][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x9b59 instead [ 406.590587][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xc589 instead [ 406.590958][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x7946 instead [ 406.604054][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x16be instead [ 406.604085][T14477] jffs2: Further such events for this erase block will not be printed [ 406.662208][ T4123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.716698][T14481] FAULT_INJECTION: forcing a failure. [ 406.716698][T14481] name failslab, interval 1, probability 0, space 0, times 0 [ 406.716731][T14481] CPU: 1 UID: 0 PID: 14481 Comm: syz.4.1993 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.716758][T14481] Tainted: [L]=SOFTLOCKUP [ 406.716766][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 406.716777][T14481] Call Trace: [ 406.716783][T14481] [ 406.716791][T14481] dump_stack_lvl+0x100/0x190 [ 406.716829][T14481] should_fail_ex.cold+0x5/0xa [ 406.716856][T14481] should_failslab+0xc2/0x120 [ 406.716884][T14481] kmem_cache_alloc_noprof+0x92/0x6a0 [ 406.716905][T14481] ? do_getname+0x35/0x390 [ 406.716936][T14481] do_getname+0x35/0x390 [ 406.716965][T14481] do_fchmodat+0xc9/0x1b0 [ 406.716990][T14481] ? __pfx_do_fchmodat+0x10/0x10 [ 406.717020][T14481] __x64_sys_fchmodat+0x77/0xc0 [ 406.717042][T14481] ? lockdep_hardirqs_on+0x7d/0x110 [ 406.717067][T14481] do_syscall_64+0x123/0x790 [ 406.717094][T14481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.717113][T14481] RIP: 0033:0x7fc9e619e159 [ 406.717130][T14481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.717147][T14481] RSP: 002b:00007fc9e43d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 406.717165][T14481] RAX: ffffffffffffffda RBX: 00007fc9e6426090 RCX: 00007fc9e619e159 [ 406.717178][T14481] RDX: 00000000fffffffb RSI: 0000200000000000 RDI: ffffffffffffff9c [ 406.717190][T14481] RBP: 00007fc9e43d5090 R08: 0000000000000000 R09: 0000000000000000 [ 406.717201][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.717212][T14481] R13: 00007fc9e6426128 R14: 00007fc9e6426090 R15: 00007ffed85d2c08 [ 406.717237][T14481] [ 406.799709][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xcb92 instead [ 406.811781][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xb758 instead [ 406.811805][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x1845 instead [ 406.817199][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xd739 instead [ 406.821566][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x949b instead [ 406.827578][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xeea5 instead [ 406.827594][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xca4c instead [ 406.844693][T14215] usb 3-1: failed to enable PITCH for EP 0x1 [ 406.845258][T14215] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.846496][T14215] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 406.848920][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xf0c0 instead [ 406.848938][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x9b0a instead [ 406.848952][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x1f8a instead [ 406.848965][T14477] jffs2: Further such events for this erase block will not be printed [ 406.849270][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x6d38 instead [ 406.849286][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x8af9 instead [ 406.849286][T14215] usb 3-1: 1:1 : bogus bTerminalLink 2 [ 406.849301][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x37da instead [ 406.849316][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xb9b3 instead [ 406.849330][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x53ae instead [ 406.849344][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xb2ec instead [ 406.849357][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa1d9 instead [ 406.849371][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x33cc instead [ 406.849385][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x3a25 instead [ 406.849399][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x2808 instead [ 406.849421][T14477] jffs2: Further such events for this erase block will not be printed [ 406.850934][T14215] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.851223][T14215] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 406.853833][T14215] usb 3-1: 1:1 : bogus bTerminalLink 2 [ 406.854116][T14215] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.883095][T14215] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 406.885062][T14215] usb 3-1: USB disconnect, device number 22 [ 406.963198][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4448 instead [ 406.963217][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x7697 instead [ 406.963230][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x1738 instead [ 406.963242][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xf57c instead [ 406.963255][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x40a1 instead [ 406.963267][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xb4c4 instead [ 406.963279][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd2f8 instead [ 406.963291][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xaf9c instead [ 406.963303][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xa5ea instead [ 406.963322][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xbadb instead [ 406.963334][T14477] jffs2: Further such events for this erase block will not be printed [ 406.963627][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x3bf9 instead [ 406.963639][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0483 instead [ 406.963652][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xafa8 instead [ 406.963664][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xe420 instead [ 406.963676][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x017a instead [ 406.963688][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x2f3e instead [ 406.963700][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x3e4e instead [ 406.963713][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x8119 instead [ 406.963725][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xcc55 instead [ 406.963737][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xd7a6 instead [ 406.963749][T14477] jffs2: Further such events for this erase block will not be printed [ 406.964039][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xfd56 instead [ 406.964052][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x137c instead [ 406.964065][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x46ce instead [ 406.964077][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x3268 instead [ 406.964089][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x0ca5 instead [ 406.964101][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x472a instead [ 406.964113][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xa51c instead [ 406.964125][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xb248 instead [ 406.964137][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x4501 instead [ 406.964149][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x5fd2 instead [ 406.964161][T14477] jffs2: Further such events for this erase block will not be printed [ 406.972089][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xa72c instead [ 406.972105][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xfd4a instead [ 406.972118][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x8abd instead [ 406.972130][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x7074 instead [ 406.972143][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x4960 instead [ 406.972155][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x024d instead [ 406.972167][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x703c instead [ 406.972179][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x6c54 instead [ 406.972191][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x54b6 instead [ 406.972204][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xdc33 instead [ 406.972216][T14477] jffs2: Further such events for this erase block will not be printed [ 406.972511][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x0209 instead [ 406.972524][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x6655 instead [ 406.972536][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xad15 instead [ 406.972549][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x540e instead [ 406.972562][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xdbb5 instead [ 406.972574][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x61ca instead [ 406.972586][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x41c8 instead [ 406.972599][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x7762 instead [ 406.972621][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x7a9d instead [ 406.972633][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x423f instead [ 406.972645][T14477] jffs2: Further such events for this erase block will not be printed [ 406.972936][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xf727 instead [ 406.972949][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xfc00 instead [ 406.972961][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x740d instead [ 406.972973][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x5d21 instead [ 406.972985][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x7688 instead [ 406.972997][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x0cab instead [ 406.973010][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf1ed instead [ 406.973022][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x734d instead [ 406.973034][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xe7ec instead [ 406.973047][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xa19b instead [ 406.973058][T14477] jffs2: Further such events for this erase block will not be printed [ 406.973358][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xda4b instead [ 406.973371][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x2a99 instead [ 406.973383][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x664f instead [ 406.973395][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x4d1a instead [ 406.973408][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x2d80 instead [ 406.973420][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xd3b5 instead [ 406.973432][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf93e instead [ 406.973444][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xa4db instead [ 406.973456][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x1941 instead [ 406.973468][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xbfcc instead [ 406.973489][T14477] jffs2: Further such events for this erase block will not be printed [ 406.989573][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x8cd0 instead [ 406.989589][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xad9e instead [ 406.989602][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x314a instead [ 406.989614][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xb7a5 instead [ 406.989626][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x1175 instead [ 406.989639][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x512c instead [ 406.989650][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x4d27 instead [ 406.989662][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x4ec1 instead [ 406.989674][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x3ae8 instead [ 406.989686][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xc93a instead [ 406.989698][T14477] jffs2: Further such events for this erase block will not be printed [ 406.990000][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xd075 instead [ 406.990012][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x2ffe instead [ 406.990024][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x692a instead [ 406.990037][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x985d instead [ 406.990048][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xa9fa instead [ 406.990060][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x2404 instead [ 406.990072][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xc4eb instead [ 406.990084][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xb3ae instead [ 406.990096][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xd155 instead [ 406.990108][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x081c instead [ 406.990120][T14477] jffs2: Further such events for this erase block will not be printed [ 406.990424][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x8b11 instead [ 406.990437][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x9fca instead [ 406.990449][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x30d5 instead [ 406.990461][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xdb56 instead [ 406.990473][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xed41 instead [ 406.990485][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x5513 instead [ 406.990497][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x2f09 instead [ 406.990509][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x6b37 instead [ 406.990521][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x38ac instead [ 406.990533][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x2da3 instead [ 406.990545][T14477] jffs2: Further such events for this erase block will not be printed [ 407.031630][T12605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 407.035108][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xf163 instead [ 407.035126][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xaed0 instead [ 407.035139][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x885f