last executing test programs: 10.369677899s ago: executing program 2 (id=1206): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0xfa) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz0:', 'syz1', '.readonly'}, &(0x7f0000000080)='./file2\x00', &(0x7f00000000c0), 0x40000, &(0x7f0000000140)={[], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}) mlockall(0x0) mlockall(0x7) openat(r0, &(0x7f0000000180)='./file2\x00', 0x143042, 0x0) 9.257193481s ago: executing program 2 (id=1211): syz_io_uring_setup(0x585c, &(0x7f0000000240)={0x0, 0x1e84, 0x14021, 0x0, 0x2e7}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ee657720656372797074667320757365723a73797a20"], 0x2b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r3 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r3, r3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) timerfd_gettime(0xffffffffffffffff, 0x0) r5 = socket(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018808000100", @ANYRES32=r5, @ANYBLOB='\f\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) 8.961083693s ago: executing program 2 (id=1214): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000001c0)={0x4, "6ff3fd55b3d5e53298c692e38b6e76a5ef63b3cca524a55fe8bf5ecd497153c5", 0x1, 0x4, 0x4, 0x40, 0x200, 0x8}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x3000, 0x0) read(r3, &(0x7f0000000100)=""/9, 0xfffffd87) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1ceb080cd05d308098e00008100", 0x0, 0x1a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x10, 0x0, &(0x7f0000000300)="3635a672d51a89c8a92f8ea6cc395439"}) write$tun(r3, &(0x7f00000000c0)=ANY=[], 0xffe) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000240)={'netpci0\x00'}) write(r3, &(0x7f0000000100)="4be667d36d8445e7ce0fc7e182462cc47115b421dd92e9f50320de9fedf272cef6a7ef5b903a9053fc020116be9d0af6b29dcd3e45ad243d96ff33eab06777742738d2fe71ff92ad6be8c8604ec94d8975ab170c00c5a26d5e06db5784af1eeb64189e538b3e86feeea1b31d1797be611adf6147b74fda819ec26caa5c65279fe6e232128358f086ba3c5b47a5248618675abe6d4e284b1de82021e23a77c2cff508ae4d617e78342a24852054197e011776d72d940f5cef5fd5f803", 0xbc) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) personality(0x200000) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f8864b556a7c0ece0c39d77affb55b386d3ed795ec1e733e3", 0x28}], 0x1) 8.634694095s ago: executing program 3 (id=1218): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005a0000022dbd7000fddbdf250008000300", @ANYRES32=r1, @ANYBLOB="00efff8988573f111b512507090000000000cca50eb0d948e577cfd1cabd6980d7aa7aa86c0f54175570044a03c67912201e666bdb35a3081ba785530f3245b340afbf6e7097a34e5722dd1ff4bae85a"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_usb_connect$uac1(0x3, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000010820556014000010203010902960003010080060904000000010100000a2401000036000201020924060206010a00020c24020103020500ff01600709240604020102000905240501060924030200010404220904010000100200000904010101010200000a24020209000400010409050109000003810b0725"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0302, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x8f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000040)={0x48}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x2f, 0x20, 0x7, 0x10, 0x50, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7800, 0x9, 0x6}}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x124, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x104, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc, 0x0, 0x0, 0x64}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x1c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x124}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000cc0)={@dev, @rand_addr, 0x0}, &(0x7f0000000d00)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d40)={'gre0\x00', 0x0, 0x8, 0x7800, 0x8000, 0x0, {{0x18, 0x4, 0x0, 0x6, 0x60, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@rr={0x7, 0x1b, 0x7d, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @remote, @local]}, @timestamp={0x44, 0x20, 0x1b, 0x0, 0xe, [0x38c, 0x1, 0x3, 0xfffffff1, 0x63236511, 0xfffffff7, 0xfffffff9]}, @lsrr={0x83, 0xf, 0x46, [@private=0xa010102, @local, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e00)={0x220, r7, 0x104, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x84}, 0x48080) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 8.421049799s ago: executing program 0 (id=1221): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = syz_open_dev$I2C(&(0x7f00000005c0), 0xa, 0x20c0) (rerun: 32) ioctl$I2C_PEC(r1, 0x708, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = socket$kcm(0x29, 0xf, 0x0) sendmsg$kcm(r3, &(0x7f0000000cc0)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000180)}, {&(0x7f0000000500)="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", 0xfc}, {&(0x7f0000000740)="e6a7483f2c03c847b6bb848f34af8fd37519a8283c69357cc85d468850d4c8504ca9d241154af284a5d4c0c8eed087f73b238bbaac9b7e0434f5115d0e44bdf91c1162b199b395f9518a4ce4b538ece86090cca63640531e3a9a4b19ee461c89119f8858f3f8b6c592aa805f4643dbe42a25648c818c6315cd22be1d22eceea331541aada651a96208d7942ba95be832afe66c5a4c03582fa03f00fb1b99a3f2b7492015b8f3f90255dda2cd93263ffe090b4563bfed70c2d3639949f5deab6d", 