last executing test programs: 15m40.371598089s ago: executing program 0 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 15m39.332910021s ago: executing program 0 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 15m38.060543467s ago: executing program 0 (id=464): syz_usb_connect(0x0, 0x45, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201002) dup(0xffffffffffffffff) 15m35.307369954s ago: executing program 0 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x902, 0x4) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) syz_open_dev$admmidi(0x0, 0x20, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 15m33.46601454s ago: executing program 0 (id=468): r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) userfaultfd(0x80000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/notes', 0x109000, 0x28) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x202, 0x40) sendfile(r4, r3, 0x0, 0xd6) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/97, 0x61}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 15m27.706376928s ago: executing program 0 (id=480): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='cgroup\x00', 0x4040, 0x0) 15m26.485892482s ago: executing program 32 (id=480): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='cgroup\x00', 0x4040, 0x0) 13m59.509319945s ago: executing program 5 (id=716): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x104}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socket$packet(0x11, 0x3, 0x300) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 13m56.39483993s ago: executing program 5 (id=722): socket$rds(0x15, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) eventfd2(0x1, 0x80001) r4 = eventfd(0xe467) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 13m47.934498592s ago: executing program 5 (id=742): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) 13m46.05126759s ago: executing program 5 (id=745): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x2, 0x1) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 13m44.544609737s ago: executing program 5 (id=748): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='e1my_eprob', 0xa) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000349000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x60000000000000, 0x9, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) 13m41.993108241s ago: executing program 5 (id=759): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, r2) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r3, 0x700}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) r4 = getuid() keyctl$chown(0x4, r3, r4, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 13m26.86225753s ago: executing program 33 (id=759): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, r2) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r3, 0x700}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) r4 = getuid() keyctl$chown(0x4, r3, r4, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 10m42.722457088s ago: executing program 2 (id=1149): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680), 0x0, 0x20004855) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000300)=0x7f, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 10m41.790758975s ago: executing program 2 (id=1152): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x4}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg$unix(r2, 0x0, 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4810) write(r3, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) 10m39.226388866s ago: executing program 2 (id=1157): socket$kcm(0x10, 0x2, 0x0) r0 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0x9, 0xa000, 0xfffffffe, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x153182) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3"], 0x0) 10m36.880173063s ago: executing program 2 (id=1163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3bd4, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000800)="01", 0xfdef, 0x2d, 0x0, 0x0) 10m31.557238779s ago: executing program 2 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x20000) 10m30.272269953s ago: executing program 2 (id=1177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x18}}, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r3) 10m14.752956377s ago: executing program 34 (id=1177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x18}}, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r3) 5m25.918585091s ago: executing program 3 (id=1778): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000180)={'fscrypt:', @auto=[0x62, 0x38, 0x39, 0x39, 0x38, 0x39, 0x63, 0x66, 0x64, 0x31, 0x66, 0x62, 0x39, 0x30, 0x0, 0x32]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445567778999aabbccddeeff00112233445566778899aabfccddeeff00112233445566778899aabbccddeeff", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x31, 0xe, 0x35, 0x38, 0x31, 0x38, 0x61, 0x64, 0x63, 0x30, 0x61, 0x30, 0x36, 0x31, 0x32, 0x36]}, &(0x7f0000000a40)={0x0, "2628ef6169ce0c23300aad3bd8276bfa5a76274e6d287faf262c30f0f01f01afdf7dd0c90abeed83d9b7ae21c1731df54db18c7f4736fb3ba12abb31f88487a5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x33, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677880502d2b9ddff7f00112233445566778899aabbccd3ceff001122aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x63, 0x35, 0x0, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000b40)={0x0, "0011228100798ab7ca99aabbbbccddee1401110233445566778899aafc4d162f90001122aabbccddeeff00", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x33, 0x39, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x35, 0x30, 0x36, 0x63, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @auto=[0x32, 0x38, 0x32, 0x31, 0x35, 0x38, 0x64, 0x34, 0x35, 0x32, 0x63, 0x64, 0x37, 0x31, 0x31, 0x66]}, &(0x7f0000000540)={0x0, "42b6f79eb265b5857af864c58803d13c052f6bf1dafdc706c15f7e54ddbb21d67e1662214422745234909a6d75d28400000000000000000000fbffffff00", 0x36}, 0x3a, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 5m24.72418288s ago: executing program 3 (id=1782): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) getsockname$inet(r2, 0x0, &(0x7f00000003c0)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0xe2e4e67761683fba}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}}, 0x10000000) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x1c) connect(r4, &(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x800, @loopback, 0xc0}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r6, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x281841d, 0x0) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x1a1c03) ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f0000000240)=0x327) 5m24.458935704s ago: executing program 3 (id=1786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) timer_delete(r4) 5m23.429174119s ago: executing program 3 (id=1789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 5m22.945146315s ago: executing program 3 (id=1790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 5m21.798960807s ago: executing program 3 (id=1793): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_open_procfs$namespace(0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fallocate(0xffffffffffffffff, 0x10, 0x63db, 0x1007fff) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1, 0x18}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x30, 0x70, 0x1, 0x70bd27, 0x25dfdc01, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 5m5.878000033s ago: executing program 35 (id=1793): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_open_procfs$namespace(0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fallocate(0xffffffffffffffff, 0x10, 0x63db, 0x1007fff) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1, 0x18}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x30, 0x70, 0x1, 0x70bd27, 0x25dfdc01, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 23.516342859s ago: executing program 8 (id=2321): socket(0x1e, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x4c04c3, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 21.442525234s ago: executing program 6 (id=2325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @mss={0x2, 0x1}, @mss={0x2, 0x5}], 0x20000000000001cf) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) close(0xffffffffffffffff) socketpair(0x26, 0x5, 0xb, &(0x7f0000000440)) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x1, 0x405, 0x2, 0xb, 0x5, 0x9c, 0x10000, 0xffffff01}}) 21.260965671s ago: executing program 8 (id=2326): socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) write$eventfd(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x398, 0x1c8, 0x98, 0x1c8, 0x98, 0x0, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xb, 0x3}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 21.178863503s ago: executing program 4 (id=2327): syz_io_uring_setup(0xa2e, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(r1, &(0x7f0000000200), 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000640)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) io_setup(0x202, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, 0xffffffffffffffff, &(0x7f00000009c0)='1', 0x1, 0xf}]) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x1612c0) 18.853043549s ago: executing program 7 (id=2330): mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, 0x0) syz_open_dev$vim2m(0x0, 0x5bc, 0x2) r2 = syz_ublk_setup_io_uring(0x191, &(0x7f00000000c0)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, &(0x7f0000000080)=0x90) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 16.770107286s ago: executing program 4 (id=2331): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) signalfd(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 16.680921664s ago: executing program 7 (id=2332): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(0xffffffffffffffff, 0x800c6f40, &(0x7f0000000040)={""/4, 0x4}) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000280)={{[0x1, 0xe, 0x157, 0x7]}, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000200)=[{{@align=0x3, {0x9, 0x8, 0x5, 0x3d}}, 0x7, 0x0, '\x00'}, {{@align=0x3, {0x8, 0xc0e, 0x8, 0x1}}, 0x4, 0x0, 'asymmetric\x00'}, {{@align=0xfe4, {0x80, 0x800, 0x10000, 0xfb}}, 0x401, 0x0, 'keyring\x00'}]}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x4, @sdr={0x32314d4e, 0xd}}) 15.712564009s ago: executing program 7 (id=2333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) shmget$private(0x0, 0x3000, 0x800, &(0x7f00007bd000/0x3000)=nil) syz_clone(0x10000, &(0x7f0000000040)="078b1e804edde0bbc4c0764b80afdd438c59a1", 0x13, &(0x7f0000000100), 0x0, &(0x7f00000002c0)="f6532f640f7a570f89747f9a68e2ed5846d1af84162bb5c01ec9dfbcc46675ff4acaf771bfc74b8d519a196dae643f57534a5eae9d18b25b14c2c28dca352fa9f0cc40") ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000001c0)) shmctl$SHM_INFO(r3, 0xe, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) 14.853564909s ago: executing program 4 (id=2334): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000094c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_ublk_setup_io_uring(0xd, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 13.799175233s ago: executing program 4 (id=2335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000002380)='secret\x00\x1c\xca&\x9bx\xde\x9f\xdc\x0e\x05\x04\a\xf4\x8dJa\x9a\xb1\xc8SgI\n4\xa3\xaaQZ0X\x03\x13\x1e\\k\x81 f\xe5W\x01\xa4\x86\xab7\x97-7[\x12%%EP\xb5&\x89@\x00=\xf1\\\xa3\xc1<\xf9\x8c\xd3\t\xd8>\xae\x9e\xd3\x81X\xef\xde\x06\x15\xeb\xd9\xb7\xd2\xb57T\x01z\x90S\x1a6\x10j\xffM.\xe2\xc2\x83\xfc?\xe0\n\n\xd0\xe6\xc8\xa91jX\xfd\x84\x96n\x0f\x9a\xc3f\x12\x12\xe7G\b\xc1f8UK\xae\x0f\xf3\xc2\x8e*\x86P\x7f\x1dM\tZ\xc7~R\xaa\x1f\xf50\xa9\xd2\x90\xe6=\xe88\xebv\xa6\xc7\xae\n\x9c\x03>\xef[\xe0\x0enx\xf2\x81\xc8O\xe8\x10\x9a8\xc4(\x8f\xedf[\xedxm\x16\xd2\x8e`\\\t\xb0\x97o&q\xba\xe8\xd719.\x9d\x9f(+(TQA\xb5Ls\x19\xe8\xd7!\x88s\xd6\x93\xd7\x8d\x90D\xf1\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\\xa4\xe2\xd5o\xd2\xf1\x93\xf6c\xa0)\xa8\xdc\x83\x1b\x02\xfd\xf3\xd5W\xe9@&\xd7\xab\xe4\xad\xf7T\x05\xd7\x9b\xb9\xdf\xfdR\xc6\xe3\x8cI5\xf1\xcf\x04\n6\aX\xb2\x99\x16\x8a0\x883\xf1nE\xe8\x8d\xbcL\x0e\x14\xae\x9f\xc3\x92$[\x93v\x84\xdf\xa1v<\x1a\xe9Mi\xdfY\xa1 {\x18-\x94\xf1p\xfcc\xefdX\xd8\x12\xea\xf6Z\xcb\xaa\xcc\x91', &(0x7f00000022c0)='AQAAAAAAAAAAAAAAABAAA=2AAAAAAAAAAAAAAA+=\x00\xe2*\x82c\xe8\x11\xf9\xb8\xf8\x1eQrW\x01\x1c\x99k\xf4%\x81{g\x1cC\x0e\xf1\x14\xf3eH\xdcJ\x11\xc1\xde9', 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 11.63846779s ago: executing program 7 (id=2336): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc3) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0xfea000, 0x2000402) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 11.334331375s ago: executing program 8 (id=2337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) pwritev(r4, &(0x7f0000002600)=[{&(0x7f0000002480)="a9", 0x1}], 0x1, 0x9, 0xfffff800) socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x4000080) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/26, 0x1a) 11.259375862s ago: executing program 6 (id=2338): socket(0x1e, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) 9.138242511s ago: executing program 8 (id=2339): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000240), &(0x7f0000000340)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, r2, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x35, &(0x7f0000000500)=ANY=[], 0x0) 8.461414457s ago: executing program 7 (id=2340): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000500008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.434417567s ago: executing program 6 (id=2341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) io_setup(0xfffffffd, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 7.215058969s ago: executing program 7 (id=2343): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000007fc0), 0x1fcc, 0x80) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)=""/230, &(0x7f00000001c0)=0xe6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./sys\x00', 0x0, 0x42) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x101202, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 6.435771009s ago: executing program 6 (id=2344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x59) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0), 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000140)="2700000014000707030e0000120f0a0011c178fbd1753056aebc9f46c4e829db96000100f5fe00", 0x27) 5.998511017s ago: executing program 8 (id=2345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setresuid(0x0, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 5.406629741s ago: executing program 1 (id=2346): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) io_setup(0xfffffffd, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 4.223980495s ago: executing program 8 (id=2347): preadv(0xffffffffffffffff, &(0x7f00000028c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0xda3, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xb, 0xa, 0xfff5, 0x3, 0xa, "96ca676bc0d8a891"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x41, 0x4, 0x5, 0x13, "b0bf2ebb48c849ac4000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) readv(r1, &(0x7f0000002500)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101501, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x3a5c02) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x0, 0x4, {0x7391, 0x2, 0x9, 0x7, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) 4.077168572s ago: executing program 6 (id=2348): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0x12) close_range(r1, r1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000000101040000000014b16b4d97000010240001801400018008000100e000000108000200e00000010c000280050001000000000004000280080007400000"], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x40, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x2, 