instead [ 407.035152][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x88c0 instead [ 407.035164][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x96f7 instead [ 407.035177][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x7c86 instead [ 407.035189][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x40ee instead [ 407.035202][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x4d40 instead [ 407.035214][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x5c92 instead [ 407.035226][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xb56c instead [ 407.035238][T14477] jffs2: Further such events for this erase block will not be printed [ 407.035535][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xc42f instead [ 407.035548][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x6427 instead [ 407.035560][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x8a72 instead [ 407.035572][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x7720 instead [ 407.035584][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xe2e6 instead [ 407.035597][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x3c4d instead [ 407.035609][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3215 instead [ 407.035621][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0xae3d instead [ 407.035634][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x9c99 instead [ 407.035646][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x83d9 instead [ 407.035658][T14477] jffs2: Further such events for this erase block will not be printed [ 407.035954][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x0880 instead [ 407.035967][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x7b3b instead [ 407.035979][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x10f4 instead [ 407.035992][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xbcde instead [ 407.036004][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0xb7b3 instead [ 407.036016][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x44f4 instead [ 407.036029][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x3ef3 instead [ 407.036041][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xe81f instead [ 407.036054][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x2299 instead [ 407.036066][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x520d instead [ 407.036078][T14477] jffs2: Further such events for this erase block will not be printed [ 407.036382][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xe918 instead [ 407.036395][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x94e6 instead [ 407.036407][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xd31a instead [ 407.036419][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0xdcaf instead [ 407.036432][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xdbc8 instead [ 407.036443][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x9f3c instead [ 407.036455][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x74a5 instead [ 407.036467][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x93c1 instead [ 407.036479][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x9600 instead [ 407.036492][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0xbe1f instead [ 407.036504][T14477] jffs2: Further such events for this erase block will not be printed [ 407.045947][T14193] udevd[14193]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.051366][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x73ca instead [ 407.051383][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xbcc8 instead [ 407.051395][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x1d43 instead [ 407.051407][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x62f3 instead [ 407.051420][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x3652 instead [ 407.051432][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x3ff8 instead [ 407.051444][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x713a instead [ 407.051456][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x07a6 instead [ 407.051468][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x9bbc instead [ 407.051480][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x5a84 instead [ 407.051492][T14477] jffs2: Further such events for this erase block will not be printed [ 407.051781][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x9721 instead [ 407.051794][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x6b5d instead [ 407.051806][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xbcef instead [ 407.051818][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x40bf instead [ 407.051830][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x874c instead [ 407.051842][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x62e9 instead [ 407.051854][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x29e2 instead [ 407.051865][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x7b83 instead [ 407.051877][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0xba28 instead [ 407.051889][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xf651 instead [ 407.051900][T14477] jffs2: Further such events for this erase block will not be printed [ 407.052192][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xb2c3 instead [ 407.052204][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x4a93 instead [ 407.052216][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x81ac instead [ 407.052228][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x2bb7 instead [ 407.052241][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xa690 instead [ 407.052253][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xd695 instead [ 407.052265][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xeb5a instead [ 407.052277][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0xb7ba instead [ 407.052289][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x8c85 instead [ 407.052302][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0xec30 instead [ 407.052318][T14477] jffs2: Further such events for this erase block will not be printed [ 407.052618][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x2c37 instead [ 407.052631][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xf666 instead [ 407.052644][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x84d0 instead [ 407.052655][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x28b7 instead [ 407.052667][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0xd599 instead [ 407.052679][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x41f3 instead [ 407.071474][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x10ec instead [ 407.071490][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0xb325 instead [ 407.071503][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x7db4 instead [ 407.071515][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0xc7c5 instead [ 407.071527][T14477] jffs2: Further such events for this erase block will not be printed [ 407.071832][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x988d instead [ 407.071845][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x986f instead [ 407.071857][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x4da5 instead [ 407.071869][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xee95 instead [ 407.071882][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x4293 instead [ 407.071894][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x823a instead [ 407.071906][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf691 instead [ 407.071918][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x28ad instead [ 407.071930][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x6608 instead [ 407.071943][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x5b58 instead [ 407.071955][T14477] jffs2: Further such events for this erase block will not be printed [ 407.072245][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x83f8 instead [ 407.072258][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x83f5 instead [ 407.072270][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x1dd7 instead [ 407.072283][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xffec instead [ 407.072295][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x55e2 instead [ 407.072308][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x1e96 instead [ 407.072325][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf0a6 instead [ 407.072337][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x1c83 instead [ 407.072349][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xa8cc instead [ 407.072361][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xc57c instead [ 407.072373][T14477] jffs2: Further such events for this erase block will not be printed [ 407.082984][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x1dab instead [ 407.083003][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0xd19c instead [ 407.083018][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x5041 instead [ 407.083031][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0xd5f7 instead [ 407.083044][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x1428 instead [ 407.083057][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xc23c instead [ 407.083069][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xa19d instead [ 407.083081][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0xa212 instead [ 407.083093][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x8d86 instead [ 407.083105][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xf34c instead [ 407.083117][T14477] jffs2: Further such events for this erase block will not be printed [ 407.092029][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0xbddf instead [ 407.092044][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x71f8 instead [ 407.092057][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x6765 instead [ 407.092069][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xc291 instead [ 407.092081][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x737f instead [ 407.092094][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0xd0db instead [ 407.092106][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1da6 instead [ 407.092118][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x0e94 instead [ 407.092130][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xbf0f instead [ 407.092142][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xfad2 instead [ 407.092153][T14477] jffs2: Further such events for this erase block will not be printed [ 407.092448][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x079c instead [ 407.092461][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x21e4 instead [ 407.092473][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xb3ca instead [ 407.092485][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x9766 instead [ 407.092497][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x25e5 instead [ 407.092509][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0xc97d instead [ 407.092522][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xbb01 instead [ 407.092535][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x19c0 instead [ 407.092547][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xa370 instead [ 407.092560][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x3779 instead [ 407.092572][T14477] jffs2: Further such events for this erase block will not be printed [ 407.092871][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xbec1 instead [ 407.092885][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xfcd5 instead [ 407.092897][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x7dda instead [ 407.092909][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xd5b0 instead [ 407.092922][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x96a8 instead [ 407.092934][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x0aca instead [ 407.092946][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1310 instead [ 407.092958][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xdf08 instead [ 407.092970][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x950c instead [ 407.092982][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x3c47 instead [ 407.092994][T14477] jffs2: Further such events for this erase block will not be printed [ 407.093285][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x5473 instead [ 407.093298][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x9cfc instead [ 407.093309][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xfd68 instead [ 407.093334][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x8f89 instead [ 407.093347][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x04a6 instead [ 407.104890][T14500] No such timeout policy "syz1" [ 407.107006][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x9f04 instead [ 407.107022][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf098 instead [ 407.107035][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x8d93 instead [ 407.107047][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x3095 instead [ 407.107059][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xe8c7 instead [ 407.107071][T14477] jffs2: Further such events for this erase block will not be printed [ 407.107400][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x6351 instead [ 407.107413][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x2cc9 instead [ 407.107425][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x3fca instead [ 407.107437][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x0992 instead [ 407.107450][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0xb193 instead [ 407.107462][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x03da instead [ 407.107475][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xc049 instead [ 407.107487][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x5033 instead [ 407.107499][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0xa819 instead [ 407.107512][T14477] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xe219 instead [ 407.107523][T14477] jffs2: Further such events for this erase block will not be printed [ 407.107804][T14477] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 407.107810][T14477] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 408.677721][T12605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.689633][T12647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.780789][T14522] smpboot: CPU 1 is now offline [ 410.730141][T12646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.354376][ T31] audit: type=1400 audit(2000000112.883:221235): avc: denied { setopt } for pid=14558 comm="syz.3.