last executing test programs: 16.041070963s ago: executing program 1 (id=2470): mount(0x0, 0x0, &(0x7f0000000580)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r0, 0x40104d05, 0x0) llistxattr(0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='atkbd', 0x5) 12.28606865s ago: executing program 1 (id=2482): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioperm(0xd6, 0x9cb8, 0x40) stat(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) 11.355428724s ago: executing program 3 (id=2486): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x8, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x0, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000007, 0x1, 0xc, 0x5, 0x10009, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x63, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7ffff7ff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x1008007, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.286560959s ago: executing program 1 (id=2487): socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) lseek(0xffffffffffffffff, 0xb, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x4, 0x7, 0x3, 0xdb31, 0x7fffffff, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7d) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 11.218687172s ago: executing program 3 (id=2488): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10.543938992s ago: executing program 1 (id=2489): socket$inet_udp(0x2, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d", 0x2f, 0xffffffffffffffff) add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 9.028725171s ago: executing program 3 (id=2491): mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x24040010) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x27, 0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x20000000}}], 0x1, 0x4018080) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x4}, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 8.944170371s ago: executing program 3 (id=2492): listen(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB], 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94) 8.90080486s ago: executing program 0 (id=2493): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r5 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b17cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1c66142e7c1caceb88de7d6e8a5c08ce052bb461f060bd6327072cc7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 8.203397601s ago: executing program 3 (id=2494): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) 7.331255741s ago: executing program 4 (id=2496): r0 = socket$inet6(0xa, 0x1, 0x7f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xff, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0), 0xffffffffffffffff, 0xfe, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e000004"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, 0x0, 0x801, {0x2, 0x0, 0x2}}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="320002b10000"], 0x8) sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0xc040) 7.174287707s ago: executing program 1 (id=2497): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') read$FUSE(r2, &(0x7f00000047c0)={0x2020}, 0x2020) 7.106951269s ago: executing program 0 (id=2498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r10, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 6.245451905s ago: executing program 4 (id=2500): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffc, @local}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x22, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x40002, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0xffffffffffffffba) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x800455cc, 0x1) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x6f8, 0xfffffffd, 0x7, 0xfffffffffffffffd, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) 6.166809152s ago: executing program 0 (id=2501): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_audit(0x10, 0x3, 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, 0x0, 0x0) 6.022712615s ago: executing program 2 (id=2502): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r3, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000200), 0x20) 5.099960393s ago: executing program 4 (id=2503): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) rename(0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040}], 0x1, 0x8040) r4 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 4.395504079s ago: executing program 0 (id=2504): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.35029546s ago: executing program 4 (id=2505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.573782159s ago: executing program 3 (id=2506): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='77', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./config/cluster/mycluster/node/node0/local\x00', 0x400, 0x800, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, r4, 0x0) write(r3, &(0x7f0000000f00)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dlmfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dlmfs_mnt\x00', &(0x7f0000000300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./dlmfs_mnt/domain1\x00', 0x1ff) 2.459112117s ago: executing program 2 (id=2507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = timerfd_create(0x8, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_settime(r2, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r4, 0x40104d04, &(0x7f0000000900)) ptrace$pokeuser(0x6, r3, 0x358, 0xfe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x6}, 0x94) timerfd_gettime(r2, 0x0) 2.324175341s ago: executing program 2 (id=2508): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write(0xffffffffffffffff, &(0x7f0000000600)='dir .', 0x5) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) rseq(0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.231891342s ago: executing program 4 (id=2509): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x40000) io_setup(0x4, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x103802) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x98bc00) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x2000000) 2.202951688s ago: executing program 0 (id=2510): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_rr_get_interval(0x0, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r2, r3, 0x0) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) 2.062748528s ago: executing program 2 (id=2511): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.130265684s ago: executing program 1 (id=2512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsopen(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) sendmmsg$sock(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x9, 0x5, 0xae, 0x36, "668787fe4150caf251a42dcbffe468fb06bc47", 0x7f, 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r4, &(0x7f0000004ac0)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, 0x0}, 0x4}], 0x1, 0x10000, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)=0x18) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_emit_vhci(0x0, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) 1.024050941s ago: executing program 4 (id=2513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x67, 0x0, @dev, @local, {[@fragment={0x21}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x17}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.016809286s ago: executing program 2 (id=2514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 24.904245ms ago: executing program 2 (id=2515): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x500, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) 0s ago: executing program 0 (id=2516): r0 = add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x18a, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = msgget$private(0x0, 0x8) msgctl$IPC_RMID(r6, 0x0) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1}) keyctl$link(0x8, r0, r7) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$VT_RESIZE(r9, 0x5609, &(0x7f0000000040)={0x6, 0x306, 0xa664}) kernel console output (not intermixed with test programs): 16007][T12891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.016019][T12891] RIP: 0033:0x7f91ea99e159 [ 729.016029][T12891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.016039][T12891] RSP: 002b:00007f91eb798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.016049][T12891] RAX: ffffffffffffffda RBX: 00007f91eac25fa0 RCX: 00007f91ea99e159 [ 729.016056][T12891] RDX: 0000200000000100 RSI: 00000000c0145608 RDI: 0000000000000004 [ 729.016063][T12891] RBP: 00007f91eaa35024 R08: 0000000000000000 R09: 0000000000000000 [ 729.016069][T12891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.016075][T12891] R13: 00007f91eac26038 R14: 00007f91eac25fa0 R15: 00007ffd73a2e058 [ 729.016090][T12891] [ 729.173265][T12891] Mem-Info: [ 729.173275][T12891] active_anon:14339 inactive_anon:12 isolated_anon:0 [ 729.173275][T12891] active_file:2712 inactive_file:59730 isolated_file:0 [ 729.173275][T12891] unevictable:0 dirty:291 writeback:0 [ 729.173275][T12891] slab_reclaimable:7810 slab_unreclaimable:100077 [ 729.173275][T12891] mapped:34019 shmem:3395 pagetables:2807 [ 729.173275][T12891] sec_pagetables:0 bounce:0 [ 729.173275][T12891] kernel_misc_reclaimable:0 [ 729.173275][T12891] free:1278857 free_pcp:8879 free_cma:0 [ 729.173304][T12891] Node 0 active_anon:57356kB inactive_anon:48kB active_file:10848kB inactive_file:238660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136024kB dirty:1164kB writeback:0kB shmem:13580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14624kB pagetables:11092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 729.173334][T12891] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 729.173362][T12891] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.173408][T12891] lowmem_reserve[]: 0 2470 2471 2471 2471 [ 729.173428][T12891] Node 0 DMA32 free:1154872kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:57356kB inactive_anon:48kB active_file:10848kB inactive_file:238660kB unevictable:0kB writepending:1164kB zspages:796kB present:3129332kB managed:2530240kB mlocked:0kB bounce:0kB free_pcp:35516kB local_pcp:35516kB free_cma:0kB [ 729.173461][T12891] lowmem_reserve[]: 0 0 0 0 0 [ 729.173478][T12891] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.173505][T12891] lowmem_reserve[]: 0 0 0 0 0 [ 729.173522][T12891] Node 1 Normal free:3945196kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.173561][T12891] lowmem_reserve[]: 0 0 0 0 0 [ 729.173579][T12891] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 729.280563][T12891] Node 0 DMA32: 354*4kB (UME) 1354*8kB (UME) 1690*16kB (UME) 1459*32kB (UME) 832*64kB (UME) 441*128kB (UME) 178*256kB (UME) 56*512kB (UME) 30*1024kB (UME) 9*2048kB (UME) 204*4096kB (UM) = 1154648kB [ 729.280686][T12891] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 729.280758][T12891] Node 1 Normal: 3*4kB (UM) 6*8kB (U) 9*16kB (U) 5*32kB (U) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945196kB [ 729.280839][T12891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.280847][T12891] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.280856][T12891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.280864][T12891] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.280885][T12891] 65834 total pagecache pages [ 729.280890][T12891] 7 pages in swap cache [ 729.280894][T12891] Free swap = 123888kB [ 729.280898][T12891] Total swap = 124996kB [ 729.280903][T12891] 2097051 pages RAM [ 729.280907][T12891] 0 pages HighMem/MovableOnly [ 729.280911][T12891] 432856 pages reserved [ 729.280914][T12891] 0 pages cma reserved [ 730.131078][T12898] tipc: Enabling of bearer rejected, already enabled [ 730.201369][ T5701] usb 2-1: USB disconnect, device number 33 [ 730.658822][T12915] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 730.994525][ T5701] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 731.154355][ T5701] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 731.210176][ T5701] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 731.210199][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.210216][ T5701] usb 2-1: config 0 has no interface number 0 [ 731.210236][ T5701] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 731.210252][ T5701] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 731.265446][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.273527][ T5701] usb 2-1: Product: syz [ 731.273538][ T5701] usb 2-1: Manufacturer: syz [ 731.273546][ T5701] usb 2-1: SerialNumber: syz [ 731.296402][ T5701] usb 2-1: config 0 descriptor?? [ 731.305094][T12919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 731.305151][T12919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 731.331421][ T5701] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 731.629590][T12919] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2021'. [ 731.629613][T12919] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2021'. [ 731.765779][ T5701] usb 2-1: USB disconnect, device number 34 [ 731.802946][T12951] fuse: fd is not a fuse device [ 731.815364][T12951] overlayfs: failed to clone upperpath [ 732.091462][T12963] FAULT_INJECTION: forcing a failure. [ 732.091462][T12963] name fail_futex, interval 1, probability 0, space 0, times 1 [ 732.091492][T12963] CPU: 0 UID: 0 PID: 12963 Comm: syz.2.2038 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.091510][T12963] Tainted: [L]=SOFTLOCKUP [ 732.091515][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 732.091521][T12963] Call Trace: [ 732.091526][T12963] [ 732.091531][T12963] dump_stack_lvl+0x100/0x190 [ 732.091550][T12963] should_fail_ex.cold+0x5/0xa [ 732.091567][T12963] get_futex_key+0x1d0/0x14f0 [ 732.091584][T12963] ? __pfx_get_futex_key+0x10/0x10 [ 732.091598][T12963] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 732.091612][T12963] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 732.091628][T12963] futex_wait_setup+0x91/0x540 [ 732.091648][T12963] __futex_wait+0x19f/0x300 [ 732.091666][T12963] ? __pfx___futex_wait+0x10/0x10 [ 732.091681][T12963] ? __pfx_try_to_wake_up+0x10/0x10 [ 732.091700][T12963] ? futex_hash+0x311/0x400 [ 732.091715][T12963] ? __pfx_futex_wake_mark+0x10/0x10 [ 732.091735][T12963] ? find_held_lock+0x2b/0x80 [ 732.091751][T12963] ? futex_wake+0x4ea/0x5e0 [ 732.091771][T12963] futex_wait+0xe6/0x370 [ 732.091788][T12963] ? __pfx_futex_wait+0x10/0x10 [ 732.091809][T12963] ? putname+0xb1/0x110 [ 732.091823][T12963] ? kmem_cache_free+0x127/0x6c0 [ 732.091843][T12963] do_futex+0x265/0x440 [ 732.091858][T12963] ? __pfx_do_futex+0x10/0x10 [ 732.091871][T12963] ? __pfx_do_sys_openat2+0x10/0x10 [ 732.091888][T12963] __x64_sys_futex+0x34f/0x4d0 [ 732.091903][T12963] ? __x64_sys_openat+0x12d/0x210 [ 732.091917][T12963] ? __pfx___x64_sys_futex+0x10/0x10 [ 732.091936][T12963] do_syscall_64+0x123/0x790 [ 732.091950][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.091961][T12963] RIP: 0033:0x7f91ea99e159 [ 732.091971][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.091981][T12963] RSP: 