last executing test programs: 7.784635523s ago: executing program 0 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "b41e78eab9042a6952d5d2891b84c82892f59ca859dd77831912d0e0d62940c01558723674df96041fc62a96b482d01ce00bd6499ddcaaf58233e15910ca4db4", 0x25}, 0x48, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000380)={@id={0x2, 0xfe00, @a}, 0x0, r1}) 7.683950511s ago: executing program 0 (id=767): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x24, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a10185107508950609018102090191028511750895130901810209019102c0"}}, 0x13c) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./security\x00', 0x1fb) (async) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f0000002880)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1, 0x40000009, 0x4) (async) read(r0, &(0x7f0000000800), 0x1000) (async) write$UHID_INPUT2(r0, &(0x7f0000000380)={0xc, {0x7, "10ff0011010000"}}, 0xd) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 7.556036146s ago: executing program 0 (id=769): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, &(0x7f0000000000)=""/2, &(0x7f00000000c0)=""/23, &(0x7f0000018000), 0x30000}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) memfd_secret(0x80000) write(r1, &(0x7f0000010000)="000002000000000080", 0x9) write(r0, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 7.555741348s ago: executing program 0 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffd74, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="00010000000000000000000700000a300000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000004000380140000001100010000000000000000000300000a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x240080c0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(r4, &(0x7f0000000280)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x220) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x8000) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='bond0\x00'}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005200050129bd7000fbdbdf250a000000f180a7fa85d8182ea344dcd21af699418b68746d0d85f3b023cebf4c21e1c7cc0889fcbbfc584ab32ad2eea1dde44e7292d18b919441a3ba73e71ed958071cbfd100f949a4006e00000000"], 0x14}}, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000000)={0x6, &(0x7f00000006c0)=[{}, {@fixed}, {}, {@none}, {@fixed}, {@none}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x0, 0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$inet_smc(0x2b, 0x1, 0x0) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) signalfd4(r9, &(0x7f0000000180)={[0x4]}, 0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 6.615454452s ago: executing program 0 (id=780): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f24001280200001800e000100636f6e6e6c696d69740000000c00020007ff0800034000000106140000001000010000000000000000000084000a"], 0xb0}}, 0x20050800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) madvise(&(0x7f000000c000/0x3000)=nil, 0x3000, 0xe) madvise(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}}, 0x40008011) 6.272002367s ago: executing program 0 (id=783): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/events/sched/enable\x00', 0x900, 0x1a) mkdirat(r0, &(0x7f00000000c0)='./tracing\x00', 0x1f9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/sched/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000002c0)=[r5], 0x0, 0x1}) 6.254092733s ago: executing program 32 (id=783): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/events/sched/enable\x00', 0x900, 0x1a) mkdirat(r0, &(0x7f00000000c0)='./tracing\x00', 0x1f9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/sched/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000002c0)=[r5], 0x0, 0x1}) 4.698267103s ago: executing program 2 (id=801): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000003200), 0x109000) 4.628236474s ago: executing program 2 (id=803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x2, 0x3, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) (async, rerun: 32) close(r1) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x48, 0x1, 0x0, @rand_addr=0x64010102, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x1234, 0x1}}}}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x2, 0x1, 0x10000, 0x1600, r4}) (async) syz_emit_ethernet(0xb3, &(0x7f0000000000)={@broadcast, @random, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0xa5, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x6558, 0x0, "e5786fde6d88c0b1564e2a7703b89cda3e72d5fa393c30f967e3ff817ce3ccb9b3df58ae62dcf8399a2a0f9bec6f0151875c394476ca3fb1d8b152b9a948685ad84533bb4b8e29c20a1a3e06d0"}}}}}}, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000180)={r3, 0x30, &(0x7f0000000140)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000001c0)=0x10) 4.540880805s ago: executing program 2 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000002000)={0xa, 0x4e1e, 0x7579cf98, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x103}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async) getsockopt$bt_hci(r0, 0x11a, 0x1, 0x0, &(0x7f0000000240)) socket$packet(0x11, 0x2, 0x300) (async) socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}}, 0x40090) (async) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/uprobe_events\x00', 0x28000, 0x110) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) write(r3, &(0x7f0000000240)="703a812f70202e2f66696c65303a30ed16487d640fd986077e8e513645c56fbd1781d8b5f9dbf0376269dddaa36c13764cdf1248fd476826f8139c54ee3bd859a979d191bc07b9657b8976aa9cf3a77d11e5484c0557dcd52ef94f51f2646b7d2aed29ca663c0e7de7618ea2792587", 0x6f) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 4.371020412s ago: executing program 2 (id=807): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0xffff0000, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 4.060331661s ago: executing program 2 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/misc/ubi_ctrl/dev\x00', 0x0, 0x0) r1 = syz_clone(0x20000400, 0x0, 0x3b54, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000280)='syscall\x00') syz_open_procfs(r1, &(0x7f0000000280)='net/kcm\x00') read(r0, &(0x7f0000000200), 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="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"/307], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b500", "b70800", "1d1cbe23", "b51788ba0584eb23"}, 0x28) mmap(&(0x7f0000232000/0x2000)=nil, 0x2000, 0x3, 0x810, 0xffffffffffffffff, 0x2ee9b000) writev(r4, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0xf3a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000ff01000000f0ff000000000000000001fc020000000000000000000000000000000107144e2300050074000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c00000000000000000000000000ffffac1e000100000000000000009201000000000000050000000000000000000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e0000000009000000000000000000000000000000df2c000000000000010000000000000002000000fcffffffff0f00002abd7000043500000a0002000000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000006000000080003009b2d57f56d7f77d68e711c84d3388bcae8c30a4bd15ec4756c06fa1d4d07c8e87a4c2553783561efc54aab7fcb3b45a39b916c1e4bdfab8f6f010811966ce9517b60ec0ec7a21794408247b5f042b708d9a760e163f74f8fe16c47ca0496edd89a031948737b497b09b7addd322c021835da4e7cab83ce5d294db2c91f2ab29afa668cb9880c730048e7ded6688c72e3ce887c6c0a44645dbd28dfe13bc1", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="04000100040001000400010004"], 0x460}}, 0x0) 3.973342914s ago: executing program 2 (id=814): r0 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r3) syz_usb_connect$uac2(0x0, 0xa4, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRESHEX=r3, @ANYRES8=r4, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRES16=r4, @ANYBLOB="175aef704ae7b142f820a043613d4ac7e80b93eb1348b3d0420cd2f326b7db2bbd458c549da2248398efdbed9edb7f38d5a459bd18e9c9a2387dc11d", @ANYRES32=r1], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2003}}]}) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa8aaaaa00000000000008004500131c0004000000119078000000000000000000004e2000089278"], 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x200}], 0x1, 0x0, 0x0, 0x0) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x181000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000280)=0x790, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000001600)={0x0, 0x1000, "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"}, &(0x7f0000002640)=0x1008) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000002680)={r6, 0x6}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r7 = syz_open_dev$video(&(0x7f0000000080), 0x40000000007ff, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000040)={0x1, 0x100, 0x2, {0xff, 0xf, 0x3, 0x3}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)='&', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e2aa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x856de9ab0902cdcc, &(0x7f00000003c0)=0x2, 0x4) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, 0x0, 0x0) 2.579634355s ago: executing program 3 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff}}]}, 0x20}}, 0x4000000) syz_emit_ethernet(0x3e, &(0x7f0000000a40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0x8, 0x0, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@routing={0x0, 0x0, 0x5}]}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r4, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="c4e17d102b65de6b5126640f01bc4400000000260f6b30f20f126bb10f01c3dbabae000000260f79e5b9800000c00f3235000100000f30ae", 0x38}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0xfffffdfc}]) mmap$IORING_OFF_SQ_RING(0x0, 0x40, 0x0, 0x30, r6, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000000c0)="0f01ee2ef08233f18e72320f01ca0f20c06635020000000f22c0650fdc333664670f22130fc77c076764d35f00d2f6", 0x2f}], 0x1, 0x0, &(0x7f00000002c0)=[@efer], 0x1) 2.403319561s ago: executing program 3 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './gadget/dummy_udc/file0\x00'}) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x40, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40080) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001600010a000000000400b8eb219f0a00"], 0x24}}, 0x0) read(r0, &(0x7f0000000900), 0x100) syz_emit_ethernet(0xb4, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x7e, 0x0, 0xff, @empty, @dev={0xfe, 0x80, '\x00', 0x22}, {[@dstopts={0x31715752e5258c64}], "ef27033a174265c45f9b0cd44494ff0000006ba45f5cf216073eb18ea47d5ab86d9e4f0b771386e36c2f172fa1745c589219007825498791b8e2c8f429bec9448cd60b51312cd6a280faff3cccc44a67dc0835824ca086e8bd684d7d8bb2171d0dcab44c31784fef52d4ed87d7fabec46ce803224dcc"}}}}}, 0x0) 2.063087983s ago: executing program 3 (id=834): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='pvfs2\x00', 0x22410c1, &(0x7f00000001c0)='overlay\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}]}) chdir(0x0) 2.009922061s ago: executing program 3 (id=835): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0xc, 0x4, 0x0, "4d512c91002a4950676142687108dca1f958d00089db00000000b4f29c0002ff"}) 1.884861276s ago: executing program 1 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000180)={{}, 0xa, &(0x7f0000000040)=[0x5, 0x7ff, 0x7c0, 0x5, 0x5, 0x3c, 0x7, 0xf1, 0x4, 0x7], 0x4, 0x8, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.806131859s ago: executing program 1 (id=839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$unix(r5, &(0x7f0000006e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[], 0x148}}], 0x1, 0x40000) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000a80)=[{&(0x7f0000000180)="5210", 0x2}, {&(0x7f0000000200)="9c741888", 0x4}], 0x2, 0x4) splice(r6, 0x0, r5, 0x0, 0x8000, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000001d00)={0x30, r3, 0x0, 0x0, 0x674, 0x0, 0x5, 0x0}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0xdddd0000, 0x10000, 0x9, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x10000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x6, 0x7, 0x0, 0xfb, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x4, 0x0, 0x1, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0x1, 0x2, 0x3, 0x5, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x8, 0xb1, 0x48, 0x21, 0x81, 0x80, 0x0, 0x1}, {0x30000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x70000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0x8f90000000000, 0x4, 0x80, 0xfff]}) 1.644784303s ago: executing program 1 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, r0, 0x347e2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, r0, 0x347e2000) (async) 1.644508442s ago: executing program 1 (id=842): mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) madvise(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0xa) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_pts(r2, 0x8000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl(r4, 0x8914, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x109000, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000180)=""/118, 0x76, 0x59) 1.640510453s ago: executing program 4 (id=843): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000012c0)=0xfdfdffff) 1.536046128s ago: executing program 4 (id=844): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x300, 0x1, 0x0, 0x0, 0x4, 0x0, 0x1, 0x2710, 0x50, 0xffffffff, 0x1, 0x8001, 0x0, 0x0, 0x0}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x1, {0xa, 0x0, 0x0, 0x0, {0x4e23, 0x4e23, [0x0, 0xffffffef, 0xffffffff, 0x3000000], [0x3, 0x100000, 0x0, 0x8], 0x0, [0x1, 0xfffffff8]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x640440c5}, 0x20004010) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000000)) 1.535832897s ago: executing program 4 (id=845): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000000c0)={{}, "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"}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x82000, 0x6d) openat$dir(0xffffffffffffff9c, 0x0, 0x88981, 0x26) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x10, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18) 1.411394932s ago: executing program 4 (id=846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x109, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0xc082) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x50, 0xffffffff, 0x1, 0x6, &(0x7f0000000300)=[0x0], 0x1, 0x0}) 1.411148106s ago: executing program 4 (id=847): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000300)={0x18, 0x0, {0x1, @empty, 'bridge_slave_1\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0x40047438, &(0x7f0000000040)) (async) close(0x3) (async) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0)) (async) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="416fcec5ce048c022911e62f9c7ef467e9d885171db63b8a9c9e82bb05ece8d7e330127abfb7bdca0c2cc06d73df497ce358f3378014fc49d849f3cc07bdf39bd1eae61fa37c892161e4a097d8fb358e192991a6568168df2fcd03a85aea66e3779a7ce8667f2a9036bfa5f8c555015462887f66ff687ad478d2b4f2890781346d94f2cd1d936cef1f84d1", @ANYRES16=r8, @ANYBLOB="00012dbd7000000000000700000014000200fc00000000000000000000000000000114000300fe8000000000000000000000000000bb"], 