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.359001][T14559] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2008'. [ 411.486757][ T31] audit: type=1326 audit(2000000113.005:221236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14558 comm="syz.3.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13a99e159 code=0x7ffc0000 [ 411.486793][ T31] audit: type=1326 audit(2000000113.005:221237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14558 comm="syz.3.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13a99e159 code=0x7ffc0000 [ 411.487019][ T31] audit: type=1326 audit(2000000113.005:221238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14558 comm="syz.3.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13a99e159 code=0x7ffc0000 [ 411.487043][ T31] audit: type=1326 audit(2000000113.005:221239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14558 comm="syz.3.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13a99e159 code=0x7ffc0000 [ 411.487240][ T31] audit: type=1326 audit(2000000113.005:221240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14558 comm="syz.3.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fb13a99e159 code=0x7ffc0000 [ 411.487263][ T31] audit: type=1326 audit(2000000113.005:221241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14558 comm="syz.3.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13a99e159 code=0x7ffc0000 [ 411.487284][ T31] audit: type=1326 audit(2000000113.005:221242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14558 comm="syz.3.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13a99e159 code=0x7ffc0000 [ 411.487451][ T31] audit: type=1326 audit(2000000113.005:221243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14558 comm="syz.3.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13a99e159 code=0x7ffc0000 [ 411.487475][ T31] audit: type=1326 audit(2000000113.005:221244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14558 comm="syz.3.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13a99e159 code=0x7ffc0000 [ 411.768307][T14566] No such timeout policy "syz1" [ 411.823645][ T5698] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 411.942324][T14584] FAULT_INJECTION: forcing a failure. [ 411.942324][T14584] name failslab, interval 1, probability 0, space 0, times 0 [ 411.942345][T14584] CPU: 0 UID: 0 PID: 14584 Comm: syz.1.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.942360][T14584] Tainted: [L]=SOFTLOCKUP [ 411.942364][T14584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 411.942371][T14584] Call Trace: [ 411.942375][T14584] [ 411.942380][T14584] dump_stack_lvl+0x100/0x190 [ 411.942399][T14584] should_fail_ex.cold+0x5/0xa [ 411.942416][T14584] should_failslab+0xc2/0x120 [ 411.942431][T14584] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 411.942444][T14584] ? __alloc_skb+0x5b7/0x710 [ 411.942456][T14584] ? __alloc_skb+0x140/0x710 [ 411.942471][T14584] __alloc_skb+0x140/0x710 [ 411.942482][T14584] ? __alloc_skb+0x5b7/0x710 [ 411.942494][T14584] ? __pfx___alloc_skb+0x10/0x10 [ 411.942511][T14584] netlink_alloc_large_skb+0x69/0x150 [ 411.942525][T14584] netlink_sendmsg+0x680/0xda0 [ 411.942539][T14584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.942553][T14584] ? selinux_socket_sendmsg+0x198/0x2f0 [ 411.942568][T14584] ____sys_sendmsg+0xa4d/0xbe0 [ 411.942583][T14584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.942597][T14584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.942616][T14584] ? lock_acquire+0x1d1/0x380 [ 411.942629][T14584] ? get_pid_task+0x2a/0x250 [ 411.942646][T14584] ___sys_sendmsg+0x190/0x1e0 [ 411.942664][T14584] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.942681][T14584] ? get_pid_task+0x106/0x250 [ 411.942701][T14584] ? find_held_lock+0x2b/0x80 [ 411.942725][T14584] __sys_sendmsg+0x160/0x210 [ 411.942739][T14584] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.942760][T14584] do_syscall_64+0x123/0x790 [ 411.942782][T14584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.942794][T14584] RIP: 0033:0x7f5d8f79e159 [ 411.942804][T14584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.942815][T14584] RSP: 002b:00007f5d90614028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.942827][T14584] RAX: ffffffffffffffda RBX: 00007f5d8fa25fa0 RCX: 00007f5d8f79e159 [ 411.942834][T14584] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 411.942841][T14584] RBP: 00007f5d90614090 R08: 0000000000000000 R09: 0000000000000000 [ 411.942848][T14584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.942854][T14584] R13: 00007f5d8fa26038 R14: 00007f5d8fa25fa0 R15: 00007ffde59e0608 [ 411.942869][T14584] [ 411.947983][T14577] gadgetfs: bound to dummy_udc driver [ 411.965101][ T5698] usb 4-1: device descriptor read/64, error -71 [ 412.196444][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.205120][T14215] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 412.205304][ C0] gadgetfs: connected [ 412.214824][T14215] gadgetfs: disconnected [ 412.223937][ T5698] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 412.336072][T14573] gadgetfs: suspended from state 2 [ 412.368331][ T5698] usb 4-1: device descriptor read/64, error -71 [ 412.486853][ T5698] usb usb4-port1: attempt power cycle [ 412.571832][T14215] usb 1-1: device not accepting address 19, error -71 [ 412.614830][ T5342] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 412.774936][T12646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.776094][ T5342] usb 2-1: Using ep0 maxpacket: 8 [ 412.776521][ T5342] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 412.777288][ T5342] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.777305][ T5342] usb 2-1: config 0 interface 0 has no altsetting 0 [ 412.777321][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.781897][ T5342] usb 2-1: config 0 descriptor?? [ 412.849366][ T5698] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 412.871466][ T5698] usb 4-1: device descriptor read/8, error -71 [ 413.127241][ T5698] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 413.149506][ T5698] usb 4-1: device descriptor read/8, error -71 [ 413.216904][T14592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.217165][T14592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.241350][ T5342] hid_parser_main: 4007 callbacks suppressed [ 413.241362][ T5342] lenovo 0003:17EF:6067.0003: unknown main item tag 0x0 [ 413.241376][ T5342] lenovo 0003:17EF:6067.0003: unknown main item tag 0x0 [ 413.241388][ T5342] lenovo 0003:17EF:6067.0003: item fetching failed at offset 2/41 [ 413.242597][ T5342] lenovo 0003:17EF:6067.0003: hid_parse failed [ 413.242629][ T5342] lenovo 0003:17EF:6067.0003: probe with driver lenovo failed with error -22 [ 413.275539][ T5698] usb usb4-port1: unable to enumerate USB device [ 413.440492][ T5342] usb 2-1: USB disconnect, device number 19 [ 413.642633][T14635] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2019'. [ 413.642651][T14635] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2019'. [ 414.788626][T14645] binder: 14644:14645 ioctl c0306201 200000000680 returned -14 [ 414.804725][T14653] FAULT_INJECTION: forcing a failure. [ 414.804725][T14653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.804745][T14653] CPU: 0 UID: 0 PID: 14653 Comm: syz.1.2023 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.804760][T14653] Tainted: [L]=SOFTLOCKUP [ 414.804765][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 414.804771][T14653] Call Trace: [ 414.804775][T14653] [ 414.804786][T14653] dump_stack_lvl+0x100/0x190 [ 414.804806][T14653] should_fail_ex.cold+0x5/0xa [ 414.804822][T14653] _copy_from_user+0x2e/0xd0 [ 414.804834][T14653] kstrtouint_from_user+0xd6/0x1d0 [ 414.804850][T14653] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 414.804868][T14653] ? lock_acquire+0x1d1/0x380 [ 414.804883][T14653] proc_fail_nth_write+0x83/0x220 [ 414.804898][T14653] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 414.804916][T14653] vfs_write+0x2aa/0x1050 [ 414.804928][T14653] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 414.804942][T14653] ? lock_acquire+0x1d1/0x380 [ 414.804953][T14653] ? __fget_files+0x34/0x3d0 [ 414.804967][T14653] ? __pfx_vfs_write+0x10/0x10 [ 414.804977][T14653] ? find_held_lock+0x2b/0x80 [ 414.804993][T14653] ? __fget_files+0x215/0x3d0 [ 414.805009][T14653] ? __fget_files+0x21f/0x3d0 [ 414.805027][T14653] ksys_write+0x12a/0x250 [ 414.805038][T14653] ? __pfx_ksys_write+0x10/0x10 [ 414.805053][T14653] do_syscall_64+0x123/0x790 [ 414.805070][T14653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.805082][T14653] RIP: 0033:0x7f5d8f75e98e [ 414.805092][T14653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 414.805103][T14653] RSP: 002b:00007f5d90613fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 414.805116][T14653] RAX: ffffffffffffffda RBX: 00007f5d906146c0 RCX: 00007f5d8f75e98e [ 414.805123][T14653] RDX: 0000000000000001 RSI: 00007f5d906140a0 RDI: 0000000000000003 [ 414.805130][T14653] RBP: 00007f5d90614090 R08: 0000000000000000 R09: 0000000000000000 [ 414.805136][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.805143][T14653] R13: 00007f5d8fa26038 R14: 00007f5d8fa25fa0 R15: 00007ffde59e0608 [ 414.805157][T14653] [ 414.832040][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.074476][T14654] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2022'. [ 415.117113][T14657] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.118617][T14657] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.155465][T14657] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.155515][T14657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.155654][T14657] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.155698][T14657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.155992][T14657] bridge0: entered promiscuous mode [ 415.156004][T14657] bridge0: entered allmulticast mode [ 415.206159][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 415.816417][T14687] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2032'. [ 415.816436][T14687] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2032'. [ 416.025572][ T5698] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 416.501854][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 416.826384][ T5698] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 416.951587][ T4002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.998593][ T5698] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 416.998609][ T5698] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 416.998621][ T5698] usb 5-1: config 0 has no interface number 0 [ 416.998640][ T5698] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 14129, setting to 64 [ 416.998661][ T5698] usb 5-1: config 0 interface 200 has no altsetting 0 [ 417.065581][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.065597][ T5698] usb 5-1: Product: syz [ 417.065605][ T5698] usb 5-1: Manufacturer: syz [ 417.065614][ T5698] usb 5-1: SerialNumber: syz [ 417.282645][ T5698] usb 5-1: config 0 descriptor?? [ 417.805245][T14679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.805479][T14679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.883703][ T5698] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input24 [ 417.910570][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 417.910581][ T31] audit: type=1400 audit(2000000119.011:221277): avc: denied { mount } for pid=14698 comm="syz.3.2033" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 417.915811][ T31] audit: type=1400 audit(2000000119.011:221278): avc: denied { read } for pid=14705 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.917165][ T31] audit: type=1400 audit(2000000119.029:221279): avc: denied { read open } for pid=14705 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.917194][ T31] audit: type=1400 audit(2000000119.029:221280): avc: denied { getattr } for pid=14705 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.039488][ T5698] usb 5-1: USB disconnect, device number 14 [ 418.052387][T14703] FAULT_INJECTION: forcing a failure. [ 418.052387][T14703] name failslab, interval 1, probability 0, space 0, times 0 [ 418.052408][T14703] CPU: 0 UID: 0 PID: 14703 Comm: syz.3.2033 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.052423][T14703] Tainted: [L]=SOFTLOCKUP [ 418.052427][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 418.052434][T14703] Call Trace: [ 418.052438][T14703] [ 418.052443][T14703] dump_stack_lvl+0x100/0x190 [ 418.052463][T14703] should_fail_ex.cold+0x5/0xa [ 418.052480][T14703] should_failslab+0xc2/0x120 [ 418.052495][T14703] __kmalloc_noprof+0xfc/0x840 [ 418.052507][T14703] ? __find_set_type_get+0x78/0x440 [ 418.052518][T14703] ? hash_ipportip_create+0x382/0x1280 [ 418.052536][T14703] hash_ipportip_create+0x382/0x1280 [ 418.052554][T14703] ? __pfx_hash_ipportip_create+0x10/0x10 [ 418.052571][T14703] ip_set_create+0x6c4/0x1510 [ 418.052584][T14703] ? __pfx_ip_set_create+0x10/0x10 [ 