002b:00007f91eb7980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 732.091993][T12963] RAX: ffffffffffffffda RBX: 00007f91eac25fa8 RCX: 00007f91ea99e159 [ 732.092000][T12963] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f91eac25fa8 [ 732.092006][T12963] RBP: 00007f91eac25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 732.092013][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.092019][T12963] R13: 00007f91eac26038 R14: 00007ffd73a2df70 R15: 00007ffd73a2e058 [ 732.092033][T12963] [ 732.106495][ T30] audit: type=1400 audit(1788548344.460:1364): avc: denied { read } for pid=12962 comm="syz.2.2038" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 732.106522][ T30] audit: type=1400 audit(1788548344.460:1365): avc: denied { open } for pid=12962 comm="syz.2.2038" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 732.147878][ T30] audit: type=1400 audit(1788548344.520:1366): avc: denied { ioctl } for pid=12962 comm="syz.2.2038" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 732.544894][ T30] audit: type=1400 audit(1788548344.920:1367): avc: denied { read } for pid=12968 comm="syz.1.2041" name="format" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 732.682230][ T30] audit: type=1400 audit(1788548345.050:1368): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 733.139521][T12978] FAULT_INJECTION: forcing a failure. [ 733.139521][T12978] name failslab, interval 1, probability 0, space 0, times 0 [ 733.790168][T12980] openvswitch: ovs-system: Dropping previously announced user features [ 733.888864][T12978] CPU: 0 UID: 0 PID: 12978 Comm: syz.1.2045 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.888885][T12978] Tainted: [L]=SOFTLOCKUP [ 733.888889][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 733.888896][T12978] Call Trace: [ 733.888900][T12978] [ 733.888905][T12978] dump_stack_lvl+0x100/0x190 [ 733.888925][T12978] should_fail_ex.cold+0x5/0xa [ 733.888942][T12978] should_failslab+0xc2/0x120 [ 733.888956][T12978] __kvmalloc_node_noprof+0x113/0x9b0 [ 733.888969][T12978] ? lock_acquire+0x1d1/0x380 [ 733.888980][T12978] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 733.889001][T12978] __nf_hook_entries_try_shrink+0x164/0x400 [ 733.889021][T12978] __nf_unregister_net_hook+0x1d2/0x6a0 [ 733.889042][T12978] nf_unregister_net_hooks+0x11b/0x170 [ 733.889059][T12978] nf_defrag_ipv6_disable+0xa3/0xb0 [ 733.889072][T12978] nf_ct_netns_do_put+0x170/0x2f0 [ 733.889090][T12978] nf_ct_netns_put+0x39/0x90 [ 733.889106][T12978] find_check_entry.isra.0+0x4ca/0xa00 [ 733.889122][T12978] ? __pfx_helper_mt_destroy+0x10/0x10 [ 733.889138][T12978] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 733.889160][T12978] ? kasan_quarantine_put+0x104/0x240 [ 733.889171][T12978] ? lockdep_hardirqs_on+0x7d/0x110 [ 733.889184][T12978] ? translate_table+0xa60/0x16c0 [ 733.889200][T12978] ? translate_table+0xb53/0x16c0 [ 733.889216][T12978] ? kfree+0x22b/0x6d0 [ 733.889230][T12978] ? xt_check_table_hooks+0x206/0x330 [ 733.889250][T12978] translate_table+0xc31/0x16c0 [ 733.889272][T12978] ? __pfx_translate_table+0x10/0x10 [ 733.889293][T12978] do_ip6t_set_ctl+0x689/0xd00 [ 733.889309][T12978] ? nf_sockopt_find.isra.0+0x222/0x290 [ 733.889320][T12978] ? nf_sockopt_find.isra.0+0x222/0x290 [ 733.889333][T12978] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 733.889349][T12978] ? __mutex_unlock_slowpath+0x35d/0x930 [ 733.889364][T12978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 733.889383][T12978] ? nf_sockopt_find.isra.0+0x222/0x290 [ 733.889396][T12978] nf_setsockopt+0x8d/0xf0 [ 733.889408][T12978] ipv6_setsockopt+0x135/0x170 [ 733.889427][T12978] rawv6_setsockopt+0xee/0x5a0 [ 733.889443][T12978] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 733.889459][T12978] ? selinux_socket_setsockopt+0x6a/0x80 [ 733.889474][T12978] ? sock_common_setsockopt+0x2e/0xf0 [ 733.889487][T12978] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 733.889501][T12978] do_sock_setsockopt+0xf3/0x1d0 [ 733.889515][T12978] __sys_setsockopt+0x195/0x220 [ 733.889535][T12978] __x64_sys_setsockopt+0xbd/0x160 [ 733.889551][T12978] ? do_syscall_64+0xae/0x790 [ 733.889562][T12978] ? lockdep_hardirqs_on+0x7d/0x110 [ 733.889574][T12978] do_syscall_64+0x123/0x790 [ 733.889587][T12978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.889599][T12978] RIP: 0033:0x7f6009b9e159 [ 733.889609][T12978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.889620][T12978] RSP: 002b:00007f600aa6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 733.889632][T12978] RAX: ffffffffffffffda RBX: 00007f6009e25fa0 RCX: 00007f6009b9e159 [ 733.889639][T12978] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 733.889645][T12978] RBP: 00007f6009c35024 R08: 0000000000000528 R09: 0000000000000000 [ 733.889652][T12978] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 733.889658][T12978] R13: 00007f6009e26038 R14: 00007f6009e25fa0 R15: 00007ffcc2f37c38 [ 733.889677][T12978] [ 734.696778][ T1213] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 734.854613][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 734.860109][ T1213] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 734.872573][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.886190][ T1213] usb 3-1: config 0 descriptor?? [ 734.903138][ T1213] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 735.003854][ T5701] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 735.856227][T13018] openvswitch: ovs-system: Dropping previously announced user features [ 735.878385][ T1213] dvb-usb: bulk message failed: -22 (1/0) [ 735.885467][ T5701] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 735.895751][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 735.907133][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 735.907150][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 735.933012][ T1213] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 735.947597][ T1213] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 735.956450][ T1213] usb 3-1: media controller created [ 735.966781][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.974984][ T5701] usb 5-1: Product: syz [ 735.974995][ T5701] usb 5-1: Manufacturer: syz [ 735.975003][ T5701] usb 5-1: SerialNumber: syz [ 735.995768][ T5701] usb 5-1: config 0 descriptor?? [ 736.036138][ T1213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 736.281336][ T5701] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 736.300881][ T1213] DVB: Unable to find symbol lgdt330x_attach() [ 736.308209][ T1213] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 736.319893][ T1213] dvb-usb: bulk message failed: -22 (1/0) [ 736.319911][ T1213] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 736.959305][T13025] openvswitch: ovs-system: Dropping previously announced user features [ 736.990259][ T1213] usb 3-1: USB disconnect, device number 30 [ 737.274609][T13011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.388940][ T1213] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 737.487848][T13032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.663198][T13043] fuse: fd is not a fuse device [ 737.767367][T13037] lo speed is unknown, defaulting to 1000 [ 738.887704][T13060] openvswitch: ovs-system: Dropping previously announced user features [ 739.099297][ T1213] usb 5-1: USB disconnect, device number 31 [ 740.560390][T13073] syzkaller0: entered promiscuous mode [ 740.570947][T13073] syzkaller0: entered allmulticast mode [ 740.586980][T13085] fuse: fd is not a fuse device [ 740.979613][ T1213] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 741.136402][ T1213] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 741.146615][ T1213] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 741.146636][ T1213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.146652][ T1213] usb 3-1: config 0 has no interface number 0 [ 741.146672][ T1213] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 741.146688][ T1213] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 741.199805][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.199828][ T1213] usb 3-1: Product: syz [ 741.199843][ T1213] usb 3-1: Manufacturer: syz [ 741.199853][ T1213] usb 3-1: SerialNumber: syz [ 741.226330][ T1213] usb 3-1: config 0 descriptor?? [ 741.234102][T13089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 741.234157][T13089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 741.285742][ T1213] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 741.311146][T13102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.423011][T13103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.634740][T13089] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2082'. [ 741.634764][T13089] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2082'. [ 742.288885][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.288914][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.348374][ T5701] usb 3-1: USB disconnect, device number 31 [ 742.880825][T13106] Process accounting resumed [ 742.935134][ T5701] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 743.089493][ T5701] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 743.129536][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 743.129559][ T5701] usb 2-1: Product: syz [ 743.129574][ T5701] usb 2-1: SerialNumber: syz [ 743.147974][ T5701] usb 2-1: config 0 descriptor?? [ 743.165040][ T1213] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 743.321356][ T1213] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 743.337711][ T1213] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 743.337739][ T1213] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 743.337768][ T1213] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 743.337792][ T1213] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 743.337808][ T1213] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 743.392207][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 743.392243][ T1213] usb 3-1: Product: syz [ 743.392253][ T1213] usb 3-1: Manufacturer: syz [ 743.415395][ T1213] cdc_wdm 3-1:1.0: skipping garbage [ 743.415414][ T1213] cdc_wdm 3-1:1.0: skipping garbage [ 743.431181][ T5701] hso 2-1:0.0: Failed to find BULK eps [ 743.439319][ T1213] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 743.439351][ T1213] cdc_wdm 3-1:1.0: Unknown control protocol [ 743.636434][ T1213] usb 3-1: USB disconnect, device number 32 [ 743.650495][ T5701] usb 2-1: USB disconnect, device number 35 [ 744.364654][ T5683] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 744.373609][T13120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.449465][T13121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.515438][ T5683] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 744.527548][ T5683] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 744.527570][ T5683] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 744.527586][ T5683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 744.527608][ T5683] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 744.527625][ T5683] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 744.579986][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 744.580008][ T5683] usb 3-1: Product: syz [ 744.580039][ T5683] usb 3-1: Manufacturer: syz [ 744.601927][ T5683] cdc_wdm 3-1:1.0: skipping garbage [ 744.607449][ T5683] cdc_wdm 3-1:1.0: skipping garbage [ 744.614572][ T5683] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 744.620959][ T5683] cdc_wdm 3-1:1.0: Unknown control protocol [ 744.640572][T13108] openvswitch: ovs-system: Dropping previously announced user features [ 744.804289][ T30] audit: type=1400 audit(1788548357.170:1369): avc: denied { read write } for pid=13112 comm="syz.2.2089" name="cdc-wdm0" dev="devtmpfs" ino=3560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 744.804353][ T30] audit: type=1400 audit(1788548357.170:1370): avc: denied { open } for pid=13112 comm="syz.2.2089" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 745.156999][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'. [ 745.208163][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.208193][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 745.208359][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.208517][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.208679][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.208837][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.208997][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.209158][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.209319][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.209501][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.209672][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.209828][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.209983][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.210140][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.210298][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.210456][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.210614][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.216574][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.222189][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.222348][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.222657][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.222676][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 745.223000][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.223154][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.223174][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 745.228883][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.229045][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.229202][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.229357][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.229511][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.229668][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.229825][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.235561][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.241255][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.241458][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.241475][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 745.247370][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.247389][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 745.253156][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.253323][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.259152][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 745.259774][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.259939][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.260111][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.260408][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.260425][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 745.260579][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.260599][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 