0xc0}, {&(0x7f0000000800)="695d9366cc1270f6e3a9f7adda7c78a70425be5d14893e9a3703055807648c9007985932b6eff52d624af29b78937b01d1139b146e6f22d45d499943ed25a9aaa8fd3a7e426b880cc809b7d19276f2ecd24111ee76ca053f0ba0fa81f99e9cdc7dd60fcaa4db9d6c300773ddec31ff2dc5bd612fd512641781ef25af988d04a0782220118f777d5457f69e0f32145b8740cfa14ad6c751aea88a800de886a57b9b8e6e96b76c193bfaa5aef5e5d7c03be6806251e41e27a9f867e86a3dbe3c4854f0a6fb1435e465467f9e6e91d2d299cd88bbe6291aeae0bbe5ea33a34541191030ac43b011eb5bcdf9af", 0xeb}, {&(0x7f0000000900)="cf1a335353abc516ce8be4750847b659bb6146fd58f78f3e5f8915fafb2f870e08199d1a4e0f3e7dd555f3874d8ad412a61f63126d350de2c7ce1c65dd78acf2d204aea087e2df4e7b27c07caa18d2c13917d81c1dd00a7095a501d2da0fbf9bfe9c582d12c6c033f4e5c4dd89013d8dcfab82823b47e86d7aff06e357c8ba3a8a8cdd159846fb9d31eca7071045f8542dacd9c642ff49e2372d6cd4df0485e64ff3983d5674c408133a5791755ef6d95c9ab34398e9", 0xb6}, {&(0x7f00000009c0)="e1e358195382022fceb805c3ea5e15b2a28bce6dfe428ea902503072e7f6b8deef98c9eedfa56049f7f4ef6fab30094742748b3d988ba2348333801eb537b466cf96f3d2d3933412e84f50", 0x4b}, {&(0x7f0000000a40)="4a5c054a131638e8303e280d2b0a183e70962dd22851ed72dcbd48e2d3606ec4b1fd7dac01e99e61db28b5c0efc3b017161201ff4e70803abb7e016c666b9dd64de2c3e9b509cf2ff612e7bca19a8937bcf049bae6bba822dd069dd6c58cdfa36e0adf9adf7e4867038767faeb94ded8302ad78fbc8a637db634d4d141df", 0x7e}, {&(0x7f0000000ac0)="08b1030b3c5f2c46ca922536474e35f1ca933699a289d97455ffbf74dbb16f6bb794760617cc2a", 0x27}, {&(0x7f0000000b00)="f0d2bb98e04d15db430f6308d5e9c62fdcc4310eb306d15682ddda13f21fdeada4c8cf68c5fc81e2a9ffab593042bb6ec0b15f48fa5bd060dfbe78876caa01c21a1401fe22ad5e9e39129b70ace6297453d4cbf57d89630f591600bb5938afae76bde73b37988556aaf809fb0fa96b24a8707dee3765198f94ba928eabaf24123989cf74a3a91743fd4a707a703375f63e7bd5edcb02f7cde7e98113c57bd48e3219aa1bafc1a9b0bc998c9a85ff10453b0f4d609f0648d5bec32e7101de3f4d9a2fbd1b1e03f71fda960f05576f1d258148fad25cad851d5fdc475f7624d698e73f76ed3298f62417e083e851ff4a7832ac19269db1198b", 0xf8}], 0x9}, 0x4) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa6400, 0xb5) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="66643d5015d76828cae92503987cccd432d9b8cd11a196a49548b2170c1a7c2d06d73adaa5944d7dacbcc23d0ecb06f6e828eaba44a3ad5eee953503b1a82b31883d", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000004}, 0x4) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x3, 0x6, 0xff, 0x7fff0026}]}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000180)) (async, rerun: 64) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYBLOB="3f1f79b68f1053e907a11d0ae4519a4e4372f8f8a9af253c909de0839279ecca154ca56734ee587f5614c2b2a889ab1ae0c444f246cabd5b7d9a6e32105400bae5bb0a9302ac1232a888d5b914039c7cbefa416acfd2781ef4d3b1c44122e5782adade6ce59901337009ae0ada2b8ac97cc3034391fc703d9ddf7979fed19ff8728c00e368c55e438e1cbf342fa5474ae8298f32bd8b18751945f535a740d56013cb300b416293259ee3", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x8c10}, 0x40) (async) socket(0x10, 0x3, 0x0) 8.35915344s ago: executing program 0 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280), 0x0) 7.705239989s ago: executing program 3 (id=1225): r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000b00)="0c8535cf", 0x20000}], 0x1) sendmmsg$alg(r6, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="1703dbafcbe78c907fb406b1b926e428f51bb645ace7b986c311cf294340c00e2422a843bb4cbaf40c10fa6cdc44d24c45e921394d3aa092e5fcbf4b96bf", 0x3e}, {&(0x7f0000001e80)="bdc70f68ba8dfbb8f7c2e794c4dbf33322da04dbd1b27378c3226bf65e847e9f7a25227a743d655e7b7494eb580da80de07fcb6357f5e8", 0x37}, {&(0x7f0000001ec0)="bad6754394ab352de05816ac0aa37659da3a9ccffb7df3cce1327105632934931a1143901ff6165532e33d84690593cd6464167c65218087ef4a11a80c06ebc9af2149f55754e9304f79069a3d7c223de373bda583aed1641d8c396db148859fb9f6d71e4d9182deed9dd93f601dff648f74368b54d26b746809a3", 0x7b}, {&(0x7f0000001f40)="04986359db9ffca0fe1559153176c2b580cb07ed2d21b0e1077057a14ba0223e6b3ad3f70af96ccecb4ea7ea03211b428717053784a39715a9a3eff76a6925cf3fcde3280b09ee1f9c99f71eae7a3788482b5bfc71594d420cff788ff66b494d56a3fe19c20d572eb46c033117bd22efa4690c1230c17960dba24dcf179b07e9b0a12408df78c66ea171c97e9a1dac05cda188be904d81a552d8a056617e8b10b72f0b2bc429392989d730eef7ab659a37021fd7b0cc82ce27513f2204de1acc5520cd7e878dd166d448ba12a5059beadb4155d90cf4da737a85665101956c2dbc3f7e968c7d", 0xe6}, {&(0x7f0000002040)="f9ba74621903c90dce73ec9ee44368ca9274dc9a1ef25781953882551f08c4b442bd9cfd5cc0f5acaa2ca87a18edb47b59df9b6bce9af4d162a2abf05eb8a0414ddcc74c3cfea23293db66c2cf3b15bda34a84aca591554257d42b5a0420a9707eb33e111cfee5d6a798382026f33d3cd770fa7cddc8d57d6e1aa5abaf71501dbbca601b86ebfd54075c24feea0272e5fa19ebea9d8034becead4dd23fe59c091f5e9a890ca717e41c7e69da2cbdaf8fdabf041f2d", 0xb5}, {&(0x7f0000002100)="1838470198843e6d62415ae45d3682d39fc3cf07b75d5b048db301a16b2429bda3f87e5c2e6bfcf349ccb360693c9540e90c258c309bb2e59fac11078dadfe659618cb1ca19f0fa05bdd7dfd0b38e286977a1b6687fa3b4f962c2b79c543385d28dfb67dbddb5abdfc76b26003248624e5fa4effba41884ca38cce450a63abbf5ccb759dd16cd6e4cbd3e536a84bbd32b5d56050740c89045fda1634fe858441eb89b3851061bdf3ab4123c30cc291b9d1cb0ab6aed78c1dd98756511a02027e3a0174d8", 