418.052604][T14703] ? find_held_lock+0x2b/0x80 [ 418.052624][T14703] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 418.052644][T14703] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 418.052661][T14703] ? __lock_acquire+0x5c0/0x1f40 [ 418.052685][T14703] ? avc_has_perm_noaudit+0x145/0x3b0 [ 418.052704][T14703] netlink_rcv_skb+0x159/0x420 [ 418.052717][T14703] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 418.052733][T14703] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.052759][T14703] ? ns_capable+0xd2/0xf0 [ 418.052772][T14703] nfnetlink_rcv+0x1b3/0x440 [ 418.052787][T14703] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 418.052802][T14703] ? netlink_deliver_tap+0x1ae/0xcc0 [ 418.052816][T14703] netlink_unicast+0x585/0x850 [ 418.052830][T14703] ? __pfx_netlink_unicast+0x10/0x10 [ 418.052847][T14703] netlink_sendmsg+0x8b0/0xda0 [ 418.052861][T14703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.052875][T14703] ? selinux_socket_sendmsg+0x198/0x2f0 [ 418.052889][T14703] ____sys_sendmsg+0xa4d/0xbe0 [ 418.052904][T14703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.052918][T14703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.052938][T14703] ? lock_acquire+0x1d1/0x380 [ 418.052949][T14703] ? get_pid_task+0x2a/0x250 [ 418.052966][T14703] ___sys_sendmsg+0x190/0x1e0 [ 418.052984][T14703] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.053001][T14703] ? get_pid_task+0x106/0x250 [ 418.053021][T14703] ? find_held_lock+0x2b/0x80 [ 418.053045][T14703] __sys_sendmsg+0x160/0x210 [ 418.053059][T14703] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.053080][T14703] do_syscall_64+0x123/0x790 [ 418.053097][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.053108][T14703] RIP: 0033:0x7fb13a99e159 [ 418.053118][T14703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.053129][T14703] RSP: 002b:00007fb13b8aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.053140][T14703] RAX: ffffffffffffffda RBX: 00007fb13ac25fa0 RCX: 00007fb13a99e159 [ 418.053148][T14703] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 418.053155][T14703] RBP: 00007fb13b8aa090 R08: 0000000000000000 R09: 0000000000000000 [ 418.053161][T14703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.053168][T14703] R13: 00007fb13ac26038 R14: 00007fb13ac25fa0 R15: 00007ffeb04c4ab8 [ 418.053183][T14703] [ 418.248549][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.474686][ T31] audit: type=1400 audit(2000000119.544:221281): avc: denied { write } for pid=14709 comm="syz.0.2034" name="cluster" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.538198][ T31] audit: type=1400 audit(2000000119.609:221282): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 418.580641][ T31] audit: type=1400 audit(2000000119.647:221283): avc: denied { setattr } for pid=14709 comm="syz.0.2034" name="dead_threshold" dev="configfs" ino=31922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 418.626732][ T31] audit: type=1400 audit(2000000119.684:221284): avc: denied { write } for pid=14709 comm="syz.0.2034" name="dead_threshold" dev="configfs" ino=31933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 418.626770][ T31] audit: type=1400 audit(2000000119.684:221285): avc: denied { open } for pid=14709 comm="syz.0.2034" path="/390/config/cluster/ocfs2/heartbeat/dead_threshold" dev="configfs" ino=31933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 418.804112][ T31] audit: type=1400 audit(2000000119.853:221286): avc: denied { accept } for pid=14737 comm="syz.1.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.881563][T14739] netlink: 'syz.3.2036': attribute type 2 has an invalid length. [ 418.932900][T12605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.933991][T12605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 419.039461][ T5698] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 419.063885][ T5342] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 419.200888][ T5698] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 419.215309][ T5698] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 419.215325][ T5698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.215335][ T5698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 419.215356][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.216462][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 419.216475][ T5698] usb 5-1: Product: syz [ 419.216483][ T5698] usb 5-1: Manufacturer: syz [ 419.260994][ T5342] usb 2-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.00 [ 419.270021][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.276571][ T5342] usb 2-1: config 0 descriptor?? [ 419.313374][ T5698] cdc_wdm 5-1:1.0: skipping garbage [ 419.313384][ T5698] cdc_wdm 5-1:1.0: skipping garbage [ 419.340642][ T5698] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 419.340673][ T5698] cdc_wdm 5-1:1.0: Unknown control protocol [ 419.533673][ T5698] usb 5-1: USB disconnect, device number 15 [ 419.575244][T14776] netlink: 'syz.3.2041': attribute type 2 has an invalid length. [ 419.752778][ T5342] input: HID 04e7:0050 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04E7:0050.0004/input/input25 [ 419.778593][T14793] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 420.433241][ T4123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.489345][T14802] FAULT_INJECTION: forcing a failure. [ 420.489345][T14802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.489376][T14802] CPU: 0 UID: 0 PID: 14802 Comm: syz.3.2043 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.489391][T14802] Tainted: [L]=SOFTLOCKUP [ 420.489395][T14802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 420.489402][T14802] Call Trace: [ 420.489406][T14802] [ 420.489411][T14802] dump_stack_lvl+0x100/0x190 [ 420.489431][T14802] should_fail_ex.cold+0x5/0xa [ 420.489445][T14802] ? prepare_alloc_pages+0x16d/0x5b0 [ 420.489462][T14802] should_fail_alloc_page+0xeb/0x140 [ 420.489477][T14802] prepare_alloc_pages+0x1f0/0x5b0 [ 420.489496][T14802] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 420.489510][T14802] ? cred_has_capability.isra.0+0x186/0x300 [ 420.489524][T14802] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 420.489539][T14802] ? trace_kmem_cache_alloc+0xdd/0x100 [ 420.489556][T14802] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 420.489568][T14802] ? cap_capable+0x107/0x430 [ 420.489584][T14802] ? find_held_lock+0x2b/0x80 [ 420.489599][T14802] ? dquot_add_space+0x395/0xde0 [ 420.489616][T14802] ? dquot_add_space+0x395/0xde0 [ 420.489631][T14802] ? security_capable+0x80/0x260 [ 420.489648][T14802] ? do_raw_spin_unlock+0x145/0x1e0 [ 420.489664][T14802] ? _raw_spin_unlock+0x28/0x50 [ 420.489677][T14802] ? dquot_add_space+0x395/0xde0 [ 420.489692][T14802] ? find_held_lock+0x2b/0x80 [ 420.489712][T14802] ? __lock_acquire+0x5c0/0x1f40 [ 420.489724][T14802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 420.489748][T14802] ? policy_nodemask+0xed/0x4f0 [ 420.489764][T14802] alloc_pages_mpol+0x201/0x550 [ 420.489780][T14802] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 420.489795][T14802] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 420.489814][T14802] folio_alloc_mpol_noprof+0x36/0x260 [ 420.489832][T14802] shmem_alloc_folio+0x135/0x160 [ 420.489847][T14802] shmem_alloc_and_add_folio+0x371/0xd40 [ 420.489867][T14802] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 420.489885][T14802] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 420.489902][T14802] ? __lock_acquire+0x5c0/0x1f40 [ 420.489920][T14802] shmem_get_folio_gfp+0x75b/0x1980 [ 420.489940][T14802] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 420.489959][T14802] ? __pfx___might_resched+0x10/0x10 [ 420.489970][T14802] ? noop_dirty_folio+0xfd/0x160 [ 420.489988][T14802] shmem_fallocate+0x6f7/0x1090 [ 420.490011][T14802] ? __pfx_shmem_fallocate+0x10/0x10 [ 420.490027][T14802] ? get_pid_task+0x106/0x250 [ 420.490042][T14802] ? proc_fail_nth_write+0x9f/0x220 [ 420.490058][T14802] ? __lock_acquire+0x5c0/0x1f40 [ 420.490071][T14802] ? __lock_acquire+0x5c0/0x1f40 [ 420.490083][T14802] ? ksys_write+0x190/0x250 [ 420.490097][T14802] ? lock_acquire+0x1d1/0x380 [ 420.490108][T14802] ? __x64_sys_fallocate+0xd5/0x140 [ 420.490125][T14802] ? __pfx_shmem_fallocate+0x10/0x10 [ 420.490142][T14802] vfs_fallocate+0x576/0x10a0 [ 420.490155][T14802] ? __pfx_vfs_fallocate+0x10/0x10 [ 420.490171][T14802] __x64_sys_fallocate+0xd5/0x140 [ 420.490185][T14802] do_syscall_64+0x123/0x790 [ 420.490201][T14802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.490213][T14802] RIP: 0033:0x7fb13a99e159 [ 420.490222][T14802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.490233][T14802] RSP: 002b:00007fb13b8aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 420.490244][T14802] RAX: ffffffffffffffda RBX: 00007fb13ac25fa0 RCX: 00007fb13a99e159 [ 420.490251][T14802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 420.490258][T14802] RBP: 00007fb13b8aa090 R08: 0000000000000000 R09: 0000000000000000 [ 420.490264][T14802] R10: 00000000001001ed R11: 0000000000000246 R12: 0000000000000001 [ 420.490271][T14802] R13: 00007fb13ac26038 R14: 00007fb13ac25fa0 R15: 00007ffeb04c4ab8 [ 420.490285][T14802] [ 420.645946][T14738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.646162][T14738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.947323][ T5342] hid-accutouch 0003:04E7:0050.0004: input,hidraw0: USB HID v0.00 Joystick [HID 04e7:0050] on usb-dummy_hcd.1-1/input0 [ 420.984794][ T5698] usb 2-1: USB disconnect, device number 20 [ 421.005609][ T191] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 421.145915][T14816] fido_id[14816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 421.172180][ T191] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 421.173972][T14823] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2044'. [ 421.176076][ T191] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 421.176091][ T191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.176101][ T191] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 421.176132][ T191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.236806][ T191] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 421.236820][ T191] usb 5-1: Product: syz [ 421.236828][ T191] usb 5-1: Manufacturer: syz [ 421.265943][ T191] cdc_wdm 5-1:1.0: skipping garbage [ 421.265954][ T191] cdc_wdm 5-1:1.0: skipping garbage [ 421.284527][ T191] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 421.284539][ T191] cdc_wdm 5-1:1.0: Unknown control protocol [ 422.387875][T14845] FAULT_INJECTION: forcing a failure. [ 422.387875][T14845] name failslab, interval 1, probability 0, space 0, times 0 [ 422.387897][T14845] CPU: 0 UID: 0 PID: 14845 Comm: syz.2.2047 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.387913][T14845] Tainted: [L]=SOFTLOCKUP [ 422.387917][T14845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 422.387924][T14845] Call Trace: [ 422.387928][T14845] [ 422.387933][T14845] dump_stack_lvl+0x100/0x190 [ 422.387953][T14845] should_fail_ex.cold+0x5/0xa [ 422.387969][T14845] should_failslab+0xc2/0x120 [ 422.387984][T14845] kmem_cache_alloc_noprof+0x92/0x6a0 [ 422.387997][T14845] ? do_getname+0x35/0x390 [ 422.388016][T14845] do_getname+0x35/0x390 [ 422.388033][T14845] __x64_sys_linkat+0xd1/0x150 [ 422.388051][T14845] do_syscall_64+0x123/0x790 [ 422.388067][T14845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.388079][T14845] RIP: 0033:0x7fe72bd9e159 [ 422.388089][T14845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.388100][T14845] RSP: 002b:00007fe72cc91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 422.388111][T14845] RAX: ffffffffffffffda RBX: 00007fe72c025fa0 RCX: 00007fe72bd9e159 [ 422.388118][T14845] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 422.388126][T14845] RBP: 00007fe72cc91090 R08: 0000000000001000 R09: 0000000000000000 [ 422.388133][T14845] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 422.388139][T14845] R13: 00007fe72c026038 R14: 00007fe72c025fa0 R15: 00007fffafaad028 [ 422.388153][T14845] [ 423.680249][ T4123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.744619][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.744883][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.773076][ T5698] usb 5-1: USB disconnect, device number 16 [ 425.252694][ T4132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.469829][T14871] FAULT_INJECTION: forcing a failure. [ 425.469829][T14871] name failslab, interval 1, probability 0, space 0, times 0 [ 425.469851][T14871] CPU: 0 UID: 0 PID: 14871 Comm: syz.2.2050 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.469866][T14871] Tainted: [L]=SOFTLOCKUP [ 425.469871][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 425.469877][T14871] Call Trace: [ 425.469882][T14871] [ 425.469886][T14871] dump_stack_lvl+0x100/0x190 [ 425.469908][T14871] should_fail_ex.cold+0x5/0xa [ 425.469924][T14871] should_failslab+0xc2/0x120 [ 425.469940][T14871] __kmalloc_noprof+0xfc/0x840 [ 425.469951][T14871] ? rcu_is_watching+0x13/0xc0 [ 425.469967][T14871] ? tomoyo_realpath_from_path+0xb6/0x690 [ 425.469984][T14871] tomoyo_realpath_from_path+0xb6/0x690 [ 425.470001][T14871] tomoyo_path_number_perm+0x23c/0x580 [ 425.470012][T14871] ? tomoyo_path_number_perm+0x22e/0x580 [ 425.470024][T14871] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 425.470041][T14871] ? __lock_acquire+0x5c0/0x1f40 [ 425.470060][T14871] ? __fget_files+0x34/0x3d0 [ 425.470074][T14871] ? find_held_lock+0x2b/0x80 [ 425.470089][T14871] ? hook_file_ioctl_common+0x140/0x440 [ 425.470107][T14871] ? __fget_files+0x21f/0x3d0 [ 425.470123][T14871] security_file_ioctl+0xd3/0x230 [ 425.470136][T14871] __x64_sys_ioctl+0xb7/0x210 [ 425.470149][T14871] do_syscall_64+0x123/0x790 [ 425.470166][T14871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.470178][T14871] RIP: 0033:0x7fe72bd9e159 [ 