745.260758][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.260915][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.261076][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.261233][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.261388][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.261406][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 745.261557][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.261710][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 745.565127][ T1213] usb 3-1: USB disconnect, device number 33 [ 745.753310][T13147] tipc: Enabling of bearer rejected, already enabled [ 747.437097][T13161] tipc: Enabled bearer , priority 1 [ 747.454541][T13159] tipc: Resetting bearer [ 747.519061][T13159] tipc: Disabling bearer [ 747.631640][T13171] FAULT_INJECTION: forcing a failure. [ 747.631640][T13171] name failslab, interval 1, probability 0, space 0, times 0 [ 747.631670][T13171] CPU: 0 UID: 0 PID: 13171 Comm: syz.4.2110 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.631686][T13171] Tainted: [L]=SOFTLOCKUP [ 747.631691][T13171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 747.631698][T13171] Call Trace: [ 747.631703][T13171] [ 747.631708][T13171] dump_stack_lvl+0x100/0x190 [ 747.631727][T13171] should_fail_ex.cold+0x5/0xa [ 747.631744][T13171] should_failslab+0xc2/0x120 [ 747.631759][T13171] __kvmalloc_node_noprof+0x113/0x9b0 [ 747.631772][T13171] ? lockdep_init_map_type+0x5c/0x250 [ 747.631785][T13171] ? alloc_netdev_mqs+0xb4e/0x15c0 [ 747.631804][T13171] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 747.631817][T13171] alloc_netdev_mqs+0xb4e/0x15c0 [ 747.631837][T13171] rtnl_create_link+0xc13/0xf80 [ 747.631850][T13171] rtnl_newlink+0x15bc/0x2620 [ 747.631866][T13171] ? __pfx_rtnl_newlink+0x10/0x10 [ 747.631876][T13171] ? avc_has_perm_noaudit+0x56/0x3b0 [ 747.631890][T13171] ? find_held_lock+0x2b/0x80 [ 747.631904][T13171] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 747.631917][T13171] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 747.631939][T13171] ? find_held_lock+0x2b/0x80 [ 747.631957][T13171] ? lock_acquire+0x1d1/0x380 [ 747.631967][T13171] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 747.631978][T13171] ? find_held_lock+0x2b/0x80 [ 747.631992][T13171] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 747.632002][T13171] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 747.632015][T13171] ? __pfx_rtnl_newlink+0x10/0x10 [ 747.632026][T13171] rtnetlink_rcv_msg+0x95e/0xe90 [ 747.632038][T13171] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 747.632053][T13171] ? ref_tracker_free+0x37e/0x6c0 [ 747.632068][T13171] netlink_rcv_skb+0x159/0x420 [ 747.632084][T13171] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 747.632096][T13171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 747.632117][T13171] ? netlink_deliver_tap+0x1ae/0xcc0 [ 747.632135][T13171] netlink_unicast+0x585/0x850 [ 747.632152][T13171] ? __pfx_netlink_unicast+0x10/0x10 [ 747.632172][T13171] netlink_sendmsg+0x8b0/0xda0 [ 747.632190][T13171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.632207][T13171] ? selinux_socket_sendmsg+0x198/0x2f0 [ 747.632225][T13171] ____sys_sendmsg+0xa4d/0xbe0 [ 747.632237][T13171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.632253][T13171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.632273][T13171] ___sys_sendmsg+0x190/0x1e0 [ 747.632295][T13171] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.632311][T13171] ? futex_wait+0x11e/0x370 [ 747.632335][T13171] ? find_held_lock+0x2b/0x80 [ 747.632359][T13171] __sys_sendmsg+0x160/0x210 [ 747.632378][T13171] ? __pfx___sys_sendmsg+0x10/0x10 [ 747.632404][T13171] do_syscall_64+0x123/0x790 [ 747.632418][T13171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.632430][T13171] RIP: 0033:0x7fa650b9e159 [ 747.632440][T13171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.632451][T13171] RSP: 002b:00007fa64edf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.632463][T13171] RAX: ffffffffffffffda RBX: 00007fa650e25fa0 RCX: 00007fa650b9e159 [ 747.632470][T13171] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 747.632476][T13171] RBP: 00007fa650c35024 R08: 0000000000000000 R09: 0000000000000000 [ 747.632483][T13171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.632489][T13171] R13: 00007fa650e26038 R14: 00007fa650e25fa0 R15: 00007ffd28602b58 [ 747.632503][T13171] [ 748.090407][T13175] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2112'. [ 748.090429][T13175] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2112'. [ 748.140823][T13182] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 748.155253][T13182] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 748.294006][ T1213] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 748.446177][T13190] tipc: Enabling of bearer rejected, already enabled [ 748.455509][ T1213] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 748.465587][ T1213] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 748.465606][ T1213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.465621][ T1213] usb 2-1: config 0 has no interface number 0 [ 748.465641][ T1213] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 748.465656][ T1213] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 748.518777][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.518794][ T1213] usb 2-1: Product: syz [ 748.518802][ T1213] usb 2-1: Manufacturer: syz [ 748.518811][ T1213] usb 2-1: SerialNumber: syz [ 748.544948][ T1213] usb 2-1: config 0 descriptor?? [ 748.546529][T13178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 748.546604][T13178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 748.573591][ T1213] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 748.739823][T13202] overlayfs: failed to clone lowerpath [ 748.747305][T13202] overlayfs: failed to clone lowerpath [ 748.788505][T13178] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2113'. [ 748.798665][T13178] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2113'. [ 748.852613][ T1213] usb 2-1: USB disconnect, device number 36 [ 749.514162][ T1213] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 749.563100][ T30] audit: type=1400 audit(1788548361.930:1371): avc: denied { read } for pid=13236 comm="syz.1.2134" path="socket:[40777]" dev="sockfs" ino=40777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 749.665611][ T1213] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 749.677096][ T1213] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 749.677119][ T1213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.677136][ T1213] usb 5-1: config 0 has no interface number 0 [ 749.677156][ T1213] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 749.677172][ T1213] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 749.727905][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.727928][ T1213] usb 5-1: Product: syz [ 749.727943][ T1213] usb 5-1: Manufacturer: syz [ 749.727953][ T1213] usb 5-1: SerialNumber: syz [ 749.755539][ T1213] usb 5-1: config 0 descriptor?? [ 749.762351][T13230] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 749.770161][T13230] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 749.790747][ T1213] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 750.112487][T13230] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2132'. [ 750.757711][T13255] openvswitch: ovs-system: Dropping previously announced user features [ 750.775424][T13230] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2132'. [ 750.813933][ T1213] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 750.836504][T12334] usb 5-1: USB disconnect, device number 32 [ 750.974008][ T1213] usb 2-1: Using ep0 maxpacket: 32 [ 750.981966][ T1213] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 750.991706][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.992969][ T1213] usb 2-1: config 0 descriptor?? [ 751.205166][ T1213] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 751.227360][ T1213] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 751.239906][ T1213] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 751.239938][ T1213] usb 2-1: media controller created [ 751.295182][ T1213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.310344][T13271] openvswitch: ovs-system: Dropping previously announced user features [ 752.781264][ T1213] az6027: usb out operation failed. (-71) [ 752.787232][ T1213] az6027: usb out operation failed. (-71) [ 752.787240][ T1213] stb0899_attach: Driver disabled by Kconfig [ 752.787246][ T1213] az6027: no front-end attached [ 752.787246][ T1213] [ 752.787814][ T1213] az6027: usb out operation failed. (-71) [ 752.787822][ T1213] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 753.430749][T13282] openvswitch: ovs-system: Dropping previously announced user features [ 753.474017][ T1213] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 753.501013][ T1213] dvb-usb: schedule remote query interval to 400 msecs. [ 753.508205][ T1213] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 753.526046][ T1213] usb 2-1: USB disconnect, device number 37 [ 753.756176][T13287] loop0: detected capacity change from 0 to 3904 [ 753.807944][ T1213] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 753.852526][T13287] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 753.852551][T13287] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 753.852565][T13287] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 753.852594][T13287] loop0: [ 754.088737][T13291] FAULT_INJECTION: forcing a failure. [ 754.088737][T13291] name failslab, interval 1, probability 0, space 0, times 0 [ 754.088768][T13291] CPU: 0 UID: 0 PID: 13291 Comm: syz.2.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.088785][T13291] Tainted: [L]=SOFTLOCKUP [ 754.088790][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 754.088797][T13291] Call Trace: [ 754.088801][T13291] [ 754.088806][T13291] dump_stack_lvl+0x100/0x190 [ 754.088826][T13291] should_fail_ex.cold+0x5/0xa [ 754.088842][T13291] should_failslab+0xc2/0x120 [ 754.088857][T13291] __kmalloc_noprof+0xfc/0x840 [ 754.088869][T13291] ? tcf_idr_create+0x62/0x880 [ 754.088888][T13291] tcf_idr_create+0x62/0x880 [ 754.088904][T13291] ? __nla_parse+0x40/0x60 [ 754.088920][T13291] tcf_mpls_init+0x681/0x1490 [ 754.088933][T13291] ? __pfx_tcf_mpls_init+0x10/0x10 [ 754.088948][T13291] ? tcf_action_init_1+0x2d8/0x6c0 [ 754.088958][T13291] ? __asan_memcpy+0x3c/0x60 [ 754.088977][T13291] tcf_action_init_1+0x466/0x6c0 [ 754.088990][T13291] ? __pfx_tcf_action_init_1+0x10/0x10 [ 754.089000][T13291] ? tc_action_load_ops+0x1f5/0x3e0 [ 754.089025][T13291] ? __nla_parse+0x40/0x60 [ 754.089039][T13291] tcf_action_init+0x43f/0xa60 [ 754.089055][T13291] ? __pfx_tcf_action_init+0x10/0x10 [ 754.089092][T13291] ? __lock_acquire+0x4c5/0x1ec0 [ 754.089106][T13291] tcf_action_add+0xed/0x5c0 [ 754.089119][T13291] ? __pfx_tcf_action_add+0x10/0x10 [ 754.089150][T13291] ? __nla_parse+0x40/0x60 [ 754.089165][T13291] tc_ctl_action+0x2e3/0x470 [ 754.089177][T13291] ? __pfx_tc_ctl_action+0x10/0x10 [ 754.089193][T13291] ? __pfx_tc_ctl_action+0x10/0x10 [ 754.089211][T13291] rtnetlink_rcv_msg+0x3c9/0xe90 [ 754.089225][T13291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 754.089241][T13291] ? ref_tracker_free+0x37e/0x6c0 [ 754.089257][T13291] netlink_rcv_skb+0x159/0x420 [ 754.089273][T13291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 754.089286][T13291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 754.089308][T13291] ? netlink_deliver_tap+0x1ae/0xcc0 [ 754.089327][T13291] netlink_unicast+0x585/0x850 [ 754.089346][T13291] ? __pfx_netlink_unicast+0x10/0x10 [ 754.089367][T13291] netlink_sendmsg+0x8b0/0xda0 [ 754.089386][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.089404][T13291] ? selinux_socket_sendmsg+0x198/0x2f0 [ 754.089424][T13291] ____sys_sendmsg+0xa4d/0xbe0 [ 754.089437][T13291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.089453][T13291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.089473][T13291] ___sys_sendmsg+0x190/0x1e0 [ 754.089487][T13291] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.089501][T13291] ? futex_wait+0x11e/0x370 [ 754.089524][T13291] ? find_held_lock+0x2b/0x80 [ 754.089547][T13291] __sys_sendmsg+0x160/0x210 [ 754.089564][T13291] ? __pfx___sys_sendmsg+0x10/0x10 [ 754.089589][T13291] do_syscall_64+0x123/0x790 [ 754.089603][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.089614][T13291] RIP: 0033:0x7f91ea99e159 [ 754.089625][T13291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.089635][T13291] RSP: 002b:00007f91eb798028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.089647][T13291] RAX: ffffffffffffffda RBX: 00007f91eac25fa0 RCX: 00007f91ea99e159 [ 754.089655][T13291] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 754.089662][T13291] RBP: 00007f91eaa35024 R08: 0000000000000000 R09: 0000000000000000 [ 754.089669][T13291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.089675][T13291] R13: 00007f91eac26038 R14: 00007f91eac25fa0 R15: 00007ffd73a2e058 [ 754.089689][T13291] [ 754.632345][ T30] audit: type=1400 audit(1788548367.000:1372): avc: denied { mounton } for pid=13302 comm="syz.1.2157" path="/386/file0" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 754.924731][T13314] fuse: fd is not a fuse device [ 755.833843][T13323] openvswitch: ovs-system: Dropping previously announced user features [ 756.814574][T13329] openvswitch: ovs-system: Dropping previously announced user features [ 757.274274][ T5683] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 757.355510][T13346] fuse: fd is not a fuse device [ 757.425909][ T5683] usb 2-1: Using ep0 maxpacket: 8 [ 757.434449][ T5683] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 757.451916][ T5683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.451938][ T5683] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 757.451967][ T5683] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 757.451983][ T5683] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 757.452006][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.499104][ T5683] hub 2-1:1.0: bad descriptor, ignoring hub [ 757.499118][ T5683] hub 2-1:1.0: probe with driver hub failed with error -5 [ 757.528741][ T5683] cdc_wdm 2-1:1.0: skipping garbage [ 757.528762][ T5683] cdc_wdm 2-1:1.0: skipping garbage [ 757.544349][ T5683] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 757.550286][ T5683] cdc_wdm 2-1:1.0: Unknown control protocol [ 757.730463][T13350] fuse: fd is not a fuse device [ 757.936275][T13355] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 757.956703][T13355] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 758.881153][T13366] openvswitch: ovs-system: Dropping previously announced user features [ 759.951425][ T30] audit: type=1800 audit(1788548372.320:1373): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2178" name="nullb0" dev="tmpfs" ino=2707 res=0 errno=0 [ 760.025774][T13373] FAULT_INJECTION: forcing a failure. [ 