0x3c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_channels={0x3c, 0x200, 0x6, 0x8, 0x4, 0x8005, 0x9, 0x5, 0x81}}) sendmmsg$sock(r2, &(0x7f0000004980)=[{{&(0x7f0000000280)=@can={0x1d, r1, 0xc8}, 0x80, 0x0}}], 0x1, 0x40050) 1.336527435s ago: executing program 1 (id=848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fe8000fb0000c100000000000000000e640101f000000000000000000000000000017ffb16230025000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff010000000000000000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000faffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff020000003ce70000000000002abd7000043500400200010a2800000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a00"], 0x148}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) (fail_nth: 6) 844.64705ms ago: executing program 1 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002f00090027bd700000000000040000000f001d00", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 731.777181ms ago: executing program 33 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002f00090027bd700000000000040000000f001d00", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 278.986245ms ago: executing program 3 (id=851): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x1) 170.109359ms ago: executing program 3 (id=852): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') 0s ago: executing program 4 (id=853): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x9, 0x1000, 0x32314d56, 0x1, 0xfffffffe, 0x0, 0x9, 0x40, 0x1, 0x3, 0x0, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) openat(r3, &(0x7f0000000040)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}}}, 0x10) ioctl$EVIOCGMASK(r0, 0x5b02, 0x0) kernel console output (not intermixed with test programs): em_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.039038][ T7676] netlink: 52 bytes leftover after parsing attributes in process `syz.2.580'. [ 101.446611][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.2.586 [ 101.446731][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.2.586 [ 101.446783][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.2.586 [ 101.446831][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.2.586 [ 101.446875][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.2.586 [ 101.446933][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.2.586 [ 101.446978][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.2.586 [ 101.447023][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.2.586 [ 101.447072][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.2.586 [ 101.503159][ T7719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.587899][ T43] audit: type=1400 audit(1790148198.938:4987): avc: denied { rename } for pid=7720 comm="syz.2.588" name="file0" dev="tmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.634309][ T7732] netlink: 52 bytes leftover after parsing attributes in process `syz.2.590'. [ 102.017176][ T7756] netlink: 44 bytes leftover after parsing attributes in process `syz.3.598'. [ 102.241964][ T7769] netlink: 52 bytes leftover after parsing attributes in process `syz.2.601'. [ 102.317875][ T5521] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 102.348076][ T43] audit: type=1400 audit(1790148199.698:4988): avc: denied { kexec_image_load } for pid=7776 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 102.429624][ T7781] BIDI support in bsg has been removed. [ 102.445839][ T5521] usb 8-1: device descriptor read/64, error -71 [ 102.467155][ T7780] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 102.687626][ T5521] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 102.815800][ T5521] usb 8-1: device descriptor read/64, error -71 [ 102.926921][ T5521] usb usb8-port1: attempt power cycle [ 103.285723][ T5521] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 103.306388][ T5521] usb 8-1: device descriptor read/8, error -71 [ 103.316178][ T7794] netlink: 52 bytes leftover after parsing attributes in process `syz.0.611'. [ 103.555989][ T5521] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 103.566371][ T7806] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.566556][ T7806] block device autoloading is deprecated and will be removed. [ 103.578321][ T5521] usb 8-1: device descriptor read/8, error -71 [ 103.584814][ T7804] e1000e 0000:00:02.0 eth1: removed PHC [ 103.685936][ T5521] usb usb8-port1: unable to enumerate USB device [ 103.692622][ T7804] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 103.958423][ T7837] FAULT_INJECTION: forcing a failure. [ 103.958423][ T7837] name failslab, interval 1, probability 0, space 0, times 0 [ 103.958447][ T7837] CPU: 3 UID: 0 PID: 7837 Comm: syz.2.619 Not tainted syzkaller #0 PREEMPT(full) [ 103.958460][ T7837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.958467][ T7837] Call Trace: [ 103.958471][ T7837] [ 103.958475][ T7837] dump_stack_lvl+0x100/0x190 [ 103.958505][ T7837] should_fail_ex.cold+0x5/0xa [ 103.958522][ T7837] should_failslab+0xc2/0x120 [ 103.958540][ T7837] __kmalloc_noprof+0xfc/0x840 [ 103.958550][ T7837] ? rcu_is_watching+0x13/0xc0 [ 103.958566][ T7837] ? tomoyo_realpath_from_path+0xb6/0x690 [ 103.958586][ T7837] tomoyo_realpath_from_path+0xb6/0x690 [ 103.958603][ T7837] tomoyo_check_open_permission+0x2af/0x3c0 [ 103.958616][ T7837] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 103.958632][ T7837] ? hook_file_open+0x248/0x8e0 [ 103.958658][ T7837] ? path_get+0x61/0x80 [ 103.958674][ T7837] tomoyo_file_open+0x6b/0x90 [ 103.958690][ T7837] security_file_open+0xb5/0x1e0 [ 103.958704][ T7837] do_dentry_open+0x588/0x14d0 [ 103.958720][ T7837] vfs_open+0x82/0x3f0 [ 103.958736][ T7837] path_openat+0x19fa/0x2440 [ 103.958751][ T7837] ? __pfx_path_openat+0x10/0x10 [ 103.958769][ T7837] do_file_open+0x20e/0x430 [ 103.958784][ T7837] ? __pfx_do_file_open+0x10/0x10 [ 103.958808][ T7837] ? _raw_spin_unlock+0x28/0x50 [ 103.958825][ T7837] ? alloc_fd+0x471/0x7a0 [ 103.958843][ T7837] do_sys_openat2+0x10f/0x1e0 [ 103.958858][ T7837] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.958874][ T7837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.958906][ T7837] __x64_sys_openat+0x12d/0x210 [ 103.958923][ T7837] ? __pfx___x64_sys_openat+0x10/0x10 [ 103.958939][ T7837] ? ksys_write+0x1ac/0x250 [ 103.958956][ T7837] do_syscall_64+0x123/0x790 [ 103.958975][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.958987][ T7837] RIP: 0033:0x7fcd4519e159 [ 103.958997][ T7837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.959010][ T7837] RSP: 002b:00007fcd45fd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.959021][ T7837] RAX: ffffffffffffffda RBX: 00007fcd45425fa0 RCX: 00007fcd4519e159 [ 103.959029][ T7837] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 103.959036][ T7837] RBP: 00007fcd4523506b R08: 0000000000000000 R09: 0000000000000000 [ 103.959043][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.959050][ T7837] R13: 00007fcd45426038 R14: 00007fcd45425fa0 R15: 00007ffef21294c8 [ 103.959065][ T7837] [ 103.959070][ T7837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.976116][ T7839] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 104.089678][ T7844] netlink: 52 bytes leftover after parsing attributes in process `syz.2.620'. [ 104.135589][ T7847] netlink: 'syz.2.621': attribute type 63 has an invalid length. [ 104.138420][ T7847] netlink: 5 bytes leftover after parsing attributes in process `syz.2.621'. [ 104.243882][ T7856] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 104.485735][ T35] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 104.626217][ T7869] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 104.646874][ T35] usb 5-1: not running at top speed; connect to a high speed hub [ 104.646903][ T35] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 104.647793][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 104.649619][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.649638][ T35] usb 5-1: Product: syz [ 104.649649][ T35] usb 5-1: Manufacturer: syz [ 104.649661][ T35] usb 5-1: SerialNumber: syz [ 104.697983][ T35] oti6858 5-1:1.0: oti6858 converter detected [ 104.702279][ T35] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 104.985808][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 105.143835][ T1041] usb 5-1: USB disconnect, device number 24 [ 105.146822][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 105.149450][ T1041] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 105.150012][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.150025][ T1041] oti6858 5-1:1.0: device disconnected [ 105.151085][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 105.151106][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 105.151138][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.151171][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.171089][ T9] usbtmc 6-1:16.0: bulk endpoints not found [ 105.271445][ T7884] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 105.298334][ T7884] bridge2: entered promiscuous mode [ 105.301145][ T7884] netlink: 52 bytes leftover after parsing attributes in process `syz.3.626'. [ 105.301906][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 105.301919][ T43] audit: type=1400 audit(1790148202.648:5016): avc: denied { ioctl } for pid=7883 comm="syz.3.626" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21342 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.387087][ T43] audit: type=1400 audit(1790148202.738:5017): avc: denied { remount } for pid=7888 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.438815][ T7892] netlink: 52 bytes leftover after parsing attributes in process `syz.3.629'. [ 105.439120][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.439620][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.524198][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 105.525167][ T7902] ata1.00: invalid cdb length 12 [ 105.525300][ T7902] ata1.00: invalid cdb length 12 [ 105.525404][ T7902] ata1.00: invalid cdb length 12 [ 105.525506][ T7902] ata1.00: invalid cdb length 12 [ 105.529950][ T7902] ata1.00: invalid cdb length 12 [ 105.530085][ T7902] ata1.00: invalid cdb length 12 [ 105.530161][ T7902] ata1.00: invalid cdb length 12 [ 105.530231][ T7902] ata1.00: invalid cdb length 12 [ 105.530299][ T7902] ata1.00: invalid cdb length 12 [ 105.530369][ T7902] ata1.00: invalid cdb length 12 [ 105.530438][ T7902] ata1.00: invalid cdb length 12 [ 105.530506][ T7902] ata1.00: invalid cdb length 12 [ 105.530574][ T7902] ata1.00: invalid cdb length 12 [ 105.530643][ T7902] ata1.00: invalid cdb length 12 [ 105.530713][ T7902] ata1.00: invalid cdb length 12 [ 105.530781][ T7902] ata1.00: invalid cdb length 12 [ 105.530849][ T7902] ata1.00: invalid cdb length 12 [ 105.530918][ T7902] ata1.00: invalid cdb length 12 [ 105.531009][ T7902] ata1.00: invalid cdb length 12 [ 105.531127][ T7902] ata1.00: invalid cdb length 12 [ 105.531233][ T7902] ata1.00: invalid cdb length 12 [ 105.531334][ T7902] ata1.00: invalid cdb length 12 [ 105.531487][ T7902] ata1.00: invalid cdb length 12 [ 105.531619][ T7902] ata1.00: invalid cdb length 12 [ 105.531732][ T7902] ata1.00: invalid cdb length 12 [ 105.531840][ T7902] ata1.00: invalid cdb length 12 [ 105.531986][ T7902] ata1.00: invalid cdb length 12 [ 105.532099][ T7902] ata1.00: invalid cdb length 12 [ 105.532208][ T7902] ata1.00: invalid cdb length 12 [ 105.532340][ T7902] ata1.00: invalid cdb length 12 [ 105.532455][ T7902] ata1.00: invalid cdb length 12 [ 105.532562][ T7902] ata1.00: invalid cdb length 12 [ 105.532668][ T7902] ata1.00: invalid cdb length 12 [ 105.532772][ T7902] ata1.00: invalid cdb length 12 [ 105.532882][ T7902] ata1.00: invalid cdb length 12 [ 105.532996][ T7902] ata1.00: invalid cdb length 12 [ 105.533103][ T7902] ata1.00: invalid cdb length 12 [ 105.533211][ T7902] ata1.00: invalid cdb length 12 [ 105.533318][ T7902] ata1.00: invalid cdb length 12 [ 105.533425][ T7902] ata1.00: invalid cdb length 12 [ 105.533534][ T7902] ata1.00: invalid cdb length 12 [ 105.533680][ T7902] ata1.00: invalid cdb length 12 [ 105.533794][ T7902] ata1.00: invalid cdb length 12 [ 105.533902][ T7902] ata1.00: invalid cdb length 12 [ 105.534013][ T7902] ata1.00: invalid cdb length 12 [ 105.534120][ T7902] ata1.00: invalid cdb length 12 [ 105.534227][ T7902] ata1.00: invalid cdb length 12 [ 105.534338][ T7902] ata1.00: invalid cdb length 12 [ 105.534442][ T7902] ata1.00: invalid cdb length 12 [ 105.534548][ T7902] ata1.00: invalid cdb length 12 [ 105.534657][ T7902] ata1.00: invalid cdb length 12 [ 105.534767][ T7902] ata1.00: invalid cdb length 12 [ 105.534872][ T7902] ata1.00: invalid cdb length 12 [ 105.534984][ T7902] ata1.00: invalid cdb length 12 [ 105.535092][ T7902] ata1.00: invalid cdb length 12 [ 105.535199][ T7902] ata1.00: invalid cdb length 12 [ 105.535305][ T7902] ata1.00: invalid cdb length 12 [ 105.535412][ T7902] ata1.00: invalid cdb length 12 [ 105.535564][ T7902] ata1.00: invalid cdb length 12 [ 105.535739][ T7902] ata1.00: invalid cdb length 12 [ 105.535860][ T7902] ata1.00: invalid cdb length 12 [ 105.536529][ T7902] ata1.00: invalid cdb length 12 [ 105.536643][ T7902] ata1.00: invalid cdb length 12 [ 105.536761][ T7902] ata1.00: invalid cdb length 12 [ 105.536875][ T7902] ata1.00: invalid cdb length 12 [ 105.656809][ T43] audit: type=1400 audit(1790148203.008:5018): avc: denied { ioctl } for pid=7897 comm="syz.3.631" path="socket:[21364]" dev="sockfs" ino=21364 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.419598][ T7940] netlink: 'syz.3.633': attribute type 3 has an invalid length. [ 106.419616][ T7940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.633'. [ 106.500449][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 106.544447][ T7949] Bluetooth: MGMT ver 1.23 [ 106.544474][ T7949] Bluetooth: hci1: too big key_count value 60421 [ 106.572954][ T7951] netlink: 52 bytes leftover after parsing attributes in process `syz.3.638'. [ 106.624767][ T43] audit: type=1400 audit(1790148203.968:5019): avc: denied { append } for pid=7954 comm="syz.0.640" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.639823][ T7957] FAULT_INJECTION: forcing a failure. [ 106.639823][ T7957] name failslab, interval 1, probability 0, space 0, times 0 [ 106.639843][ T7957] CPU: 3 UID: 0 PID: 7957 Comm: syz.3.641 Not tainted syzkaller #0 PREEMPT(full) [ 106.639855][ T7957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.639861][ T7957] Call Trace: [ 106.639865][ T7957] [ 106.639869][ T7957] dump_stack_lvl+0x100/0x190 [ 106.639889][ T7957] should_fail_ex.cold+0x5/0xa [ 106.639908][ T7957] should_failslab+0xc2/0x120 [ 106.639923][ T7957] __kmalloc_noprof+0xfc/0x840 [ 106.639935][ T7957] ? sk_prot_alloc+0x10b/0x2a0 [ 106.639964][ T7957] sk_prot_alloc+0x10b/0x2a0 [ 106.639984][ T7957] sk_alloc+0x36/0xe80 [ 106.639999][ T7957] __netlink_create+0x5e/0x2c0 [ 106.640010][ T7957] ? __wake_up+0x3f/0x60 [ 106.640029][ T7957] netlink_create+0x29b/0x610 [ 106.640040][ T7957] ? __pfx_rtnetlink_bind+0x10/0x10 [ 106.640053][ T7957] __sock_create+0x339/0x860 [ 106.640066][ T7957] __sys_socket+0x14d/0x260 [ 106.640077][ T7957] ? __pfx___sys_socket+0x10/0x10 [ 106.640091][ T7957] __x64_sys_socket+0x72/0xb0 [ 106.640102][ T7957] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.640119][ T7957] do_syscall_64+0x123/0x790 [ 106.640138][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.640150][ T7957] RIP: 0033:0x7fc89959e159 [ 106.640159][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.640169][ T7957] RSP: 002b:00007fc89a3e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 106.640181][ T7957] RAX: ffffffffffffffda RBX: 00007fc899825fa0 RCX: 00007fc89959e159 [ 106.640188][ T7957] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 106.640195][ T7957] RBP: 00007fc89963506b R08: 0000000000000000 R09: 0000000000000000 [ 106.640201][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.640207][ T7957] R13: 00007fc899826038 R14: 00007fc899825fa0 R15: 00007ffef454e1c8 [ 106.640220][ T7957] [ 106.643338][ T63] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 106.756213][ T7964] netlink: 104 bytes leftover after parsing attributes in process `syz.0.642'. [ 106.896247][ T5521] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 107.407370][ T5521] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 107.468350][ T7957] ceph: No mds server is up or the cluster is laggy [ 107.530899][ T43] audit: type=1400 audit(1790148204.878:5020): avc: denied { search } for pid=7977 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.530948][ T43] audit: type=1400 audit(1790148204.878:5021): avc: denied { read write } for pid=7977 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 107.531173][ T43] audit: type=1400 audit(1790148204.878:5022): avc: denied { open } for pid=7977 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 107.532771][ T43] audit: type=1400 audit(1790148204.878:5023): avc: denied { lock } for pid=7977 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 107.532811][ T43] audit: type=1400 audit(1790148204.878:5024): avc: denied { read } for pid=7977 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 107.538887][ T7981] netlink: 52 bytes leftover after parsing attributes in process `syz.2.647'. [ 107.543560][ T7980] FAULT_INJECTION: forcing a failure. [ 107.543560][ T7980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.543585][ T7980] CPU: 2 UID: 0 PID: 7980 Comm: syz.3.646 Not tainted syzkaller #0 PREEMPT(full) [ 107.543603][ T7980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.543627][ T7980] Call Trace: [ 107.543634][ T7980] [ 107.543640][ T7980] dump_stack_lvl+0x100/0x190 [ 107.543667][ T7980] should_fail_ex.cold+0x5/0xa [ 107.543689][ T7980] _copy_to_user+0x32/0xd0 [ 107.543708][ T7980] simple_read_from_buffer+0xcb/0x170 [ 107.543730][ T7980] proc_fail_nth_read+0x1af/0x230 [ 107.543751][ T7980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.543771][ T7980] ? rw_verify_area+0xce/0x6d0 [ 107.543794][ T7980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.543812][ T7980] vfs_read+0x1e4/0xb40 [ 107.543828][ T7980] ? lock_acquire+0x1d1/0x380 [ 107.543844][ T7980] ? __fget_files+0x34/0x3d0 [ 107.543863][ T7980] ? __pfx_vfs_read+0x10/0x10 [ 107.543877][ T7980] ? find_held_lock+0x2b/0x80 [ 107.543898][ T7980] ? __fget_files+0x215/0x3d0 [ 107.543920][ T7980] ? __fget_files+0x21f/0x3d0 [ 107.543945][ T7980] ksys_read+0x12a/0x250 [ 107.543960][ T7980] ? __pfx_ksys_read+0x10/0x10 [ 107.543982][ T7980] do_syscall_64+0x123/0x790 [ 107.544006][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f syzkaller[ 107.544022][ T7980] RIP: 0033:0x7fc89955e98e [ 107.544036][ T7980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.544051][ T7980] RSP: 002b:00007fc89a3dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.544066][ T7980] RAX: ffffffffffffffda RBX: 00007fc89a3e06c0 RCX: 00007fc89955e98e [ 107.544076][ T7980] RDX: 000000000000000f RSI: 00007fc89a3e00a0 RDI: 0000000000000004 [ 107.544085][ T7980] RBP: 00007fc89a3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 107.544094][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.544103][ T7980] R13: 00007fc899826038 R14: 00007fc899825fa0 R15: 00007ffef454e1c8 syzkaller login: [ 107.544124][ T7980] [ 107.744201][ T7992] netlink: 'syz.0.651': attribute type 63 has an invalid length. [ 107.761777][ T5521] usb 6-1: USB disconnect, device number 15 [ 107.794343][ T7996] bond0: option slaves: interface -b does not exist! [ 107.887995][ T7998] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 107.934757][ T8002] netlink: 'syz.1.654': attribute type 10 has an invalid length. [ 107.947556][ T8002] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 107.949458][ T43] audit: type=1400 audit(1790148205.298:5025): avc: denied { wake_alarm } for pid=8001 comm="syz.1.654" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.523434][ T8015] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 108.642986][ T1041] logitech-hidpp-device 0003:046D:C082.0005: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 108.685375][ T8023] fido_id[8023]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.815714][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 108.975774][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 108.976438][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.977328][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 108.977343][ T9] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 108.977362][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.977381][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.980597][ T9] usbtmc 8-1:16.0: bulk endpoints not found [ 109.296996][ T8047] syzkaller0: entered promiscuous mode [ 109.297017][ T8047] syzkaller0: entered allmulticast mode [ 110.468672][ T8062] __nla_validate_parse: 2 callbacks suppressed [ 110.468691][ T8062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.675'. [ 110.469590][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.470032][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.523431][ T8064] netlink: 52 bytes leftover after parsing attributes in process `syz.1.676'. [ 110.573486][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 110.573504][ T43] audit: type=1400 audit(1790148207.841:5034): avc: denied { connect } for pid=8065 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.628826][ T43] audit: type=1400 audit(1790148207.887:5035): avc: denied { write } for pid=8065 comm="syz.1.677" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 110.631846][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'. [ 110.631867][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'. [ 110.631879][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'. [ 110.690812][ T8069] tmpfs: Bad value for 'mpol' [ 110.782662][ T7695] Bluetooth: (null): Invalid header checksum [ 110.895221][ T7696] Bluetooth: (null): Invalid header checksum [ 110.942590][ T8073] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 110.962275][ T8073] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 110.962833][ T8073] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 111.022640][ T6382] Bluetooth: (null): Invalid header checksum [ 111.047825][ T43] audit: type=1400 audit(1790148208.280:5036): avc: denied { checkpoint_restore } for pid=8074 comm="syz.0.680" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.139990][ T7695] Bluetooth: (null): Invalid header checksum [ 111.258310][ T6382] Bluetooth: (null): Invalid header checksum [ 111.375967][ T7696] Bluetooth: (null): Invalid header checksum [ 111.446585][ T8089] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 111.493430][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.685'. [ 111.493455][ T8090] netlink: 'syz.0.685': attribute type 7 has an invalid length. [ 111.493462][ T8090] netlink: 'syz.0.685': attribute type 8 has an invalid length. [ 111.493469][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 111.495212][ T8089] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 111.531292][ T8093] overlayfs: failed lookup in lower (newroot/169, name='file0', err=-40): overlapping layers [ 111.536933][ T8093] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 111.574062][ T8092] overlayfs: failed lookup in lower (newroot/169, name='file0', err=-40): overlapping layers [ 111.574247][ T8092] overlayfs: failed lookup in lower (newroot/169, name='file0', err=-40): overlapping layers [ 111.574416][ T8092] overlayfs: failed lookup in lower (newroot/169, name='file0', err=-40): overlapping layers [ 111.574542][ T8093] overlayfs: failed lookup in lower (newroot/169, name='file0', err=-40): overlapping layers [ 111.574750][ T8092] evm: overlay not supported [ 111.758085][ T9] usb 8-1: USB disconnect, device number 19 [ 111.790697][ T43] audit: type=1400 audit(1790148208.973:5037): avc: denied { ioctl } for pid=8108 comm="syz.3.692" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 111.814097][ T63] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 111.903269][ T8118] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.914100][ T43] audit: type=1400 audit(1790148209.085:5038): avc: denied { ioctl } for pid=8113 comm="syz.1.694" path="socket:[23726]" dev="sockfs" ino=23726 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.932335][ T8108] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 112.007265][ T63] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 112.008698][ T63] usb 5-1: config 0 has no interfaces? [ 112.010326][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.010339][ T63] usb 5-1: Product: syz [ 112.010345][ T63] usb 5-1: Manufacturer: syz [ 112.010353][ T63] usb 5-1: SerialNumber: syz [ 112.011761][ T63] usb 5-1: config 0 descriptor?? [ 112.228000][ T8097] Bluetooth: hci0: invalid len left 7, exp >= 208 [ 112.228181][ T8097] i2c i2c-0: Failed to register i2c client maxtcpc at 0x05 (-16) [ 112.229385][ T63] usb 5-1: USB disconnect, device number 25 [ 112.378834][ T8142] xt_socket: unknown flags 0x58 [ 112.421907][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 112.603536][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 112.606571][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.607553][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 112.607572][ T9] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 112.607604][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.607623][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.607641][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 112.607672][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.613046][ T9] usbtmc 8-1:16.0: bulk endpoints not found [ 112.859214][ T8146] FAULT_INJECTION: forcing a failure. [ 112.859214][ T8146] name failslab, interval 1, probability 0, space 0, times 0 [ 112.859245][ T8146] CPU: 1 UID: 0 PID: 8146 Comm: syz.0.705 Not tainted syzkaller #0 PREEMPT(full) [ 112.859267][ T8146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.859278][ T8146] Call Trace: [ 112.859284][ T8146] [ 112.859292][ T8146] dump_stack_lvl+0x100/0x190 [ 112.859321][ T8146] should_fail_ex.cold+0x5/0xa [ 112.859348][ T8146] should_failslab+0xc2/0x120 [ 112.859374][ T8146] __kmalloc_noprof+0xfc/0x840 [ 112.859395][ T8146] ? tomoyo_encode2+0xfb/0x3c0 [ 112.859421][ T8146] tomoyo_encode2+0xfb/0x3c0 [ 112.859444][ T8146] tomoyo_encode+0x29/0x50 [ 112.859465][ T8146] tomoyo_realpath_from_path+0x18c/0x690 [ 112.859494][ T8146] tomoyo_path_number_perm+0x23c/0x580 [ 112.859513][ T8146] ? tomoyo_path_number_perm+0x22e/0x580 [ 112.859534][ T8146] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.859560][ T8146] ? __lock_acquire+0x5c0/0x1f40 [ 112.859592][ T8146] ? __fget_files+0x34/0x3d0 [ 112.859615][ T8146] ? find_held_lock+0x2b/0x80 [ 112.859639][ T8146] ? hook_file_ioctl_common+0x140/0x440 [ 112.859668][ T8146] ? __fget_files+0x21f/0x3d0 [ 112.859693][ T8146] security_file_ioctl+0xd3/0x230 [ 112.859716][ T8146] __x64_sys_ioctl+0xb7/0x210 [ 112.859737][ T8146] do_syscall_64+0x123/0x790 [ 112.859766][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.859783][ T8146] RIP: 0033:0x7fd2cd39e159 [ 112.859798][ T8146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.859815][ T8146] RSP: 002b:00007fd2ce2fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.859835][ T8146] RAX: ffffffffffffffda RBX: 00007fd2cd625fa0 RCX: 00007fd2cd39e159 [ 112.859847][ T8146] RDX: 0000000000000000 RSI: 0000000080084503 RDI: 0000000000000003 [ 112.859858][ T8146] RBP: 00007fd2ce2fe090 R08: 0000000000000000 R09: 0000000000000000 [ 112.859869][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.859880][ T8146] R13: 00007fd2cd626038 R14: 00007fd2cd625fa0 R15: 00007ffea59f5728 [ 112.859926][ T8146] [ 112.860135][ T8146] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.914334][ T8148] macsec0: entered promiscuous mode [ 112.914489][ T8148] macsec0: entered allmulticast mode [ 112.914499][ T8148] veth1_macvtap: entered allmulticast mode [ 112.971997][ T43] audit: type=1400 audit(1790148210.077:5039): avc: denied { ioctl } for pid=8152 comm="syz.1.709" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 113.067691][ T43] audit: type=1400 audit(1790148210.171:5040): avc: denied { getopt } for pid=8166 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 113.904377][ T8184] loop9: detected capacity change from 0 to 7 [ 113.908715][ T8184] Dev loop9: unable to read RDB block 7 [ 113.908747][ T8184] loop9: unable to read partition table [ 113.908904][ T8184] loop9: partition table beyond EOD, truncated [ 113.909825][ T8184] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.914086][ T43] audit: type=1400 audit(1790148210.957:5041): avc: denied { bind } for pid=8183 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.003490][ T35] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 114.025603][ T8183] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 114.065091][ T43] audit: type=1400 audit(1790148211.097:5042): avc: denied { read } for pid=8185 comm="syz.0.718" name="v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 114.112971][ T43] audit: type=1400 audit(1790148211.153:5043): avc: denied { write } for pid=8187 comm="syz.0.719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 114.174855][ T35] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 114.175739][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 114.175755][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.175767][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 114.177334][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.177346][ T35] usb 7-1: Product: syz [ 114.177353][ T35] usb 7-1: Manufacturer: syz [ 114.177360][ T35] usb 7-1: SerialNumber: syz [ 114.181596][ T35] usb 7-1: config 0 descriptor?? [ 114.400121][ T35] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 114.404998][ T35] usb 7-1: USB disconnect, device number 17 [ 114.701586][ T8199] selinux_netlink_send: 