425.470187][T14871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.470198][T14871] RSP: 002b:00007fe72cc91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.470209][T14871] RAX: ffffffffffffffda RBX: 00007fe72c025fa0 RCX: 00007fe72bd9e159 [ 425.470216][T14871] RDX: 0000000000000000 RSI: 00000000c0185879 RDI: 0000000000000003 [ 425.470223][T14871] RBP: 00007fe72cc91090 R08: 0000000000000000 R09: 0000000000000000 [ 425.470229][T14871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.470235][T14871] R13: 00007fe72c026038 R14: 00007fe72c025fa0 R15: 00007fffafaad028 [ 425.470250][T14871] [ 425.487915][T14871] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.724124][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 425.724134][ T31] audit: type=1400 audit(2000000126.326:221301): avc: denied { write } for pid=14867 comm="syz.4.2051" name="strings" dev="configfs" ino=28791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.770346][ T31] audit: type=1400 audit(2000000126.364:221302): avc: denied { write } for pid=14867 comm="syz.4.2051" name="configs" dev="configfs" ino=28790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.772428][ T31] audit: type=1400 audit(2000000126.364:221303): avc: denied { write } for pid=14867 comm="syz.4.2051" name="functions" dev="configfs" ino=28789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.797077][T12605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.840795][T14872] tipc: Started in network mode [ 425.840810][T14872] tipc: Node identity 96fe5bb4f401, cluster identity 4711 [ 425.840929][T14872] tipc: Enabled bearer , priority 0 [ 425.842842][T14872] syzkaller0: entered promiscuous mode [ 425.842853][T14872] syzkaller0: entered allmulticast mode [ 425.920622][ T31] audit: type=1400 audit(2000000126.504:221304): avc: denied { write } for pid=14867 comm="syz.4.2051" name="c.1" dev="configfs" ino=32115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.920652][ T31] audit: type=1400 audit(2000000126.504:221305): avc: denied { create } for pid=14867 comm="syz.4.2051" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 425.974942][T14878] FAULT_INJECTION: forcing a failure. [ 425.974942][T14878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.974961][T14878] CPU: 0 UID: 0 PID: 14878 Comm: syz.0.2049 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.974977][T14878] Tainted: [L]=SOFTLOCKUP [ 425.974981][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 425.974988][T14878] Call Trace: [ 425.974992][T14878] [ 425.974997][T14878] dump_stack_lvl+0x100/0x190 [ 425.975016][T14878] should_fail_ex.cold+0x5/0xa [ 425.975032][T14878] _copy_to_user+0x32/0xd0 [ 425.975046][T14878] simple_read_from_buffer+0xcb/0x170 [ 425.975061][T14878] proc_fail_nth_read+0x1af/0x230 [ 425.975077][T14878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 425.975091][T14878] ? rw_verify_area+0xce/0x6d0 [ 425.975108][T14878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 425.975122][T14878] vfs_read+0x1e4/0xb40 [ 425.975133][T14878] ? lock_acquire+0x1d1/0x380 [ 425.975145][T14878] ? __fget_files+0x34/0x3d0 [ 425.975158][T14878] ? __pfx_vfs_read+0x10/0x10 [ 425.975168][T14878] ? find_held_lock+0x2b/0x80 [ 425.975184][T14878] ? __fget_files+0x215/0x3d0 [ 425.975200][T14878] ? __fget_files+0x21f/0x3d0 [ 425.975217][T14878] ksys_read+0x12a/0x250 [ 425.975228][T14878] ? __pfx_ksys_read+0x10/0x10 [ 425.975243][T14878] do_syscall_64+0x123/0x790 [ 425.975261][T14878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.975273][T14878] RIP: 0033:0x7f8ea315e98e [ 425.975283][T14878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 425.975294][T14878] RSP: 002b:00007f8ea4035fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.975305][T14878] RAX: ffffffffffffffda RBX: 00007f8ea40366c0 RCX: 00007f8ea315e98e [ 425.975312][T14878] RDX: 000000000000000f RSI: 00007f8ea40360a0 RDI: 0000000000000004 [ 425.975319][T14878] RBP: 00007f8ea4036090 R08: 0000000000000000 R09: 0000000000000000 [ 425.975326][T14878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.975332][T14878] R13: 00007f8ea3426038 R14: 00007f8ea3425fa0 R15: 00007ffc11b1dfb8 [ 425.975346][T14878] [ 426.208291][ T31] audit: type=1400 audit(2000000126.775:221306): avc: denied { write } for pid=14867 comm="syz.4.2051" name="c.1" dev="configfs" ino=32115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 426.211509][T14868] Config c/1 of g1 needs at least one function. [ 426.211645][T14868] udc dummy_udc.0: failed to start g1: -22 [ 426.211657][T14868] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 426.269701][T14872] tipc: Resetting bearer [ 426.302530][T14870] tipc: Resetting bearer [ 426.337011][T14868] UDC core: g1: couldn't find an available UDC or it's busy [ 426.362264][T14870] tipc: Disabling bearer [ 426.476311][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.226159][ T31] audit: type=1400 audit(2000000127.720:221307): avc: denied { read } for pid=14895 comm="syz.4.2055" name="nullb" dev="configfs" ino=3397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 427.250564][ T31] audit: type=1400 audit(2000000127.758:221308): avc: denied { read open } for pid=14895 comm="syz.4.2055" path="/388/my_configfs/nullb" dev="configfs" ino=3397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 427.285208][ T31] audit: type=1400 audit(2000000127.786:221309): avc: denied { write } for pid=14895 comm="syz.4.2055" name="nullb" dev="configfs" ino=3397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 427.286487][T14899] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2056'. [ 427.579190][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 427.666329][T14901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2046'. [ 427.718025][ T191] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 427.743783][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 427.744526][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.744550][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.745824][ T9] usb 5-1: config 0 descriptor?? [ 427.785086][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 427.882804][ T191] usb 2-1: unable to get BOS descriptor or descriptor too short [ 427.883194][ T191] usb 2-1: not running at top speed; connect to a high speed hub [ 427.883209][ T191] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 427.883950][ T191] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 427.883964][ T191] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 427.883982][ T191] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 427.883993][ T191] usb 2-1: config 14 has no interface number 0 [ 427.884002][ T191] usb 2-1: config 14 has no interface number 1 [ 427.884045][ T191] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 427.884059][ T191] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 427.884071][ T191] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 427.884084][ T191] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 427.884097][ T191] usb 2-1: config 14 interface 57 has no altsetting 0 [ 427.884106][ T191] usb 2-1: config 14 interface 228 has no altsetting 0 [ 427.885602][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.885614][ T191] usb 2-1: Product: syz [ 427.885640][ T191] usb 2-1: Manufacturer: syz [ 427.885649][ T191] usb 2-1: SerialNumber: syz [ 427.925324][ T5342] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 428.093515][ T5342] usb 3-1: Using ep0 maxpacket: 32 [ 428.093937][ T5342] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 428.122483][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.122498][ T5342] usb 3-1: Product: syz [ 428.122506][ T5342] usb 3-1: Manufacturer: syz [ 428.122515][ T5342] usb 3-1: SerialNumber: syz [ 428.124075][ T5342] usb 3-1: config 0 descriptor?? [ 428.274557][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 428.275033][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 428.275452][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 428.502179][ T31] audit: type=1400 audit(2000000128.927:221310): avc: denied { write } for pid=14895 comm="syz.4.2055" name="nullb" dev="configfs" ino=3397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 428.555563][T14896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2055'. [ 428.573064][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 428.580762][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 428.582204][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 428.598759][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 428.607570][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 428.607914][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 428.609301][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 428.609565][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 428.610300][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 428.610566][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 428.613389][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 428.613636][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 428.686282][ T9] pwc: Registered as video103. [ 428.704385][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 428.727710][ T9] usb 5-1: USB disconnect, device number 17 [ 428.792408][ T191] legousbtower 2-1:14.57: interrupt endpoints not found [ 428.813615][ T191] legousbtower 2-1:14.228: get version request failed: -71 [ 428.813685][ T191] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 428.849242][ T191] usb 2-1: USB disconnect, device number 21 [ 428.850225][ T5342] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 428.850243][ T5342] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 428.850280][ T5342] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 428.979005][ T5342] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 429.101680][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.101875][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.107388][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.137890][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.152651][ T191] usb 3-1: USB disconnect, device number 23 [ 429.682161][T14975] loop9: detected capacity change from 0 to 2640 [ 429.682417][T14975] buffer_io_error: 16 callbacks suppressed [ 429.682426][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682444][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682458][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682473][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682488][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682509][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682529][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682544][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682553][T14975] ldm_validate_partition_table(): Disk read failed. [ 429.682567][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682581][T14975] Buffer I/O error on dev loop9, logical block 0, async page read [ 429.682604][T14975] Dev loop9: unable to read RDB block 0 [ 429.682669][T14975] loop9: unable to read partition table [ 429.682750][T14975] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 429.887086][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.070787][T14991] FAULT_INJECTION: forcing a failure. [ 430.070787][T14991] name failslab, interval 1, probability 0, space 0, times 0 [ 430.070811][T14991] CPU: 0 UID: 0 PID: 14991 Comm: syz.4.2064 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.070826][T14991] Tainted: [L]=SOFTLOCKUP [ 430.070830][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 430.070839][T14991] Call Trace: [ 430.070843][T14991] [ 430.070854][T14991] dump_stack_lvl+0x100/0x190 [ 430.070873][T14991] should_fail_ex.cold+0x5/0xa [ 430.070889][T14991] should_failslab+0xc2/0x120 [ 430.070905][T14991] __kmalloc_noprof+0xfc/0x840 [ 430.070917][T14991] ? sk_prot_alloc+0x10b/0x2a0 [ 430.070936][T14991] sk_prot_alloc+0x10b/0x2a0 [ 430.070953][T14991] sk_alloc+0x36/0xe80 [ 430.070966][T14991] bpf_prog_test_run_skb+0x4d2/0x3530 [ 430.070980][T14991] ? lock_acquire+0x1d1/0x380 [ 430.070992][T14991] ? __fget_files+0x34/0x3d0 [ 430.071006][T14991] ? find_held_lock+0x2b/0x80 [ 430.071022][T14991] ? __fget_files+0x1d1/0x3d0 [ 430.071039][T14991] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 430.071053][T14991] ? fput+0x7c/0x100 [ 430.071068][T14991] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 430.071080][T14991] __sys_bpf+0x2265/0x4a30 [ 430.071095][T14991] ? __pfx___sys_bpf+0x10/0x10 [ 430.071106][T14991] ? find_held_lock+0x2b/0x80 [ 430.071121][T14991] ? get_pid_task+0xfc/0x250 [ 430.071136][T14991] ? get_pid_task+0xfc/0x250 [ 430.071154][T14991] ? find_held_lock+0x2b/0x80 [ 430.071173][T14991] ? rcu_read_lock_any_held+0x6a/0x90 [ 430.071189][T14991] ? find_held_lock+0x2b/0x80 [ 430.071203][T14991] ? ksys_write+0x190/0x250 [ 430.071215][T14991] ? ksys_write+0x190/0x250 [ 430.071225][T14991] ? lock_acquire+0x1d1/0x380 [ 430.071246][T14991] ? fput+0x7c/0x100 [ 430.071259][T14991] ? ksys_write+0x1ac/0x250 [ 430.071272][T14991] ? __x64_sys_bpf+0xce/0x140 [ 430.071282][T14991] __x64_sys_bpf+0xce/0x140 [ 430.071294][T14991] ? do_syscall_64+0xae/0x790 [ 430.071310][T14991] do_syscall_64+0x123/0x790 [ 430.071326][T14991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.071338][T14991] RIP: 0033:0x7fc9e619e159 [ 430.071347][T14991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.071358][T14991] RSP: 002b:00007fc9e43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.071369][T14991] RAX: ffffffffffffffda RBX: 00007fc9e6425fa0 RCX: 00007fc9e619e159 [ 430.071377][T14991] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 430.071383][T14991] RBP: 00007fc9e43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.071390][T14991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.071396][T14991] R13: 00007fc9e6426038 R14: 00007fc9e6425fa0 R15: 00007ffed85d2c08 [ 430.071410][T14991] [ 