760.025774][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 760.025804][T13373] CPU: 0 UID: 0 PID: 13373 Comm: syz.2.2179 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.025822][T13373] Tainted: [L]=SOFTLOCKUP [ 760.025832][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 760.025839][T13373] Call Trace: [ 760.025843][T13373] [ 760.025848][T13373] dump_stack_lvl+0x100/0x190 [ 760.025869][T13373] should_fail_ex.cold+0x5/0xa [ 760.025884][T13373] should_failslab+0xc2/0x120 [ 760.025900][T13373] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 760.025914][T13373] ? kvasprintf_const+0x66/0x1a0 [ 760.025933][T13373] kvasprintf+0xbc/0x150 [ 760.025949][T13373] ? __pfx_kvasprintf+0x10/0x10 [ 760.025967][T13373] ? ida_alloc_range+0x70d/0x830 [ 760.025980][T13373] ? rcu_is_watching+0x13/0xc0 [ 760.025995][T13373] ? ida_alloc_range+0x70d/0x830 [ 760.026007][T13373] ? kfree+0x1e5/0x6d0 [ 760.026023][T13373] kvasprintf_const+0x66/0x1a0 [ 760.026041][T13373] kobject_set_name_vargs+0x5a/0x140 [ 760.026057][T13373] dev_set_name+0xc7/0x100 [ 760.026072][T13373] ? __pfx_dev_set_name+0x10/0x10 [ 760.026090][T13373] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 760.026109][T13373] nfc_allocate_device+0x206/0x5e0 [ 760.026123][T13373] nci_allocate_device+0x23b/0x410 [ 760.026141][T13373] virtual_ncidev_open+0x6f/0x220 [ 760.026155][T13373] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 760.026168][T13373] misc_open+0x26d/0x450 [ 760.026184][T13373] ? __pfx_misc_open+0x10/0x10 [ 760.026199][T13373] chrdev_open+0x234/0x6a0 [ 760.026211][T13373] ? __pfx_chrdev_open+0x10/0x10 [ 760.026224][T13373] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 760.026243][T13373] do_dentry_open+0x6ab/0x14d0 [ 760.026253][T13373] ? __pfx_chrdev_open+0x10/0x10 [ 760.026268][T13373] vfs_open+0x82/0x3f0 [ 760.026283][T13373] path_openat+0x19fa/0x2440 [ 760.026297][T13373] ? __pfx_path_openat+0x10/0x10 [ 760.026314][T13373] do_file_open+0x20e/0x430 [ 760.026327][T13373] ? __pfx_do_file_open+0x10/0x10 [ 760.026350][T13373] ? _raw_spin_unlock+0x28/0x50 [ 760.026366][T13373] ? alloc_fd+0x471/0x7a0 [ 760.026383][T13373] do_sys_openat2+0x10f/0x1e0 [ 760.026397][T13373] ? __pfx_do_sys_openat2+0x10/0x10 [ 760.026415][T13373] __x64_sys_openat+0x12d/0x210 [ 760.026430][T13373] ? __pfx___x64_sys_openat+0x10/0x10 [ 760.026449][T13373] do_syscall_64+0x123/0x790 [ 760.026463][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.026474][T13373] RIP: 0033:0x7f91ea99e159 [ 760.026484][T13373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.026495][T13373] RSP: 002b:00007f91eb798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 760.026506][T13373] RAX: ffffffffffffffda RBX: 00007f91eac25fa0 RCX: 00007f91ea99e159 [ 760.026513][T13373] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 760.026519][T13373] RBP: 00007f91eaa35024 R08: 0000000000000000 R09: 0000000000000000 [ 760.026526][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.026532][T13373] R13: 00007f91eac26038 R14: 00007f91eac25fa0 R15: 00007ffd73a2e058 [ 760.026547][T13373] [ 761.160847][T12334] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 761.318998][T12334] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 761.340274][T12334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.340311][T12334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.363409][T12334] usb 5-1: config 0 descriptor?? [ 761.463817][ T1213] usb 2-1: USB disconnect, device number 38 [ 761.540353][T13362] cdc_wdm 2-1:1.0: Error autopm - -16 [ 761.601746][T12334] usbhid 5-1:0.0: can't add hid device: -71 [ 761.601812][T12334] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 761.622024][T12334] usb 5-1: USB disconnect, device number 33 [ 762.073843][T12334] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 762.592746][T12334] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 762.693398][T12334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.725528][T12334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.864451][T12334] usb 5-1: config 0 descriptor?? [ 762.999636][T13422] tipc: Enabling of bearer rejected, already enabled [ 763.657920][ T30] audit: type=1400 audit(1788548376.010:1374): avc: denied { mount } for pid=13434 comm="syz.2.2201" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 763.688931][ T30] audit: type=1400 audit(1788548376.060:1375): avc: denied { watch watch_reads } for pid=13434 comm="syz.2.2201" path="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 763.793169][ T30] audit: type=1400 audit(1788548376.160:1376): avc: denied { listen } for pid=13446 comm="syz.2.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 763.817868][ T30] audit: type=1400 audit(1788548376.190:1377): avc: denied { write } for pid=13446 comm="syz.2.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 763.839159][ T30] audit: type=1400 audit(1788548376.210:1378): avc: denied { read } for pid=13446 comm="syz.2.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 763.904306][T12334] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 763.912304][T12334] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 764.505669][T12334] usb 5-1: USB disconnect, device number 34 [ 764.511628][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 764.725147][ T30] audit: type=1400 audit(1788548377.100:1379): avc: denied { read } for pid=13457 comm="syz.2.2208" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 764.749703][ T30] audit: type=1400 audit(1788548377.120:1380): avc: denied { ioctl } for pid=13457 comm="syz.2.2208" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 764.873089][T13460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2209'. [ 765.792685][ T30] audit: type=1400 audit(1788548378.160:1381): avc: denied { watch watch_reads } for pid=13477 comm="syz.2.2216" path="/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 765.882703][T13483] fuse: fd is not a fuse device [ 766.049349][ T30] audit: type=1400 audit(1788548378.420:1382): avc: denied { listen } for pid=13486 comm="syz.2.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.090488][ T30] audit: type=1400 audit(1788548378.460:1383): avc: denied { write } for pid=13486 comm="syz.2.2219" path="socket:[41803]" dev="sockfs" ino=41803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.227837][T13491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.378958][T13497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.532530][T13495] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2220'. [ 766.532555][T13495] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2220'. [ 767.208086][ T30] audit: type=1400 audit(1788548379.580:1384): avc: denied { bind } for pid=13504 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 767.315037][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'. [ 767.391980][ T30] audit: type=1400 audit(1788548379.760:1385): avc: denied { watch_reads } for pid=13510 comm="syz.4.2227" path="/394" dev="tmpfs" ino=2155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 767.643166][T13521] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 767.662928][T13521] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 767.679819][T13519] xt_hashlimit: size too large, truncated to 1048576 [ 767.707490][T13524] fuse: fd is not a fuse device [ 767.962120][ T10] kernel write not supported for file bpf-map (pid: 10 comm: kworker/0:1) [ 768.652898][ T30] audit: type=1800 audit(1788548381.020:1386): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2240" name="idVendor" dev="configfs" ino=42063 res=0 errno=0 [ 768.677271][ T30] audit: type=1800 audit(1788548381.050:1387): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2240" name="idProduct" dev="configfs" ino=42064 res=0 errno=0 [ 768.705157][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 768.717919][ T30] audit: type=1400 audit(1788548381.090:1388): avc: denied { write } for pid=13546 comm="syz.4.2240" name="c.1" dev="configfs" ino=16668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 768.874323][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 768.884393][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.884416][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.884436][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.962855][ T30] audit: type=1400 audit(1788548381.330:1389): avc: denied { read write } for pid=13552 comm="syz.4.2242" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 768.962916][ T30] audit: type=1400 audit(1788548381.330:1390): avc: denied { open } for pid=13552 comm="syz.4.2242" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 769.021318][T12334] hid_parser_main: 47 callbacks suppressed [ 769.021344][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.021360][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.021374][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.021400][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.021415][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.021428][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.021442][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.021455][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.021468][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.021482][T12334] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 769.135603][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.150724][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.194678][T12334] hid-generic 0006:0008:0008.000E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 769.346823][T13555] fido_id[13555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 769.382315][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.391432][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.607438][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.616387][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.640393][ T10] hid-picolcd 0003:04D8:C002.000F: reserved main item tag 0xe [ 769.731122][ T10] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.000F/input/input21 [ 769.883782][ T10] rc_core: IR keymap rc-rc6-mce not found [ 769.883803][ T10] Registered IR keymap rc-empty [ 769.884490][ T10] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.000F/rc/rc0 [ 769.915426][ T10] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.000F/rc/rc0/input22 [ 769.937370][ T10] hid-picolcd 0003:04D8:C002.000F: No report with id 0x92 found [ 770.069455][ T10] usb 2-1: USB disconnect, device number 39 [ 770.413796][T12334] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 770.517023][T13585] CIFS: Attempting to mount //127.0.0.1/share [ 770.574339][T12334] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 770.585579][T12334] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 770.585599][T12334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.585615][T12334] usb 5-1: config 0 has no interface number 0 [ 770.585635][T12334] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 770.585652][T12334] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 770.639088][T12334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.639111][T12334] usb 5-1: Product: syz [ 770.639126][T12334] usb 5-1: Manufacturer: syz [ 770.639135][T12334] usb 5-1: SerialNumber: syz [ 770.663194][T12334] usb 5-1: config 0 descriptor?? [ 770.668826][T13576] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 770.678189][T13576] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 770.693544][T12334] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 770.934249][T13595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 770.946591][T13576] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2250'. [ 770.946612][T13576] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2250'. [ 771.028331][T12334] usb 5-1: USB disconnect, device number 35 [ 771.284847][T13585] CIFS: VFS: Error connecting to socket. Aborting operation. [ 771.284938][T13585] CIFS: VFS: cifs_mount failed w/return code = -4 [ 772.374498][T13632] openvswitch: ovs-system: Dropping previously announced user features [ 774.220588][T13617] Process accounting paused [ 774.230446][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 774.230466][ T30] audit: type=1800 audit(1788548386.600:1394): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2274" name="nullb0" dev="tmpfs" ino=2707 res=0 errno=0 [ 774.941709][T13673] tipc: Enabling of bearer rejected, already enabled [ 775.293644][T13675] xt_hashlimit: size too large, truncated to 1048576 [ 775.512389][T13678] xt_hashlimit: size too large, truncated to 1048576 [ 776.855870][ T30] audit: type=1400 audit(1788548389.230:1395): avc: denied { write } for pid=13690 comm="syz.2.2286" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 777.122741][ T30] audit: type=1400 audit(1788548389.490:1396): avc: denied { connect } for pid=13701 comm="syz.2.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 777.195795][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'. [ 777.370588][T13710] EXT4-fs warning (device sda1): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed [ 777.512027][ T30] audit: type=1400 audit(1788548389.880:1397): avc: denied { transfer } for pid=13714 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 777.939319][T13728] input: syz1 as /devices/virtual/input/input23 [ 778.400478][T13734] fuse: fd is not a fuse device [ 778.802600][ T10] kernel write not supported for file bpf-map (pid: 10 comm: kworker/0:1) [ 779.051207][T13758] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 779.448528][T13765] FAULT_INJECTION: forcing a failure. [ 779.448528][T13765] name failslab, interval 1, probability 0, space 0, times 0 [ 779.461710][T13765] CPU: 0 UID: 0 PID: 13765 Comm: syz.1.2312 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.461731][T13765] Tainted: [L]=SOFTLOCKUP [ 779.461735][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 779.461742][T13765] Call Trace: [ 779.461747][T13765] [ 779.461752][T13765] dump_stack_lvl+0x100/0x190 [ 779.461772][T13765] should_fail_ex.cold+0x5/0xa [ 779.461789][T13765] should_failslab+0xc2/0x120 [ 779.461805][T13765] __kmalloc_cache_noprof+0x91/0x6d0 [ 779.461821][T13765] ? sctp_auth_shkey_create+0x9e/0x210 [ 779.461840][T13765] sctp_auth_shkey_create+0x9e/0x210 [ 779.461862][T13765] sctp_endpoint_new+0x589/0xb20 [ 779.461878][T13765] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 779.461892][T13765] ? lockdep_init_map_type+0x5c/0x250 [ 779.461909][T13765] ? lockdep_init_map_type+0x5c/0x250 [ 779.461921][T13765] ? lockdep_init_map_type+0x5c/0x250 [ 779.461934][T13765] sctp_init_sock+0xe2b/0x1300 [ 779.461950][T13765] ? __pfx_sctp_init_sock+0x10/0x10 [ 779.461964][T13765] inet_create+0x94c/0x1060 [ 779.461980][T13765] ? inet_create+0x94/0x1060 [ 779.461995][T13765] __sock_create+0x339/0x860 [ 779.462011][T13765] __sys_socket+0x14d/0x260 [ 779.462025][T13765] ? __pfx___sys_socket+0x10/0x10 [ 779.462042][T13765] __x64_sys_socket+0x72/0xb0 [ 779.462055][T13765] ? lockdep_hardirqs_on+0x7d/0x110 [ 779.462069][T13765] do_syscall_64+0x123/0x790 [ 779.462082][T13765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.462093][T13765] RIP: 