24 callbacks suppressed [ 114.701605][ T8199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8199 comm=syz.0.721 [ 114.701920][ T8199] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 114.714048][ T8199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.726716][ T8199] bond1: (slave geneve2): making interface the new active one [ 114.727531][ T8199] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 114.803833][ T8209] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.002911][ T8223] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x3 [ 115.010606][ T8225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.033313][ T8223] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 115.194369][ T5089] Bluetooth: hci4: sending frame failed (-49) [ 115.195231][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 115.311308][ T8248] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.359489][ T8254] FAULT_INJECTION: forcing a failure. [ 115.359489][ T8254] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.359510][ T8254] CPU: 0 UID: 0 PID: 8254 Comm: syz.1.738 Not tainted syzkaller #0 PREEMPT(full) [ 115.359523][ T8254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.359529][ T8254] Call Trace: [ 115.359538][ T8254] [ 115.359543][ T8254] dump_stack_lvl+0x100/0x190 [ 115.359571][ T8254] should_fail_ex.cold+0x5/0xa [ 115.359588][ T8254] get_futex_key+0x1d0/0x14f0 [ 115.359605][ T8254] ? __pfx_get_futex_key+0x10/0x10 [ 115.359623][ T8254] futex_wait_setup+0x91/0x540 [ 115.359637][ T8254] __futex_wait+0x19f/0x300 [ 115.359649][ T8254] ? __pfx___futex_wait+0x10/0x10 [ 115.359658][ T8254] ? __pfx_try_to_wake_up+0x10/0x10 [ 115.359671][ T8254] ? futex_hash+0x311/0x400 [ 115.359685][ T8254] ? __pfx_futex_wake_mark+0x10/0x10 [ 115.359706][ T8254] ? find_held_lock+0x2b/0x80 [ 115.359722][ T8254] ? futex_wake+0x4ea/0x5e0 [ 115.359735][ T8254] futex_wait+0xe6/0x370 [ 115.359745][ T8254] ? __pfx_futex_wait+0x10/0x10 [ 115.359758][ T8254] ? putname+0xb1/0x110 [ 115.359776][ T8254] ? kmem_cache_free+0x127/0x6c0 [ 115.359796][ T8254] do_futex+0x265/0x440 [ 115.359814][ T8254] ? __pfx_do_futex+0x10/0x10 [ 115.359827][ T8254] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.359844][ T8254] ? fput+0x7c/0x100 [ 115.359859][ T8254] __x64_sys_futex+0x34f/0x4d0 [ 115.359875][ T8254] ? __x64_sys_openat+0x12d/0x210 [ 115.359890][ T8254] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.359910][ T8254] do_syscall_64+0x123/0x790 [ 115.359932][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.359944][ T8254] RIP: 0033:0x7fc43339e159 [ 115.359953][ T8254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.359964][ T8254] RSP: 002b:00007fc43417e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.359980][ T8254] RAX: ffffffffffffffda RBX: 00007fc433625fa8 RCX: 00007fc43339e159 [ 115.359987][ T8254] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc433625fa8 [ 115.359994][ T8254] RBP: 00007fc433625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 115.360001][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.360007][ T8254] R13: 00007fc433626038 R14: 00007ffd493c8fe0 R15: 00007ffd493c90c8 [ 115.360021][ T8254] [ 115.372689][ T5834] usb 8-1: USB disconnect, device number 20 [ 115.461948][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 115.486856][ T8264] FAULT_INJECTION: forcing a failure. [ 115.486856][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.486886][ T8264] CPU: 3 UID: 0 PID: 8264 Comm: syz.2.741 Not tainted syzkaller #0 PREEMPT(full) [ 115.486907][ T8264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.486918][ T8264] Call Trace: [ 115.486924][ T8264] [ 115.486931][ T8264] dump_stack_lvl+0x100/0x190 [ 115.486961][ T8264] should_fail_ex.cold+0x5/0xa [ 115.486988][ T8264] _copy_from_iter+0x1f4/0x1690 [ 115.487014][ T8264] ? __pfx__copy_from_iter+0x10/0x10 [ 115.487034][ T8264] ? sock_has_perm+0x25a/0x2f0 [ 115.487052][ T8264] ? __pfx_sock_has_perm+0x10/0x10 [ 115.487078][ T8264] hci_sock_sendmsg+0x4a1/0x2620 [ 115.487115][ T8264] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 115.487139][ T8264] ? selinux_socket_sendmsg+0x198/0x2f0 [ 115.487164][ T8264] ____sys_sendmsg+0xa4d/0xbe0 [ 115.487191][ T8264] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 115.487219][ T8264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.487252][ T8264] ? lock_acquire+0x1d1/0x380 [ 115.487272][ T8264] ? get_pid_task+0x2a/0x250 [ 115.487306][ T8264] ___sys_sendmsg+0x190/0x1e0 [ 115.487324][ T8264] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.487342][ T8264] ? get_pid_task+0x106/0x250 [ 115.487376][ T8264] ? find_held_lock+0x2b/0x80 [ 115.487415][ T8264] __sys_sendmsg+0x160/0x210 [ 115.487440][ T8264] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.487477][ T8264] do_syscall_64+0x123/0x790 [ 115.487508][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.487527][ T8264] RIP: 0033:0x7fcd4519e159 [ 115.487541][ T8264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.487557][ T8264] RSP: 002b:00007fcd45fd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.487575][ T8264] RAX: ffffffffffffffda RBX: 00007fcd45425fa0 RCX: 00007fcd4519e159 [ 115.487586][ T8264] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 115.487598][ T8264] RBP: 00007fcd45fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 115.487608][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.487617][ T8264] R13: 00007fcd45426038 R14: 00007fcd45425fa0 R15: 00007ffef21294c8 [ 115.487643][ T8264] [ 115.526550][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 115.795556][ T8287] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 115.795634][ T8287] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 115.799873][ T8287] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 115.801632][ T8287] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 115.872872][ T8290] vcan1: entered allmulticast mode [ 116.156189][ T8294] netlink: 52 bytes leftover after parsing attributes in process `syz.0.750'. [ 116.183803][ T5834] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 116.280717][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 116.344483][ T5834] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 116.347566][ T5834] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 116.347593][ T5834] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.347610][ T5834] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 116.347639][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.354191][ T8290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.365897][ T5834] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 116.380186][ T5834] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 116.578122][ T50] usb 7-1: USB disconnect, device number 18 [ 116.594312][ T50] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 116.594849][ T50] cyberjack 7-1:1.0: device disconnected [ 116.615801][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 116.615814][ T43] audit: type=1400 audit(1790148213.493:5051): avc: granted { setsecparam } for pid=8310 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 116.618075][ T43] audit: type=1400 audit(1790148213.493:5052): avc: denied { write } for pid=8310 comm="syz.1.757" name="/" dev="ocfs2_dlmfs" ino=26632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.618662][ T8311] (syz.1.757,8311,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 116.618676][ T43] audit: type=1400 audit(1790148213.493:5053): avc: denied { create } for pid=8310 comm="syz.1.757" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.619242][ T43] audit: type=1400 audit(1790148213.493:5054): avc: denied { write } for pid=8310 comm="syz.1.757" name="/" dev="ocfs2_dlmfs" ino=26632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.619293][ T8311] o2cb: This node has not been configured. [ 116.619299][ T8311] o2cb: Cluster check failed. Fix errors before retrying. [ 116.619310][ T8311] (syz.1.757,8311,2):user_dlm_register:674 ERROR: status = -22 [ 116.619322][ T8311] (syz.1.757,8311,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "cifs" [ 116.623322][ T8313] FAULT_INJECTION: forcing a failure. [ 116.623322][ T8313] name failslab, interval 1, probability 0, space 0, times 0 [ 116.623349][ T8313] CPU: 3 UID: 0 PID: 8313 Comm: syz.3.758 Not tainted syzkaller #0 PREEMPT(full) [ 116.623366][ T8313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.623376][ T8313] Call Trace: [ 116.623382][ T8313] [ 116.623389][ T8313] dump_stack_lvl+0x100/0x190 [ 116.623430][ T8313] should_fail_ex.cold+0x5/0xa [ 116.623459][ T8313] should_failslab+0xc2/0x120 [ 116.623485][ T8313] __kmalloc_noprof+0xfc/0x840 [ 116.623498][ T8313] ? rcu_is_watching+0x13/0xc0 [ 116.623514][ T8313] ? tomoyo_realpath_from_path+0xb6/0x690 [ 116.623532][ T8313] tomoyo_realpath_from_path+0xb6/0x690 [ 116.623549][ T8313] tomoyo_path_number_perm+0x23c/0x580 [ 116.623560][ T8313] ? tomoyo_path_number_perm+0x22e/0x580 [ 116.623573][ T8313] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.623589][ T8313] ? __lock_acquire+0x5c0/0x1f40 [ 116.623608][ T8313] ? __fget_files+0x34/0x3d0 [ 116.623622][ T8313] ? find_held_lock+0x2b/0x80 [ 116.623637][ T8313] ? hook_file_ioctl_common+0x140/0x440 [ 116.623656][ T8313] ? __fget_files+0x21f/0x3d0 [ 116.623672][ T8313] security_file_ioctl+0xd3/0x230 [ 116.623686][ T8313] __x64_sys_ioctl+0xb7/0x210 [ 116.623698][ T8313] do_syscall_64+0x123/0x790 [ 116.623720][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.623732][ T8313] RIP: 0033:0x7fc89959e159 [ 116.623741][ T8313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.623752][ T8313] RSP: 002b:00007fc89a3e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.623763][ T8313] RAX: ffffffffffffffda RBX: 00007fc899825fa0 RCX: 00007fc89959e159 [ 116.623770][ T8313] RDX: 0000200000000840 RSI: 00000000c02c564a RDI: 0000000000000003 [ 116.623777][ T8313] RBP: 00007fc89a3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 116.623783][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.623789][ T8313] R13: 00007fc899826038 R14: 00007fc899825fa0 R15: 00007ffef454e1c8 [ 116.623803][ T8313] [ 116.623807][ T8313] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.745269][ T8319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.760'. [ 116.825822][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 116.902012][ T8329] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 116.902032][ T8329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.904510][ T43] audit: type=1400 audit(1790148213.755:5055): avc: denied { write } for pid=8330 comm="syz.3.765" name="buffer_size_kb" dev="tracefs" ino=6190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 117.018638][ T43] audit: type=1400 audit(1790148213.867:5056): avc: denied { create } for pid=8340 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.020662][ T43] audit: type=1400 audit(1790148213.867:5057): avc: denied { ioctl } for pid=8340 comm="syz.3.768" path="socket:[25394]" dev="sockfs" ino=25394 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.020992][ T43] audit: type=1400 audit(1790148213.867:5058): avc: denied { write } for pid=8340 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.021316][ T43] audit: type=1400 audit(1790148213.867:5059): avc: denied { read } for pid=8340 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.027241][ T1041] logitech-hidpp-device 0003:046D:C082.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 117.055878][ T43] audit: type=1400 audit(1790148213.905:5060): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 117.070509][ T8342] fido_id[8342]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.155882][ T8349] bond0: Error: Cannot enslave bond to itself. [ 117.196236][ T8355] nvme_fcloop: unknown parameter or missing value ';e' [ 117.196515][ T8355] ata3.00: invalid multi_count 1 ignored [ 117.211336][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 117.212356][ T8359] nvme_fcloop: unknown parameter or missing value ';e' [ 117.213255][ T8361] ata3.00: invalid multi_count 1 ignored [ 117.288063][ T8354] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 117.327076][ T8369] ip6tnl1: entered allmulticast mode [ 117.367917][ T8374] loop5: detected capacity change from 0 to 4095 [ 117.373761][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 117.374074][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 117.374424][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 117.374556][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 117.377545][ T5732] buffer_io_error: 14 callbacks suppressed [ 117.377561][ T5732] Buffer I/O error on dev loop5, logical block 511, async page read [ 117.408228][ T8376] loop5: detected capacity change from 0 to 4095 [ 117.416420][ T35] libceph: connect (1)[c::]:6789 error -101 [ 117.416590][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 117.419613][ T5730] Buffer I/O error on dev loop5, logical block 511, async page read [ 117.429037][ T5730] Buffer I/O error on dev loop5, logical block 511, async page read [ 117.649994][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 117.650094][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 117.690695][ T35] libceph: connect (1)[c::]:6789 error -101 [ 117.690899][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 117.948515][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 117.948532][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 117.948542][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 117.948559][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 117.948570][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 117.948578][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 117.948586][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 117.948600][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 117.948608][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 117.948619][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 117.948630][ T8386] jffs2: Further such events for this erase block will not be printed [ 117.962939][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 117.962955][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 117.964682][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 117.964695][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 117.964704][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 117.964722][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 117.964734][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 117.964743][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 117.964751][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 117.964769][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 117.964782][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 117.964794][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 117.964807][ T8386] jffs2: Further such events for this erase block will not be printed [ 117.973078][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 