0x2002, 0x64737664, 0x0, 0x0, 0x1, 0x6, 0xfeedcaff, 0x3, 0x0, 0x1, 0x5}}) 3.898727277s ago: executing program 1 (id=2349): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000200)={0x0, 0x210000}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x100000003, 0xffffffffffffffff, 0x7fff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff801, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6000000000, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0x30f3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000340)=0xfffffff9, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000009040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x62, 0x0) 3.840696777s ago: executing program 4 (id=2350): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) 2.966686135s ago: executing program 6 (id=2351): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x13, 0xfffffff5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x26]}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002a000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x2, 0xec8, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b)<\x00', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 2.730962781s ago: executing program 1 (id=2352): socket(0x1e, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) 1.90623869s ago: executing program 4 (id=2353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0x25) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x48005) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000b4d000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, 0x2000, 0x3, 0x2}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, 0x0}) mmap$KVM_VCPU(&(0x7f0000608000/0x4000)=nil, r5, 0x1, 0x4000010, r6, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x8000, 0x6, 0x4, 0x870}}) 1.542303154s ago: executing program 1 (id=2354): socket(0x1e, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 1.11312996s ago: executing program 1 (id=2355): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @ofdm={0x0, 0x5, 0xa, 0xe, 0x1, 0x1, 0x4}}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x25) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000002c0)={0x0, 0x0, 0xff34, 0x5}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x80, 0x7fff0000}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 0s ago: executing program 1 (id=2356): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2}, 0x30, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read(r1, &(0x7f0000000340)=""/42, 0x2a) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) syz_io_uring_setup(0x27f7, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): simple: /dev/video#_54 [ 794.869873][T12911] simple: /dev/video#_57 [ 794.869882][T12911] simple: /dev/video#_60 [ 794.869892][T12911] simple: /dev/video#_63 [ 794.869902][T12911] simple: /dev/video#_66 [ 794.869911][T12911] simple: /dev/video#_69 [ 794.869921][T12911] simple: /dev/video#_72 [ 794.869931][T12911] simple: /dev/video#_75 [ 794.869941][T12911] simple: /dev/video#_78 [ 794.869950][T12911] simple: /dev/video#_81 [ 794.869960][T12911] simple: /dev/video#_84 [ 794.869970][T12911] simple: /dev/video#_87 [ 794.869979][T12911] simple: /dev/video#_90 [ 794.869989][T12911] simple: /dev/video#_93 [ 794.869998][T12911] simple: /dev/video#_96 [ 794.870009][T12911] TC_ACT_REPEAT abuse ? [ 798.441318][T12950] loop2: detected capacity change from 0 to 2640 [ 798.519879][T12950] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 798.520031][T12950] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 798.520164][T12950] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 798.520235][T12950] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 798.520510][T12950] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 798.520957][T12950] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 798.521138][T12950] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 798.521259][T12950] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 798.521370][T12950] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 798.521580][T12950] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 803.737095][ T59] IPVS: starting estimator thread 0... [ 803.783195][T12974] fuse: Unknown parameter 'fd0x000000000000000400000000000000000000' [ 803.823420][T12975] IPVS: using max 39 ests per chain, 93600 per kthread [ 806.517433][T12992] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5602] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12992] [ 806.880190][T12993] netlink: 'syz.7.1729': attribute type 12 has an invalid length. [ 808.415567][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.093986][ T5739] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 812.128939][T13033] 9pnet_virtio: no channels available for device syz [ 812.400094][ T5739] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 812.401026][ T5739] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 812.401052][ T5739] usb 5-1: config 0 has no interface number 0 [ 812.401089][ T5739] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 812.401116][ T5739] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 812.401145][ T5739] usb 5-1: config 0 interface 200 has no altsetting 0 [ 812.402949][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.402974][ T5739] usb 5-1: Product: syz [ 812.402989][ T5739] usb 5-1: Manufacturer: syz [ 812.403005][ T5739] usb 5-1: SerialNumber: syz [ 812.943114][ T5739] usb 5-1: config 0 descriptor?? [ 813.232718][ T31] audit: type=1400 audit(1791205222.660:1338): avc: denied { lock } for pid=13030 comm="syz.4.1740" path="socket:[35281]" dev="sockfs" ino=35281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 813.310986][ T5739] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input18 [ 813.322473][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.322687][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.323079][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.323337][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.323728][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.324024][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.325582][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.325798][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.326022][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.326246][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.327266][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.327477][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.327673][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.327865][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.328059][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.328254][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.328450][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.328650][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.328848][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.329040][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.329236][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.329458][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.329663][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.329854][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.330050][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.330257][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.330472][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.330677][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.330877][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.331083][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.331279][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.331473][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.331665][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.331857][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.332068][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.332275][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.332472][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.332666][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.332946][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.333141][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.333345][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.333543][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.333750][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.333943][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.334141][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.334339][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.334535][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.334732][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.334926][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.335120][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.335315][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.335508][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.335711][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.335911][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.336105][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.336300][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.336498][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.336692][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.336888][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.337094][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.337299][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.337510][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.337723][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.337932][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.338138][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.338346][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.338553][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.338761][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.338958][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.339155][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.339351][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.339544][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.339736][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.339968][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.340162][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.340357][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.340553][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.340754][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.340959][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.341152][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.341352][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.341545][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.341738][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.341958][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.342152][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.342346][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.342538][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.342730][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.342926][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.343132][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.343323][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.343521][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.343748][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.343940][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.344136][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.344330][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.344526][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.344755][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.344951][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.345147][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.345340][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.345535][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.345746][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.345938][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.346132][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.346325][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.346521][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.346735][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.346933][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.347129][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.347324][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.347514][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.347735][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.347929][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.348128][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.348326][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.348520][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.348745][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.348958][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.349158][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.349356][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.349551][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.349748][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.349946][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.350146][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.350343][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.350538][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.350730][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.350921][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.351114][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.351310][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.351503][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.351691][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.351879][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.352075][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.352272][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.352472][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.352670][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.352862][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.353055][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.353251][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.353449][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.353646][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.353848][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.354046][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.354242][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.354438][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.354637][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.354836][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.355032][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.355229][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.355421][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.355621][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.355819][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.356019][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.356217][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.356411][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.356611][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.356808][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.357002][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.357197][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.357395][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.357587][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.357784][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.357975][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.358169][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.358365][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.358557][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.358750][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.358940][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.359141][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.359339][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.359532][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.359745][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.359939][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.360137][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.360337][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.360538][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.360739][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.360936][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.361134][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.361522][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.361784][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.361997][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.362088][ T5739] usb 5-1: USB disconnect, device number 25 [ 813.362195][ C0] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 813.362219][ C0] usb 5-1: hanwang_irq - usb_submit_urb failed with result -19 [ 813.444716][ T31] audit: type=1400 audit(1791205222.880:1339): avc: denied { write } for pid=13039 comm="syz.3.1745" name="rd_mcp_0" dev="configfs" ino=12686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 813.633737][ T31] audit: type=1400 audit(1791205223.070:1340): avc: denied { write } for pid=13039 comm="syz.3.1745" name="usb_gadget" dev="configfs" ino=22355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 814.893221][ T31] audit: type=1400 audit(1791205223.970:1341): avc: denied { ioctl } for pid=13046 comm="syz.3.1748" path="socket:[35326]" dev="sockfs" ino=35326 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 815.652409][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 817.080457][T13067] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1750'. [ 821.655192][T13110] vlan3: entered promiscuous mode [ 823.969382][ T2264] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 826.232272][ T31] audit: type=1800 audit(1791205235.660:1342): pid=13154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1781" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 827.539388][ T31] audit: type=1400 audit(1791205236.960:1343): avc: denied { read } for pid=13159 comm="syz.4.1773" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 828.842955][ T31] audit: type=1400 audit(1791205238.210:1344): avc: denied { setattr } for pid=13168 comm="syz.6.1774" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 829.369718][T13175] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 830.707855][T13196] ip_tables: iptables: counters copy to user failed while replacing table [ 830.739472][T13196] tipc: New replicast peer: 172.20.20.187 [ 830.740346][T13196] tipc: Enabled bearer , priority 10 [ 830.762251][T13196] /dev/nbd3: Can't lookup blockdev [ 831.087047][ T5689] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 831.229857][ T31] audit: type=1326 audit(1791205240.610:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393a39e199 code=0x7ffc0000 [ 831.230054][ T31] audit: type=1326 audit(1791205240.610:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393a39e199 code=0x7ffc0000 [ 831.230214][ T31] audit: type=1326 audit(1791205240.610:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393a39e199 code=0x7ffc0000 [ 831.230340][ T31] audit: type=1326 audit(1791205240.620:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f393a39e199 code=0x7ffc0000 [ 831.230496][ T31] audit: type=1326 audit(1791205240.620:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393a39e199 code=0x7ffc0000 [ 831.230650][ T31] audit: type=1326 audit(1791205240.620:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393a39e199 code=0x7ffc0000 [ 831.230866][ T31] audit: type=1326 audit(1791205240.620:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393a39e199 code=0x7ffc0000 [ 831.232963][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 831.232993][ T31] audit: type=1326 audit(1791205240.630:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f393a397f17 code=0x7ffc0000 [ 831.233147][ T31] audit: type=1326 audit(1791205240.630:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f393a33f519 code=0x7ffc0000 [ 831.233285][ T31] audit: type=1326 audit(1791205240.630:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f393a397f17 code=0x7ffc0000 [ 831.233448][ T31] audit: type=1326 audit(1791205240.630:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f393a33f519 code=0x7ffc0000 [ 831.233585][ T31] audit: type=1326 audit(1791205240.630:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f393a397f17 code=0x7ffc0000 [ 831.233736][ T31] audit: type=1326 audit(1791205240.640:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f393a33f519 code=0x7ffc0000 [ 831.233895][ T31] audit: type=1326 audit(1791205240.640:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f393a397f17 code=0x7ffc0000 [ 831.234108][ T31] audit: type=1326 audit(1791205240.640:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f393a33f519 code=0x7ffc0000 [ 831.234458][ T31] audit: type=1326 audit(1791205240.640:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f393a397f17 code=0x7ffc0000 [ 831.238123][ T31] audit: type=1326 audit(1791205240.640:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.3.1786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f393a33f519 code=0x7ffc0000 [ 831.255391][ T5689] usb 7-1: Using ep0 maxpacket: 32 [ 831.260273][ T5689] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 831.443726][T13213] trusted_key: encrypted_key: insufficient parameters specified [ 831.847757][ T5689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.847784][ T5689] usb 7-1: Product: syz [ 831.847800][ T5689] usb 7-1: Manufacturer: syz [ 831.847816][ T5689] usb 7-1: SerialNumber: syz [ 831.855724][ T5689] usb 7-1: config 0 descriptor?? [ 832.062897][ T5739] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 832.221646][ T5739] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 832.222578][ T5739] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 832.222601][ T5739] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.257681][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.257710][ T5739] usb 5-1: Product: syz [ 832.257726][ T5739] usb 5-1: Manufacturer: syz [ 832.257742][ T5739] usb 5-1: SerialNumber: syz [ 832.393388][ T2264] usb 7-1: USB disconnect, device number 10 [ 833.387340][ T5739] usb 5-1: USB disconnect, device number 26 [ 833.525332][T13195] udevd[13195]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.882973][ T31] kauditd_printk_skb: 209 callbacks suppressed [ 836.882995][ T31] audit: type=1400 audit(1791205246.010:1588): avc: denied { ioctl } for pid=13246 comm="syz.7.1798" path="socket:[34731]" dev="sockfs" ino=34731 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 837.338284][T13253] netlink: 'syz.4.1797': attribute type 12 has an invalid length. [ 838.399315][T13268] futex_wake_op: syz.7.1801 tries to shift op by 144; fix this program [ 839.692942][T13279] overlayfs: failed to resolve './file0': -2 [ 840.754469][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1805'. [ 840.826026][ T31] audit: type=1400 audit(1791205250.260:1589): avc: denied { read } for pid=13286 comm="syz.6.1806" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 840.831427][ T31] audit: type=1400 audit(1791205250.260:1590): avc: denied { watch } for pid=13286 comm="syz.6.1806" path="/170/file1" dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 840.934601][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 841.063268][ T9687] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.082293][ T9687] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.082459][ T9687] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.082564][ T9687] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.082667][ T9687] netdevsim netdevsim5 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.082789][ T9687] netdevsim netdevsim5 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.091873][ T9687] netdevsim netdevsim5 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.109761][ T9687] netdevsim netdevsim5 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.109880][ T9687] netdevsim netdevsim2 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.109965][ T9687] netdevsim netdevsim2 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.110097][ T9687] netdevsim netdevsim2 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.110199][ T9687] netdevsim netdevsim2 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.243204][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 841.246186][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 844.040097][ T31] audit: type=1400 audit(1791205253.470:1591): avc: denied { write } for pid=13299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.260525][T13319] GUP no longer grows the stack in syz.6.1812 (13319): 200000155000-200000200000 (200000154000) [ 845.260565][T13319] CPU: 1 UID: 0 PID: 13319 Comm: syz.6.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.260598][T13319] Tainted: [L]=SOFTLOCKUP [ 845.260606][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 845.260621][T13319] Call Trace: [ 845.260629][T13319] [ 845.260638][T13319] dump_stack_lvl+0x100/0x190 [ 845.260678][T13319] gup_vma_lookup.cold+0x83/0x96 [ 845.260715][T13319] __get_user_pages+0x252/0x2c30 [ 845.260754][T13319] ? lock_acquire+0x1d1/0x380 [ 845.260780][T13319] ? mtree_load+0xdc/0xb50 [ 845.260808][T13319] ? __pfx___get_user_pages+0x10/0x10 [ 845.260836][T13319] ? mtree_load+0x388/0xb50 [ 845.260861][T13319] ? mtree_load+0x388/0xb50 [ 845.260897][T13319] get_user_pages_remote+0x3d2/0xb10 [ 845.260927][T13319] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 845.260959][T13319] ? __pfx_get_user_pages_remote+0x10/0x10 [ 845.261007][T13319] __access_remote_vm+0x3bb/0x890 [ 845.261043][T13319] ? __pfx___access_remote_vm+0x10/0x10 [ 845.261072][T13319] ? rep_movs_alternative+0x4a/0xa0 [ 845.261113][T13319] proc_pid_cmdline_read+0x552/0x9a0 [ 845.261149][T13319] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 845.261185][T13319] ? rw_verify_area+0xce/0x6d0 [ 845.261211][T13319] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 845.261243][T13319] vfs_readv+0x5d8/0x8d0 [ 845.261276][T13319] ? __pfx_vfs_readv+0x10/0x10 [ 845.261308][T13319] ? lock_acquire+0x1d1/0x380 [ 845.261334][T13319] ? __fget_files+0x34/0x3d0 [ 845.261376][T13319] ? __fget_files+0x21f/0x3d0 [ 845.261415][T13319] ? do_preadv+0x1ac/0x270 [ 845.261438][T13319] do_preadv+0x1ac/0x270 [ 845.261464][T13319] ? __pfx_do_preadv+0x10/0x10 [ 845.261497][T13319] do_syscall_64+0x123/0x790 [ 845.261526][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.261550][T13319] RIP: 0033:0x7f0b1dd9e199 [ 845.261570][T13319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.261590][T13319] RSP: 002b:00007f0b1ebe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 845.261613][T13319] RAX: ffffffffffffffda RBX: 00007f0b1e025fa0 RCX: 00007f0b1dd9e199 [ 845.261629][T13319] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 845.261643][T13319] RBP: 00007f0b1de350b8 R08: 0000000000006a76 R09: 0000000000000000 [ 845.261658][T13319] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 845.261672][T13319] R13: 00007f0b1e026038 R14: 00007f0b1e025fa0 R15: 00007ffef92cd048 [ 845.261704][T13319] [ 846.100079][ T31] audit: type=1400 audit(1791205255.530:1592): avc: denied { write } for pid=13333 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.655074][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 849.883075][T13369] syzkaller0: entered promiscuous mode [ 849.883099][T13369] syzkaller0: entered allmulticast mode [ 850.012874][ T31] audit: type=1400 audit(1791205259.440:1593): avc: denied { write } for pid=13346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.252307][T12898] syz_tun (unregistering): left allmulticast mode [ 850.252325][T12898] syz_tun (unregistering): left promiscuous mode [ 850.252364][T12898] bridge0: port 3(syz_tun) entered disabled state [ 850.414678][T13380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 850.421254][T13380] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 850.438149][T13380] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 850.446417][ T31] audit: type=1400 audit(1791205259.880:1594): avc: denied { write } for pid=13377 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.473074][T13380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 850.482594][T13380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 853.365384][ T5606] Bluetooth: hci2: command tx timeout [ 855.374217][ T5606] Bluetooth: hci2: command tx timeout [ 857.244245][T13378] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.244385][T13378] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.244513][T13378] bridge_slave_0: entered allmulticast mode [ 857.246118][T13378] bridge_slave_0: entered promiscuous mode [ 857.249230][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.249394][T13378] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.249507][T13378] bridge_slave_1: entered allmulticast mode [ 857.251160][T13378] bridge_slave_1: entered promiscuous mode [ 857.459515][T13378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.488224][T13378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.512931][ T5606] Bluetooth: hci2: command tx timeout [ 857.602534][T13378] team0: Port device team_slave_0 added [ 857.624718][T13378] team0: Port device team_slave_1 added [ 857.839515][T13378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.839531][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.839548][T13378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.848642][T13378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.848656][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.848679][T13378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.435908][T13378] hsr_slave_0: entered promiscuous mode [ 858.438410][T13378] hsr_slave_1: entered promiscuous mode [ 858.481750][T13456] binder: 13455:13456 ioctl 4018620d 0 returned -22 [ 859.542893][ T5606] Bluetooth: hci2: command tx timeout [ 862.421319][T13472] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1834'. [ 862.626951][T13378] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 862.665876][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 862.668386][T13378] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 862.702284][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.729915][T13378] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 863.272550][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 863.284868][T13378] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 863.317046][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 863.447722][T13490] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 863.554839][T13378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.586919][T13378] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.605824][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.605908][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.640542][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.640639][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.211794][ T31] audit: type=1400 audit(1791205274.640:1595): avc: denied { write } for pid=13477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.485032][ T31] audit: type=1400 