0033:0x7f6009b9e159 [ 779.462103][T13765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.462113][T13765] RSP: 002b:00007f600aa6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 779.462124][T13765] RAX: ffffffffffffffda RBX: 00007f6009e25fa0 RCX: 00007f6009b9e159 [ 779.462131][T13765] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 779.462137][T13765] RBP: 00007f6009c35024 R08: 0000000000000000 R09: 0000000000000000 [ 779.462143][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.462149][T13765] R13: 00007f6009e26038 R14: 00007f6009e25fa0 R15: 00007ffcc2f37c38 [ 779.462163][T13765] [ 780.039801][T13770] binder: 13769:13770 ioctl c0306201 0 returned -14 [ 780.354380][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 780.647215][T13783] openvswitch: ovs-system: Dropping previously announced user features [ 780.674303][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 780.680865][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 780.691262][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 780.699556][ T10] usb 3-1: config 0 has no interface number 0 [ 780.707275][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.707296][ T10] usb 3-1: Product: syz [ 780.707309][ T10] usb 3-1: Manufacturer: syz [ 780.707319][ T10] usb 3-1: SerialNumber: syz [ 780.735526][ T10] usb 3-1: config 0 descriptor?? [ 780.918139][ T30] audit: type=1400 audit(1788548393.290:1398): avc: denied { remount } for pid=13791 comm="syz.3.2323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 781.280452][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 781.292636][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 781.546003][T13808] syzkaller0: entered promiscuous mode [ 781.546025][T13808] syzkaller0: entered allmulticast mode [ 783.291626][T13847] openvswitch: ovs-system: Dropping previously announced user features [ 783.332136][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 783.343439][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 783.361885][ T10] usb 3-1: USB disconnect, device number 34 [ 784.332882][T13867] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 784.361985][T13867] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 784.624043][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 784.774967][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 784.785157][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.376952][ T10] hid-sensor-hub 0003:8086:0000.0010: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.1-1/input0 [ 786.763007][ T10] usb 2-1: USB disconnect, device number 40 [ 787.481809][T13890] kthread_run failed with err -4 [ 787.784777][T13908] ip_tables: iptables: counters copy to user failed while replacing table [ 788.568093][ T30] audit: type=1400 audit(1788548400.940:1399): avc: denied { getopt } for pid=13917 comm="syz.4.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 788.737745][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xc0ba instead [ 788.737771][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xacd3 instead [ 788.737788][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe037 instead [ 788.737798][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x4528 instead [ 788.737809][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xf973 instead [ 788.737820][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xf4a8 instead [ 788.737830][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5729 instead [ 788.737841][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xed5b instead [ 788.737852][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x98c7 instead [ 788.737863][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xb75c instead [ 788.737873][T13924] jffs2: Further such events for this erase block will not be printed [ 788.738107][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x3168 instead [ 788.738119][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x8f65 instead [ 788.738128][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x16e0 instead [ 788.738138][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x0391 instead [ 788.738148][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x0c2b instead [ 788.738158][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xaee6 instead [ 788.738168][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf323 instead [ 788.738178][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xcda8 instead [ 788.738188][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xeea1 instead [ 788.738197][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x1732 instead [ 788.738207][T13924] jffs2: Further such events for this erase block will not be printed [ 788.738433][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x8caf instead [ 788.738445][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x4f39 instead [ 788.738455][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x725a instead [ 788.738465][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xd2a4 instead [ 788.738475][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x9e28 instead [ 788.738485][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xe402 instead [ 788.738495][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x77b0 instead [ 788.738504][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xb36e instead [ 789.272533][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xba70 instead [ 789.272561][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x4481 instead [ 789.272572][T13924] jffs2: Further such events for this erase block will not be printed [ 789.272818][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x793c instead [ 789.272830][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xc909 instead [ 789.272840][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x0990 instead [ 789.272851][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xdb44 instead [ 789.272862][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x37af instead [ 789.272873][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x8057 instead [ 789.272883][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x0787 instead [ 789.272894][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x14b1 instead [ 789.272904][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x93db instead [ 789.272915][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xfac0 instead [ 789.272925][T13924] jffs2: Further such events for this erase block will not be printed [ 789.273154][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x717f instead [ 789.273165][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xef6d instead [ 789.273175][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x78b9 instead [ 789.273185][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xac09 instead [ 789.273195][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xace6 instead [ 789.273205][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x6594 instead [ 789.273214][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xbfe7 instead [ 789.273224][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x6910 instead [ 789.273234][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xec1b instead [ 789.273244][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xe709 instead [ 789.273253][T13924] jffs2: Further such events for this erase block will not be printed [ 789.273469][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x57a5 instead [ 789.273479][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xdbf7 instead [ 789.273489][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x4896 instead [ 789.273499][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xe4bc instead [ 789.273509][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xce52 instead [ 789.273519][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x656d instead [ 789.273529][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xcde3 instead [ 789.273539][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xb9f2 instead [ 789.273548][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xeed1 instead [ 789.273558][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xe7ef instead [ 789.273567][T13924] jffs2: Further such events for this erase block will not be printed [ 789.641606][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x3f58 instead [ 789.641623][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x4242 instead [ 789.641632][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x1d7d instead [ 789.976310][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xf79a instead [ 789.976332][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x062c instead [ 789.976344][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x1f36 instead [ 789.976354][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf630 instead [ 789.976365][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x11f0 instead [ 789.976375][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x648f instead [ 789.976386][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x493a instead [ 789.976396][T13924] jffs2: Further such events for this erase block will not be printed [ 789.976667][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x7f92 instead [ 789.976679][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x7e4a instead [ 789.976689][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x876a instead [ 789.976699][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x2c55 instead [ 789.976710][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x86ce instead [ 789.976720][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xce34 instead [ 789.976731][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x1c40 instead [ 789.976741][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x6a47 instead [ 789.976752][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x1522 instead [ 789.976763][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xb44e instead [ 789.976773][T13924] jffs2: Further such events for this erase block will not be printed [ 789.977010][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x3289 instead [ 789.977020][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xbec6 instead [ 789.977030][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x2d95 instead [ 789.977040][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x3f12 instead [ 789.977050][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x0088 instead [ 789.977060][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xa33c instead [ 789.977069][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xbbaf instead [ 789.977079][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xa5b0 instead [ 789.977089][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x6fad instead [ 789.977099][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x5d30 instead [ 789.977109][T13924] jffs2: Further such events for this erase block will not be printed [ 789.977360][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x7cfb instead [ 789.977371][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x2bfd instead [ 789.977382][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xfa56 instead [ 789.977393][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xd709 instead [ 789.977403][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xb0bc instead [ 789.977414][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x63e8 instead [ 789.977424][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd146 instead [ 789.977434][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x243d instead [ 789.977444][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x6676 instead [ 789.977453][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xdad3 instead [ 789.977463][T13924] jffs2: Further such events for this erase block will not be printed [ 789.977679][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x3c28 instead [ 789.977690][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0fb4 instead [ 789.977699][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xda5c instead [ 789.977709][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x7321 instead [ 789.977719][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x342f instead [ 789.977728][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x4bce instead [ 790.178669][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x0422 instead [ 790.178687][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x61ce instead [ 790.178697][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x9138 instead [ 790.178706][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xb273 instead [ 790.178715][T13924] jffs2: Further such events for this erase block will not be printed [ 790.178948][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x00ff instead [ 790.178958][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xd9f2 instead [ 790.178966][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x1e05 instead [ 790.178974][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x03d6 instead [ 790.178982][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x46f3 instead [ 790.178990][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xcdd2 instead [ 790.178998][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5cf3 instead [ 790.179006][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x4bdc instead [ 790.179014][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x02a2 instead [ 790.179023][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xe15f instead [ 790.179030][T13924] jffs2: Further such events for this erase block will not be printed [ 790.179251][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x110f instead [ 790.179259][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x5e31 instead [ 790.179267][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xb1f2 instead [ 790.179276][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xbe11 instead [ 790.179284][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xc1f6 instead [ 790.179292][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xf998 instead [ 790.179300][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x13f1 instead [ 790.179308][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xf5bf instead [ 790.179316][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x52fa instead [ 790.179324][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x7c1d instead [ 790.179332][T13924] jffs2: Further such events for this erase block will not be printed [ 790.179551][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xa410 instead [ 790.179560][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x548a instead [ 790.179568][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x0df3 instead [ 790.179576][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xb7c6 instead [ 790.179583][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xae56 instead [ 790.179591][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xf235 instead [ 