117.973086][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 117.973846][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 117.973859][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 117.973868][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 117.973885][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 117.973896][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 117.973904][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 117.973912][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 117.973926][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 117.973934][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 117.973942][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 117.973949][ T8386] jffs2: Further such events for this erase block will not be printed [ 117.980986][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 117.980996][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 117.981468][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 117.981479][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 117.981488][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 117.981507][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 117.981519][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 117.981527][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 117.981536][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 117.981551][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 117.981560][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 117.981568][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 117.981577][ T8386] jffs2: Further such events for this erase block will not be printed [ 117.989974][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 117.989986][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 117.990843][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 117.990862][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 117.990876][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 117.990903][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 117.990922][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 117.990935][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 117.990948][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 117.990971][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 117.990984][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 117.990998][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 117.991011][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.001407][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.001420][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.002212][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.002230][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.002242][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.002270][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.002287][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.002300][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.002314][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.002392][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.002408][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.002421][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.002434][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.012151][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.012164][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.012929][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.012948][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.012961][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.012988][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.013007][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.013020][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.013033][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.013056][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.013069][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.013082][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.013095][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.023477][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.023494][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.024443][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.024461][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.024475][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.024504][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.024520][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.024532][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.024543][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.024565][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.024578][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.024591][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.024605][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.035326][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.035341][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.036173][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.036191][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.036205][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.036230][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.036272][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.036286][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.036300][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.036322][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.036335][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.036348][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.036361][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.048166][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.048182][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.049136][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.049155][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.049167][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.049195][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.049214][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.049227][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.049240][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.049263][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.049277][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.049290][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.049303][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.060298][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.060313][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.061154][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.061172][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.061185][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.061213][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.061231][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.061245][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.061258][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.061280][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.061293][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.061307][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.061320][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.071739][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.071754][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.072634][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.072652][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.072666][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.072691][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.072708][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.072722][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.072735][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.072758][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.072772][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.072785][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.072798][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.083114][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.083129][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.083988][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.084006][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.084020][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.084049][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.084068][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.084082][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.084096][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.084120][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.084133][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.084147][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.084160][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.094364][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.094378][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.095587][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.095605][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.095619][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.095647][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.095665][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.095679][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.095692][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.095715][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.095728][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.095742][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.095754][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.106840][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.106856][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.107806][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.107825][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.107839][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.107869][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.107888][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.107903][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.107917][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.107939][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.107953][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.107965][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.107979][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.117995][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.118008][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.118863][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.118881][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.118894][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.118922][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.118940][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.118954][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.118967][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.118990][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.119003][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.119017][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.119030][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.130336][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.130352][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.140624][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.140646][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.140660][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.140688][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.140708][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.140722][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.140735][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.140758][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.140772][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.140785][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.140798][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.151410][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.151425][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.152460][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.152479][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.152493][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.152521][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.152539][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.152552][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.152566][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.152589][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.152603][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.152617][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.152631][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.163258][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.163272][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.164101][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.164119][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.164133][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.164161][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.164179][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.164193][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.164207][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.164229][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.164268][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.164283][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.164295][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.174639][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.174654][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.175523][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.175541][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.175554][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.175582][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.175600][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.175614][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.175626][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.175648][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.175662][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.175675][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.175688][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.181713][ T8377] ceph: No mds server is up or the cluster is laggy [ 118.183076][ T8370] ceph: No mds server is up or the cluster is laggy [ 