430.457074][T14994] FAULT_INJECTION: forcing a failure. [ 430.457074][T14994] name failslab, interval 1, probability 0, space 0, times 0 [ 430.457096][T14994] CPU: 0 UID: 0 PID: 14994 Comm: syz.1.2065 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.457111][T14994] Tainted: [L]=SOFTLOCKUP [ 430.457116][T14994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 430.457122][T14994] Call Trace: [ 430.457126][T14994] [ 430.457131][T14994] dump_stack_lvl+0x100/0x190 [ 430.457151][T14994] should_fail_ex.cold+0x5/0xa [ 430.457167][T14994] should_failslab+0xc2/0x120 [ 430.457182][T14994] kmem_cache_alloc_noprof+0x92/0x6a0 [ 430.457193][T14994] ? __pud_alloc+0x4f6/0x690 [ 430.457207][T14994] ? __pmd_alloc+0xbf/0x950 [ 430.457223][T14994] __pmd_alloc+0xbf/0x950 [ 430.457235][T14994] ? __pud_alloc+0x4fb/0x690 [ 430.457250][T14994] __handle_mm_fault+0xa9d/0x2f60 [ 430.457268][T14994] ? __pfx___handle_mm_fault+0x10/0x10 [ 430.457283][T14994] ? __pfx_mt_find+0x10/0x10 [ 430.457307][T14994] ? find_vma+0xbf/0x140 [ 430.457319][T14994] ? __pfx_find_vma+0x10/0x10 [ 430.457332][T14994] handle_mm_fault+0x363/0xa20 [ 430.457350][T14994] do_user_addr_fault+0x745/0x12f0 [ 430.457370][T14994] exc_page_fault+0x6f/0xd0 [ 430.457385][T14994] asm_exc_page_fault+0x26/0x30 [ 430.457396][T14994] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 430.457408][T14994] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 430.457419][T14994] RSP: 0018:ffffc90004f97d80 EFLAGS: 00050216 [ 430.457429][T14994] RAX: 0000000000000001 RBX: 0000200000000040 RCX: 0000000000000011 [ 430.457436][T14994] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc90004f97df8 [ 430.457442][T14994] RBP: 0000000000000011 R08: 0000000000000001 R09: fffff520009f2fc1 [ 430.457449][T14994] R10: ffffc90004f97e08 R11: 0000000000000000 R12: 0000000000000000 [ 430.457456][T14994] R13: ffffc90004f97df8 R14: 0000000000000011 R15: 0000000000000000 [ 430.457470][T14994] _copy_from_user+0x98/0xd0 [ 430.457482][T14994] move_addr_to_kernel+0x65/0x170 [ 430.457500][T14994] __sys_connect+0xb5/0x170 [ 430.457512][T14994] ? __pfx___sys_connect+0x10/0x10 [ 430.457523][T14994] ? __fget_files+0x21f/0x3d0 [ 430.457541][T14994] ? __pfx_ksys_write+0x10/0x10 [ 430.457556][T14994] __x64_sys_connect+0x72/0xb0 [ 430.457567][T14994] ? lockdep_hardirqs_on+0x7d/0x110 [ 430.457582][T14994] do_syscall_64+0x123/0x790 [ 430.457598][T14994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.457609][T14994] RIP: 0033:0x7f5d8f79e159 [ 430.457618][T14994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.457628][T14994] RSP: 002b:00007f5d90614028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 430.457639][T14994] RAX: ffffffffffffffda RBX: 00007f5d8fa25fa0 RCX: 00007f5d8f79e159 [ 430.457646][T14994] RDX: 0000000000000011 RSI: 0000200000000040 RDI: 0000000000000005 [ 430.457652][T14994] RBP: 00007f5d90614090 R08: 0000000000000000 R09: 0000000000000000 [ 430.457659][T14994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.457666][T14994] R13: 00007f5d8fa26038 R14: 00007f5d8fa25fa0 R15: 00007ffde59e0608 [ 430.457680][T14994] [ 430.565089][ T4123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.565342][ T4123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.966370][T15005] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2067'. [ 431.214028][ T191] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 431.255013][T12605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.577213][ T191] usb 5-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 431.868258][ T191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.868315][ T191] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 431.868338][ T191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.926748][ T191] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 431.940828][ T4132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.203413][T15018] syzkaller0: entered promiscuous mode [ 432.203427][T15018] syzkaller0: entered allmulticast mode [ 432.219838][T14996] afs: Unknown parameter 'dyn00000000000000000000:0000 07 00000000:00000000 00:00000000 00000000 0 0 32321 2 ffff8880343d18c0 0 [ 432.219838][T14996] ' [ 432.271426][T14996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.282918][T14996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.311325][ T9] usb 5-1: USB disconnect, device number 18 [ 432.614862][T12647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.009162][ T5342] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 434.285815][ T5342] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.40 [ 434.286573][ T5342] usb 1-1: config 1 interface 0 has no altsetting 0 [ 434.311843][ T5342] usb 1-1: string descriptor 0 read error: -22 [ 434.311901][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.321173][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 434.321183][ T31] audit: type=1400 audit(2000000134.363:221316): avc: denied { write } for pid=15040 comm="syz.1.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 435.228289][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 435.320760][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.320780][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.320792][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.320803][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.320815][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.320827][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.320838][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.320850][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.320862][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.320874][ T5342] sigmamicro 0003:1C4F:0059.0005: unknown main item tag 0x0 [ 435.371854][T12647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.397570][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 435.405342][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 435.436525][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 435.436540][ T9] usb 5-1: config 0 has no interface number 0 [ 435.482260][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.482275][ T9] usb 5-1: Product: syz [ 435.482283][ T9] usb 5-1: Manufacturer: syz [ 435.482291][ T9] usb 5-1: SerialNumber: syz [ 435.483617][ T9] usb 5-1: config 0 descriptor?? [ 435.599996][T15044] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2070'. [ 435.694433][ T5342] sigmamicro 0003:1C4F:0059.0005: hidraw0: USB HID v0.05 Device [HID 1c4f:0059] on usb-dummy_hcd.0-1/input0 [ 435.719763][ T5342] usb 1-1: USB disconnect, device number 21 [ 435.868718][T15069] fido_id[15069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 435.950181][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.954239][T15079] FAULT_INJECTION: forcing a failure. [ 435.954239][T15079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.954261][T15079] CPU: 0 UID: 0 PID: 15079 Comm: syz.1.2077 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.954277][T15079] Tainted: [L]=SOFTLOCKUP [ 435.954281][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 435.954287][T15079] Call Trace: [ 435.954292][T15079] [ 435.954296][T15079] dump_stack_lvl+0x100/0x190 [ 435.954316][T15079] should_fail_ex.cold+0x5/0xa [ 435.954332][T15079] _copy_from_iter+0x1f4/0x1690 [ 435.954346][T15079] ? __asan_memset+0x23/0x50 [ 435.954358][T15079] ? __pfx__copy_from_iter+0x10/0x10 [ 435.954370][T15079] ? __pfx___alloc_skb+0x10/0x10 [ 435.954388][T15079] netlink_sendmsg+0x808/0xda0 [ 435.954403][T15079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.954417][T15079] ? selinux_socket_sendmsg+0x198/0x2f0 [ 435.954432][T15079] ____sys_sendmsg+0xa4d/0xbe0 [ 435.954447][T15079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.954461][T15079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.954480][T15079] ? lock_acquire+0x1d1/0x380 [ 435.954492][T15079] ? get_pid_task+0x2a/0x250 [ 435.954509][T15079] ___sys_sendmsg+0x190/0x1e0 [ 435.954527][T15079] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.954544][T15079] ? get_pid_task+0x106/0x250 [ 435.954564][T15079] ? find_held_lock+0x2b/0x80 [ 435.954589][T15079] __sys_sendmsg+0x160/0x210 [ 435.954603][T15079] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.954624][T15079] do_syscall_64+0x123/0x790 [ 435.954641][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.954653][T15079] RIP: 0033:0x7f5d8f79e159 [ 435.954663][T15079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.954680][T15079] RSP: 002b:00007f5d90614028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.954692][T15079] RAX: ffffffffffffffda RBX: 00007f5d8fa25fa0 RCX: 00007f5d8f79e159 [ 435.954699][T15079] RDX: 0000000000040080 RSI: 0000200000000200 RDI: 0000000000000003 [ 435.954706][T15079] RBP: 00007f5d90614090 R08: 0000000000000000 R09: 0000000000000000 [ 435.954713][T15079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.954719][T15079] R13: 00007f5d8fa26038 R14: 00007f5d8fa25fa0 R15: 00007ffde59e0608 [ 435.954733][T15079] [ 436.335662][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 436.335688][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 436.408629][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 436.408742][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 436.418750][ T9] usb 5-1: USB disconnect, device number 19 [ 436.622147][ T5342] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 436.720003][T12647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.784382][ T5342] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 436.785130][ T5342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.785153][ T5342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.786436][ T5342] usb 1-1: config 0 descriptor?? [ 436.964848][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 437.005966][ T5342] usbhid 1-1:0.0: can't add hid device: -71 [ 437.006014][ T5342] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 437.023060][ T5342] usb 1-1: USB disconnect, device number 22 [ 437.059604][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2076'. [ 437.074003][ T31] audit: type=1400 audit(2000000136.945:221317): avc: denied { listen } for pid=15105 comm="syz.3.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.074278][ T31] audit: type=1400 audit(2000000136.945:221318): avc: denied { accept } for pid=15105 comm="syz.3.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.130844][ T31] audit: type=1400 audit(2000000136.991:221319): avc: denied { shutdown } for pid=15105 comm="syz.3.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.136108][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 437.169020][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 437.169043][ T9] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 437.169061][ T9] usb 3-1: no configurations [ 437.169068][ T9] usb 3-1: can't read configurations, error -22 [ 437.300269][T15126] syzkaller0: entered promiscuous mode [ 437.300282][T15126] syzkaller0: entered allmulticast mode [ 437.403249][T12647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.430075][ T31] audit: type=1400 audit(2000000137.272:221320): avc: denied { write } for pid=15131 comm="syz.4.2083" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 437.536759][T15139] FAULT_INJECTION: forcing a failure. [ 437.536759][T15139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.536781][T15139] CPU: 0 UID: 0 PID: 15139 Comm: syz.4.2084 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.536796][T15139] Tainted: [L]=SOFTLOCKUP [ 437.536800][T15139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 437.536807][T15139] Call Trace: [ 437.536811][T15139] [ 437.536816][T15139] dump_stack_lvl+0x100/0x190 [ 437.536836][T15139] should_fail_ex.cold+0x5/0xa [ 437.536852][T15139] _copy_from_iter+0x1f4/0x1690 [ 437.536866][T15139] ? __asan_memset+0x23/0x50 [ 437.536878][T15139] ? __pfx__copy_from_iter+0x10/0x10 [ 437.536890][T15139] ? __pfx___alloc_skb+0x10/0x10 [ 437.536909][T15139] netlink_sendmsg+0x808/0xda0 [ 437.536924][T15139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.536937][T15139] ? selinux_socket_sendmsg+0x198/0x2f0 [ 437.536951][T15139] ____sys_sendmsg+0xa4d/0xbe0 [ 437.536966][T15139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.536980][T15139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.536999][T15139] ? lock_acquire+0x1d1/0x380 [ 437.537011][T15139] ? get_pid_task+0x2a/0x250 [ 437.537027][T15139] ___sys_sendmsg+0x190/0x1e0 [ 437.537045][T15139] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.537062][T15139] ? get_pid_task+0x106/0x250 [ 437.537082][T15139] ? find_held_lock+0x2b/0x80 [ 437.537106][T15139] __sys_sendmsg+0x160/0x210 [ 437.537119][T15139] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.537140][T15139] do_syscall_64+0x123/0x790 [ 437.537157][T15139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.537168][T15139] RIP: 0033:0x7fc9e619e159 [ 437.537178][T15139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.537188][T15139] RSP: 002b:00007fc9e43f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.537200][T15139] RAX: ffffffffffffffda RBX: 00007fc9e6425fa0 RCX: 00007fc9e619e159 [ 437.537209][T15139] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 437.537216][T15139] RBP: 00007fc9e43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 437.537223][T15139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.537229][T15139] R13: 00007fc9e6426038 R14: 00007fc9e6425fa0 R15: 00007ffed85d2c08 [ 437.537243][T15139] [ 437.541621][ T5342] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 437.735395][ T5342] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 437.780091][ T5342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.780117][ T5342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.789802][ T5342] usb 1-1: config 0 descriptor?? [ 438.074323][T15153] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2087'. [ 438.089232][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.089758][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.482086][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 438.643959][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 438.646416][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 438.648874][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.648897][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.650234][ T9] usb 4-1: config 0 descriptor?? [ 438.719901][ T5342] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 438.725290][ T5342] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 438.750888][T15084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.751113][T15084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.874869][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 438.905861][ T9] usb 1-1: USB disconnect, device number 23 [ 438.905941][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 438.968646][T14193] udevd[14193]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 439.088371][ T31] audit: type=1400 audit(2000000138.825:221321): avc: denied { write } for pid=15157 comm="syz.3.2088" name="iowarrior0" dev="devtmpfs" ino=3252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 439.165762][T15158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.176530][T15158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.500914][ T31] audit: type=1400 audit(2000000139.218:221322): avc: denied { create } for pid=15202 comm="syz.1.