audit(1791205274.920:1596): avc: denied { write } for pid=13509 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.577889][T13378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.696429][T13536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.282773][T13558] tipc: Enabled bearer , priority 0 [ 869.288547][T13558] syzkaller0: entered promiscuous mode [ 869.288568][T13558] syzkaller0: entered allmulticast mode [ 869.856288][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.911976][T13378] veth0_vlan: entered promiscuous mode [ 869.926130][T13378] veth1_vlan: entered promiscuous mode [ 869.957236][T13378] veth0_macvtap: entered promiscuous mode [ 869.961368][T13378] veth1_macvtap: entered promiscuous mode [ 870.030905][T13558] tipc: Resetting bearer [ 870.034012][T13378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.051255][T13557] tipc: Resetting bearer [ 870.831057][ T31] audit: type=1400 audit(1791205280.260:1597): avc: denied { write } for pid=13546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 872.365018][T13557] tipc: Disabling bearer [ 872.804763][ T31] audit: type=1400 audit(1791205282.230:1598): avc: denied { write } for pid=13582 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 872.805939][T11235] tipc: Node number set to 500587831 [ 872.816188][T13378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.830494][ T8499] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.832340][ T8499] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.832562][ T8499] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.907969][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.148101][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.148124][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.205597][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.205618][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.297601][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1857'. [ 873.297626][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1857'. [ 876.883029][ T5606] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 876.883100][ T31] audit: type=1326 audit(1791205286.310:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13608 comm="syz.7.1862" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efddc99e199 code=0x0 [ 878.290772][ T31] audit: type=1400 audit(1791205287.720:1600): avc: denied { create } for pid=13608 comm="syz.7.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 880.306511][T11235] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 880.474971][T11235] usb 9-1: unable to get BOS descriptor or descriptor too short [ 880.475455][T11235] usb 9-1: not running at top speed; connect to a high speed hub [ 880.475486][T11235] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.48 [ 880.476478][T11235] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.476500][T11235] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.479233][T11235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.479261][T11235] usb 9-1: Product: syz [ 880.479277][T11235] usb 9-1: Manufacturer: syz [ 880.479293][T11235] usb 9-1: SerialNumber: syz [ 882.270646][T13652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1863'. [ 882.619569][T11235] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 885.040327][T11235] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 885.063954][T11235] usb 9-1: USB disconnect, device number 2 [ 885.696070][T13653] udevd[13653]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.726428][T13676] netlink: 'syz.7.1870': attribute type 4 has an invalid length. [ 885.999914][T13678] erspan2: entered allmulticast mode [ 887.463740][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1883'. [ 887.616115][ T31] audit: type=1400 audit(1791205297.050:1601): avc: denied { nlmsg_tty_audit } for pid=13693 comm="syz.8.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 889.943209][T13707] bond1: option mode: unable to set because the bond device has slaves [ 889.954297][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 889.954316][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1876'. [ 890.015053][T13708] netlink: 'syz.4.1876': attribute type 4 has an invalid length. [ 890.015076][T13708] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1876'. [ 890.053355][T13708] .`: renamed from bond0 [ 890.055385][T13708] bond1: Primary slave changed to .`, reselecting active slave [ 891.944860][T13728] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1890'. [ 891.944887][T13728] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1890'. [ 891.944902][T13728] netlink: 31 bytes leftover after parsing attributes in process `syz.6.1890'. [ 891.971418][T13722] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 893.990526][ T31] audit: type=1400 audit(1791205303.420:1602): avc: denied { write } for pid=13738 comm="syz.8.1893" name="dlm" dev="configfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 894.203848][ T31] audit: type=1400 audit(1791205303.640:1603): avc: denied { write } for pid=13738 comm="syz.8.1893" name="comms" dev="configfs" ino=38007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 894.241575][ T31] audit: type=1400 audit(1791205303.640:1604): avc: denied { write } for pid=13738 comm="syz.8.1893" name="comms" dev="configfs" ino=38007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 895.466775][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1896'. [ 895.796871][T13756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.030173][T13762] hub 1-0:1.0: USB hub found [ 897.031630][T13762] hub 1-0:1.0: 1 port detected [ 897.691742][ T31] audit: type=1400 audit(1791205307.120:1605): avc: denied { write } for pid=13772 comm="syz.6.1903" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 898.715033][T13783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1905'. [ 898.715071][T13783] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1905'. [ 899.120571][T13791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1904'. [ 903.156627][ T25] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 903.805359][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 903.805389][ T25] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 903.867481][ T25] usb 5-1: config 8 has an invalid interface number: 109 but max is 0 [ 903.867510][ T25] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 903.867532][ T25] usb 5-1: config 8 has no interface number 0 [ 903.867569][ T25] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 903.867604][ T25] usb 5-1: config 8 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.442364][ T25] usb 5-1: string descriptor 0 read error: -71 [ 904.442484][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.892449][ T25] usb 5-1: can't set config #8, error -71 [ 904.947148][ T25] usb 5-1: USB disconnect, device number 27 [ 909.311564][T13829] syzkaller0: entered promiscuous mode [ 909.311594][T13829] syzkaller0: entered allmulticast mode [ 909.486814][T13832] 0: reclassify loop, rule prio 0, protocol 700 [ 909.660271][T13826] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1917'. [ 909.926785][T13831] syzkaller0: entered promiscuous mode [ 909.926820][T13831] syzkaller0: entered allmulticast mode [ 918.355324][T13902] trusted_key: encrypted_key: insufficient parameters specified [ 919.934340][ T5715] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 920.146005][ T5715] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 920.197776][ T5715] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 920.197940][ T5715] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.301999][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.302024][ T5715] usb 7-1: Product: syz [ 920.302038][ T5715] usb 7-1: Manufacturer: syz [ 920.302055][ T5715] usb 7-1: SerialNumber: syz [ 921.706018][T13902] bridge0: port 4(wlan1) entered blocking state [ 921.706181][T13902] bridge0: port 4(wlan1) entered disabled state [ 921.706378][T13902] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 921.789919][T13902] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 923.651008][T13934] bridge0: port 4(wlan1) entered disabled state [ 923.695099][T13934] mac80211_hwsim hwsim16 wlan1 (unregistering): left allmulticast mode [ 923.695136][T13934] mac80211_hwsim hwsim16 wlan1 (unregistering): left promiscuous mode [ 923.697269][T13934] bridge0: port 4(wlan1) entered disabled state [ 924.499664][T13951] sctp: [Deprecated]: syz.8.1945 (pid 13951) Use of int in max_burst socket option. [ 924.499664][T13951] Use struct sctp_assoc_value instead [ 925.732165][T13959] ip_tables: iptables: counters copy to user failed while replacing table [ 927.517338][ T31] audit: type=1800 audit(1791205336.520:1606): pid=13966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1951" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 928.072191][ T5715] usb 7-1: USB disconnect, device number 11 [ 928.185148][T13869] udevd[13869]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.334762][T13984] tps6598x 0-0020: failed to read vendor ID: -5, vid: 0x0 [ 929.335641][T13984] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20 [ 929.578760][ T31] audit: type=1400 audit(1791205339.010:1607): avc: denied { unmount } for pid=10738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 929.825340][T13995] netlink: 'syz.6.1957': attribute type 1 has an invalid length. [ 931.309456][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.638799][ T31] audit: type=1400 audit(1791205345.040:1608): avc: denied { remount } for pid=14013 comm="syz.7.1963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 938.331122][T14047] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 938.840295][T14028] team0: Port device macvlan2 removed [ 938.948616][T14028] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 938.970465][T14028] bond0 (unregistering): Released all slaves [ 943.093041][ T25] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 944.243050][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 944.245286][ T25] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 944.246219][ T25] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 944.246244][ T25] usb 9-1: config 0 has no interface number 0 [ 944.246280][ T25] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 944.246307][ T25] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 944.262932][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.262958][ T25] usb 9-1: Product: syz [ 944.262974][ T25] usb 9-1: Manufacturer: syz [ 944.263000][ T25] usb 9-1: SerialNumber: syz [ 944.269313][ T25] usb 9-1: config 0 descriptor?? [ 944.271429][T14080] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 944.271550][T14080] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 944.504236][T14080] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 944.504372][T14080] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 944.714454][ T25] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 946.387029][ T25] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 946.387062][ T25] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 946.412362][ T25] asix 9-1:0.34: probe with driver asix failed with error -71 [ 946.425540][ T25] usb 9-1: USB disconnect, device number 3 [ 946.468540][T14086] udevd[14086]: setting owner of /dev/bus/usb/009/003 to uid=0, gid=0 failed: No such file or directory [ 948.693117][T14122] overlayfs: failed to resolve './file0': -2 [ 950.204574][T14137] ip_tables: iptables: counters copy to user failed while replacing table [ 951.403223][ T59] IPVS: starting estimator thread 0... [ 951.492882][T14146] IPVS: using max 40 ests per chain, 96000 per kthread [ 951.684289][T14151] ip_tables: iptables: counters copy to user failed while replacing table [ 953.509387][T14159] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 955.152867][T13591] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 955.911192][T13591] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 955.912313][T13591] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 955.912345][T13591] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 955.912369][T13591] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 955.912396][T13591] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 955.970585][T13591] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.970614][T13591] usb 9-1: Product: syz [ 955.970630][T13591] usb 9-1: Manufacturer: syz [ 955.970647][T13591] usb 9-1: SerialNumber: syz [ 955.998701][T13591] usb 9-1: config 0 descriptor?? [ 957.244174][T13591] adutux 9-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 957.250155][T13591] usb 9-1: USB disconnect, device number 4 [ 961.202940][T14215] netlink: 'syz.7.2008': attribute type 9 has an invalid length. [ 961.719656][T14221] syzkaller0: entered promiscuous mode [ 961.719671][T14221] syzkaller0: entered allmulticast mode [ 961.745554][T14220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14220 comm=syz.8.2010 [ 962.074554][ T5763] kworker/1:7 (5763) used greatest stack depth: 18120 bytes left [ 963.640642][T14234] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5603] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14234] [ 963.666242][ T5606] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 963.905585][T14239] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 963.905640][T14239] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 963.905717][T14239] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 964.055914][T14239] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 966.526964][ T31] audit: type=1400 audit(1791205375.960:1609): avc: denied { checkpoint_restore } for pid=14261 comm="syz.1.2020" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 967.079891][T14270] comedi comedi0: No hardware detected at I/O base 0x300 [ 967.977333][T14275] erspan1: entered allmulticast mode [ 970.556096][T14297] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8968] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14297] [ 971.571622][ T5606] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 972.884882][T13380] block nbd8: Receive control failed (result -107) [ 972.949171][T14306] nbd8: detected capacity change from 0 to 18 [ 974.706858][T13380] Bluetooth: hci2: command 0x0406 tx timeout [ 974.735519][ T2396] block nbd8: Dead connection, failed to find a fallback [ 974.735541][ T2396] block nbd8: shutting down sockets [ 974.735603][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.735621][ T2396] buffer_io_error: 320 callbacks suppressed [ 974.735628][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.742579][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.742609][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.795946][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.795980][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.822151][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.822173][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.822273][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.822288][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.822368][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.822381][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.822452][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.822466][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.822527][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.822541][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.822562][T14314] ldm_validate_partition_table(): Disk read failed. [ 974.822610][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.822623][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.873002][ T2396] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 974.873035][ T2396] Buffer I/O error on dev nbd8, logical block 0, async page read [ 974.873263][T14314] Dev nbd8: unable to read RDB block 0 [ 