118.186486][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.186498][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.187260][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.187278][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.187293][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.187317][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.187335][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.187349][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.187362][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.187383][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.187395][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.187408][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.187421][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.197941][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.197955][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.198806][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.198823][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.198835][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.198862][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.198880][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.198894][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.198908][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.198930][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.198943][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.198956][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.198969][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.211484][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.211498][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.212427][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.212446][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.212460][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.212495][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.212513][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.212527][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.212541][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.212563][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.212578][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.212591][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.212604][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.224423][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.224437][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.226639][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.226659][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.226673][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.226701][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.226718][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.226732][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.226745][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.226767][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.226781][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.226794][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.226806][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.237678][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.237691][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.238593][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.238611][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.238625][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.238653][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.238672][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.238685][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.238699][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.238721][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.238734][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.238748][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.238761][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.250449][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.250462][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.251303][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.251321][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.251333][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.251359][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.251375][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.251385][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.251397][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.251415][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.251427][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.251441][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.251453][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.262755][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.262772][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.263751][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.263769][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.263784][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.263812][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.263833][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.263847][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.263862][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.263888][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.263903][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.263918][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.263932][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.274992][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.275010][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.275881][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.275898][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.275912][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.275939][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.275957][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.275971][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.275985][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.276007][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.276020][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.276034][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.276046][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.287736][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.287749][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.289269][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.289285][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.289297][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.289319][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.289335][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.289348][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.289360][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.289381][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.289393][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.289405][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.289417][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.319558][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.319573][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.325272][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.325293][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.325307][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.325333][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.325351][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.325364][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.325377][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.325400][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.325414][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.325428][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.325441][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.365192][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.365207][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.365978][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.365990][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.365998][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.366015][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.374953][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.374968][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.374976][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.374989][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.374997][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.375005][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.375013][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.400427][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.400437][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.400891][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.400902][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.400915][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.400932][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.400942][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.400950][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.400958][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.400972][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.400980][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.400988][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.400996][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.419806][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.419815][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.420750][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 118.420761][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 118.420769][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0078 instead [ 118.420786][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x000f instead [ 118.420797][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 118.420805][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 118.420813][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 118.420826][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000180: 0x001a instead [ 118.420834][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000184: 0x0800 instead [ 118.420842][ T8386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000188: 0xbbbb instead [ 118.420850][ T8386] jffs2: Further such events for this erase block will not be printed [ 118.429690][ T8386] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 118.429698][ T8386] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 118.500322][ T8397] netlink: 168 bytes leftover after parsing attributes in process `syz.1.784'. [ 118.514666][ T8399] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.573936][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.576400][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.576839][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.580055][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.580323][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.584673][ T8406] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 118.584701][ T8406] SELinux: failed to load policy [ 118.598807][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.598957][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.599119][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.602914][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.603178][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.723001][ T8417] FAULT_INJECTION: forcing a failure. [ 118.723001][ T8417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.723024][ T8417] CPU: 2 UID: 0 PID: 8417 Comm: syz.2.789 Not tainted syzkaller #0 PREEMPT(full) [ 118.723037][ T8417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.723044][ T8417] Call Trace: [ 118.723048][ T8417] [ 118.723053][ T8417] dump_stack_lvl+0x100/0x190 [ 118.723075][ T8417] should_fail_ex.cold+0x5/0xa [ 118.723092][ T8417] _copy_from_iter+0x1f4/0x1690 [ 118.723110][ T8417] ? __pfx__copy_from_iter+0x10/0x10 [ 118.723126][ T8417] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 118.723147][ T8417] copy_page_from_iter+0x238/0x300 [ 118.723163][ T8417] anon_pipe_write+0xaf1/0x1b50 [ 118.723184][ T8417] ? __pfx_anon_pipe_write+0x10/0x10 [ 118.723199][ T8417] ? selinux_file_permission+0x8f/0x6d0 [ 118.723215][ T8417] ? bpf_lsm_file_permission+0x9/0x10 [ 118.723236][ T8417] ? security_file_permission+0x76/0x210 [ 118.723257][ T8417] ? rw_verify_area+0xce/0x6d0 [ 118.723285][ T8417] aio_write+0x3ba/0x920 [ 118.723315][ T8417] ? __pfx_aio_write+0x10/0x10 [ 118.723357][ T8417] ? __might_fault+0xc5/0x140 [ 118.723391][ T8417] ? io_submit_one+0x1142/0x1fb0 [ 118.723415][ T8417] io_submit_one+0x1142/0x1fb0 [ 118.723446][ T8417] ? __lock_acquire+0x5c0/0x1f40 [ 118.723471][ T8417] ? __pfx_io_submit_one+0x10/0x10 [ 118.723498][ T8417] ? lock_acquire+0x1d1/0x380 [ 118.723523][ T8417] ? __might_fault+0xc5/0x140 [ 118.723555][ T8417] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 118.723582][ T8417] __x64_sys_io_submit+0x1b1/0x3a0 [ 118.723634][ T8417] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 118.723679][ T8417] do_syscall_64+0x123/0x790 [ 118.723709][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.723723][ T8417] RIP: 0033:0x7fcd4519e159 [ 118.723734][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.723745][ T8417] RSP: 002b:00007fcd45fd4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 118.723757][ T8417] RAX: ffffffffffffffda RBX: 00007fcd45425fa0 RCX: 00007fcd4519e159 [ 118.723765][ T8417] RDX: 0000200000000300 RSI: 000000000000f000 RDI: 00007fcd45fa3000 [ 118.723772][ T8417] RBP: 00007fcd45fd4090 R08: 0000000000000000 R09: 0000000000000000 [ 118.723784][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.723790][ T8417] R13: 00007fcd45426038 R14: 00007fcd45425fa0 R15: 00007ffef21294c8 [ 118.723806][ T8417] [ 118.839148][ T8424] FAULT_INJECTION: forcing a failure. [ 118.839148][ T8424] name failslab, interval 1, probability 0, space 0, times 0 [ 118.839178][ T8424] CPU: 0 UID: 0 PID: 8424 Comm: syz.3.791 Not tainted syzkaller #0 PREEMPT(full) [ 118.839199][ T8424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.839211][ T8424] Call Trace: [ 118.839218][ T8424] [ 118.839225][ T8424] dump_stack_lvl+0x100/0x190 [ 118.839274][ T8424] should_fail_ex.cold+0x5/0xa [ 118.839300][ T8424] should_failslab+0xc2/0x120 [ 118.839326][ T8424] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 118.839349][ T8424] ? __d_alloc+0x35/0xa50 [ 118.839381][ T8424] __d_alloc+0x35/0xa50 [ 118.839410][ T8424] d_alloc_parallel+0x105/0x14c0 [ 118.839436][ T8424] ? lock_acquire+0x1d1/0x380 [ 118.839455][ T8424] ? __d_lookup+0x73/0x4a0 [ 118.839476][ T8424] ? __pfx_d_alloc_parallel+0x10/0x10 [ 118.839497][ T8424] ? __d_lookup+0x25c/0x4a0 [ 118.839521][ T8424] ? __d_lookup+0x266/0x4a0 [ 118.839547][ T8424] lookup_open+0x6bb/0x1990 [ 118.839577][ T8424] path_openat+0xa2c/0x2440 [ 118.839605][ T8424] ? __pfx_path_openat+0x10/0x10 [ 118.839635][ T8424] do_file_open+0x20e/0x430 [ 118.839662][ T8424] ? __pfx_do_file_open+0x10/0x10 [ 