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 439.967958][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 440.128704][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 440.129561][ T9] usb 1-1: config 0 has no interfaces? [ 440.129579][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.131105][ T9] usb 1-1: config 0 descriptor?? [ 440.178792][T15215] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2092' sets config #0 [ 440.193344][T15215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2092'. [ 440.202137][T15215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2092'. [ 440.240984][T15215] Invalid ELF header magic: != ELF [ 440.241051][ T31] audit: type=1400 audit(2000000139.901:221323): avc: denied { module_load } for pid=15214 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 440.359652][T15207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.359874][T15207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.989351][ T9] usb 1-1: USB disconnect, device number 24 [ 441.000836][ T31] audit: type=1400 audit(2000000140.612:221324): avc: denied { getopt } for pid=15214 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 441.398499][ T31] audit: type=1400 audit(2000000140.986:221325): avc: denied { recv } for pid=12907 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=52518 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 441.496074][ T9] usb 4-1: USB disconnect, device number 28 [ 441.511933][T12605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.060380][ T31] audit: type=1400 audit(2000000141.604:221326): avc: denied { read } for pid=15248 comm="syz.0.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 442.191912][T12647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.875889][ T4132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.146047][ T4123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.200822][T14215] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 444.244687][T12647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.245129][T12647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.361560][T14215] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 444.366635][T14215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.366649][T14215] usb 2-1: Product: syz [ 444.366657][T14215] usb 2-1: Manufacturer: syz [ 444.366666][T14215] usb 2-1: SerialNumber: syz [ 444.368073][T14215] usb 2-1: config 0 descriptor?? [ 444.565469][ T31] audit: type=1400 audit(2000000143.952:221327): avc: denied { shutdown } for pid=15288 comm="syz.0.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 444.607046][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 444.612888][T14215] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 444.773420][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 444.778162][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.778187][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.808580][ T9] usb 4-1: config 0 descriptor?? [ 444.866181][T15297] FAULT_INJECTION: forcing a failure. [ 444.866181][T15297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.866201][T15297] CPU: 0 UID: 0 PID: 15297 Comm: syz.0.2104 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.866217][T15297] Tainted: [L]=SOFTLOCKUP [ 444.866221][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 444.866228][T15297] Call Trace: [ 444.866232][T15297] [ 444.866237][T15297] dump_stack_lvl+0x100/0x190 [ 444.866257][T15297] should_fail_ex.cold+0x5/0xa [ 444.866274][T15297] _copy_to_user+0x32/0xd0 [ 444.866288][T15297] simple_read_from_buffer+0xcb/0x170 [ 444.866303][T15297] proc_fail_nth_read+0x1af/0x230 [ 444.866319][T15297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.866334][T15297] ? rw_verify_area+0xce/0x6d0 [ 444.866350][T15297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.866364][T15297] vfs_read+0x1e4/0xb40 [ 444.866375][T15297] ? lock_acquire+0x1d1/0x380 [ 444.866387][T15297] ? __fget_files+0x34/0x3d0 [ 444.866400][T15297] ? __pfx_vfs_read+0x10/0x10 [ 444.866410][T15297] ? find_held_lock+0x2b/0x80 [ 444.866426][T15297] ? __fget_files+0x215/0x3d0 [ 444.866442][T15297] ? __fget_files+0x21f/0x3d0 [ 444.866459][T15297] ksys_read+0x12a/0x250 [ 444.866470][T15297] ? __pfx_ksys_read+0x10/0x10 [ 444.866486][T15297] do_syscall_64+0x123/0x790 [ 444.866502][T15297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.866514][T15297] RIP: 0033:0x7f8ea315e98e [ 444.866524][T15297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 444.866534][T15297] RSP: 002b:00007f8ea4035fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.866545][T15297] RAX: ffffffffffffffda RBX: 00007f8ea40366c0 RCX: 00007f8ea315e98e [ 444.866553][T15297] RDX: 000000000000000f RSI: 00007f8ea40360a0 RDI: 0000000000000003 [ 444.866559][T15297] RBP: 00007f8ea4036090 R08: 0000000000000000 R09: 0000000000000000 [ 444.866566][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.866572][T15297] R13: 00007f8ea3426038 R14: 00007f8ea3425fa0 R15: 00007ffc11b1dfb8 [ 444.866587][T15297] [ 445.088721][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 445.088795][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 445.145378][ T9] usb 4-1: USB disconnect, device number 29 [ 446.046895][ T31] audit: type=1400 audit(2000000145.336:221328): avc: denied { read write } for pid=15298 comm="syz.2.2103" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 446.046926][ T31] audit: type=1400 audit(2000000145.336:221329): avc: denied { open } for pid=15298 comm="syz.2.2103" path="/dev/input/mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 446.155385][T14215] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 446.260193][T15323] FAULT_INJECTION: forcing a failure. [ 446.260193][T15323] name failslab, interval 1, probability 0, space 0, times 0 [ 446.260214][T15323] CPU: 0 UID: 0 PID: 15323 Comm: syz.4.2105 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.260230][T15323] Tainted: [L]=SOFTLOCKUP [ 446.260234][T15323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 446.260241][T15323] Call Trace: [ 446.260246][T15323] [ 446.260251][T15323] dump_stack_lvl+0x100/0x190 [ 446.260278][T15323] should_fail_ex.cold+0x5/0xa [ 446.260295][T15323] should_failslab+0xc2/0x120 [ 446.260312][T15323] __kvmalloc_node_noprof+0x113/0x9b0 [ 446.260327][T15323] ? __kmalloc_noprof+0x350/0x840 [ 446.260340][T15323] ? hash_ipportnet_create+0x47f/0x1360 [ 446.260362][T15323] hash_ipportnet_create+0x47f/0x1360 [ 446.260382][T15323] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 446.260401][T15323] ip_set_create+0x6c4/0x1510 [ 446.260414][T15323] ? __pfx_ip_set_create+0x10/0x10 [ 446.260433][T15323] ? find_held_lock+0x2b/0x80 [ 446.260453][T15323] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 446.260474][T15323] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 446.260490][T15323] ? __lock_acquire+0x5c0/0x1f40 [ 446.260513][T15323] ? avc_has_perm_noaudit+0x145/0x3b0 [ 446.260533][T15323] netlink_rcv_skb+0x159/0x420 [ 446.260546][T15323] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 446.260562][T15323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.260581][T15323] ? ns_capable+0xd2/0xf0 [ 446.260595][T15323] nfnetlink_rcv+0x1b3/0x440 [ 446.260610][T15323] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 446.260625][T15323] ? netlink_deliver_tap+0x1ae/0xcc0 [ 446.260639][T15323] netlink_unicast+0x585/0x850 [ 446.260653][T15323] ? __pfx_netlink_unicast+0x10/0x10 [ 446.260669][T15323] netlink_sendmsg+0x8b0/0xda0 [ 446.260683][T15323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.260697][T15323] ? selinux_socket_sendmsg+0x198/0x2f0 [ 446.260711][T15323] ____sys_sendmsg+0xa4d/0xbe0 [ 446.260726][T15323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.260739][T15323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.260761][T15323] ___sys_sendmsg+0x190/0x1e0 [ 446.260779][T15323] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.260797][T15323] ? futex_wait+0x11e/0x370 [ 446.260813][T15323] ? find_held_lock+0x2b/0x80 [ 446.260837][T15323] __sys_sendmsg+0x160/0x210 [ 446.260850][T15323] ? __pfx___sys_sendmsg+0x10/0x10 [ 446.260871][T15323] do_syscall_64+0x123/0x790 [ 446.260888][T15323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.260900][T15323] RIP: 0033:0x7fc9e619e159 [ 446.260910][T15323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.260921][T15323] RSP: 002b:00007fc9e43f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.260932][T15323] RAX: ffffffffffffffda RBX: 00007fc9e6425fa0 RCX: 00007fc9e619e159 [ 446.260939][T15323] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 446.260946][T15323] RBP: 00007fc9e623506b R08: 0000000000000000 R09: 0000000000000000 [ 446.260953][T15323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.260960][T15323] R13: 00007fc9e6426038 R14: 00007fc9e6425fa0 R15: 00007ffed85d2c08 [ 446.260974][T15323] [ 446.445621][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 446.467192][ T31] audit: type=1400 audit(2000000145.739:221330): avc: denied { setopt } for pid=15307 comm="syz.0.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 446.484588][T14215] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 446.656243][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 446.667443][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.667468][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.683338][T14215] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 1.00 [ 446.700811][T14215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.700827][T14215] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 446.723245][ T9] usb 4-1: config 0 descriptor?? [ 446.725131][T14215] usb 1-1: Dual-Role OTG device on HNP port [ 446.736123][T14215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.736136][T14215] usb 1-1: Product: HID Gadget [ 446.736145][T14215] usb 1-1: SerialNumber: 0123456789 [ 446.774362][ C0] ------------[ cut here ]------------ [ 446.774371][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 446.774380][ C0] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#0: kworker/0:0/9 [ 446.796736][ C0] Modules linked in: [ 446.800601][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.811239][ C0] Tainted: [L]=SOFTLOCKUP [ 446.815531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 446.825554][ C0] Workqueue: usb_hub_wq hub_event [ 446.830556][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 446.835908][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d aa 45 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 0b da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 fe d9 8c [ 446.855495][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010046 [ 446.861532][ C0] RAX: dffffc0000000000 RBX: ffff88802177c0e0 RCX: ffffffff8cda4260 [ 446.869473][ C0] RDX: 0000000000000081 RSI: ffffffff8cda0bc0 RDI: ffffffff91528db0 [ 446.877414][ C0] RBP: 0000000000000081 R08: ffffffff8cd9fea0 R09: 0000000000000000 [ 446.885356][ C0] R10: 0000000000000000 R11: ffffffff810014ca R12: ffffffff8cd9fea0 [ 446.893296][ C0] R13: 0000000000000000 R14: ffff88802177c0e0 R15: ffff88802aae8320 [ 446.901248][ C0] FS: 0000000000000000(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 446.910150][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.916708][ C0] CR2: 00007f3f375deb34 CR3: 000000006000d000 CR4: 00000000003526f0 [ 446.924651][ C0] Call Trace: [ 446.927904][ C0] [ 446.930721][ C0] hidg_set_alt+0x190/0xa10 [ 446.935203][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 446.940373][ C0] ? rcu_is_watching+0x13/0xc0 [ 446.945110][ C0] composite_setup+0x2ccf/0x9290 [ 446.950027][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 446.954939][ C0] ? __pfx_composite_setup+0x10/0x10 [ 446.960197][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.965538][ C0] ? do_raw_spin_lock+0x128/0x260 [ 446.970532][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.975878][ C0] ? configfs_composite_setup+0xfb/0x130 [ 446.981481][ C0] configfs_composite_setup+0xfb/0x130 [ 446.986911][ C0] dummy_timer+0x2039/0x3700 [ 446.991479][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 446.997255][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 447.002860][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 447.007767][ C0] ? mark_held_locks+0x40/0x70 [ 447.012501][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 