790.179599][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x09f1 instead [ 790.179607][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x5f1c instead [ 790.179615][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x292c instead [ 790.179623][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xf7d3 instead [ 790.179630][T13924] jffs2: Further such events for this erase block will not be printed [ 790.179866][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xb0ac instead [ 790.179874][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x039b instead [ 790.179882][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xe84d instead [ 790.179890][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x024f instead [ 790.179899][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xc8e1 instead [ 790.179906][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x2e21 instead [ 790.179914][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x87bd instead [ 790.179923][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x761e instead [ 790.179931][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x84b1 instead [ 790.179939][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xbc99 instead [ 790.179947][T13924] jffs2: Further such events for this erase block will not be printed [ 790.450832][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x58a4 instead [ 790.450848][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x276e instead [ 790.450857][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x07a2 instead [ 790.450865][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xcfc3 instead [ 790.450873][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xb859 instead [ 790.450881][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xe1ca instead [ 790.450890][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xe0cf instead [ 790.450898][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xc12a instead [ 790.450906][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x182e instead [ 790.450914][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xa067 instead [ 790.450922][T13924] jffs2: Further such events for this erase block will not be printed [ 790.451143][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xc22a instead [ 790.451152][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x59fd instead [ 790.451160][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x2962 instead [ 790.451169][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0xa56d instead [ 790.451177][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x2c3f instead [ 790.451184][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x4e5e instead [ 790.451192][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x9165 instead [ 790.451200][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x6b40 instead [ 790.451208][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xbb4b instead [ 790.451217][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xce98 instead [ 790.451224][T13924] jffs2: Further such events for this erase block will not be printed [ 790.451445][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x7590 instead [ 790.451454][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x108f instead [ 790.451462][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x7513 instead [ 790.451470][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xc28a instead [ 790.451478][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xe105 instead [ 790.451486][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x7000 instead [ 790.451494][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3843 instead [ 790.451502][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x435d instead [ 790.451510][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0xedc7 instead [ 790.451518][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x4e77 instead [ 790.451526][T13924] jffs2: Further such events for this erase block will not be printed [ 790.451749][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x3eda instead [ 790.451757][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xa296 instead [ 790.451765][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xa171 instead [ 790.451777][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x4473 instead [ 790.451785][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x8dd2 instead [ 790.451793][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x99dd instead [ 790.451801][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x9975 instead [ 790.451809][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xe3a8 instead [ 790.451817][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x2f95 instead [ 790.451825][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x124c instead [ 790.451833][T13924] jffs2: Further such events for this erase block will not be printed [ 790.452057][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4ccc instead [ 790.452066][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x3283 instead [ 790.452082][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xae2d instead [ 790.452091][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x333b instead [ 790.452099][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xbe6b instead [ 790.452107][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x58f5 instead [ 790.452115][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xa1d5 instead [ 790.452123][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x5677 instead [ 790.452131][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xe388 instead [ 790.452139][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x7a12 instead [ 790.452147][T13924] jffs2: Further such events for this erase block will not be printed [ 790.798245][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x1308 instead [ 790.798260][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x6fd7 instead [ 790.798269][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x00aa instead [ 790.798277][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x7289 instead [ 790.798285][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x6c39 instead [ 790.798294][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xc58a instead [ 790.798302][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x669c instead [ 790.798310][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x5c87 instead [ 790.798318][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x1cee instead [ 790.798326][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xa0a7 instead [ 790.798334][T13924] jffs2: Further such events for this erase block will not be printed [ 790.798556][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x0435 instead [ 790.798565][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x626f instead [ 790.798573][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x6c64 instead [ 790.798581][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x3723 instead [ 790.798589][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x4adf instead [ 790.798597][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x418d instead [ 790.798605][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x4de8 instead [ 790.798613][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xa7a5 instead [ 790.798622][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x24c1 instead [ 790.798630][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x48fb instead [ 790.798637][T13924] jffs2: Further such events for this erase block will not be printed [ 790.798864][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x53b6 instead [ 790.798873][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x520c instead [ 790.798881][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0xe0be instead [ 790.798889][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x6eaa instead [ 790.798897][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x1066 instead [ 790.798905][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xb7fa instead [ 790.798913][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xa266 instead [ 790.798922][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x49e2 instead [ 790.798931][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x8714 instead [ 790.798939][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x26f7 instead [ 790.798947][T13924] jffs2: Further such events for this erase block will not be printed [ 790.799169][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0xe7ba instead [ 790.799178][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x6f22 instead [ 790.799187][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x52d2 instead [ 790.799195][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xfdeb instead [ 790.799204][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0xae46 instead [ 790.799212][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x1616 instead [ 790.799220][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x9c23 instead [ 790.799229][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x6ceb instead [ 790.799237][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xc9ae instead [ 790.799246][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x6fcb instead [ 790.799254][T13924] jffs2: Further such events for this erase block will not be printed [ 791.465959][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x149d instead [ 791.465977][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x9858 instead [ 791.465986][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x1a09 instead [ 791.465994][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x74cc instead [ 791.466003][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x2c5c instead [ 791.466012][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x2e47 instead [ 791.466020][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1bb6 instead [ 791.466029][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x7e6e instead [ 791.466037][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x4ad2 instead [ 791.466046][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x9559 instead [ 791.466054][T13924] jffs2: Further such events for this erase block will not be printed [ 791.466532][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x60cf instead [ 791.466542][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xd1f9 instead [ 791.466550][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x10de instead [ 791.466559][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xc417 instead [ 791.466567][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x350a instead [ 791.466576][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x04cc instead [ 791.466584][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xfee1 instead [ 791.466593][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0xc5bf instead [ 791.466601][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x2d7b instead [ 791.466610][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x6a74 instead [ 791.466618][T13924] jffs2: Further such events for this erase block will not be printed [ 791.667912][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x9535 instead [ 791.667926][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x9b83 instead [ 791.667935][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xe80d instead [ 791.667944][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0xebe8 instead [ 791.667952][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x0f5e instead [ 791.667961][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x03e2 instead [ 791.667970][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xca63 instead [ 791.667978][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x9de3 instead [ 791.667987][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x3102 instead [ 791.667995][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x75c8 instead [ 791.668003][T13924] jffs2: Further such events for this erase block will not be printed [ 791.668229][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x6174 instead [ 791.668238][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xfcfd instead [ 791.668246][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0xccdc instead [ 791.668255][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x79c9 instead [ 791.668263][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x9572 instead [ 791.668272][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x94a5 instead [ 791.668280][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x08bc instead [ 791.668289][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x3509 instead [ 791.668297][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x6bd5 instead [ 791.668306][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x3b72 instead [ 791.668314][T13924] jffs2: Further such events for this erase block will not be printed [ 791.668537][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0xfa65 instead [ 791.668546][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xe347 instead [ 791.668554][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x58ca instead [ 791.668563][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0xb491 instead [ 791.668571][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x5802 instead [ 791.668580][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x22a6 instead [ 791.668588][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xb796 instead [ 791.668596][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x1164 instead [ 791.668605][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xf96b instead [ 791.668613][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xc160 instead [ 791.668621][T13924] jffs2: Further such events for this erase block will not be printed [ 791.668848][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x59cd instead [ 791.668857][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xa35e instead [ 791.668865][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x0878 instead [ 791.668874][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x0486 instead [ 791.668882][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x604a instead [ 791.668890][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x4251 instead [ 791.668899][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x6184 instead [ 791.668907][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x9e1d instead [ 791.668916][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x3cce instead [ 791.668924][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xdfda instead [ 791.668932][T13924] jffs2: Further such events for this erase block will not be printed [ 791.819823][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0xb8dd instead [ 791.819839][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x15b5 instead [ 791.819848][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x4e0e instead [ 791.819856][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0xffcb instead [ 791.819864][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x2c5e instead [ 791.819873][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x68a8 instead [ 791.819881][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xa8c0 instead [ 791.819890][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xd565 instead [ 791.819898][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x5d72 instead [ 791.819907][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xd44b instead [ 791.819915][T13924] jffs2: Further such events for this erase block will not be printed [ 791.820140][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xce7d instead [ 791.820149][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0xa1a5 instead [ 791.820157][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x459f instead [ 791.820166][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x9260 instead [ 791.820174][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x74ca instead [ 791.820183][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x8865 instead [ 791.820191][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x34d7 instead [ 791.820199][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x45ff instead [ 791.820208][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x8c9d instead [ 791.820216][T13924] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xad72 instead [ 791.820224][T13924] jffs2: Further such events for this erase block will not be printed [ 791.820441][T13924] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 791.820446][T13924] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 793.374982][ T30] audit: type=1400 audit(1788548405.740:1400): avc: denied { bind } for pid=13940 comm="syz.4.