974.902321][T14314] nbd8: unable to read partition table [ 974.902514][T14314] nbd8: partition table beyond EOD, truncated [ 975.001872][T14314] ldm_validate_partition_table(): Disk read failed. [ 975.011367][T14314] Dev nbd8: unable to read RDB block 0 [ 975.012802][T14314] nbd8: unable to read partition table [ 975.012997][T14314] nbd8: partition table beyond EOD, truncated [ 979.533154][T13591] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 979.682976][T13591] usb 9-1: Using ep0 maxpacket: 32 [ 979.683658][T13591] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 979.684585][T13591] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 979.684609][T13591] usb 9-1: config 0 has no interface number 0 [ 979.686496][T13591] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.686522][T13591] usb 9-1: Product: syz [ 979.686539][T13591] usb 9-1: Manufacturer: syz [ 979.686556][T13591] usb 9-1: SerialNumber: syz [ 979.697722][T13591] usb 9-1: config 0 descriptor?? [ 979.764270][T13591] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 980.005945][T13591] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 980.031631][T13591] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 980.684000][T14345] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 981.498556][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 981.498837][ T92] usb 9-1: USB disconnect, device number 5 [ 981.528202][ T92] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 981.571109][ T92] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 981.571743][ T92] quatech2 9-1:0.51: device disconnected [ 981.594998][T14348] syzkaller0: entered promiscuous mode [ 981.595017][T14348] syzkaller0: entered allmulticast mode [ 981.646501][T14348] tc mirred to Houston: device batadv_slave_0 is down [ 982.046035][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2042'. [ 982.046060][T14358] openvswitch: netlink: Message has 1 unknown bytes. [ 982.080760][ T31] audit: type=1400 audit(1791205391.510:1610): avc: denied { mount } for pid=14357 comm="syz.7.2042" name="/" dev="hugetlbfs" ino=39504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 982.566658][T14370] dlm: no locking on control device [ 983.206877][T14363] kvm [14362]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf714 [ 983.604410][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 984.523318][ T31] audit: type=1400 audit(1791205393.940:1611): avc: denied { bind } for pid=14382 comm="syz.1.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 984.527850][ T31] audit: type=1400 audit(1791205393.960:1612): avc: denied { listen } for pid=14382 comm="syz.1.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 986.685520][ T31] audit: type=1400 audit(1791205396.120:1613): avc: denied { unmount } for pid=10738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 993.368215][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.809717][ T5606] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 997.730243][T14460] overlayfs: failed to clone lowerpath [ 997.756326][T14455] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 997.756326][T14455] The task syz.6.2071 (14455) triggered the difference, watch for misbehavior. [ 998.348815][T14467] bridge0: port 3(netdevsim0) entered blocking state [ 998.350216][T14467] bridge0: port 3(netdevsim0) entered disabled state [ 998.356015][T14467] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 998.458517][T14467] netlink: 'syz.7.2080': attribute type 10 has an invalid length. [ 998.458775][T14467] bridge0: left promiscuous mode [ 998.494254][T14467] bridge0: entered promiscuous mode [ 998.503866][T14467] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1005.497534][ T158] IPVS: starting estimator thread 0... [ 1005.614907][T14506] IPVS: using max 36 ests per chain, 86400 per kthread [ 1006.011540][ T31] audit: type=1400 audit(1791205415.440:1614): avc: denied { write } for pid=14509 comm="syz.4.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1006.011621][T14510] ieee802154 phy1 wpan1: encryption failed: -22 [ 1006.057998][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb285 instead [ 1006.058016][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0794 instead [ 1006.058025][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x7a8f instead [ 1006.058035][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x3ac4 instead [ 1006.058044][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xccd1 instead [ 1006.058054][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x6270 instead [ 1006.058063][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x258e instead [ 1006.058073][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x54ac instead [ 1006.058082][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x3835 instead [ 1006.058092][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x4db4 instead [ 1006.058101][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.058342][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x341f instead [ 1006.058358][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x334e instead [ 1006.058367][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x94b7 instead [ 1006.058377][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x99fc instead [ 1006.058386][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x02dd instead [ 1006.058396][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x1b71 instead [ 1006.058406][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0cf5 instead [ 1006.058416][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x0d72 instead [ 1006.058425][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x9721 instead [ 1006.058435][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x4167 instead [ 1006.058444][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.058691][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x1527 instead [ 1006.058700][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xe3b3 instead [ 1006.058710][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xca3b instead [ 1006.058719][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xc348 instead [ 1006.058728][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x32bb instead [ 1006.058737][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xacf3 instead [ 1006.058746][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xebd6 instead [ 1006.058755][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x1c10 instead [ 1006.058764][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x9507 instead [ 1006.058773][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x9dae instead [ 1006.058781][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.062071][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x6837 instead [ 1006.062096][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xd36b instead [ 1006.062114][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x0aaa instead [ 1006.062134][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xb54d instead [ 1006.062153][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xa93d instead [ 1006.062169][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xc747 instead [ 1006.062197][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xdf20 instead [ 1006.062215][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x4d68 instead [ 1006.062233][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xa568 instead [ 1006.062269][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x00c1 instead [ 1006.062285][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.145415][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xc61f instead [ 1006.145441][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xf06a instead [ 1006.145459][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x958d instead [ 1006.145478][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x9103 instead [ 1006.145495][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xf9b4 instead [ 1006.145512][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xfa18 instead [ 1006.145529][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x85e7 instead [ 1006.145545][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x9fed instead [ 1006.145562][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x9df6 instead [ 1006.145580][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x8ecd instead [ 1006.145596][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.187087][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x5788 instead [ 1006.187116][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xf017 instead [ 1006.187135][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x7f8b instead [ 1006.187153][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xdbc3 instead [ 1006.187171][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x5a30 instead [ 1006.187188][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xc82a instead [ 1006.187205][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf49f instead [ 1006.187222][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x4616 instead [ 1006.187239][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xbfe7 instead [ 1006.187256][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xa0a2 instead [ 1006.187273][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.187742][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4cc4 instead [ 1006.187760][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x67da instead [ 1006.187778][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x31b0 instead [ 1006.187796][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x015a instead [ 1006.187813][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x7338 instead [ 1006.187831][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xddf5 instead [ 1006.187856][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xbeed instead [ 1006.187874][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x10c1 instead [ 1006.187892][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x7b8b instead [ 1006.187909][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xb91c instead [ 1006.187927][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.188423][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xc33b instead [ 1006.188442][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xcea8 instead [ 1006.188459][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x5872 instead [ 1006.205737][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xc09b instead [ 1006.205760][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x68c5 instead [ 1006.205782][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x1ac1 instead [ 1006.205800][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x2fbf instead [ 1006.205819][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x220a instead [ 1006.205844][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x4402 instead [ 1006.205862][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x6ec3 instead [ 1006.205879][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.206385][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x9cd4 instead [ 1006.206404][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xfe3e instead [ 1006.206422][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x76e2 instead [ 1006.206440][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x65df instead [ 1006.206457][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x2479 instead [ 1006.206475][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x3c77 instead [ 1006.206494][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8bb6 instead [ 1006.206511][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x51ba instead [ 1006.206529][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xe7a4 instead [ 1006.206546][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xaf69 instead [ 1006.206564][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.207048][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x32c6 instead [ 1006.207067][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x6e43 instead [ 1006.207085][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x501c instead [ 1006.207103][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x939b instead [ 1006.207121][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x4955 instead [ 1006.226309][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xbed1 instead [ 1006.226334][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x0051 instead [ 1006.226353][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xdd2a instead [ 1006.226371][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xdf07 instead [ 1006.226389][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xe367 instead [ 1006.226406][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.226914][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x6972 instead [ 1006.226933][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xa02d instead [ 1006.226951][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x848e instead [ 1006.226968][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xb3ca instead [ 1006.226986][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x7fc6 instead [ 1006.227003][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x6484 instead [ 1006.227020][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd51c instead [ 1006.227038][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x0fec instead [ 1006.227055][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x8cf5 instead [ 1006.227072][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x8b61 instead [ 1006.227089][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.227551][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xeb1b instead [ 1006.227569][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xaa4e instead [ 1006.227587][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x9037 instead [ 1006.227604][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x8e9e instead [ 1006.227620][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x0eac instead [ 1006.227636][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xdb0d instead [ 1006.227653][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x30ef instead [ 1006.227669][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xd354 instead [ 1006.227686][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x6b30 instead [ 1006.227704][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xdb85 instead [ 1006.246294][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.246783][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x86f5 instead [ 1006.246803][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xec62 instead [ 1006.246820][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xaab3 instead [ 1006.246842][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x3ee6 instead [ 1006.246859][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x5d04 instead [ 1006.246876][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xc9d3 instead [ 1006.246893][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1f03 instead [ 1006.246910][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xa6fb instead [ 1006.246938][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xd4a1 instead [ 1006.246954][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xfd9b instead [ 1006.246970][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.247429][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x50cc instead [ 1006.247447][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x9dc4 instead [ 1006.247463][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x4134 instead [ 1006.247480][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x37af instead [ 1006.247496][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x30d8 instead [ 