0xc4}, {&(0x7f0000002200)="5396eca1713e9248a0845c48c65c9178c1745d15003ec5563827ff661e6ab9cdc18de41c0c06e0074cc40531f16a548f40f916c803aedce7e5c8458972c94c5a4987f86d7e57b54bd52015a9a14eda903ee6f237c62eab8d25d1b885dd5ee612c707bfcbbec35ac893cab6283fd58f469e4118e34f6753ec3764f2ec9e529e3c23af1e462eb4937ba0ee55a9189d47f1e840b23ffb881bf01292c23e459fb183137f8523d7df607b3a7cff8f83ff8c03acfd1f7a907bcf79a7f16481dcd02115d106b632d4e1f43eed1435d86a7745e75b4b1cd47ba2d607fcb04b62dd98f6c282bed33c3038c89352b5d82898c9782b50", 0xf1}, {&(0x7f0000002300)="41b6634427f154212abf738bcedb7585b31210afacaae27b8cc5d1434b333158700c3363aa432f4da67efcd3c69e3caa52ffe1f7ea148ec236597f76710b1290c29e5b235f21f05f351113c50df33728e50193b28e7e0066b066068831b982744a462c33baefc5c059139ff84c08460ebeb12bff9482f6b670dfd1cc0ce1f2aa693ff818974018886724719866fddba2f0f77f3708b5cecc195b012d16e2b33d74315d5793d83556419ddcb454299b979d320bef8fd561c9f6a2fab511c780268efb081e1e32fb5cbeeefb804c78b17fe4cc101063b317f0b27783", 0xdb}, {&(0x7f0000002400)="17bec082df59d506e051790987e54238c81ae0b4855d9e77cbb2ead8d44559aeea4d01737025bb326c56e674243628c61ae8df663c8829214054dc6c47bf2f5baaba8f16becf0b78207f4df89bb50e1f186701bbc966187fa380c1b2080132a0b470a8d88323e374c814d298177322b22fd69d852f15f42a2ca70d0c9e", 0x7d}], 0xa, &(0x7f0000002540)=[@iv={0x58, 0x117, 0x2, 0x42, "e70411ed90f2d88378585a1e1e5bf3b3dd8ecdb716378b1dea8b616ca91e464c8408642794e9142129ad9259f1fdffb0494645dd9c7109f2bcb4b2927dc5df50ccde"}], 0x58, 0x40}, {0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000025c0)}, {&(0x7f0000002600)="297d3277a982d7a51c2e1a9b466161c548c031c1485b3e28dcb4c2bdd1923feae8c49be8d45a3a314d359ac1655c00e637b94775559fb54250b3a6b5d3c4467353fd7f472aaff9eec0fa7026f578c4a3fca497ef61b510519b5ce8c4ded2c12d61eeaaa2bbc1ef567277d0334741ab63afdfe37a8ea31d25fd8119c5e68e7e9b8354abe440508af792dff6012af4940ad7c3c616", 0x94}], 0x2, &(0x7f0000002700)=[@assoc={0x18, 0x117, 0x4, 0x7ff}], 0x18, 0x50}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002740)="aa8d708c01c95607484c576680986d0c131bfd9b5396b1bccf0b7f9d54bba48d5076ccffe7403811e764de0a19be5200a85371452e7bf278b556206ea1a01e9e6c82c09d0c6ca566cdfba71b0582c2a5c9a5aae1e47f6de300b4f0a79ceee80437839a78c15c38223c69dcea45147a23e1542013f04754b4b7fecc1ef9a8c1a4b07bfb7ee2015bdb015dc25fa3e69b979d074cf7656fc1fd4322b811447eca8968103878d0ab91587d81f196cb754f9ac18c15f7aeeb336c512aabb34c516db0450460bc357f0ddc9d1780de52f2c448e4c7257774c04297917e55", 0xdb}, {&(0x7f0000002840)="3697dd", 0x3}, {&(0x7f0000002880)}, {&(0x7f00000028c0)="b2c592ca937e77222fc944d5488f34613de216cb59eefdcd39aa54de5819972707441282d50181ec2ef6", 0x2a}], 0x4, &(0x7f0000002940)=[@assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0xf}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x4000080}, {0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f00000029c0)="87c94d59b8b5682590121bf0f3b519fc49c9515f6640c929b88614c3d0cd421f45cc2261d0927409b4b9372057ef52e892e6f66cfdd6d93768fff60d065f2b3777068f144f5ac887c776a781244128a1a41b546ee99dcc20f5cb8c02b2a2af2b45c527def74d0a4f7f135579185d7d5719d5ca6f0f3c84", 0x77}, {&(0x7f0000002a40)="8e33d9d99aa562f603223adb55270ec5e51095fb22515db7e0ad7cc8905388680f0f3e4285ee4981d168e137d849ce13ecb429a4e4ad5c30bc35973647c1a5494eb9095b2417a2fdfa255461be818a8eee9d17a88ee8d1ec2624c2f3f36867b5d7c2ac0b6c814046c339e3c93468f54cd1b53470a1f61cb6ad03801b65c22545c706ae5735692e680507e37b6645ea57300bf4b83ac24f4a8f64bd9a3682dd059ddbf7d09ac26db49e291b02a1a7747ceef06d5e3ecf200e2329aa1ce9da894c26433473ecee3b29", 0xc8}, {&(0x7f0000002b40)="0855768b23a3845e7d2b2b1eb83fa1fbb338d3a085c9a82a77b36ecf200dcd243fbd3bc196ea2a6f34624d38b26b8eacf2f4255501d5fb42be085e", 0x3b}, {&(0x7f0000002b80)="ae70c42c2b540db0926b5d741267bf2e265fa4b7406c223f08f2ea1c3542a50c94647a94ae4c3129b3bfba3d04d14bdcad693ffa37edb5af845130f1dc13cbf2b979", 0x42}, {&(0x7f0000002c00)="062413d7211a949de84d8e53a3d553544c00dd885fa3bd8596bd209375ed9ea6b5b9238708b06c28b6c053a0d7fa4a12bae8111a9afb95196bdcf84495ff70fa6a297b5ee352a635e40c92b7cc7545fac462795fd4398e8251", 0x59}, {&(0x7f0000002c80)="46d3669070dad3d6864baff2db04dca66e2d8576a8f6691de700cb1598aa019a714745ad88c914effa031e00485ecbc28f8a60ccaf95ed672a16f5b3f46c11f85664d8c9e6bc76bc5d4374fc37207f730dee6976c1d659baf8b154a7195a133b2120fba8df8d222dea95a79a4532043f8449fb942b4b1ab7f29694ec19f7d37e80282b7eb614a3644a1a8bc0519714f531319a8a7ad933dc556fe582caf92ad3fa748f794b432ec8e2ce880ab1de3b02f6fe720e219458ecb1bcc0f793ec70c82ef8fc611a3210738482f51b", 0xcc}], 0x6, 0x0, 0x0, 0x2004c000}, {0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002e00)="b0441825a79c3abf7ea9f24a2711907bdcc11643b8e285b9086a4833de31e7198bf7d089b300910862215f6f78a86fbf3a3cce46489d7fe2f2ccef399f3ebf6fa2967bc37aac9d8d88f7e7cb45ad82b6d7096af24fcfc2472f6c4c684e66ae3df6d04b23dfa1e12064d944fe83d0ce938de6b6cf83976d8df706e1b1d54a9a76af95def2b0c7c719368074b53c84bd580bfa85f506d057a0d783e2c3dde54048d9c086b8cecf79351dc1b3a45998cf31b9fccb037fbccddcfd885be15e643835ef6d5c206404a310b7bc1e343587d6c6ef9ae57b213e7187", 