118.839695][ T8424] ? __pfx_kfree_link+0x10/0x10 [ 118.839724][ T8424] ? _raw_spin_unlock+0x28/0x50 [ 118.839748][ T8424] ? alloc_fd+0x471/0x7a0 [ 118.839781][ T8424] do_sys_openat2+0x10f/0x1e0 [ 118.839816][ T8424] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.839855][ T8424] __x64_sys_openat+0x12d/0x210 [ 118.839884][ T8424] ? __pfx___x64_sys_openat+0x10/0x10 [ 118.839923][ T8424] do_syscall_64+0x123/0x790 [ 118.839957][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.839977][ T8424] RIP: 0033:0x7fc89955e98e [ 118.839993][ T8424] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.840010][ T8424] RSP: 002b:00007fc89a3dff18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.840029][ T8424] RAX: ffffffffffffffda RBX: 00007fc89a3e06c0 RCX: 00007fc89955e98e [ 118.840042][ T8424] RDX: 0000000000000000 RSI: 00007fc8996347a6 RDI: ffffffffffffff9c [ 118.840054][ T8424] RBP: 00007fc89963506b R08: 0000000000000000 R09: 0000000000000000 [ 118.840080][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.840092][ T8424] R13: 00007fc899826038 R14: 00007fc899825fa0 R15: 00007ffef454e1c8 [ 118.840119][ T8424] [ 118.968698][ T8435] bond0: Error: Cannot enslave bond to itself. [ 118.999711][ T8440] FAULT_INJECTION: forcing a failure. [ 118.999711][ T8440] name failslab, interval 1, probability 0, space 0, times 0 [ 118.999739][ T8440] CPU: 2 UID: 0 PID: 8440 Comm: syz.1.796 Not tainted syzkaller #0 PREEMPT(full) [ 118.999781][ T8440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.999793][ T8440] Call Trace: [ 118.999799][ T8440] [ 118.999806][ T8440] dump_stack_lvl+0x100/0x190 [ 118.999838][ T8440] should_fail_ex.cold+0x5/0xa [ 118.999865][ T8440] should_failslab+0xc2/0x120 [ 118.999889][ T8440] __kmalloc_noprof+0xfc/0x840 [ 118.999909][ T8440] ? tomoyo_encode2+0xfb/0x3c0 [ 118.999936][ T8440] tomoyo_encode2+0xfb/0x3c0 [ 118.999962][ T8440] tomoyo_encode+0x29/0x50 [ 118.999989][ T8440] tomoyo_realpath_from_path+0x18c/0x690 [ 119.000018][ T8440] tomoyo_path_number_perm+0x23c/0x580 [ 119.000036][ T8440] ? tomoyo_path_number_perm+0x22e/0x580 [ 119.000056][ T8440] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.000085][ T8440] ? __lock_acquire+0x5c0/0x1f40 [ 119.000117][ T8440] ? __fget_files+0x34/0x3d0 [ 119.000141][ T8440] ? find_held_lock+0x2b/0x80 [ 119.000165][ T8440] ? hook_file_ioctl_common+0x140/0x440 [ 119.000197][ T8440] ? __fget_files+0x21f/0x3d0 [ 119.000224][ T8440] security_file_ioctl+0xd3/0x230 [ 119.000270][ T8440] __x64_sys_ioctl+0xb7/0x210 [ 119.000292][ T8440] do_syscall_64+0x123/0x790 [ 119.000321][ T8440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.000340][ T8440] RIP: 0033:0x7fc43339e159 [ 119.000357][ T8440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.000374][ T8440] RSP: 002b:00007fc43417e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.000392][ T8440] RAX: ffffffffffffffda RBX: 00007fc433625fa0 RCX: 00007fc43339e159 [ 119.000404][ T8440] RDX: 0000200000000180 RSI: 00000000c04064a0 RDI: 0000000000000003 [ 119.000416][ T8440] RBP: 00007fc43417e090 R08: 0000000000000000 R09: 0000000000000000 [ 119.000426][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.000437][ T8440] R13: 00007fc433626038 R14: 00007fc433625fa0 R15: 00007ffd493c90c8 [ 119.000463][ T8440] [ 119.000510][ T8440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.130535][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.130667][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.130950][ T8401] bridge_slave_0: entered allmulticast mode [ 119.132494][ T8401] bridge_slave_0: entered promiscuous mode [ 119.135367][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.135489][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.135582][ T8401] bridge_slave_1: entered allmulticast mode [ 119.137089][ T8401] bridge_slave_1: entered promiscuous mode [ 119.221882][ T8401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.225940][ T8401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.254733][ T8401] team0: Port device team_slave_0 added [ 119.257133][ T8401] team0: Port device team_slave_1 added [ 119.281648][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.281659][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.281672][ T8401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.285101][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.285115][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.285134][ T8401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.317660][ T8401] hsr_slave_0: entered promiscuous mode [ 119.318577][ T8401] hsr_slave_1: entered promiscuous mode [ 119.319125][ T8401] debugfs: 'hsr0' already exists in 'hsr' [ 119.319143][ T8401] Cannot create hsr debugfs directory [ 119.497421][ T8401] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.500364][ T8401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.501114][ T8401] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.507623][ T8401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.508076][ T8401] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.512039][ T8401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.512572][ T8401] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.514736][ T8401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.579158][ T8401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.581602][ T1349] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 119.609721][ T8401] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.614813][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.614876][ T7696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.618647][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.618706][ T7696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.720486][ T1349] usb 6-1: device descriptor read/64, error -71 [ 119.856801][ T8401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.935485][ T8427] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 119.976954][ T1349] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 120.041987][ T8401] veth0_vlan: entered promiscuous mode [ 120.048992][ T8401] veth1_vlan: entered promiscuous mode [ 120.074095][ T8401] veth0_macvtap: entered promiscuous mode [ 120.076446][ T8401] veth1_macvtap: entered promiscuous mode [ 120.092740][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.106964][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.115890][ T1349] usb 6-1: device descriptor read/64, error -71 [ 120.149404][ T5805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.149436][ T5805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.180328][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.180390][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.228673][ T7696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.228686][ T7696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.233619][ T1349] usb usb6-port1: attempt power cycle [ 120.253335][ T6382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.253350][ T6382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.306134][ T8510] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.790'. [ 120.306149][ T8510] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.790'. [ 120.447455][ T50] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 120.596909][ T1349] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 120.610306][ T50] usb 8-1: not running at top speed; connect to a high speed hub [ 120.610326][ T50] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 120.612083][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 120.612101][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 120.614308][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.614322][ T50] usb 8-1: Product: syz [ 120.614329][ T50] usb 8-1: Manufacturer: syz [ 120.614336][ T50] usb 8-1: SerialNumber: syz [ 120.618848][ T1349] usb 6-1: device descriptor read/8, error -71 [ 120.625008][ T50] oti6858 8-1:1.0: oti6858 converter detected [ 120.631134][ T8522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.811'. [ 120.644998][ T50] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 120.734870][ T8529] netlink: 'syz.4.815': attribute type 5 has an invalid length. [ 120.768930][ T5089] Bluetooth: hci1: command tx timeout [ 120.843525][ T8499] FAULT_INJECTION: forcing a failure. [ 120.843525][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 120.843555][ T8499] CPU: 1 UID: 0 PID: 8499 Comm: syz.3.805 Not tainted syzkaller #0 PREEMPT(full) [ 120.843576][ T8499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.843587][ T8499] Call Trace: [ 120.843593][ T8499] [ 120.843600][ T8499] dump_stack_lvl+0x100/0x190 [ 120.843656][ T8499] should_fail_ex.cold+0x5/0xa [ 120.843684][ T8499] should_failslab+0xc2/0x120 [ 120.843707][ T8499] __kmalloc_noprof+0xfc/0x840 [ 120.843728][ T8499] ? tomoyo_encode2+0xfb/0x3c0 [ 120.843756][ T8499] tomoyo_encode2+0xfb/0x3c0 [ 120.843780][ T8499] tomoyo_encode+0x29/0x50 [ 120.843799][ T8499] tomoyo_realpath_from_path+0x18c/0x690 [ 120.843825][ T8499] tomoyo_check_open_permission+0x2af/0x3c0 [ 120.843846][ T8499] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 120.843875][ T8499] ? hook_file_open+0x248/0x8e0 [ 120.843916][ T8499] ? path_get+0x61/0x80 [ 120.843944][ T8499] tomoyo_file_open+0x6b/0x90 [ 120.843971][ T8499] security_file_open+0xb5/0x1e0 [ 120.843994][ T8499] do_dentry_open+0x588/0x14d0 [ 120.844021][ T8499] vfs_open+0x82/0x3f0 [ 120.844048][ T8499] path_openat+0x19fa/0x2440 [ 120.844074][ T8499] ? __pfx_path_openat+0x10/0x10 [ 120.844104][ T8499] do_file_open+0x20e/0x430 [ 120.844129][ T8499] ? __pfx_do_file_open+0x10/0x10 [ 120.844169][ T8499] ? _raw_spin_unlock+0x28/0x50 [ 120.844192][ T8499] ? alloc_fd+0x471/0x7a0 [ 120.844223][ T8499] do_sys_openat2+0x10f/0x1e0 [ 120.844292][ T8499] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.844317][ T8499] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.844345][ T8499] ? __fget_files+0x21f/0x3d0 [ 120.844372][ T8499] __x64_sys_openat+0x12d/0x210 [ 120.844397][ T8499] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.844422][ T8499] ? ksys_write+0x1ac/0x250 [ 120.844450][ T8499] do_syscall_64+0x123/0x790 [ 120.844478][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.844496][ T8499] RIP: 0033:0x7fc89959e159 [ 120.844511][ T8499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.844528][ T8499] RSP: 002b:00007fc89a3e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.844545][ T8499] RAX: ffffffffffffffda RBX: 00007fc899825fa0 RCX: 00007fc89959e159 [ 120.844557][ T8499] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 120.844568][ T8499] RBP: 00007fc89a3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 120.844580][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.844590][ T8499] R13: 00007fc899826038 R14: 00007fc899825fa0 R15: 00007ffef454e1c8 [ 120.844613][ T8499] [ 120.844693][ T8499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.874565][ T1349] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 120.897446][ T1349] usb 6-1: device descriptor read/8, error -71 [ 120.975311][ T8499] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 120.976947][ T5521] usb 8-1: USB disconnect, device number 21 [ 120.989438][ T5521] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 120.989948][ T5521] oti6858 8-1:1.0: device disconnected [ 121.013619][ T1349] usb usb6-port1: unable to enumerate USB device [ 121.057367][ T8542] tls_set_device_offload_rx: netdev not found [ 121.091207][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 121.388574][ T1349] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 121.550424][ T1349] usb 9-1: not running at top speed; connect to a high speed hub [ 121.550444][ T1349] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 121.552922][ T1349] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 121.552939][ T1349] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 121.554571][ T1349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.554584][ T1349] usb 9-1: Product: syz [ 121.554591][ T1349] usb 9-1: Manufacturer: syz [ 121.554598][ T1349] usb 9-1: SerialNumber: syz [ 121.560314][ T1349] oti6858 9-1:1.0: oti6858 converter detected [ 121.573792][ T1349] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 121.655894][ T8552] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.819272][ T8558] netlink: 52 bytes leftover after parsing attributes in process `syz.3.826'. [ 121.891610][ T8545] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 121.893831][ T1349] usb 9-1: USB disconnect, device number 2 [ 121.906248][ T1349] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 121.906744][ T1349] oti6858 9-1:1.0: device disconnected [ 121.984851][ T43] kauditd_printk_skb: 243 callbacks suppressed [ 121.984865][ T43] audit: type=1400 audit(1790148218.509:5304): avc: denied { map_create } for pid=8562 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.985288][ T43] audit: type=1400 audit(1790148218.509:5305): avc: denied { map_read map_write } for pid=8562 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.009502][ T8563] nvme_rdma: malformed address passed: 1:4420 [ 122.118541][ T43] audit: type=1400 audit(1790148218.640:5306): avc: denied { create } for pid=8565 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.122628][ T43] audit: type=1400 audit(1790148218.640:5307): avc: denied { ioctl } for pid=8565 comm="syz.3.828" path="socket:[27709]" dev="sockfs" ino=27709 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.159381][ T43] audit: type=1400 audit(1790148218.677:5308): avc: denied { create } for pid=8567 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.161661][ T43] audit: type=1400 audit(1790148218.677:5309): avc: denied { write } for pid=8567 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.191714][ T43] audit: type=1400 audit(1790148218.705:5310): avc: denied { mounton } for pid=8567 comm="syz.3.829" path="/208/dev" dev="tmpfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.191886][ T43] audit: type=1400 audit(1790148218.705:5311): avc: denied { mount } for pid=8567 comm="syz.3.829" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 122.193647][ T43] audit: type=1400 audit(1790148218.705:5312): avc: denied { mac_admin } for pid=8567 comm="syz.3.829" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.193746][ T8568] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 122.195808][ T43] audit: type=1400 audit(1790148218.705:5313): avc: denied { mount } for pid=8567 comm="syz.3.829" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 122.301868][ T8571] gadgetfs: bound to dummy_udc driver [ 122.474386][ T8576] FAULT_INJECTION: forcing a failure. [ 122.474386][ T8576] name failslab, interval 1, probability 0, space 0, times 0 [ 122.474412][ T8576] CPU: 1 UID: 0 PID: 8576 Comm: syz.4.832 Not tainted syzkaller #0 PREEMPT(full) [ 122.474429][ T8576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.474438][ T8576] Call Trace: [ 122.474444][ T8576] [ 122.474449][ T8576] dump_stack_lvl+0x100/0x190 [ 122.474476][ T8576] should_fail_ex.cold+0x5/0xa [ 122.474497][ T8576] should_failslab+0xc2/0x120 [ 122.474518][ T8576] __kmalloc_cache_noprof+0x91/0x6d0 [ 122.474541][ T8576] ? ww_mutex_lock+0x37/0x160 [ 122.474562][ T8576] ? virtio_gpu_plane_duplicate_state+0x72/0xd0 [ 122.474588][ T8576] virtio_gpu_plane_duplicate_state+0x72/0xd0 [ 122.474609][ T8576] drm_atomic_get_plane_state+0x279/0x7d0 [ 122.474633][ T8576] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 122.474658][ T8576] ? rcu_is_watching+0x13/0xc0 [ 122.474685][ T8576] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 122.474710][ T8576] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 122.474732][ T8576] ? drm_master_internal_acquire+0x21/0x80 [ 122.474779][ T8576] drm_client_modeset_commit_locked+0x14d/0x580 [ 122.474808][ T8576] drm_client_modeset_commit+0x4f/0x80 [ 122.474833][ T8576] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 122.474870][ T8576] drm_fb_helper_set_par+0x15a/0x1b0 [ 122.474893][ T8576] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 122.474919][ T8576] fb_set_var+0x824/0x1250 [ 122.474948][ T8576] ? __pfx_fb_set_var+0x10/0x10 [ 122.474979][ T8576] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 122.475016][ T8576] ? vmap_small_pages_range_noflush+0xc20/0xd50 [ 122.475052][ T8576] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 122.475083][ T8576] ? is_vmalloc_or_module_addr+0x47/0x60 [ 122.475109][ T8576] ? kasan_unpoison+0x27/0x60 [ 122.475124][ T8576] ? fb_find_best_mode+0x1e9/0x2f0 [ 122.475155][ T8576] fbcon_resize+0xba6/0xdb0 [ 122.475180][ T8576] ? __pfx_fbcon_resize+0x10/0x10 [ 122.475215][ T8576] ? vc_do_resize+0x249/0xeb0 [ 122.475234][ T8576] ? __vmalloc_node_noprof+0xad/0xf0 [ 122.475255][ T8576] ? vc_do_resize+0x249/0xeb0 [ 122.475272][ T8576] ? __pfx_fbcon_resize+0x10/0x10 [ 122.475295][ T8576] vc_do_resize+0x3bd/0xeb0 [ 122.475323][ T8576] ? lock_acquire+0x1d1/0x380 [ 122.475342][ T8576] ? __pfx_vc_do_resize+0x10/0x10 [ 122.475362][ T8576] ? rcu_is_watching+0x13/0xc0 [ 122.475393][ T8576] vt_resize+0xaa/0xf0 [ 122.475409][ T8576] ? __pfx_vt_resize+0x10/0x10 [ 122.475427][ T8576] tty_ioctl+0x9e9/0x1640 [ 122.475446][ T8576] ? __pfx_tty_ioctl+0x10/0x10 [ 122.475465][ T8576] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 122.475493][ T8576] ? __fget_files+0x34/0x3d0 [ 122.475527][ T8576] ? selinux_file_ioctl+0x13b/0x290 [ 122.475546][ T8576] ? selinux_file_ioctl+0xb6/0x290 [ 122.475568][ T8576] ? __pfx_tty_ioctl+0x10/0x10 [ 122.475590][ T8576] __x64_sys_ioctl+0x18e/0x210 [ 122.475611][ T8576] do_syscall_64+0x123/0x790 [ 122.475641][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.475660][ T8576] RIP: 0033:0x7f47e379e159 [ 122.475676][ T8576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.475692][ T8576] RSP: 002b:00007f47e45ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.475712][ T8576] RAX: ffffffffffffffda RBX: 00007f47e3a25fa0 RCX: 00007f47e379e159 [ 122.475723][ T8576] RDX: 0000200000001040 RSI: 0000000000005414 RDI: 0000000000000003 [ 122.475735][ T8576] RBP: 00007f47e45ac090 R08: 0000000000000000 R09: 0000000000000000 [ 122.475763][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.475774][ T8576] R13: 00007f47e3a26038 R14: 00007f47e3a25fa0 R15: 00007ffc06f71a38 [ 122.475799][ T8576] [ 122.567738][ T1690] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 122.568033][ C0] gadgetfs: connected [ 122.568904][ T1690] gadgetfs: disconnected [ 122.643129][ T8580] overlayfs: failed to resolve './file2': -2 [ 122.839666][ T8586] netlink: 52 bytes leftover after parsing attributes in process `syz.1.837'. [ 122.898162][ T8592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.979787][ T5839] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 123.001602][ T5089] Bluetooth: hci1: command tx timeout [ 123.175179][ T5839] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 123.177965][ T5839] usb 8-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 123.178005][ T5839] usb 8-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 123.178029][ T5839] usb 8-1: config 1 interface 0 has no altsetting 0 [ 123.185023][ T5839] usb 8-1: string descriptor 0 read error: -22 [ 123.185116][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.601786][ T850] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 123.675354][ T5839] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/0003:0458:5013.0007/input/input14 [ 123.699197][ T5839] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/0003:0458:5013.0007/input/input15 [ 123.745517][ T5805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.771664][ T850] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 123.772726][ T850] usb 9-1: config index 0 descriptor too short (expected 50, got 32) [ 123.772746][ T850] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.777551][ T850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.777571][ T850] usb 9-1: Product: syz [ 123.777581][ T850] usb 9-1: Manufacturer: syz [ 123.777590][ T850] usb 9-1: SerialNumber: syz [ 123.806832][ T5839] kye 0003:0458:5013.0007: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 123.834607][ T850] usb_debug 9-1:1.0: debug converter detected [ 123.843983][ T850] usb 9-1: debug converter now attached to ttyUSB0 [ 123.879632][ T5805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.889195][ T5521] usb 8-1: USB disconnect, device number 22 [ 123.904312][ T8618] fido_id[8618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 124.026021][ T5805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.047841][ T8614] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 124.053256][ T63] usb 9-1: USB disconnect, device number 3 [ 124.064973][ T63] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 124.065420][ T63] usb_debug 9-1:1.0: device disconnected [ 124.106475][ T5805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.130669][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.131533][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.132382][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.133267][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.135810][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.300506][ T5805] bridge_slave_1: left allmulticast mode [ 124.300531][ T5805] bridge_slave_1: left promiscuous mode [ 124.301642][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.309422][ T5805] bridge_slave_0: left allmulticast mode [ 124.309441][ T5805] bridge_slave_0: left promiscuous mode [ 124.311792][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.607672][ T5805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.611674][ T5805] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 124.615347][ T5805] bond0 (unregistering): Released all slaves [ 124.619646][ T5805] bond1 (unregistering): Released all slaves [ 124.635879][ T5443] 8021q: adding VLAN 0 to HW filter on device eth1 [ 124.863331][ T5805] rxrpc: Assertion failed [ 124.863831][ T5805] ------------[ cut here ]------------ [ 124.863840][ T5805] kernel BUG at net/rxrpc/conn_object.c:488! [ 124.863859][ T5805] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 124.871854][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 124.877094][ T5805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.880671][ T5805] Workqueue: netns cleanup_net [ 124.882281][ T5805] RIP: 0010:rxrpc_destroy_all_connections.cold+0x12/0x14 [ 124.884695][ T5805] Code: ff 90 0f 0b e8 e9 98 99 00 48 c7 c7 20 6c 5d 8d e8 ed bf af ff 90 0f 0b e8 d5 98 99 00 48 c7 c7 20 6c 5d 8d e8 d9 bf af ff 90 <0f> 0b e8 c1 98 99 00 49 63 d6 48 83 ce ff 48 c7 c7 80 f3 00 91 e8 [ 124.890293][ T5805] RSP: 0018:ffffc90004127970 EFLAGS: 00010286 [ 124.892088][ T5805] RAX: 0000000000000017 RBX: ffff88802e4d0000 RCX: 0000000000000000 [ 124.894819][ T5805] RDX: 0000000000000017 RSI: ffffffff81ea1579 RDI: fffff52000824f1f [ 124.897720][ T5805] RBP: ffff88802e4d0064 R08: 0000000000000007 R09: 0000000000000000 [ 124.900359][ T5805] R10: 8000000000000000 R11: 0000000000000001 R12: 1ffff92000824f30 [ 124.902828][ T5805] R13: ffff88802e4d0078 R14: ffff88802e4d0088 R15: ffff88802e4d0088 [ 124.905481][ T5805] FS: 0000000000000000(0000) GS:ffff8880d5c53000(0000) knlGS:0000000000000000 [ 124.908301][ T5805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.910676][ T5805] CR2: 00007f48818db286 CR3: 000000005090d000 CR4: 0000000000352ef0 [ 124.913575][ T5805] Call Trace: [ 124.914840][ T5805] [ 124.915942][ T5805] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 124.918313][ T5805] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 124.920309][ T5805] ? __timer_delete_sync+0x151/0x1c0 [ 124.922090][ T5805] rxrpc_exit_net+0x7b/0xc0 [ 124.923616][ T5805] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 124.925491][ T5805] ops_undo_list+0x2ee/0xab0 [ 124.927074][ T5805] ? __pfx_ops_undo_list+0x10/0x10 [ 124.928724][ T5805] ? cleanup_net+0x332/0x920 [ 124.930195][ T5805] ? idr_destroy+0x62/0x2e0 [ 124.931682][ T5805] cleanup_net+0x499/0x920 [ 124.933129][ T5805] ? __pfx_cleanup_net+0x10/0x10 [ 124.934894][ T5805] ? process_one_work+0xa2c/0x1b10 [ 124.937135][ T5805] ? process_one_work+0x906/0x1b10 [ 124.939302][ T5805] process_one_work+0xac7/0x1b10 [ 124.941423][ T5805] ? __pfx_process_one_work+0x10/0x10 [ 124.943601][ T5805] ? lock_acquire+0x1d1/0x380 [ 124.945209][ T5805] ? __pfx_cleanup_net+0x10/0x10 [ 124.946964][ T5805] worker_thread+0x5ef/0xe50 [ 124.948879][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 124.950690][ T5805] ? kthread+0x13a/0x450 [ 124.952028][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 124.953713][ T5805] kthread+0x373/0x450 [ 124.955083][ T5805] ? __pfx_kthread+0x10/0x10 [ 124.957016][ T5805] ret_from_fork+0x730/0xd60 [ 124.958822][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 124.960975][ T5805] ? __switch_to+0x800/0x10f0 [ 124.962891][ T5805] ? __pfx_kthread+0x10/0x10 [ 124.964658][ T5805] ret_from_fork_asm+0x1a/0x30 [ 124.966639][ T5805] [ 124.967660][ T5805] Modules linked in: [ 124.969726][ T5805] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 124.972302][ T5805] RIP: 0010:rxrpc_destroy_all_connections.cold+0x12/0x14 [ 124.972322][ T5805] Code: ff 90 0f 0b e8 e9 98 99 00 48 c7 c7 20 6c 5d 8d e8 ed bf af ff 90 0f 0b e8 d5 98 99 00 48 c7 c7 20 6c 5d 8d e8 d9 bf af ff 90 <0f> 0b e8 c1 98 99 00 49 63 d6 48 83 ce ff 48 c7 c7 80 f3 00 91 e8 [ 124.972408][ T5805] RSP: 0018:ffffc90004127970 EFLAGS: 00010286 [ 124.972420][ T5805] RAX: 0000000000000017 RBX: ffff88802e4d0000 RCX: 0000000000000000 [ 124.972428][ T5805] RDX: 0000000000000017 RSI: ffffffff81ea1579 RDI: fffff52000824f1f [ 124.972435][ T5805] RBP: ffff88802e4d0064 R08: 0000000000000007 R09: 0000000000000000 [ 124.972443][ T5805] R10: 8000000000000000 R11: 0000000000000001 R12: 1ffff92000824f30 [ 124.972453][ T5805] R13: ffff88802e4d0078 R14: ffff88802e4d0088 R15: ffff88802e4d0088 [ 124.972462][ T5805] FS: 0000000000000000(0000) GS:ffff8880d5c53000(0000) knlGS:0000000000000000 [ 124.972508][ T5805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.972517][ T5805] CR2: 00007f48818db286 CR3: 000000005090d000 CR4: 0000000000352ef0 [ 124.972526][ T5805] Kernel panic - not syncing: Fatal exception [ 125.012412][ T5805] Kernel Offset: disabled [ 125.013789][ T5805] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:23:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88801eeecb00 RSI=ffffffff81ff8b8e RDI=0000000000000000 RBP=ffffc90000167cd8 RSP=ffffc90000167bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a733de0 R12=ffff88806a43d280 R13=ffffed100d487a51 R14=ffff88806a43d288 R15=0000000000000001 RIP=ffffffff81ff8bab RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0e39ab8e9c CR3=000000003d3ed000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc06f71f26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc06f71f26 00007ffc06f71f2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47e383564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47e383568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47e38357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47e3835680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000170 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000170 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b125c5 RDI=ffffffff9bc71ea0 RBP=ffffffff9bc71e60 RSP=ffffc90004127118 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=0000000000000020 R14=0000000000000004 R15=ffffc90004127430 RIP=ffffffff85b125ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f48818db286 CR3=000000005090d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c656e72656b2f73 79732f3631322f2e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c656e72656b2f73 79732f3631322f2e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef21299b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef21299b6 00007ffef21299bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd4523564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd4523568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd452357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd45235680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000400c163 RBX=0000000003c0003f RCX=0000000000003fff RDX=0000000000000006 RSI=0000000000000000 RDI=0000000000000002 RBP=00007ffff5b12270 RSP=00007ffff5b12198 R8 =0000000000200000 R9 =0000000000000004 R10=00007ffff5b12278 R11=0000000000000001 R12=0000000001000000 R13=0000000000000004 R14=0000000001000000 R15=0000000000000001 RIP=00007fb32a7a8a3c RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb32a7bc260 CR3=00000000593fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000e30 0000000000001000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb32a7ca310 00007fb32a794000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000c5a0c RBX=ffff88801f2d0000 RCX=ffffffff8bd191c5 RDX=0000000000000001 RSI=ffffffff8c623500 RDI=ffffffff81e0754e RBP=ffffed1003e5a000 RSP=ffffc900001a7e00 R8 =0000000000000000 R9 =ffffed100d4e67bd R10=ffff88806a733deb R11=ffffffff81d74e59 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000 RIP=ffffffff8bd176ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556740e41300 CR3=000000004c620000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc89a35d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef454e6b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef454e6b6 00007ffef454e6bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc89963564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc89963568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8996357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc899635680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8997f2600 00007fc8997f25e0 00007fc8997f25e8 00007fc8997f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc89a35d020 00007fc8997f25c0 00007fc8997f25d0 00007fc8997f2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8997f25f8 00007fc8997f25c8 00007fc8997f2600 00007fc8997f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000