1006.247513][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xc051 instead [ 1006.247530][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x6c1a instead [ 1006.247547][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x0af4 instead [ 1006.247564][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x2a86 instead [ 1006.247581][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x3ace instead [ 1006.247597][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.248335][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x250d instead [ 1006.248354][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xe5d1 instead [ 1006.248371][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x131a instead [ 1006.248387][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xa6c5 instead [ 1006.248404][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x4526 instead [ 1006.248421][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x18c9 instead [ 1006.248438][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xe6be instead [ 1006.248455][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x52be instead [ 1006.248471][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x095c instead [ 1006.248487][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xb367 instead [ 1006.248504][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.248973][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xef53 instead [ 1006.248990][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x4ce8 instead [ 1006.249007][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xe7aa instead [ 1006.249025][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x3a28 instead [ 1006.249041][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x1b34 instead [ 1006.249059][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x74d0 instead [ 1006.249075][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x20c5 instead [ 1006.249092][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xa4b9 instead [ 1006.249109][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x71a4 instead [ 1006.249126][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x65b9 instead [ 1006.249152][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.249633][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xa09f instead [ 1006.249650][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x9e62 instead [ 1006.249667][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x56b2 instead [ 1006.249684][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x2a1f instead [ 1006.249700][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x260f instead [ 1006.249717][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x02e6 instead [ 1006.249733][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x3bf6 instead [ 1006.249750][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x26a5 instead [ 1006.249767][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x3657 instead [ 1006.249784][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x8966 instead [ 1006.249801][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.250268][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x164f instead [ 1006.250286][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x791f instead [ 1006.250302][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0xfa68 instead [ 1006.250318][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xe844 instead [ 1006.250334][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x6c74 instead [ 1006.250352][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x98ab instead [ 1006.250369][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x859c instead [ 1006.250386][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x66a5 instead [ 1006.250403][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0xef04 instead [ 1006.250420][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x4074 instead [ 1006.250435][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.255894][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x3c9b instead [ 1006.255915][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x5950 instead [ 1006.255932][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xab7a instead [ 1006.255949][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xe7e2 instead [ 1006.255965][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x3315 instead [ 1006.255982][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xda1c instead [ 1006.255999][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x95c4 instead [ 1006.256015][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x60e3 instead [ 1006.256032][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xbc55 instead [ 1006.256524][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x96d8 instead [ 1006.256542][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.257013][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xe924 instead [ 1006.257031][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x4ca5 instead [ 1006.257047][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x4166 instead [ 1006.257064][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x2c64 instead [ 1006.257082][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xaa84 instead [ 1006.257098][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0xaac7 instead [ 1006.257115][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x87a3 instead [ 1006.257132][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xc4ff instead [ 1006.257149][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xce50 instead [ 1006.257166][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x6259 instead [ 1006.257182][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.270844][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x8714 instead [ 1006.270868][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x224a instead [ 1006.270885][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0xe8a6 instead [ 1006.270902][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x5590 instead [ 1006.270919][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x4170 instead [ 1006.270936][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x4132 instead [ 1006.270953][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x864b instead [ 1006.270969][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x2efa instead [ 1006.270986][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x7182 instead [ 1006.271009][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x70ac instead [ 1006.271025][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.271531][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x7584 instead [ 1006.271549][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0xe75a instead [ 1006.271566][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x1a63 instead [ 1006.271583][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x5f1c instead [ 1006.271599][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x22cf instead [ 1006.271616][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0xe067 instead [ 1006.271633][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x2d1a instead [ 1006.271651][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x257f instead [ 1006.271668][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0xa9bf instead [ 1006.271684][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xe2a8 instead [ 1006.271701][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.272172][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x78c5 instead [ 1006.272190][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x73dc instead [ 1006.272206][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x63ef instead [ 1006.272223][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xc389 instead [ 1006.278417][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x2747 instead [ 1006.278436][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x5e0d instead [ 1006.278453][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x149f instead [ 1006.278471][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0xc34e instead [ 1006.278488][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x5ae3 instead [ 1006.278505][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0xa75a instead [ 1006.278522][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.278996][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x440c instead [ 1006.279013][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xc303 instead [ 1006.279030][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x0ee3 instead [ 1006.279046][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x5795 instead [ 1006.279063][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0xc549 instead [ 1006.279080][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x4d86 instead [ 1006.279096][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x4c85 instead [ 1006.279114][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x5ec9 instead [ 1006.279130][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xa221 instead [ 1006.279147][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0xbaeb instead [ 1006.279163][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.279652][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x61d2 instead [ 1006.279670][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x1bcb instead [ 1006.279686][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x8dc8 instead [ 1006.279703][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xc9c3 instead [ 1006.279720][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x9606 instead [ 1006.279736][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0xe801 instead [ 1006.279754][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x93d1 instead [ 1006.279771][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x7cbe instead [ 1006.279792][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x55c9 instead [ 1006.279809][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0xa4fb instead [ 1006.279825][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.284365][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x7d43 instead [ 1006.284385][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x9d7c instead [ 1006.284400][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x6f58 instead [ 1006.284416][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x928f instead [ 1006.284431][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x4f2b instead [ 1006.284448][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x1a32 instead [ 1006.284464][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xafd6 instead [ 1006.284480][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x5f03 instead [ 1006.284496][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xbd8c instead [ 1006.284512][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xb823 instead [ 1006.284528][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.284982][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xc267 instead [ 1006.285000][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x9bcf instead [ 1006.285017][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x5c23 instead [ 1006.285034][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x39bf instead [ 1006.285051][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x423c instead [ 1006.285068][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xb24e instead [ 1006.285085][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xcbdc instead [ 1006.285102][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x5848 instead [ 1006.285118][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xa585 instead [ 1006.285135][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xe45b instead [ 1006.285152][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.299067][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x004e instead [ 1006.299089][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x5064 instead [ 1006.299107][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x1386 instead [ 1006.299124][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x0408 instead [ 1006.299141][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0xe31b instead [ 1006.299158][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x475a instead [ 1006.299175][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x134e instead [ 1006.299194][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x4a10 instead [ 1006.299211][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xc145 instead [ 1006.299229][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xa3b9 instead [ 1006.299246][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.299710][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x38e1 instead [ 1006.299728][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x1f1d instead [ 1006.299745][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x6fca instead [ 1006.299762][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0xdff4 instead [ 1006.299806][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x38ab instead [ 1006.299823][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x614b instead [ 1006.299840][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xc2c0 instead [ 1006.299857][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0xf4d3 instead [ 1006.299906][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xd71d instead [ 1006.299924][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x8f22 instead [ 1006.299948][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.304668][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x88bc instead [ 1006.304689][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xb782 instead [ 1006.304706][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x32f9 instead [ 1006.304723][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x8a60 instead [ 1006.304740][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x7d73 instead [ 1006.304757][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x3462 instead [ 1006.304779][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5eb8 instead [ 1006.304796][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x868e instead [ 1006.304813][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x7a6c instead [ 1006.304829][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x1176 instead [ 1006.304846][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.305308][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0xbab1 instead [ 1006.305325][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xadac instead [ 1006.305342][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x708e instead [ 1006.305359][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x06c0 instead [ 1006.305375][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0xe6e2 instead [ 1006.305392][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x144e instead [ 1006.305409][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x88fb instead [ 1006.305425][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x6821 instead [ 1006.305442][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x7f70 instead [ 1006.305459][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x59b4 instead [ 1006.305475][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.308292][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xdf65 instead [ 1006.308312][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0317 instead [ 1006.308329][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x6459 instead [ 1006.308346][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0xdf40 instead [ 1006.308363][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x9c41 instead [ 1006.308380][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xea9f instead [ 1006.308396][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x0985 instead [ 1006.308412][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x2357 instead [ 1006.308429][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x13bb instead [ 1006.308446][T14510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x606c instead [ 1006.308462][T14510] jffs2: Further such events for this erase block will not be printed [ 1006.310083][T14510] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1006.310094][T14510] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1008.018773][T14516] nft_compat: unsupported protocol 15 [ 1009.394036][T14528] syzkaller0: entered promiscuous mode [ 1009.394057][T14528] syzkaller0: entered allmulticast mode [ 1010.567372][T14539] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.842855][ T31] audit: type=1800 audit(1791205424.270:1615): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2100" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 1015.530811][T14566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1020.965868][ T31] audit: type=1400 audit(1791205430.400:1616): avc: denied { mounton } for pid=14595 comm="syz.1.2109" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1021.401148][T14606] hub 1-0:1.0: USB hub found [ 1021.404194][T14606] hub 1-0:1.0: 1 port detected [ 1027.673604][ T31] audit: type=1400 audit(1791205437.100:1617): avc: denied { mount } for pid=14625 comm="syz.4.2111" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1031.277865][T14639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.759369][T14659] raw_sendmsg: syz.4.2120 forgot to set AF_INET. Fix it! [ 1031.884857][T14658] xt_CT: No such helper "netbios-ns" [ 1032.038834][T14670] overlayfs: failed to clone lowerpath [ 1033.484002][T14679] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1034.492883][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1037.589821][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2130'. [ 1037.589847][T14709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.591189][T14709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.448311][ T31] audit: type=1400 audit(1791205447.880:1618): avc: denied { kexec_image_load } for pid=14712 comm="syz.4.