0xd8}, {&(0x7f0000002f00)="a3f48cabc62229c61bd227c34a25cf27b6c212d06ce53869845a3a025da1b737c1480bcf17f0b48d583878881c0792700186359275d2e832cdd52ced6bb05bbdbe3ce18b4a6b35c73b579004a04ea55296c232d4bc6de044d0663c5f35c6e8b81c900b1e5c5ee1f18769cfa5304e1b83af8d4016bab9b45163d495469922a163c3c48a428227d273936eadb315ed655159fb05332482f095ad9d3f761aaee72bc9aa5017a2fa1d5791a35a1eb93ceae2e68d7bb9c8fc263ed55ccdaec8e44b191eb7d7f6", 0xc4}, {&(0x7f0000003000)="824f0af6cb5abed7cc418e9f74cba9a6701ca536fa8f2ad1b620b651ee330a83e2887a3c191150f9bf7b60d272269e652e337a1ffc54645fd6784871a8f7c29879729d4e28062e8472f7a83411f4c1b7551236891a59df11e91e8a4093f99863ef7d27be841de86208ced53e3c00b27a2f678c14cdf702895c692c5a3007044c3375fc9e0ebcf3ba0d9bf93fd789bc79575c934442c06045393f078b60cdb9cefa76e1d9c1e12ae1242f872c67239d86f0b54fcb9933cf05", 0xb8}], 0x3, &(0x7f0000003100)=[@iv={0xe0, 0x117, 0x2, 0xc6, "fed2daf9ff0f54c54215eb8bd554051f433d152c76f467bc7f3698308be21fbf1b527948ad2e48d83c0e57a3711a1052dec8639f2e233d10862b2382254ceb5c5f77eab981f95a36c0cb175ecc398dcd0e08aad11fcc3dfbc70b401aa83ddd6a9cf4ca50be87565f686fcf39f184e57b1ac152661fe7c9111832aa95c6fb4822bb7c58dffa423833d5d91513fc06c9b3f1488d7f43f5efff8a11484fdce87cebb5487023e2afbe381b92b642b659724df563676e39f59a81a5434367330e732c6d0e9b936b2f"}, @iv={0xc8, 0x117, 0x2, 0xb4, "20be91f1032120a1e9c755b36d25f8e9b85e0128a506fab383952984568e679088fcfc51d7f84505235354b0e437629962a36d3a564458d82bde292ed7e8a0c63f074b416b38ebae30a0b025ed7a0420ffd3286c609f70550b786dbd7a95b562d2cc5a62609f8d9f6023e0840c630ec1f42be7af8f766f33cf4fcd6ed3538c2b09dbb1c23b06a511b1dabf4ec8937dd8238fdbe80ebbb49f829c197fd3e22b6018643b20dc625f5b31a1688f34a2054694387a8a"}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18}, @iv={0x50, 0x117, 0x2, 0x38, "1180c44548fa51b4aca80a1d7eeef8cceaf20b676c749897750e4fadd65652d7ef51b4259225651559dc3fe909d1b36c94a58d7dd0d8ece1"}], 0x228, 0x40c0}], 0x5, 0x8080) 7.621022778s ago: executing program 2 (id=1227): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201004000000040d80402c00b0000000224000100030000000921008d44831d3f0c2bea52ca0000cc780122180006058103000400e0943153b6122e1808000d009b5f2d8c7b047a9134f6bf0714b6ba0ed8737c990c6cb258ee2bd18b0c9aef350626388d9ca7ece471246a621e6bff76970405c89f19f1e4e907705787d7c3bef793d329333247017fa1ea6c0cf6d72583cd8f7e5d1af89b4194bf"], 0x0) unshare(0x22020400) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe69) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @remote, 'gretap0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8000) ioctl(r1, 0x40047438, &(0x7f0000000040)) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffc, @local}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x22, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x40002, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0xffffffffffffffba) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) 6.769213854s ago: executing program 0 (id=1229): io_setup(0x7, &(0x7f0000000280)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a) io_submit(r0, 0x0, &(0x7f0000000500)) 6.427661078s ago: executing program 3 (id=1231): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x326) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000140)={0xff, 0x0, 0x3, 0x9, 0x4}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xb7}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a300000000005000100"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0', 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000000)) 5.575838606s ago: executing program 0 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323021354b9e"]) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6]) connect$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x9, @any, 0x1ff, 0x1}, 0xe) r7 = getpid() msgctl$IPC_RMID(0x0, 0x13) sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f000096d000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x810, r1, 0x33347000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f000000b580)=[{{&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000440)="5b084d1dae9bbce063d313eef1612e673236c9ee5de2c88ebc656b4934eac729144a9a2468a0be1df65d0846b361f99caf3fbd45348c1d2447cb1b8789ce1a9c5d1169ecb5d0dd164a7fcc62fae7da28d4bf6ef1e085ace6dd8046320fe72c3c95a915c6e69650bc215552fd53749dae241f", 0x72}, {&(0x7f00000004c0)="ffe356a656ac24fa1862ac4d2180c6c87e272998001bd0b64d35bf2087", 0x1d}, {&(0x7f00000021c0)="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", 0x1020}, {&(0x7f0000001500)="c7f6c4bc55711a769e7cd16a817d977a8823775189b8d7c05a25746b7ca9243ca0c3d433deb4a97317a85e6e9b5e2481bba90b6c4ae13a875f11c9b76498af4e6f28c759c8ca5d7b6bf6fdd9bf3f5d363eafbed609312ab7b8776c4297d19a61872163117c23b7aab30e2765a3c4705066c68e4d39732a528ac93b8882f0e45153d6b3f0997a0d554af8b4cf1c24be1d3faddf9d9eb3ea58b25c191ee87493e7b4dafc14aacdf66ff29e23ccd09551e30cb58a39c7455f494d73b0bd6b598dce358e8b70d02621e96a3a3737f6980389fc85f997df1c582f67a8339f90c90c1fd2e35c9818f37416ddec05db5450d9fd", 