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 793.375019][ T30] audit: type=1400 audit(1788548405.740:1401): avc: denied { name_bind } for pid=13940 comm="syz.4.2367" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 793.375045][ T30] audit: type=1400 audit(1788548405.740:1402): avc: denied { node_bind } for pid=13940 comm="syz.4.2367" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 793.633264][T13947] bridge0: port 3(macvlan2) entered blocking state [ 793.641858][T13947] bridge0: port 3(macvlan2) entered disabled state [ 793.648927][T13947] macvlan2: entered allmulticast mode [ 793.648939][T13947] ip6gretap0: entered allmulticast mode [ 793.675003][T13947] macvlan2: entered promiscuous mode [ 793.680835][T13947] bridge0: port 3(macvlan2) entered blocking state [ 793.682438][T13947] bridge0: port 3(macvlan2) entered forwarding state [ 794.683857][T13975] Process accounting resumed [ 795.637492][T13980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.661043][T13991] openvswitch: ovs-system: Dropping previously announced user features [ 795.892413][T13990] debugfs: out of free dentries, can not create file 'pf_taken' [ 795.992405][T13990] debugfs: out of free dentries, can not create file 'nmi_window_exits' [ 796.144305][ T30] audit: type=1400 audit(1788548408.510:1403): avc: denied { write } for pid=14001 comm="syz.2.2383" name="header" dev="configfs" ino=12197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 796.210080][T13997] syzkaller0: entered promiscuous mode [ 796.217929][T13997] syzkaller0: entered allmulticast mode [ 796.231532][ T30] audit: type=1400 audit(1788548408.600:1404): avc: denied { write } for pid=14001 comm="syz.2.2383" name="fs" dev="configfs" ino=12204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 796.267712][ T30] audit: type=1400 audit(1788548408.640:1405): avc: denied { write } for pid=14001 comm="syz.2.2383" name="c.1" dev="configfs" ino=16668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 796.298041][ T30] audit: type=1400 audit(1788548408.670:1406): avc: denied { write } for pid=14001 comm="syz.2.2383" name="c.1" dev="configfs" ino=16668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 796.325753][ T30] audit: type=1400 audit(1788548408.690:1407): avc: denied { write } for pid=14001 comm="syz.2.2383" name="fs" dev="configfs" ino=12204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 797.166483][T14010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2385'. [ 797.166506][T14010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2385'. [ 797.489582][ T30] audit: type=1400 audit(1788548409.860:1408): avc: denied { create } for pid=14017 comm="syz.4.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 800.004839][T14023] tipc: Enabling of bearer rejected, already enabled [ 800.020310][T14032] lo: entered allmulticast mode [ 800.055265][T14038] lo: left allmulticast mode [ 802.160591][T14065] netlink: 'syz.4.2400': attribute type 9 has an invalid length. [ 802.615255][ T30] audit: type=1400 audit(1788548414.980:1409): avc: denied { write } for pid=14072 comm="syz.1.2403" name="cluster" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 802.742760][ T30] audit: type=1400 audit(1788548415.110:1410): avc: denied { mount } for pid=14072 comm="syz.1.2403" name="/" dev="ocfs2_dlmfs" ino=44323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 802.775333][ T30] audit: type=1400 audit(1788548415.140:1411): avc: denied { write } for pid=14072 comm="syz.1.2403" name="/" dev="ocfs2_dlmfs" ino=44323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 802.830394][ T30] audit: type=1400 audit(1788548415.200:1412): avc: denied { add_name } for pid=14072 comm="syz.1.2403" name="domain1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 802.851675][ T30] audit: type=1400 audit(1788548415.200:1413): avc: denied { create } for pid=14072 comm="syz.1.2403" name="domain1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 802.912080][ T30] audit: type=1400 audit(1788548415.200:1414): avc: denied { associate } for pid=14072 comm="syz.1.2403" name="domain1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 802.966936][T14074] o2cb: This node has not been configured. [ 803.006652][T14074] o2cb: Cluster check failed. Fix errors before retrying. [ 803.006686][T14074] (syz.1.2403,14074,0):user_dlm_register:674 ERROR: status = -22 [ 803.006704][T14074] (syz.1.2403,14074,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 803.126639][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.126678][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.295811][ T30] audit: type=1400 audit(1788548415.670:1415): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 803.935502][T14086] tipc: Enabling of bearer rejected, already enabled [ 804.972327][ T30] audit: type=1400 audit(1788548417.340:1416): avc: denied { map } for pid=14092 comm="syz.1.2410" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 804.972365][ T30] audit: type=1400 audit(1788548417.340:1417): avc: denied { execute } for pid=14092 comm="syz.1.2410" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 805.157360][T14100] tipc: Failed to obtain node identity [ 805.157386][T14100] tipc: Enabling of bearer rejected, failed to enable media [ 805.262819][T14099] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2412'. [ 805.423734][ T1213] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 805.574190][ T1213] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 805.584398][ T1213] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 805.584420][ T1213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.584452][ T1213] usb 3-1: config 0 has no interface number 0 [ 805.584473][ T1213] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 805.584501][ T1213] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 805.633258][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.633282][ T1213] usb 3-1: Product: syz [ 805.633296][ T1213] usb 3-1: Manufacturer: syz [ 805.633307][ T1213] usb 3-1: SerialNumber: syz [ 805.656868][ T1213] usb 3-1: config 0 descriptor?? [ 805.657263][T14105] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 805.657312][T14105] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 805.686634][ T1213] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 805.927868][T14105] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2405'. [ 805.942787][T14105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2405'. [ 805.975705][T14109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.041237][T14110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.958385][ T1213] usb 3-1: USB disconnect, device number 35 [ 808.108142][T14114] syzkaller0: entered promiscuous mode [ 808.108163][T14114] syzkaller0: entered allmulticast mode [ 808.120727][T14112] cramfs: checking physical address 0x0000000144a80000 for linear cramfs image [ 808.217208][T14112] cramfs: wrong magic [ 808.254826][T14112] cramfs: wrong magic [ 808.645532][T14105] Process accounting resumed [ 810.055443][ T30] audit: type=1400 audit(1788548422.430:1418): avc: denied { write } for pid=14145 comm="syz.2.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 810.184289][ T1213] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 810.344552][ T1213] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 810.355620][ T1213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.355653][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.376873][ T1213] usb 2-1: config 0 descriptor?? [ 810.387280][ T1213] pwc: Askey VC010 type 2 USB webcam detected. [ 810.600168][ T1213] pwc: send_video_command error -71 [ 810.605796][ T1213] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 810.605860][ T1213] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 810.626967][ T1213] usb 2-1: USB disconnect, device number 41 [ 810.905885][T14165] tipc: Failed to obtain node identity [ 810.905910][T14165] tipc: Enabling of bearer rejected, failed to enable media [ 811.046828][ T1213] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 811.229809][T12334] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 811.244306][ T1213] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 811.254323][ T1213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.254354][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.265938][ T1213] usb 2-1: config 0 descriptor?? [ 811.341559][ T1213] pwc: Askey VC010 type 2 USB webcam detected. [ 811.414210][T12334] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 811.424528][T12334] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 811.424550][T12334] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.424566][T12334] usb 3-1: config 0 has no interface number 0 [ 811.424603][T12334] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 811.424620][T12334] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 811.478509][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.478545][T12334] usb 3-1: Product: syz [ 811.478562][T12334] usb 3-1: Manufacturer: syz [ 811.478571][T12334] usb 3-1: SerialNumber: syz [ 811.503267][T12334] usb 3-1: config 0 descriptor?? [ 811.509870][T14167] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 811.509947][T14167] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 811.532815][T12334] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 811.750409][ T1213] pwc: recv_control_msg error -32 req 02 val 2b00 [ 811.762298][ T1213] pwc: recv_control_msg error -32 req 02 val 2700 [ 811.774648][ T1213] pwc: recv_control_msg error -32 req 02 val 2c00 [ 811.782183][ T1213] pwc: recv_control_msg error -32 req 04 val 1000 [ 811.791541][ T1213] pwc: recv_control_msg error -32 req 04 val 1300 [ 811.800224][ T1213] pwc: recv_control_msg error -32 req 04 val 1400 [ 811.809088][ T1213] pwc: recv_control_msg error -32 req 02 val 2000 [ 811.817359][ T1213] pwc: recv_control_msg error -32 req 02 val 2100 [ 811.826999][ T1213] pwc: recv_control_msg error -32 req 04 val 1500 [ 811.836865][ T1213] pwc: recv_control_msg error -32 req 02 val 2500 [ 811.846512][ T1213] pwc: recv_control_msg error -32 req 02 val 2400 [ 811.854062][ T1213] pwc: recv_control_msg error -32 req 02 val 2600 [ 811.873008][T14167] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2430'. [ 811.873031][T14167] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2430'. [ 811.936641][T12334] usb 3-1: USB disconnect, device number 36 [ 812.071833][ T1213] pwc: recv_control_msg error -71 req 02 val 2800 [ 812.080744][ T1213] pwc: recv_control_msg error -71 req 04 val 1100 [ 812.088138][ T1213] pwc: recv_control_msg error -71 req 04 val 1200 [ 812.116464][ T1213] pwc: Registered as video103. [ 812.122470][ T1213] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 812.154116][ T1213] usb 2-1: USB disconnect, device number 42 [ 812.347195][T14192] tipc: Enabling of bearer rejected, already enabled [ 812.833480][T14213] tipc: Enabling of bearer rejected, already enabled [ 813.775481][T14225] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2449'. [ 813.775505][T14225] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2449'. [ 813.924157][ T1213] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 814.083874][ T1213] usb 2-1: Using ep0 maxpacket: 32 [ 814.089514][ T1213] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 814.100021][ T1213] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 814.100043][ T1213] usb 2-1: config 0 has no interface number 0 [ 814.100069][ T1213] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 814.127472][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.127495][ T1213] usb 2-1: Product: syz [ 814.127509][ T1213] usb 2-1: Manufacturer: syz [ 814.127519][ T1213] usb 2-1: SerialNumber: syz [ 814.150628][ T1213] usb 2-1: config 0 descriptor?? [ 814.156479][T14223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 814.283752][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 814.368576][T14223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 814.435504][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 814.441169][ T10] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70 [ 814.451120][ T10] usb 3-1: config 1 has an invalid interface number: 22 but max is 0 [ 814.451141][ T10] usb 3-1: config 1 has no interface number 0 [ 814.451167][ T10] usb 3-1: config 1 interface 22 has no altsetting 0 [ 814.474789][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.474812][ T10] usb 3-1: Product: syz [ 814.474828][ T10] usb 3-1: Manufacturer: syz [ 814.474854][ T10] usb 3-1: SerialNumber: syz [ 814.747605][ T10] gspca_main: touptek-2.14.0 probing 0547:6801 [ 814.767943][ T10] usb 3-1: USB disconnect, device number 37 [ 816.160044][T14247] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 816.332841][T14252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.024007][T14277] tipc: Enabling of bearer rejected, failed to enable media [ 820.063939][ T1213] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 820.064337][ T1213] asix 2-1:0.188: probe with driver asix failed with error -71 [ 820.102456][ T1213] usb 2-1: USB disconnect, device number 43 [ 820.171814][T14282] tipc: Enabling of bearer rejected, failed to enable media [ 820.267066][T14278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2463'. [ 821.565268][T14299] openvswitch: ovs-system: Dropping previously announced user