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1044.948064][ T31] audit: type=1400 audit(1791205454.380:1619): avc: denied { open } for pid=14785 comm="syz.6.2157" path="/dev/ttyr1" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1045.585508][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2147'. [ 1045.587243][T14791] netlink: 'syz.8.2147': attribute type 12 has an invalid length. [ 1045.587265][T14791] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2147'. [ 1046.657489][ T31] audit: type=1400 audit(1791205456.090:1620): avc: denied { ioctl } for pid=14796 comm="syz.8.2159" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1049.769977][T14809] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2164'. [ 1049.774780][T14809] CUSE: unknown device info "" [ 1049.774793][T14809] CUSE: unknown device info "" [ 1049.774801][T14809] CUSE: unknown device info "" [ 1049.774808][T14809] CUSE: unknown device info "" [ 1049.774817][T14809] CUSE: unknown device info "ÿ" [ 1049.774825][T14809] CUSE: zero length info key specified [ 1050.159605][T14813] binder: 14810:14813 ioctl 4018620d 0 returned -22 [ 1050.162646][T14813] binder: 14810:14813 ioctl c018937b 0 returned -22 [ 1051.563706][T14822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.776279][ T31] audit: type=1400 audit(1791205461.210:1621): avc: denied { create } for pid=14830 comm="syz.6.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1052.889842][T14828] 9p: Bad value for 'rfdno' [ 1052.998842][ T31] audit: type=1400 audit(1791205462.430:1622): avc: denied { create } for pid=14839 comm="syz.7.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1054.174636][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.789528][T14857] netlink: 'syz.4.2174': attribute type 2 has an invalid length. [ 1054.789551][T14857] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 1054.789568][T14857] netlink: 'syz.4.2174': attribute type 2 has an invalid length. [ 1054.789581][T14857] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 1054.789594][T14857] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 1054.793887][T14857] netlink: 'syz.4.2174': attribute type 2 has an invalid length. [ 1056.751569][T14874] geneve2: entered promiscuous mode [ 1056.782958][ T1442] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 33055 - 0 [ 1056.783014][ T1442] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 33055 - 0 [ 1056.783050][ T1442] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 33055 - 0 [ 1056.783083][ T1442] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 33055 - 0 [ 1056.877570][ T31] audit: type=1400 audit(1791205466.310:1623): avc: denied { write } for pid=14876 comm="syz.7.2180" name="functions" dev="configfs" ino=21046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1056.946285][ T31] audit: type=1400 audit(1791205466.380:1624): avc: denied { write } for pid=14876 comm="syz.7.2180" name="c.1" dev="configfs" ino=21051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1056.947651][ T31] audit: type=1400 audit(1791205466.380:1625): avc: denied { write } for pid=14876 comm="syz.7.2180" name="c.1" dev="configfs" ino=21051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1057.853771][T14887] UDC core: g1: couldn't find an available UDC or it's busy [ 1058.549841][ T31] audit: type=1400 audit(1791205467.960:1626): avc: denied { write } for pid=14897 comm="syz.7.2186" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1058.604800][ T31] audit: type=1400 audit(1791205468.040:1627): avc: denied { ioctl } for pid=14897 comm="syz.7.2186" path="/dev/usbmon9" dev="devtmpfs" ino=742 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1060.382970][ T25] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1060.535314][ T25] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1060.566668][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.566910][ T25] usb 9-1: Product: syz [ 1060.567063][ T25] usb 9-1: Manufacturer: syz [ 1060.567219][ T25] usb 9-1: SerialNumber: syz [ 1060.758497][ T25] usb 9-1: config 0 descriptor?? [ 1061.195971][ T25] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1061.561830][T14927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2193'. [ 1061.561950][T14927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.587011][T14927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.908209][ T31] audit: type=1400 audit(1791205471.340:1628): avc: denied { create } for pid=14933 comm="syz.1.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1062.056368][ T31] audit: type=1400 audit(1791205471.420:1629): avc: denied { map } for pid=14936 comm="syz.4.2195" path="socket:[41716]" dev="sockfs" ino=41716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1062.308283][T14942] overlayfs: failed to clone upperpath [ 1062.349528][ T2264] libceph: connect (1)[c::]:6789 error -99 [ 1062.349669][ T2264] libceph: mon0 (1)[c::]:6789 connect error [ 1062.904634][ T5739] libceph: connect (1)[c::]:6789 error -99 [ 1062.905817][T14942] ceph: No mds server is up or the cluster is laggy [ 1062.932647][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 1063.358120][ T25] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1063.462860][ T25] usb 9-1: USB disconnect, device number 6 [ 1069.216629][ T31] audit: type=1400 audit(1791205478.640:1630): avc: denied { read } for pid=15004 comm="syz.7.2215" path="socket:[41924]" dev="sockfs" ino=41924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1076.500732][T15044] netlink: 'syz.1.2225': attribute type 1 has an invalid length. [ 1076.663032][T15044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.715988][T15048] macvlan2: entered promiscuous mode [ 1076.716011][T15048] macvlan2: entered allmulticast mode [ 1076.716497][T15048] bond0: entered allmulticast mode [ 1076.716531][T15048] bond0: entered promiscuous mode [ 1076.724858][T15048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1076.733630][T15048] team0: Port device macvlan2 added [ 1076.755422][T15044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59819 sclass=netlink_route_socket pid=15044 comm=syz.1.2225 [ 1076.838865][T15052] gadgetfs: bound to dummy_udc driver [ 1078.244545][ T31] audit: type=1400 audit(1791205487.680:1631): avc: denied { setopt } for pid=15062 comm="syz.4.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1079.054077][ T5620] Bluetooth: hci5: command 0x0c1a tx timeout [ 1080.688545][ T5606] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1081.314144][T15081] CacheFiles: No cache directory specified [ 1081.710521][ T31] audit: type=1400 audit(1791205490.720:1632): avc: denied { read write } for pid=15074 comm="syz.6.2233" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1081.710573][ T31] audit: type=1400 audit(1791205490.730:1633): avc: denied { open } for pid=15074 comm="syz.6.2233" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1083.492253][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2230'. [ 1083.524433][T15092] macvtap1: entered promiscuous mode [ 1083.524457][T15092] batadv0: entered promiscuous mode [ 1083.525580][T15092] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1083.566558][T15092] batadv0: left promiscuous mode [ 1083.668920][ T5606] Bluetooth: hci2: unexpected event for opcode 0x203d [ 1084.119455][ T5606] Bluetooth: hci5: command 0x0c1a tx timeout [ 1084.122124][ T5606] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1084.122154][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.122187][ T5606] Tainted: [L]=SOFTLOCKUP [ 1084.122196][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1084.122224][ T5606] Workqueue: hci2 hci_rx_work [ 1084.122262][ T5606] Call Trace: [ 1084.122270][ T5606] [ 1084.122279][ T5606] dump_stack_lvl+0x100/0x190 [ 1084.122316][ T5606] sysfs_warn_dup.cold+0x1c/0x28 [ 1084.122351][ T5606] sysfs_create_dir_ns+0x24b/0x2b0 [ 1084.122385][ T5606] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1084.122419][ T5606] ? find_held_lock+0x2b/0x80 [ 1084.122468][ T5606] ? kobject_add_internal+0x25f/0x930 [ 1084.122504][ T5606] ? kobject_add_internal+0x25f/0x930 [ 1084.122543][ T5606] ? do_raw_spin_unlock+0x145/0x1e0 [ 1084.122579][ T5606] kobject_add_internal+0x2c8/0x930 [ 1084.122622][ T5606] kobject_add+0x16a/0x1e0 [ 1084.122656][ T5606] ? __pfx_kobject_add+0x10/0x10 [ 1084.122684][ T5606] ? class_to_subsys+0x10f/0x150 [ 1084.122712][ T5606] ? kobject_put+0xb9/0x640 [ 1084.122737][ T5606] ? _raw_spin_unlock+0x28/0x50 [ 1084.122776][ T5606] device_add+0x294/0x1970 [ 1084.122809][ T5606] ? __pfx_dev_set_name+0x10/0x10 [ 1084.122835][ T5606] ? __pfx_device_add+0x10/0x10 [ 1084.122871][ T5606] ? mgmt_send_event_skb+0x2fb/0x460 [ 1084.122916][ T5606] hci_conn_add_sysfs+0x1a3/0x260 [ 1084.122942][ T5606] le_conn_complete_evt+0x122f/0x2130 [ 1084.122982][ T5606] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1084.123014][ T5606] ? hci_event_packet+0x186/0xcd0 [ 1084.123053][ T5606] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1084.123087][ T5606] ? skb_pull_data+0x15f/0x1e0 [ 1084.123116][ T5606] hci_le_meta_evt+0x34a/0x5f0 [ 1084.123150][ T5606] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1084.123189][ T5606] hci_event_packet+0x51c/0xcd0 [ 1084.123221][ T5606] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1084.123256][ T5606] ? __pfx_hci_event_packet+0x10/0x10 [ 1084.123294][ T5606] ? lockdep_hardirqs_on+0x7d/0x110 [ 1084.123325][ T5606] hci_rx_work+0x451/0xfc0 [ 1084.123362][ T5606] process_one_work+0xac7/0x1b10 [ 1084.123412][ T5606] ? __pfx_process_one_work+0x10/0x10 [ 1084.123456][ T5606] ? lock_acquire+0x1d1/0x380 [ 1084.123493][ T5606] ? __pfx_hci_rx_work+0x10/0x10 [ 1084.123528][ T5606] worker_thread+0x5ef/0xe50 [ 1084.123562][ T5606] ? kthread+0x13a/0x450 [ 1084.123591][ T5606] ? __pfx_worker_thread+0x10/0x10 [ 1084.123610][ T5606] kthread+0x373/0x450 [ 1084.123640][ T5606] ? __pfx_kthread+0x10/0x10 [ 1084.123674][ T5606] ret_from_fork+0x730/0xd60 [ 1084.123702][ T5606] ? __pfx_ret_from_fork+0x10/0x10 [ 1084.123729][ T5606] ? __switch_to+0x800/0x10f0 [ 1084.123761][ T5606] ? __pfx_kthread+0x10/0x10 [ 1084.123795][ T5606] ret_from_fork_asm+0x1a/0x30 [ 1084.123836][ T5606] [ 1084.123994][ T5606] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1084.124035][ T5606] Bluetooth: hci2: failed to register connection device [ 1085.587072][T15105] syzkaller0: entered promiscuous mode [ 1085.587095][T15105] syzkaller0: entered allmulticast mode [ 1088.651121][T15124] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1092.202983][ T31] audit: type=1400 audit(1791205500.636:1634): avc: denied { setopt } for pid=15132 comm="syz.1.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1094.606880][ T31] audit: type=1400 audit(1791205503.046:1635): avc: denied { create } for pid=15145 comm="syz.1.2251" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1094.764756][T15146] tipc: Enabled bearer , priority 10 [ 1094.771048][T15146] tipc: Disabling bearer [ 1094.864149][T15163] Invalid source name [ 1094.864174][T15163] UBIFS error (pid: 15163): cannot open "./file0", error -22 [ 1094.864284][ T31] audit: type=1400 audit(1791205503.306:1636): avc: denied { mounton } for pid=15145 comm="syz.1.2251" path="/510/file0" dev="tmpfs" ino=2781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1096.912962][ T2264] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1097.424368][ T2264] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1097.425564][ T2264] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.425596][ T2264] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.425633][ T2264] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.581842][ T2264] usb 9-1: config 0 descriptor?? [ 1098.245489][ T2264] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 1098.245526][ T2264] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 1098.245553][ T2264] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 1098.245580][ T2264] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 1098.245605][ T2264] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 1098.786782][ T2264] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 1102.097770][ T25] usb 9-1: reset high-speed USB device number 7 using dummy_hcd [ 1103.183100][ T5762] usb 9-1: USB disconnect, device number 7 [ 1104.008749][T15238] db_root: cannot be changed because it's in use [ 1110.000072][T15275] zram0: detected capacity change from 0 to 65536 [ 1113.822343][ T31] audit: type=1400 audit(1791205522.256:1637): avc: denied { read write } for pid=15296 comm="syz.6.2286" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1113.822639][ T31] audit: type=1400 audit(1791205522.256:1638): avc: denied { open } for pid=15296 comm="syz.6.2286" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1113.988540][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 1113.989487][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 1113.991163][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 1113.991474][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 1113.991730][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 1114.101051][ T5739] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1115.076614][ T5739] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1115.258785][T15310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=15310 comm=syz.8.2290 [ 1115.323166][T15312] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20002 [ 1115.385761][T15313] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2290'. [ 1115.619430][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.564038][ T31] audit: type=1400 audit(1791205525.008:1639): avc: denied { write } for pid=15324 comm="syz.6.2293" name="functions" dev="configfs" ino=21046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1122.114873][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2298'. [ 1124.573813][T15363] tipc: Started in network mode [ 1124.573844][T15363] tipc: Node identity ac1414aa, cluster identity 4711 [ 1124.574795][T15363] tipc: New replicast peer: 172.20.20.187 [ 1124.575401][T15363] tipc: Enabled bearer , priority 10 [ 1125.797527][ T5762] tipc: Node number set to 2886997162 [ 1126.776803][ T31] audit: type=1400 audit(1791205531.207:1640): avc: denied { ioctl } for pid=15365 comm="syz.7.2304" path="socket:[42737]" dev="sockfs" ino=42737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1127.707489][T15390] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1127.957433][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2308'. [ 1128.217778][ T31] audit: type=1400 audit(1791205532.657:1641): avc: denied { getopt } for pid=15388 comm="syz.8.