0xf0}, {&(0x7f0000001600)="1d4f9d181928c9442bce696565dec0aceb0ee2f4987a2da2a53951f4419fb224e0d5e97be2feb1b46987385cebcac41048d04902268198f648fdf5bd1e261d13d4e1e95e6035b436b4b35481bd3e38d0b8c7472cc167dac00191230ab40f30f3e41b7b653175a27327f0ee48f8f1d69522ae25", 0x73}, {&(0x7f0000001680)="4396a7f523823d15e231526ce4f7f8c3b754275c8755dfeaf7aceaf2d74fc814f3345aecc0f4bab811de758090a1749b267d61f22f9d5524cbabf367151656d7892a1304c9a0e4a10dca1114626415ff97a665d146ffb5f03d69c4d78e7d554d4afc55dd0616aa66700781504656d40c8ccd292b75d43e05092c95bbaa9851a4f597077675d62f2c452d8f", 0x8b}, {&(0x7f0000001740)="bb40ca0459a415514183285a5330bc8120aa451b3c77f4a8a2d0204b00903a49b747ffb2cda1108be397fcd1da0d12f086d64a1e848152223c04f417ecf870ac128d9f1292985c1ba3b7178a9581cd75bb13b40fcb8b617b1cf79e76bb04dc93eafd09a9c8322714d2aad3ec485535f204ae470cf5a58769d01c68271edb85e5779e00ae12511a602300ea16100716570e", 0x91}, {&(0x7f0000000500)="f08681081089f663f7cc2c5faedadeab98f39b0e64e2806ba73fde0b0c6b99003ca05066db04a8ca38c524d52d25e4d8b4f28d9da8b48d4294b5888fb08f98a38de25c59cce8c894309031ecdd16b2ce6f7a221dad72534c4bd1c9123fc7f7b1e182da97f793cc4f6063dcd019a8440fcfe770f02da02dbbdd1e69f9c70bc7beafe1561a8b728ec2379445a948614922fec9636e55e216bbb399fd180ab2c8c130b70b5ae09496fc5f3e4c8897eda30f", 0xb0}], 0x8, &(0x7f00000018c0)}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001980)="fc49294296667c7f8aa33801e1081e88d27e45c25869811961a1fc5d9ca1ccc05ce94ee99213", 0x26}, {&(0x7f00000019c0)="cb49a5024baebe14807b0a5c8b09295ad75c80c084596397d5eff6f85ef60d6222988f06ce945a02869505c2dd305c901c27b224b4f17e36a966a59a87689194b1f76541582f09eaae4d8e72f51f608c2fdf6c8789ff937a66e272598cdb2a34d93399e69d8557e0de35f1c65adca48a859ef8740e18a0afe21a2769b484cfb4c231d117f0b662b0942e017333942cb1f768ddac660f9448ac070e38864014bef8fa65768dc3d8", 0xa7}, {&(0x7f0000001a80)="083e474859af2b3ef8eec7899bdf3dbcfe4f1d94d5648623a50f81aedfc1f02be84857b29a0550da420a581163ebc1e567db400a37578b2b2cc3d0cf794e58d07e21815d28", 0x45}], 0x3, &(0x7f0000001b40)=[@rights={{0x20, 0x1, 0x1, [r2, r1, r5, r0]}}], 0x20, 0x4040040}}, {{&(0x7f0000001b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001c00)="00c8681beeabe99b60d239b016e5531990afe08dabb0284d38dee0", 0x1b}, {&(0x7f0000001c40)="3040bfa8611e3ae3a09194264f5b90b7e64ec711602324bd9e3a4def16817128c85403ec1e7c34b4dcb5367d6495b4ba91e3a09358d2dd93977a28a51abfe7b0bb0dca6d51f3a60a01b056aac1d52258ee3bd4e632e6503e7728ac19a96814f039062226e10823b1f09dcaaa40c66f218941d3a3623ac02436e6be15b307d2e3ebd032641165", 0x86}, {&(0x7f0000001d00)="f1811dbabc15aabec8bbd4667894b965c0d9b8e0d6bfb9a859c0753cdb458bdc2a21485fa1833b64f2f569d5d9d98eaa78c12036a9da37a4d4a6ebd75a4d9e5f91e607cebf3dab3dd0c786c29f7fc7439a814cffa0ae2dc91e9f9bb6b77444f403b61c703946d8bae6174af2abb255286825030a3a921e03dcec0ef4a3e5143141afdada3efe1e53f19da8f64bb14ecf86385f70f55ddb65a562488c6b80afc7c795244b9742f6812cebd8dc157592aae9175816f49c834eebe527295d95bac4f30a44cccce39ba13a4373d3f68d2d72924407a126167b87f8258334c058465ed8b5dcf816f09eefcc8088095362af8d1ad1a4dddaad0da6e122", 0xfa}, {&(0x7f0000001e00)="011b01da7044b3ac7be0fb8b80157e39ce8555c9a5434f8cd4056020784f0268ebc74e9271d121be8226c93ca26c7d4b14cccbf0e91942c41710ff3cc9ceafdd1721d70427ec5e2f97a1c040b3e3a8d5a96b32", 0x53}, {&(0x7f0000001e80)="2b73cfbf591c92b8b1abe8d77adda0d12741ab073f2d0961801e92b44f2b5a41479dfd16a73334701b70cc33b251d2a27e9305881a57bfab4d2e20f68f91d0900b791036e69d13ecc2e289682d675f4740cff038b03e767b92a9597e489c03045e0c2d021182f554f4cbc15e2d", 0x6d}], 0x5, &(0x7f0000002180)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c}}], 0x40, 0x805}}, {{&(0x7f000000a200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000b380)=[{&(0x7f000000a280)="60e5c16f19c6721e31749120785932913d96d9920dc0ef0780a9661f46aedca17b71a2142ce16c39c5a76ee17603f99e8a408b4c2b435a742e22b3f930764de4228613570e4922777fa51311b0d89c9dafc41156182bb67ad2ccb8efbd0a4c09c9049a8ca37d4806ea7ba8ac63962e50409ec0e9a73098976fbcb3ef53c73aae2e78252357e3cabce6abe20a6fef728a9001287bd94f3965e9f66808057ffbc406e33dcbc17a91b0c868f2809044d41107d4582f5cd1792377b8bf5bf0edeabeffbe4bc06c6844dac4e17fb74ec33a3c25a49cb65f1a520028d4ccb9c3f1c227895f3d", 0xe3}, {&(0x7f000000a380)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4000080}}, {{0x0, 0x0, &(0x7f000000b500)=[{&(0x7f000000b3c0)="b2479f950280b96bd8042a782700efdfc0a4c3183200328e3605cd2d8120115be70b192b648fb224d5f120b4e5a1e96a75960128427ab0", 0x37}, {&(0x7f0000001f80)="41efeb4208bffc101e3dc041fb49e61421a683c520f1fe97057a12e42db83bf11f4426d7bacf21e7b78474a4ee55e5814bc1dba9cdf2e915f2a2b5736b48ccd07fe0387c11d237aa8bd6082b00004c1eb37f969b6ee0a6ea5fb53f1d71cf84078c858da1c20065d60000730b94fa107afec75b889f4cd0fabc8e60b8d48d8340bf4d4b18c9056a66250000cedd3be7895a901b7db3db011f71f250af2d52c349bb95e7a6d8dac2bf510633284b7ef01c058ae5a8be14ed", 0xb7}, {&(0x7f000000b440)="3006701facefce10e0e198ba01d51c09bae5083a0730faeeee3b32ccb7e4882817fa5a6b5fc347f9cffc451c48e17c406a624a74a99101edded75582d5d59353d1bc12803e7c244ca50455ba3c322f47908a73321caa5d64ccfa4dbfe885ce7b3fa29305a9348cd4bbdd0962b17d4aa550774d5652de2e3acecb3f66a09b8da60492778b6ded9c5b44295a54b0d2c3e5d16e7ff8c94f0d05bdefba7ef81c2a20968bfcc48e065148d01d14e103dd9f88ee4a", 