features [ 821.859455][T14300] openvswitch: ovs-system: Dropping previously announced user features [ 823.082347][T14317] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 824.331544][T14327] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 824.350125][T14327] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 824.834990][T14304] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 824.863532][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2477'. [ 824.924326][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 825.077322][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 825.082775][ T10] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 825.092813][ T10] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 825.092842][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 825.092859][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 255, changing to 11 [ 825.092875][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 825.092889][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.152308][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.152331][ T10] usb 5-1: Product: syz [ 825.152347][ T10] usb 5-1: Manufacturer: syz [ 825.152357][ T10] usb 5-1: SerialNumber: syz [ 825.175851][ T10] usb 5-1: config 0 descriptor?? [ 825.188619][ T30] audit: type=1400 audit(1788548437.560:1419): avc: denied { ioctl } for pid=14339 comm="syz.3.2480" path="socket:[45425]" dev="sockfs" ino=45425 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 825.229268][T14341] netlink: zone id is out of range [ 825.925824][T14344] fuse: fd is not a fuse device [ 826.054795][T14330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.064173][T14330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.092739][T14350] syz_tun: entered allmulticast mode [ 826.104753][T14330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2475'. [ 826.154705][ T30] audit: type=1400 audit(1788548438.520:1420): avc: denied { read append } for pid=14329 comm="syz.4.2475" name="usbmon3" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 826.154746][ T30] audit: type=1400 audit(1788548438.520:1421): avc: denied { open } for pid=14329 comm="syz.4.2475" path="/dev/usbmon3" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 826.237583][ T30] audit: type=1400 audit(1788548438.610:1422): avc: denied { ioctl } for pid=14329 comm="syz.4.2475" path="/dev/usbmon3" dev="devtmpfs" ino=724 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 826.269438][ T10] usb 5-1: USB disconnect, device number 36 [ 826.366593][T14356] syz_tun: left allmulticast mode [ 827.636734][ T30] audit: type=1400 audit(1788548440.010:1423): avc: denied { write } for pid=14366 comm="syz.4.2490" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 829.643521][T14377] xt_policy: output policy not valid in PREROUTING and INPUT [ 830.381375][ T30] audit: type=1400 audit(1788548442.750:1424): avc: denied { write } for pid=14383 comm="syz.2.2495" name="h" dev="configfs" ino=44062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 830.381412][ T30] audit: type=1400 audit(1788548442.750:1425): avc: denied { write } for pid=14383 comm="syz.2.2495" name="h" dev="configfs" ino=44062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 830.899171][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 830.899462][T14392] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2496: No space for directory leaf checksum. Please run e2fsck -D. [ 830.899487][T14392] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.2496: checksumming directory block 0 [ 830.899597][T14392] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 830.899650][T14392] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2496: No space for directory leaf checksum. Please run e2fsck -D. [ 830.899666][T14392] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.2496: checksumming directory block 0 [ 830.899746][T14392] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 830.899796][T14392] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2496: No space for directory leaf checksum. Please run e2fsck -D. [ 830.899810][T14392] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.2496: checksumming directory block 0 [ 830.899884][T14392] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 830.899935][T14392] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2496: No space for directory leaf checksum. Please run e2fsck -D. [ 830.899951][T14392] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.2496: checksumming directory block 0 [ 830.900026][T14392] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 830.900043][T14392] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 830.900056][T14392] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 834.147690][ T30] audit: type=1400 audit(1788548445.405:1426): avc: denied { accept } for pid=14419 comm="syz.4.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 834.147730][ T30] audit: type=1400 audit(1788548445.475:1427): avc: denied { write } for pid=14419 comm="syz.4.2503" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 834.197243][ T1213] kernel read not supported for file /video9 (pid: 1213 comm: kworker/0:2) [ 834.419976][T14430] syzkaller0: entered promiscuous mode [ 834.420000][T14430] syzkaller0: entered allmulticast mode [ 835.053850][T14430] tipc: Enabled bearer , priority 0 [ 835.084043][T14430] tipc: Resetting bearer [ 835.108832][T14429] tipc: Resetting bearer [ 835.233540][T14429] tipc: Disabling bearer [ 835.479325][T14440] overlayfs: workdir and upperdir must reside under the same mount [ 835.575460][ T30] audit: type=1400 audit(1788548446.945:1428): avc: denied { append } for pid=14441 comm="syz.4.2509" name="sda1" dev="devtmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 835.602721][ T30] audit: type=1400 audit(1788548446.975:1429): avc: denied { map } for pid=14441 comm="syz.4.2509" path="/dev/sda1" dev="devtmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.755166][T14463] [ 837.757519][T14463] ====================================================== [ 837.764506][T14463] WARNING: possible circular locking dependency detected [ 837.771494][T14463] syzkaller #0 Tainted: G L [ 837.777439][T14463] ------------------------------------------------------ [ 837.784422][T14463] syz.2.2515/14463 is trying to acquire lock: [ 837.790454][T14463] ffff88802b154460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 837.799126][T14463] [ 837.799126][T14463] but task is already holding lock: [ 837.806456][T14463] ffff888028a4c868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 837.815380][T14463] [ 837.815380][T14463] which lock already depends on the new lock. [ 837.815380][T14463] [ 837.825751][T14463] [ 837.825751][T14463] the existing dependency chain (in reverse order) is: [ 837.834734][T14463] [ 837.834734][T14463] -> #4 (&subsys->lock){+.+.}-{4:4}: [ 837.842168][T14463] lock_acquire+0x1d1/0x380 [ 837.847168][T14463] __mutex_lock+0x1a4/0x1bd0 [ 837.852267][T14463] nvmet_ns_device_path_store+0x57/0x1c0 [ 837.858393][T14463] configfs_write_iter+0x302/0x4e0 [ 837.864005][T14463] vfs_write+0x6af/0x1050 [ 837.868845][T14463] ksys_write+0x12a/0x250 [ 837.873676][T14463] do_syscall_64+0x123/0x790 [ 837.878771][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.885173][T14463] [ 837.885173][T14463] -> #3 (&p->frag_sem){.+.+}-{4:4}: [ 837.892539][T14463] lock_acquire+0x1d1/0x380 [ 837.897538][T14463] down_read+0x99/0x4c0 [ 837.902190][T14463] configfs_write_iter+0x218/0x4e0 [ 837.907810][T14463] vfs_write+0x6af/0x1050 [ 837.912636][T14463] ksys_write+0x12a/0x250 [ 837.917462][T14463] do_syscall_64+0x123/0x790 [ 837.922563][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.928966][T14463] [ 837.928966][T14463] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 837.936496][T14463] lock_acquire+0x1d1/0x380 [ 837.941495][T14463] __mutex_lock+0x1a4/0x1bd0 [ 837.946579][T14463] configfs_read_iter+0x79/0x6f0 [ 837.952011][T14463] __kernel_read+0x397/0xad0 [ 837.957101][T14463] integrity_kernel_read+0x7e/0xb0 [ 837.962707][T14463] ima_calc_file_hash_tfm+0x25e/0x350 [ 837.968570][T14463] ima_calc_file_hash+0x1e3/0x380 [ 837.974084][T14463] ima_collect_measurement+0x94f/0xb30 [ 837.980032][T14463] process_measurement+0xdfe/0x2350 [ 837.985737][T14463] ima_file_check+0xc3/0x110 [ 837.990826][T14463] security_file_post_open+0xc4/0x210 [ 837.996694][T14463] path_openat+0x5cd/0x2440 [ 838.001690][T14463] do_file_open+0x20e/0x430 [ 838.006684][T14463] do_sys_openat2+0x10f/0x1e0 [ 838.011856][T14463] __x64_sys_openat+0x12d/0x210 [ 838.017202][T14463] do_syscall_64+0x123/0x790 [ 838.022285][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.029189][T14463] [ 838.029189][T14463] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 838.037755][T14463] lock_acquire+0x1d1/0x380 [ 838.042759][T14463] __mutex_lock+0x1a4/0x1bd0 [ 838.047842][T14463] ima_file_truncate+0xe6/0x190 [ 838.053200][T14463] security_file_truncate+0xf9/0x1e0 [ 838.058998][T14463] path_openat+0x1d7e/0x2440 [ 838.064094][T14463] do_file_open+0x20e/0x430 [ 838.069098][T14463] do_sys_openat2+0x10f/0x1e0 [ 838.074287][T14463] __x64_sys_openat+0x12d/0x210 [ 838.079644][T14463] do_syscall_64+0x123/0x790 [ 838.084728][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.091112][T14463] [ 838.091112][T14463] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 838.098467][T14463] check_prev_add+0xeb/0xe60 [ 838.103550][T14463] __lock_acquire+0x1492/0x1ec0 [ 838.108893][T14463] lock_acquire+0x1d1/0x380 [ 838.113887][T14463] mnt_want_write+0x6f/0x420 [ 838.118969][T14463] lookup_open+0x150/0x1990 [ 838.123979][T14463] path_openat+0xa2c/0x2440 [ 838.128975][T14463] do_file_open+0x20e/0x430 [ 838.133979][T14463] file_open_name+0x1c3/0x3e0 [ 838.139150][T14463] filp_open+0x2e/0x50 [ 838.143722][T14463] nvmet_file_ns_enable+0x95/0x420 [ 838.149328][T14463] nvmet_ns_enable+0x35f/0x5d0 [ 838.154589][T14463] nvmet_ns_enable_store+0x11e/0x160 [ 838.160374][T14463] configfs_write_iter+0x302/0x4e0 [ 838.165981][T14463] vfs_write+0x6af/0x1050 [ 838.170809][T14463] ksys_write+0x12a/0x250 [ 838.175635][T14463] do_syscall_64+0x123/0x790 [ 838.180719][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.187112][T14463] [ 838.187112][T14463] other info that might help us debug this: [ 838.187112][T14463] [ 838.197310][T14463] Chain exists of: [ 838.197310][T14463] sb_writers#6 --> &p->frag_sem --> &subsys->lock [ 838.197310][T14463] [ 838.209619][T14463] Possible unsafe locking scenario: [ 838.209619][T14463] [ 838.217037][T14463] CPU0 CPU1 [ 838.222373][T14463] ---- ---- [ 838.227717][T14463] lock(&subsys->lock); [ 838.231939][T14463] lock(&p->frag_sem); [ 838.238595][T14463] lock(&subsys->lock); [ 838.245326][T14463] rlock(sb_writers#6); [ 838.249541][T14463] [ 838.249541][T14463] *** DEADLOCK *** [ 838.249541][T14463] [ 838.257669][T14463] locks held by syz.2.2515/14463: 6, last CPU#0: [ 838.263966][T14463] #0: ffff88802794bb30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 838.273072][T14463] #1: ffff88801eb08460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 838.282084][T14463] #2: ffff8880579b8c80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 838.291885][T14463] #3: ffff888035487a70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 838.301591][T14463] #4: ffffffff8ff56b28 (nvmet_config_sem){++++}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 838.311734][T14463] #5: ffff888028a4c868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 838.321093][T14463] [ 838.321093][T14463] stack backtrace: [ 838.327479][T14463] CPU: 0 UID: 0 PID: 14463 Comm: syz.2.2515 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.338380][T14463] Tainted: [L]=SOFTLOCKUP [ 838.342672][T14463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 838.352706][T14463] Call Trace: [ 838.355960][T14463] [ 838.358864][T14463] dump_stack_lvl+0x100/0x190 [ 838.363518][T14463] print_circular_bug.cold+0x178/0x1be [ 838.368952][T14463] check_noncircular+0x146/0x160 [ 838.373867][T14463] ? alloc_empty_file+0x79/0x1c0 [ 838.378777][T14463] ? ksys_write+0x12a/0x250 [ 838.383248][T14463] check_prev_add+0xeb/0xe60 [ 838.387809][T14463] __lock_acquire+0x1492/0x1ec0 [ 838.392633][T14463] lock_acquire+0x1d1/0x380 [ 838.397105][T14463] ? lookup_open+0x150/0x1990 [ 838.401757][T14463] ? __pfx___might_resched+0x10/0x10 [ 838.407010][T14463] ? find_held_lock+0x2b/0x80 [ 838.411660][T14463] mnt_want_write+0x6f/0x420 [ 838.416223][T14463] ? lookup_open+0x150/0x1990 [ 838.420875][T14463] lookup_open+0x150/0x1990 [ 838.425355][T14463] path_openat+0xa2c/0x2440 [ 838.429841][T14463] ? __pfx_path_openat+0x10/0x10 [ 838.434757][T14463] ? kasan_save_stack+0x3f/0x50 [ 838.439578][T14463] ? kasan_save_stack+0x30/0x50 [ 838.444401][T14463] ? kasan_save_track+0x14/0x30 [ 838.449220][T14463] ? __kasan_slab_alloc+0x89/0x90 [ 838.454222][T14463] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 838.459824][T14463] ? do_getname_kernel+0x5d/0x250 [ 838.464820][T14463] ? filp_open+0x1d/0x50 [ 838.469035][T14463] ? nvmet_file_ns_enable+0x95/0x420 [ 838.474297][T14463] do_file_open+0x20e/0x430 [ 838.478781][T14463] ? __pfx_do_file_open+0x10/0x10 [ 838.483783][T14463] ? rcu_is_watching+0x13/0xc0 [ 838.488521][T14463] file_open_name+0x1c3/0x3e0 [ 838.493170][T14463] ? __pfx_file_open_name+0x10/0x10 [ 838.498339][T14463] ? do_getname_kernel+0x5d/0x250 [ 838.503343][T14463] ? __asan_memcpy+0x3c/0x60 [ 838.507910][T14463] ? do_getname_kernel+0x1be/0x250 [ 838.512993][T14463] filp_open+0x2e/0x50 [ 838.517044][T14463] nvmet_file_ns_enable+0x95/0x420 [ 838.522139][T14463] nvmet_ns_enable+0x35f/0x5d0 [ 838.526879][T14463] nvmet_ns_enable_store+0x11e/0x160 [ 838.532145][T14463] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 838.537931][T14463] ? configfs_write_iter+0x388/0x4e0 [ 838.543199][T14463] configfs_write_iter+0x302/0x4e0 [ 838.548286][T14463] vfs_write+0x6af/0x1050 [ 838.552594][T14463] ? __pfx_configfs_write_iter+0x10/0x10 [ 838.558209][T14463] ? __pfx_vfs_write+0x10/0x10 [ 838.562949][T14463] ? find_held_lock+0x2b/0x80 [ 838.567604][T14463] ksys_write+0x12a/0x250 [ 838.571911][T14463] ? __pfx_ksys_write+0x10/0x10 [ 838.576734][T14463] do_syscall_64+0x123/0x790 [ 838.581299][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.587165][T14463] RIP: 0033:0x7f91ea99e159 [ 838.591552][T14463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.611138][T14463] RSP: 002b:00007f91eb798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 838.619518][T14463] RAX: ffffffffffffffda RBX: 00007f91eac25fa0 RCX: 00007f91ea99e159 [ 838.627468][T14463] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000005 [ 838.635412][T14463] RBP: 00007f91eaa35024 R08: 0000000000000000 R09: 0000000000000000 [ 838.643359][T14463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.651306][T14463] R13: 00007f91eac26038 R14: 00007f91eac25fa0 R15: 00007ffd73a2e058 [ 838.659261][T14463] [ 838.840656][T14466] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 839.325231][T14463] nvmet: failed to open file ./fi: (-2) [ 839.340798][T14463] Process accounting paused