447.018286][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 447.023192][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 447.028368][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 447.033452][ C0] handle_softirqs+0x1e6/0x9d0 [ 447.038186][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 447.043440][ C0] ? _raw_spin_unlock+0x28/0x50 [ 447.048262][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 447.053868][ C0] __irq_exit_rcu+0x16a/0x210 [ 447.058522][ C0] irq_exit_rcu+0x9/0x30 [ 447.062759][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 447.068372][ C0] [ 447.071273][ C0] [ 447.074175][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.080123][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5b/0x70 [ 447.086247][ C0] Code: 00 00 f0 75 35 8b 82 3c 17 00 00 85 c0 74 2b 8b 82 10 17 00 00 83 f8 02 75 20 48 8b 8a 18 17 00 00 8b 92 14 17 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 90 [ 447.105826][ C0] RSP: 0018:ffffc900000e7068 EFLAGS: 00000246 [ 447.111862][ C0] RAX: 000000000001058f RBX: ffffffff8cc41e60 RCX: ffffc9001d802000 [ 447.119804][ C0] RDX: 0000000000100000 RSI: ffffffff87905627 RDI: ffff88805226f000 [ 447.127744][ C0] RBP: ffff88805226f000 R08: 0000000000000007 R09: 0000000000000000 [ 447.135686][ C0] R10: 000001912c7c0000 R11: 0000000000000000 R12: dffffc0000000000 [ 447.143626][ C0] R13: ffff888056411000 R14: ffffed100ac82217 R15: 0000000000000000 [ 447.151570][ C0] ? usb_match_device+0x17/0x570 [ 447.156485][ C0] ? usb_match_id+0x55/0x1d0 [ 447.161048][ C0] usb_match_device+0x17/0x570 [ 447.165787][ C0] usb_match_id+0x123/0x1d0 [ 447.170267][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 447.176133][ C0] usb_device_match+0x174/0x2d0 [ 447.180957][ C0] ? __pfx_usb_device_match+0x10/0x10 [ 447.186304][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 447.192089][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 447.197259][ C0] ? __pfx_usb_device_match+0x10/0x10 [ 447.202612][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 447.208475][ C0] __device_attach_driver+0x93/0x320 [ 447.213734][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 447.219596][ C0] bus_for_each_drv+0x159/0x1e0 [ 447.224421][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 447.229775][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 447.234944][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.240723][ C0] __device_attach+0x1e4/0x4d0 [ 447.245456][ C0] ? __pfx___device_attach+0x10/0x10 [ 447.250713][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 447.255883][ C0] device_initial_probe+0xaf/0xd0 [ 447.260878][ C0] bus_probe_device+0x64/0x160 [ 447.265611][ C0] device_add+0x121d/0x1970 [ 447.270088][ C0] ? __pfx_device_add+0x10/0x10 [ 447.274910][ C0] ? mark_held_locks+0x40/0x70 [ 447.279650][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 447.285440][ C0] usb_set_configuration+0xd97/0x1c60 [ 447.290791][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 447.296835][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 447.302177][ C0] usb_probe_device+0xef/0x400 [ 447.306913][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 447.312264][ C0] really_probe+0x241/0xa60 [ 447.316741][ C0] __driver_probe_device+0x210/0x460 [ 447.322005][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 447.327783][ C0] driver_probe_device+0x4a/0x140 [ 447.332779][ C0] __device_attach_driver+0x1df/0x320 [ 447.338123][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 447.343992][ C0] bus_for_each_drv+0x159/0x1e0 [ 447.348825][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 447.354179][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 447.359347][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.365126][ C0] __device_attach+0x1e4/0x4d0 [ 447.369867][ C0] ? __pfx___device_attach+0x10/0x10 [ 447.375122][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 447.380293][ C0] device_initial_probe+0xaf/0xd0 [ 447.385288][ C0] bus_probe_device+0x64/0x160 [ 447.390027][ C0] device_add+0x121d/0x1970 [ 447.394504][ C0] ? __pfx_device_add+0x10/0x10 [ 447.399325][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 447.405017][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 447.410370][ C0] ? do_raw_spin_lock+0x128/0x260 [ 447.415366][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 447.421152][ C0] ? mark_held_locks+0x40/0x70 [ 447.425886][ C0] hub_event.cold+0x1e3/0xe90 [ 447.430548][ C0] ? __pfx_hub_event+0x10/0x10 [ 447.435282][ C0] ? lockdep_count_backward_deps+0x1b0/0x200 [ 447.441238][ C0] ? lock_acquire+0x1d1/0x380 [ 447.445884][ C0] ? process_one_work+0xa2c/0x1b10 [ 447.450969][ C0] ? process_one_work+0x906/0x1b10 [ 447.456052][ C0] ? process_one_work+0x906/0x1b10 [ 447.461137][ C0] process_one_work+0xac7/0x1b10 [ 447.466061][ C0] ? __pfx_process_one_work+0x10/0x10 [ 447.471411][ C0] ? lock_acquire+0x1d1/0x380 [ 447.476061][ C0] ? __pfx_hub_event+0x10/0x10 [ 447.480796][ C0] worker_thread+0x5ef/0xe50 [ 447.485363][ C0] ? kthread+0x13a/0x450 [ 447.489577][ C0] ? __pfx_worker_thread+0x10/0x10 [ 447.495098][ C0] kthread+0x373/0x450 [ 447.499145][ C0] ? __pfx_kthread+0x10/0x10 [ 447.503718][ C0] ret_from_fork+0x730/0xd60 [ 447.508286][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 447.513367][ C0] ? __switch_to+0x800/0x10f0 [ 447.518015][ C0] ? __pfx_kthread+0x10/0x10 [ 447.522580][ C0] ret_from_fork_asm+0x1a/0x30 [ 447.527321][ C0] [ 447.530320][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 447.537571][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.548218][ C0] Tainted: [L]=SOFTLOCKUP [ 447.552516][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 447.562548][ C0] Workqueue: usb_hub_wq hub_event [ 447.567546][ C0] Call Trace: [ 447.570797][ C0] [ 447.573612][ C0] dump_stack_lvl+0x100/0x190 [ 447.578263][ C0] vpanic+0x553/0x970 [ 447.582221][ C0] ? __pfx_vpanic+0x10/0x10 [ 447.586704][ C0] panic+0xd1/0xe0 [ 447.590400][ C0] ? __pfx_panic+0x10/0x10 [ 447.594789][ C0] check_panic_on_warn.cold+0x19/0x34 [ 447.600136][ C0] ? usb_ep_enable+0x3e6/0x490 [ 447.604873][ C0] __warn.cold+0x191/0x318 [ 447.609264][ C0] __report_bug+0x30f/0x440 [ 447.613743][ C0] ? usb_ep_enable+0x3e6/0x490 [ 447.618480][ C0] ? __pfx___report_bug+0x10/0x10 [ 447.623473][ C0] ? device_add+0x121d/0x1970 [ 447.628126][ C0] ? usb_new_device.part.0+0xcc2/0x1686 [ 447.633645][ C0] ? hub_event.cold+0x1e3/0xe90 [ 447.638476][ C0] report_bug_entry+0xe2/0x290 [ 447.643212][ C0] ? usb_ep_enable+0x3f8/0x490 [ 447.647948][ C0] handle_bug+0x1cd/0x2a0 [ 447.652251][ C0] exc_invalid_op+0x17/0x50 [ 447.656732][ C0] asm_exc_invalid_op+0x1a/0x20 [ 447.661552][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 447.666894][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d aa 45 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 0b da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 fe d9 8c [ 447.686477][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010046 [ 447.692511][ C0] RAX: dffffc0000000000 RBX: ffff88802177c0e0 RCX: ffffffff8cda4260 [ 447.700450][ C0] RDX: 0000000000000081 RSI: ffffffff8cda0bc0 RDI: ffffffff91528db0 [ 447.708388][ C0] RBP: 0000000000000081 R08: ffffffff8cd9fea0 R09: 0000000000000000 [ 447.716327][ C0] R10: 0000000000000000 R11: ffffffff810014ca R12: ffffffff8cd9fea0 [ 447.724268][ C0] R13: 0000000000000000 R14: ffff88802177c0e0 R15: ffff88802aae8320 [ 447.732214][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.738348][ C0] hidg_set_alt+0x190/0xa10 [ 447.742833][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 447.748009][ C0] ? rcu_is_watching+0x13/0xc0 [ 447.752755][ C0] composite_setup+0x2ccf/0x9290 [ 447.757666][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 447.762587][ C0] ? __pfx_composite_setup+0x10/0x10 [ 447.767854][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.773196][ C0] ? do_raw_spin_lock+0x128/0x260 [ 447.778191][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.783536][ C0] ? configfs_composite_setup+0xfb/0x130 [ 447.789137][ C0] configfs_composite_setup+0xfb/0x130 [ 447.794574][ C0] dummy_timer+0x2039/0x3700 [ 447.799150][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.804947][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 447.810554][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 447.815468][ C0] ? mark_held_locks+0x40/0x70 [ 447.820201][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 447.825981][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 447.830889][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 447.836071][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 447.841159][ C0] handle_softirqs+0x1e6/0x9d0 [ 447.845896][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 447.851159][ C0] ? _raw_spin_unlock+0x28/0x50 [ 447.855996][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 447.861616][ C0] __irq_exit_rcu+0x16a/0x210 [ 447.866266][ C0] irq_exit_rcu+0x9/0x30 [ 447.870481][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 447.876086][ C0] [ 447.878988][ C0] [ 447.881890][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.887839][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5b/0x70 [ 447.893968][ C0] Code: 00 00 f0 75 35 8b 82 3c 17 00 00 85 c0 74 2b 8b 82 10 17 00 00 83 f8 02 75 20 48 8b 8a 18 17 00 00 8b 92 14 17 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 90 [ 447.913557][ C0] RSP: 0018:ffffc900000e7068 EFLAGS: 00000246 [ 447.919599][ C0] RAX: 000000000001058f RBX: ffffffff8cc41e60 RCX: ffffc9001d802000 [ 447.927545][ C0] RDX: 0000000000100000 RSI: ffffffff87905627 RDI: ffff88805226f000 [ 447.935485][ C0] RBP: ffff88805226f000 R08: 0000000000000007 R09: 0000000000000000 [ 447.943426][ C0] R10: 000001912c7c0000 R11: 0000000000000000 R12: dffffc0000000000 [ 447.951365][ C0] R13: ffff888056411000 R14: ffffed100ac82217 R15: 0000000000000000 [ 447.959318][ C0] ? usb_match_device+0x17/0x570 [ 447.964234][ C0] ? usb_match_id+0x55/0x1d0 [ 447.968796][ C0] usb_match_device+0x17/0x570 [ 447.973539][ C0] usb_match_id+0x123/0x1d0 [ 447.978016][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 447.983892][ C0] usb_device_match+0x174/0x2d0 [ 447.988727][ C0] ? __pfx_usb_device_match+0x10/0x10 [ 447.994076][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 447.999853][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 448.005022][ C0] ? __pfx_usb_device_match+0x10/0x10 [ 448.010368][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 448.016231][ C0] __device_attach_driver+0x93/0x320 [ 448.021498][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 448.027369][ C0] bus_for_each_drv+0x159/0x1e0 [ 448.032205][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 448.037560][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 448.042732][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 448.048513][ C0] __device_attach+0x1e4/0x4d0 [ 448.053772][ C0] ? __pfx___device_attach+0x10/0x10 [ 448.059037][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 448.064210][ C0] device_initial_probe+0xaf/0xd0 [ 448.069212][ C0] bus_probe_device+0x64/0x160 [ 448.073947][ C0] device_add+0x121d/0x1970 [ 448.078424][ C0] ? __pfx_device_add+0x10/0x10 [ 448.083254][ C0] ? mark_held_locks+0x40/0x70 [ 448.087987][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 448.093767][ C0] usb_set_configuration+0xd97/0x1c60 [ 448.099119][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 448.105154][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 448.110505][ C0] usb_probe_device+0xef/0x400 [ 448.115241][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 448.120583][ C0] really_probe+0x241/0xa60 [ 448.125059][ C0] __driver_probe_device+0x210/0x460 [ 448.130312][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 448.136088][ C0] driver_probe_device+0x4a/0x140 [ 448.141084][ C0] __device_attach_driver+0x1df/0x320 [ 448.146428][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 448.152288][ C0] bus_for_each_drv+0x159/0x1e0 [ 448.157112][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 448.162463][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 448.167633][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 448.173409][ C0] __device_attach+0x1e4/0x4d0 [ 448.178153][ C0] ? __pfx___device_attach+0x10/0x10 [ 448.183419][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 448.188589][ C0] device_initial_probe+0xaf/0xd0 [ 448.193586][ C0] bus_probe_device+0x64/0x160 [ 448.198322][ C0] device_add+0x121d/0x1970 [ 448.202804][ C0] ? __pfx_device_add+0x10/0x10 [ 448.207626][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 448.213319][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 448.218668][ C0] ? do_raw_spin_lock+0x128/0x260 [ 448.223663][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 448.229450][ C0] ? mark_held_locks+0x40/0x70 [ 448.234184][ C0] hub_event.cold+0x1e3/0xe90 [ 448.238845][ C0] ? __pfx_hub_event+0x10/0x10 [ 448.243580][ C0] ? lockdep_count_backward_deps+0x1b0/0x200 [ 448.249536][ C0] ? lock_acquire+0x1d1/0x380 [ 448.254182][ C0] ? process_one_work+0xa2c/0x1b10 [ 448.259273][ C0] ? process_one_work+0x906/0x1b10 [ 448.264355][ C0] ? process_one_work+0x906/0x1b10 [ 448.269441][ C0] process_one_work+0xac7/0x1b10 [ 448.274357][ C0] ? __pfx_process_one_work+0x10/0x10 [ 448.279702][ C0] ? lock_acquire+0x1d1/0x380 [ 448.284359][ C0] ? __pfx_hub_event+0x10/0x10 [ 448.289096][ C0] worker_thread+0x5ef/0xe50 [ 448.293666][ C0] ? kthread+0x13a/0x450 [ 448.297886][ C0] ? __pfx_worker_thread+0x10/0x10 [ 448.302970][ C0] kthread+0x373/0x450 [ 448.307012][ C0] ? __pfx_kthread+0x10/0x10 [ 448.311573][ C0] ret_from_fork+0x730/0xd60 [ 448.316136][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 448.321217][ C0] ? __switch_to+0x800/0x10f0 [ 448.325873][ C0] ? __pfx_kthread+0x10/0x10 [ 448.330435][ C0] ret_from_fork_asm+0x1a/0x30 [ 448.335174][ C0] [ 448.338209][ C0] Kernel Offset: disabled [ 448.342511][ C0] Rebooting in 86400 seconds..