0xb2}], 0x3, &(0x7f000000b540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x20048004}}], 0x5, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "6d6f96ec9dfd3a12", "7aae513dc18f84022df11564e804d4fc", "8c8100", 'a\x00'}, 0x28) 4.771862996s ago: executing program 4 (id=1236): syz_io_uring_setup(0x585c, &(0x7f0000000240)={0x0, 0x1e84, 0x14021, 0x0, 0x2e7}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ee657720656372797074667320757365723a73797a20"], 0x2b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r3 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r3, r3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) timerfd_gettime(0xffffffffffffffff, 0x0) r5 = socket(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018808000100", @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) 4.505461377s ago: executing program 0 (id=1237): openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000080)=[@nested_amd_vmsave={0x183, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x0, 0x3}}, @out_dx={0x6a, 0x28, {0x8631, 0x3, 0x100}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @cpuid={0x64, 0x18, {0x3, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2021, 0x1, 0x36a, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x74, 0x1, 0x9}}, @in_dx={0x69, 0x20, {0xec1a, 0x4}}, @wr_crn={0x67, 0x20, {0x2, 0x8}}, @nested_load_code={0x12e, 0x67, {0x0, "c46191e26c330166410f30f0834e0a7f0f20c035000004000f22c0f30f1bbd8bef0000660f388177c7b9ef0900000f32660fe03048b84a000000000000000f23d00f21f835000000010f23f8470f06"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2401, 0x1, 0x3}}, @wr_crn={0x67, 0x20, {0x2, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x49, 0x6, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0x9459}}, @nested_load_code={0x12e, 0x73, {0x2, "b9a10b0000b8fa430000ba000000000f30f044812d00300000df8500000f20c035000000800f22c066b82d000f00d0c44275455f0065410f35660f383f8007c4000066ba6100ec66bad004ed36673e6766410f38823c7500380000"}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x5a, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x5, 0xab}}, @out_dx={0x6a, 0x28, {0x1b07, 0x0, 0x8000000000000000}}, @nested_amd_vmload={0x182, 0x18, 0x2}], 0x3c2}) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000004c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000014c0)=0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000001500)={0x3, 0x0, [{0xb4b, 0x0, 0x5603}, {0xb50, 0x0, 0x800}, {0xa66, 0x0, 0xdf}]}) (async) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000001500)={0x3, 0x0, [{0xb4b, 0x0, 0x5603}, {0xb50, 0x0, 0x800}, {0xa66, 0x0, 0xdf}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0xd, &(0x7f0000001540)=0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001580), 0x105000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000015c0)=0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000001700)={'sit0\x00', &(0x7f0000001640)={@dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x0, 0x80, 0x0, [{@dev}, {@empty}, {@initdev}, {@multicast2}, {}, {@broadcast}, {@initdev}, {@loopback}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000001700)={'sit0\x00', &(0x7f0000001640)={@dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x0, 0x80, 0x0, [{@dev}, {@empty}, {@initdev}, {@multicast2}, {}, {@broadcast}, {@initdev}, {@loopback}]}}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000001740)=@arm64={0x4, 0xd, 0xc1, '\x00', 0x4}) r4 = syz_clone(0x2300b9704b06db1b, &(0x7f0000001780)="c0fed07031a97328cd1fc78ee2fbee3f97b95082471970e5679ea8160f6f52c38f48b8d67839ddaf39a7302bcf7d1d2e3826783ed9eb1d1ed4b509a0e99f1611ea1c168ff7aa75fdc80ad9c7eefb960c394c8cb0de06340647365a263bbbd17b97a219b2067ff4b42f7dca1a76d1d52b481b688b26d125d481950fbe5a3cbeec3b9da901c5314c41c2e6c82cbecdfd0a6b7f7d17f03399d36b7dfb6e89861e24296c9857bdb499f0727b3f18e8edb7b8b79bb9ef8cd49ff73f25808bbcae8749fab912ab3916d53c5f06835d", 0xcc, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)="ab80e628872ec8d3246c3faf29804431b62698e26c6351821c6b24856dfa2142a49c56d8907fed121b5e6ee2c6a2ad9fcc37fc2037a2c43f54354eff0e91f14a7700eb496e0f7709d5cda87b74d341f91ca4c51a4701c910536b85aef4f12c2e939811b56fcc93b1f0fc1ef178630116f7876c9f18b723d69269f0ae3bca0e47e81e88") write$cgroup_pid(r3, &(0x7f00000019c0)=r4, 0x12) (async) write$cgroup_pid(r3, &(0x7f00000019c0)=r4, 0x12) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000001a40)={'sit0\x00', &(0x7f0000001a00)={@initdev={0xac, 0x1e, 0x9, 0x0}, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) sendmsg$SOCK_DESTROY(r3, &(0x7f0000001d40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d00)={&(0x7f0000001ac0)={0x230, 0x15, 0x400, 0x70bd26, 