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1131.069177][T15419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1132.104325][T15439] netlink: 'syz.6.2320': attribute type 2 has an invalid length. [ 1132.104378][T15439] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2320'. [ 1132.154365][T15439] : entered promiscuous mode [ 1132.753785][ T1442] netdevsim netdevsim3 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 1133.058801][ T9688] netdevsim netdevsim3 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 1133.501021][ T31] audit: type=1400 audit(1791205537.917:1642): avc: denied { watch_mount } for pid=15442 comm="syz.6.2322" path="/268" dev="tmpfs" ino=1485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1133.824041][ T9688] netdevsim netdevsim3 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 1133.829742][ T31] audit: type=1400 audit(1791205538.257:1643): avc: denied { search } for pid=5269 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.832604][ T31] audit: type=1400 audit(1791205538.267:1644): avc: denied { search } for pid=5269 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.834376][ T31] audit: type=1400 audit(1791205538.277:1645): avc: denied { search } for pid=5269 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.031490][T12365] netdevsim netdevsim3 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 1134.136975][ T8499] bridge_slave_1: left allmulticast mode [ 1134.137000][ T8499] bridge_slave_1: left promiscuous mode [ 1134.137211][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.186220][ T8499] bridge_slave_0: left allmulticast mode [ 1134.186247][ T8499] bridge_slave_0: left promiscuous mode [ 1134.186437][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.436240][ T31] audit: type=1400 audit(1791205538.877:1646): avc: denied { read } for pid=15470 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.444119][ T31] audit: type=1400 audit(1791205538.877:1647): avc: denied { read open } for pid=15470 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.444216][ T31] audit: type=1400 audit(1791205538.877:1648): avc: denied { getattr } for pid=15470 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.750800][T15468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2329'. [ 1136.601851][T15488] CIFS: VFS: UNC: path must begin with // or \\ [ 1136.601868][T15488] Malformed UNC in devname [ 1136.601868][T15488] [ 1136.602046][T15488] CIFS: VFS: Malformed UNC in devname [ 1138.624752][ T31] audit: type=1400 audit(1791205543.057:1649): avc: denied { write } for pid=15456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.624810][ T31] audit: type=1400 audit(1791205543.057:1650): avc: denied { add_name } for pid=15456 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.307681][ T8499] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1140.450423][ T31] audit: type=1400 audit(1791205544.887:1651): avc: denied { write } for pid=15504 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.450681][ T31] audit: type=1400 audit(1791205544.887:1652): avc: denied { remove_name } for pid=15504 comm="rm" name="resolv.conf.eth13.link" dev="tmpfs" ino=3207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.664196][ T8499] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1142.294655][ T8499] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1142.498182][ T8499] bond0 (unregistering): (slave Î): Releasing backup interface [ 1142.540769][ T8499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.586355][ T8499] bond0 (unregistering): Released all slaves [ 1142.648993][ T8499] bond1 (unregistering): Released all slaves [ 1142.884089][ T8499] bond2 (unregistering): Released all slaves [ 1142.920757][ T8499] team0: Port device macvlan2 removed [ 1143.396751][ T8499] bond3 (unregistering): Released all slaves [ 1143.583304][T12365] smbdirect: ib_dev[syz1] removed [ 1143.609541][T15459] tipc: Enabling not permitted [ 1143.609572][T15459] tipc: Enabling of bearer rejected, failed to enable media [ 1143.645378][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1143.854940][ T5715] infiniband syz1: ib_query_port failed (-19) [ 1144.047779][ T8499] tipc: Disabling bearer [ 1144.048001][ T8499] tipc: Disabling bearer [ 1144.048098][ T8499] tipc: Left network mode [ 1148.911171][ T31] audit: type=1400 audit(1791205553.347:1653): avc: denied { write } for pid=15536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.027017][ T31] audit: type=1400 audit(1791205555.467:1654): avc: denied { write } for pid=15577 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.316566][ T8499] hsr_slave_0: left promiscuous mode [ 1152.340253][ T8499] hsr_slave_1: left promiscuous mode [ 1152.354560][ T8499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.361548][ T8499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.312635][ T8499] team0 (unregistering): Port device team_slave_1 removed [ 1154.398252][ T8499] team0 (unregistering): Port device team_slave_0 removed [ 1155.668071][ T31] audit: type=1400 audit(1791205560.107:1655): avc: denied { write } for pid=15609 comm="syz.7.2343" name="header" dev="configfs" ino=32647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1155.718832][ T31] audit: type=1400 audit(1791205560.157:1656): avc: denied { write } for pid=15609 comm="syz.7.2343" name="uncompressed" dev="configfs" ino=32648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1155.721830][ T31] audit: type=1400 audit(1791205560.157:1657): avc: denied { write } for pid=15609 comm="syz.7.2343" name="h" dev="configfs" ino=45183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1155.722200][ T31] audit: type=1400 audit(1791205560.157:1658): avc: denied { write } for pid=15609 comm="syz.7.2343" name="h" dev="configfs" ino=45183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1155.722711][T15610] [ 1155.792642][T15610] ====================================================== [ 1155.799658][T15610] WARNING: possible circular locking dependency detected [ 1155.806674][T15610] syzkaller #0 Tainted: G L [ 1155.812652][T15610] ------------------------------------------------------ [ 1155.819675][T15610] syz.7.2343/15610 is trying to acquire lock: [ 1155.825737][T15610] ffffffff903fec68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 1155.836994][T15610] [ 1155.836994][T15610] but task is already holding lock: [ 1155.844354][T15610] ffff888042f05dc0 (&sb->s_type->i_mutex_key#36){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 1155.854914][T15610] [ 1155.854914][T15610] which lock already depends on the new lock. [ 1155.854914][T15610] [ 1155.865311][T15610] [ 1155.865311][T15610] the existing dependency chain (in reverse order) is: [ 1155.874301][T15610] [ 1155.874301][T15610] -> #3 (&sb->s_type->i_mutex_key#36){++++}-{4:4}: [ 1155.882971][T15610] lock_acquire+0x1d1/0x380 [ 1155.888082][T15610] down_write+0x8b/0x1f0 [ 1155.892826][T15610] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1155.899230][T15610] usbg_make_tpg+0x251/0x610 [ 1155.904325][T15610] target_fabric_make_tpg+0xab/0x8c0 [ 1155.910120][T15610] configfs_mkdir+0x525/0xd40 [ 1155.915299][T15610] vfs_mkdir+0x364/0x850 [ 1155.920039][T15610] filename_mkdirat+0x48b/0x5e0 [ 1155.925403][T15610] __x64_sys_mkdirat+0x89/0xc0 [ 1155.930690][T15610] do_syscall_64+0x123/0x790 [ 1155.935795][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.942191][T15610] [ 1155.942191][T15610] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 1155.950071][T15610] lock_acquire+0x1d1/0x380 [ 1155.955083][T15610] __mutex_lock+0x1a4/0x1bd0 [ 1155.960214][T15610] tcm_alloc_inst+0x5f/0x1e0 [ 1155.965309][T15610] try_get_usb_function_instance+0x136/0x1f0 [ 1155.971792][T15610] usb_get_function_instance+0x16/0x70 [ 1155.977758][T15610] function_make+0x18c/0x3f0 [ 1155.982865][T15610] configfs_mkdir+0x525/0xd40 [ 1155.988051][T15610] vfs_mkdir+0x364/0x850 [ 1155.992799][T15610] filename_mkdirat+0x48b/0x5e0 [ 1155.998182][T15610] __x64_sys_mkdirat+0x89/0xc0 [ 1156.003445][T15610] do_syscall_64+0x123/0x790 [ 1156.008529][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.014917][T15610] [ 1156.014917][T15610] -> #1 (func_lock){+.+.}-{4:4}: [ 1156.022013][T15610] lock_acquire+0x1d1/0x380 [ 1156.027042][T15610] __mutex_lock+0x1a4/0x1bd0 [ 1156.032156][T15610] try_get_usb_function_instance+0x26/0x1f0 [ 1156.038563][T15610] usb_get_function_instance+0x16/0x70 [ 1156.044525][T15610] function_make+0x18c/0x3f0 [ 1156.049613][T15610] configfs_mkdir+0x525/0xd40 [ 1156.054801][T15610] vfs_mkdir+0x364/0x850 [ 1156.059558][T15610] filename_mkdirat+0x48b/0x5e0 [ 1156.064909][T15610] __x64_sys_mkdirat+0x89/0xc0 [ 1156.070188][T15610] do_syscall_64+0x123/0x790 [ 1156.075272][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.081660][T15610] [ 1156.081660][T15610] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1156.089888][T15610] check_prev_add+0xeb/0xe60 [ 1156.094987][T15610] __lock_acquire+0x1528/0x1f40 [ 1156.100341][T15610] lock_acquire+0x1d1/0x380 [ 1156.105343][T15610] __mutex_lock+0x1a4/0x1bd0 [ 1156.110456][T15610] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1156.117133][T15610] configfs_symlink+0x695/0x1340 [ 1156.122581][T15610] vfs_symlink+0x178/0x4d0 [ 1156.127498][T15610] filename_symlinkat+0x2a6/0x560 [ 1156.133033][T15610] __x64_sys_symlinkat+0x9c/0xe0 [ 1156.138477][T15610] do_syscall_64+0x123/0x790 [ 1156.143566][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.149960][T15610] [ 1156.149960][T15610] other info that might help us debug this: [ 1156.149960][T15610] [ 1156.160171][T15610] Chain exists of: [ 1156.160171][T15610] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#36 [ 1156.160171][T15610] [ 1156.175103][T15610] Possible unsafe locking scenario: [ 1156.175103][T15610] [ 1156.182539][T15610] CPU0 CPU1 [ 1156.187966][T15610] ---- ---- [ 1156.193309][T15610] lock(&sb->s_type->i_mutex_key#36); [ 1156.198840][T15610] lock(tpg_instances_lock); [ 1156.206026][T15610] lock(&sb->s_type->i_mutex_key#36); [ 1156.213981][T15610] lock(gadget_subsys.su_mutex); [ 1156.218981][T15610] [ 1156.218981][T15610] *** DEADLOCK *** [ 1156.218981][T15610] [ 1156.227119][T15610] locks held by syz.7.2343/15610: 2, last CPU#0: [ 1156.233451][T15610] #0: ffff88801e3fe460 (sb_writers#21){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1156.242923][T15610] #1: ffff888042f05dc0 (&sb->s_type->i_mutex_key#36){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 1156.253808][T15610] [ 1156.253808][T15610] stack backtrace: [ 1156.259684][T15610] CPU: 0 UID: 0 PID: 15610 Comm: syz.7.2343 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.270789][T15610] Tainted: [L]=SOFTLOCKUP [ 1156.275111][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1156.285149][T15610] Call Trace: [ 1156.288408][T15610] [ 1156.291315][T15610] dump_stack_lvl+0x100/0x190 [ 1156.295977][T15610] print_circular_bug.cold+0x178/0x1be [ 1156.301431][T15610] check_noncircular+0x146/0x160 [ 1156.306347][T15610] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1156.312386][T15610] check_prev_add+0xeb/0xe60 [ 1156.316976][T15610] __lock_acquire+0x1528/0x1f40 [ 1156.321821][T15610] ? kasan_save_track+0x14/0x30 [ 1156.326652][T15610] ? kasan_save_free_info+0x3b/0x70 [ 1156.331835][T15610] lock_acquire+0x1d1/0x380 [ 1156.336328][T15610] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1156.342646][T15610] ? __pfx___might_resched+0x10/0x10 [ 1156.347924][T15610] ? audit_inode_permission+0x1ea/0x2a0 [ 1156.353464][T15610] __mutex_lock+0x1a4/0x1bd0 [ 1156.358058][T15610] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1156.364381][T15610] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1156.370697][T15610] ? __lock_acquire+0x5c0/0x1f40 [ 1156.375616][T15610] ? __pfx___mutex_lock+0x10/0x10 [ 1156.380622][T15610] ? selinux_inode_permission+0x14a/0x1130 [ 1156.386433][T15610] ? __pfx___might_resched+0x10/0x10 [ 1156.391694][T15610] ? make_vfsgid+0xf1/0x140 [ 1156.396177][T15610] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1156.402492][T15610] ? security_inode_permission+0xbf/0x250 [ 1156.408213][T15610] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1156.414352][T15610] ? inode_permission+0x374/0x620 [ 1156.419350][T15610] ? mntput_no_expire+0xe7/0x220 [ 1156.424265][T15610] configfs_symlink+0x695/0x1340 [ 1156.429184][T15610] ? __pfx_configfs_symlink+0x10/0x10 [ 1156.434531][T15610] vfs_symlink+0x178/0x4d0 [ 1156.438923][T15610] filename_symlinkat+0x2a6/0x560 [ 1156.443991][T15610] ? __pfx_filename_symlinkat+0x10/0x10 [ 1156.449528][T15610] ? strncpy_from_user+0x19d/0x2d0 [ 1156.454626][T15610] ? do_getname+0x191/0x390 [ 1156.459113][T15610] __x64_sys_symlinkat+0x9c/0xe0 [ 1156.464108][T15610] do_syscall_64+0x123/0x790 [ 1156.468697][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.474572][T15610] RIP: 0033:0x7efddc99e199 [ 1156.478963][T15610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.498556][T15610] RSP: 002b:00007efddd896028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1156.506947][T15610] RAX: ffffffffffffffda RBX: 00007efddcc25fa0 RCX: 00007efddc99e199 [ 1156.514899][T15610] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 1156.522846][T15610] RBP: 00007efddca350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1156.530788][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.538736][T15610] R13: 00007efddcc26038 R14: 00007efddcc25fa0 R15: 00007ffc6932fba8 [ 1156.546687][T15610] [ 1156.779888][ T31] audit: type=1400 audit(1791205561.167:1659): avc: denied { write } for pid=15609 comm="syz.7.2343" name="fs" dev="configfs" ino=32654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1156.779919][ T31] audit: type=1400 audit(1791205561.167:1660): avc: denied { write } for pid=15609 comm="syz.7.2343" name="fs" dev="configfs" ino=32654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1156.878142][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1157.587713][ T8499] IPVS: stop unused estimator thread 0... [ 1157.708388][T15628] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2351'. [ 1157.708419][T15628] ksmbd: Unknown IPC event: 3, ignore. [ 1157.711247][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2351'. [ 1158.217914][ T31] audit: type=1400 audit(1791205562.657:1661): avc: denied { write } for pid=15621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1158.441308][ T31] audit: type=1400 audit(1791205562.877:1662): avc: denied { write } for pid=15638 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1158.602199][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1159.007999][ T31] audit: type=1400 audit(1791205563.447:1663): avc: denied { write } for pid=15641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.071851][ T31] audit: type=1400 audit(1791205563.507:1664): avc: denied { write } for pid=15652 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.118656][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16