0x25dfdbfe, {0x2b, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "4f6bb36a03bb0d391506e4c754a3e668c14e1c379316ad682ff84e757ad0e4f1de13ff61ded85926f1554386d5cb40fcd28c7ef673771ff488bd9687a2b1dcff2ecae57cc23fa310b459d899dc92f3ce5101f3c8062fdc2f236dcb76e3e4449cfb4e612cc66c46aac8385a4c0117bf19724481cbc9266e06338177e3ba50a80794939d0c99f2e1f2864b169ce46f9c4e29d0fd3fe7ae49423b5893b2a3ba088bac79e933c25c5b75e2181cb74f0f2cee1f5d3a66582841ad9837ab"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "637beaa6f4c77e310db9adb08c82aff93fda07becd5c2ef4e309abfdb8ff0864db09168717a6870d0224b6de855233fd38945b925addc5774b295970822c0e1f73bea3d76d220284a3a8406dd69f4a480049ba9f0a024394"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "898274549b2b47462b32496f204aa619ff596939d087b25aef35b0b08045c207dea6d352b042b53905bdb57b6485ac1d5c7c46ba181695aa210c"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "5f66a8bea862f7a2586e3b55b92d9b9ce055eada36ccbeac6c2a53f408d34a11792b1d7d98a00686758990b1fb8f3a37d08fc35c71300632901b069047520a087fbb8d22805b52d3ceb03679d6563f10e01c2b66fc4f21ca3e3b85c6bc84870c4c25c1227aba8d7741bc2929f5ef5efff38c68db84bf749d42f3044eb3c955519cf6fb08ea5a2a520b22e510373f95cab578316fba07843597ff70033aae65f2f14cb55c6bedfb4a8b01415971428f0b205861a58b9d36d7a1d935"}]}, 0x230}}, 0x0) getsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000001d80), &(0x7f0000001dc0)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r3, 0x5, 0x4, 0x2}, 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r3, 0x5, 0x4, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002140)={'syztnl2\x00', &(0x7f00000020c0)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0x9, 0xfffffffb, {{0x17, 0x4, 0x2, 0x3f, 0x5c, 0x66, 0x0, 0x8, 0x4, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x53, 0x3, 0x5, [{@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xbf, 0x0, 0x6, [0x2]}, @noop, @generic={0x89, 0xb, "5bf52209cc53566c95"}, @lsrr={0x83, 0x17, 0xa8, [@broadcast, @multicast2, @multicast1, @rand_addr=0x64010100, @remote]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002140)={'syztnl2\x00', &(0x7f00000020c0)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0x9, 0xfffffffb, {{0x17, 0x4, 0x2, 0x3f, 0x5c, 0x66, 0x0, 0x8, 0x4, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x53, 0x3, 0x5, [{@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xbf, 0x0, 0x6, [0x2]}, @noop, @generic={0x89, 0xb, "5bf52209cc53566c95"}, @lsrr={0x83, 0x17, 0xa8, [@broadcast, @multicast2, @multicast1, @rand_addr=0x64010100, @remote]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f0000002180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0xa, [@float={0xa, 0x0, 0x0, 0x10, 0x2}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @int={0x5c2a, 0x0, 0x0, 0x1, 0x0, 0x1b, 0x0, 0x34, 0x4}, @float={0xa, 0x0, 0x0, 0x10, 0x2}, @union={0x2, 0x5, 0x0, 0x5, 0x0, 0x3000, [{0xb, 0x2}, {0x9, 0x4, 0x4f66}, {0xe, 0x3, 0x80}, {0xb, 0x5, 0x7}, {0xe, 0x4, 0x400}]}, @float={0x9, 0x0, 0x0, 0x10, 0x14}, @const={0x10, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x2e, 0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000002240)=""/15, 0xb6, 0xf, 0x1, 0xffff4f64, 0x10000, @value=r3}, 0x28) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f0000002180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0xa, [@float={0xa, 0x0, 0x0, 0x10, 0x2}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @int={0x5c2a, 0x0, 0x0, 0x1, 0x0, 0x1b, 0x0, 0x34, 0x4}, @float={0xa, 0x0, 0x0, 0x10, 0x2}, @union={0x2, 0x5, 0x0, 0x5, 0x0, 0x3000, [{0xb, 0x2}, {0x9, 0x4, 0x4f66}, {0xe, 0x3, 0x80}, {0xb, 0x5, 0x7}, {0xe, 0x4, 0x400}]}, @float={0x9, 0x0, 0x0, 0x10, 0x14}, @const={0x10, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x2e, 0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000002240)=""/15, 0xb6, 0xf, 0x1, 0xffff4f64, 0x10000, @value=r3}, 0x28) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000022c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x0, 0x0, 0x2}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002340)={0xffffffffffffffff, 0x45d5, 0x10}, 0xc) memfd_secret(0x80000) (async) r10 = memfd_secret(0x80000) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x25, &(0x7f0000001e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, [@generic={0x0, 0x4, 0x6, 0x10, 0xe}, @map_val={0x18, 0x2, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x34}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000001fc0)='GPL\x00', 0x8, 0x97, &(0x7f0000002000)=""/151, 0x41100, 0x21, '\x00', r6, @fallback=0x9, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002400)=[r8, r3, r9, r3, r10, r11], 0x0, 0x10, 0x5}, 0x94) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000002500), &(0x7f0000002540)=0x30) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ptrace$peekuser(0x3, r4, 0xfff) (async) ptrace$peekuser(0x3, r4, 0xfff) 4.130396801s ago: executing program 4 (id=1238): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x326) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000140)={0xff, 0x0, 0x3, 0x9, 0x4}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xb7}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0', 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000000)) 3.67277654s ago: executing program 2 (id=1239): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r0, 0x0, 0x0, 0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x100000d, 0xfffffffffffffff6}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r3 = gettid() tkill(r3, 0x11) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="00feffff2d2d1b7f1742c7424e6959fbeb8218000000000000e57a6a95bc16965182f18af02f116b2130507db5c6b8f7894f9996e057ee000100005335e58623854f3aeb4128da96d4a46afe1a26da52fcb80ba002d4fa16f8ef6d10c4d2c53cfcb5e41a6e5482c1119f94d7846cd47632c557644a6ddbe362f7327cdd114ca911bcf7f816232f5821f9fd418875b078d77cbd8b6e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000001cb500000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYBLOB="bcfdc069eee0c40088841207cd35be478253e0f11ac1e2176fa1c91944611f5e2d0761810d6702df4b8abef311ebb4dd3c19cd03f92d54bb8750f61944704f328103ba64a9909a00c095988115178fcb0707ef0791adcecd555d0dc0ca6fe1480d8dbd897c6a34c94ffc191ccc9f9cdfa7793728e52159a37e5ba23a433acc5e3bdabf939c851b5741d6ebb04035dc32992311c5f14b2d15d862119585a10bea9999fcb49437a577021f72ea9dd5c77816283c19cbf2d694419ee44b891259502be9430f08d7e148f3a7f80ab5ee811838efb885f8dce45233f3943c0da5fdf4bb2f09e5dc8d3783e32fb396b1c1c171"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0xfffffffffffffea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.604949692s ago: executing program 4 (id=1241): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff81000808030000000400000000000000000000e70a00000000000000010100000000000006"], 0x78) close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x194, r1, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xce, 0xbe, "c828e4842f405e929c2eb15cab46d7d433506873588ce23cae28b324de196fe1d2538454a95bbb28b4b6e06a9b3f5e047dca742d28b81c093472822831250e4166255234f80593236eb089110c8dd8b6d55b451800a3755278d8f8c8192466cd295416271acf689d3899c0972010c6eaf7251c49dc4dca87ec5c06744f7e7088d81264982341a2f36810f1e336fd120f496f054de973dbb4e29ed2f64cfc1a69e4a0b8a4dd9e2408d0b4d30702169ef8a380f80325e4f8e0fd61871ed56c4e625d21259246ae737f6e37"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x94}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}, @NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc0}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xe}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2d4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x414}]}, 0x194}}, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3.437779135s ago: executing program 1 (id=1242): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0xe, {0x0, 0x0, 0x0, 0x9, 0xc, 0x0, 0xa, 0xb, 0x0, "855b9b87f5043a9cb7a4edb9b727b1cacf58db2db32a715731be3201272b06a8cfc2bd397d30e5bd5cebd76b2959aac656684bd67d60c7669105d03513540ee2", "412ff7241730fa86ac0a2dfa6ebc31cc738ef9e43b46c54f7bb337396f55f376cacdde19674c2379eb08fb3a9160881dbd464a90d6bebe5fc9e21805d823a864", "4efe8201beb86db84b0137782c613838eedafcc4ad8ee8f04ae52bc336972bb7", [0x3, 0xfff]}}) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) socket(0x200000000000011, 0x2, 0xd) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x42) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) write(r4, &(0x7f0000000500)='1', 0x1) 3.391084069s ago: executing program 3 (id=1243): io_setup(0x7, &(0x7f0000000280)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a) io_submit(r0, 0x0, &(0x7f0000000500)) 3.064081053s ago: executing program 4 (id=1244): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r0, 0x0, 0x0, 0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x100000d, 0xfffffffffffffff6}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, 0x0) r2 = gettid() tkill(r2, 0x11) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="00feffff2d2d1b7f1742c7424e6959fbeb8218000000000000e57a6a95bc16965182f18af02f116b2130507db5c6b8f7894f9996e057ee000100005335e58623854f3aeb4128da96d4a46afe1a26da52fcb80ba002d4fa16f8ef6d10c4d2c53cfcb5e41a6e5482c1119f94d7846cd47632c557644a6ddbe362f7327cdd114ca911bcf7f816232f5821f9fd418875b078d77cbd8b6e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000001cb500000000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYBLOB="bcfdc069eee0c40088841207cd35be478253e0f11ac1e2176fa1c91944611f5e2d0761810d6702df4b8abef311ebb4dd3c19cd03f92d54bb8750f61944704f328103ba64a9909a00c095988115178fcb0707ef0791adcecd555d0dc0ca6fe1480d8dbd897c6a34c94ffc191ccc9f9cdfa7793728e52159a37e5ba23a433acc5e3bdabf939c851b5741d6ebb04035dc32992311c5f14b2d15d862119585a10bea9999fcb49437a577021f72ea9dd5c77816283c19cbf2d694419ee44b891259502be9430f08d7e148f3a7f80ab5ee811838efb885f8dce45233f3943c0da5fdf4bb2f09e5dc8d3783e32fb396b1c1c171"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0xfffffffffffffea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.991924626s ago: executing program 1 (id=1245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}]) r3 = getpid() prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x1) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r5, 0x0, 0x0, 0x0) accept4(r2, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f00000005c0)=0x80, 0x140c00) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x268, 0x311, 0x0, 0x268, 0x3b8, 0x460, 0x460, 0x3b8, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x10, 0x80000000, 0x0, 0x5, 0xd, 0x0, 0xf3bc6ed2e292ecc3}, {0x7fff}}}, @common=@hbh={{0x48}, {0xffff0000, 0x7, 0x1, [0xf45, 0x58, 0x1, 0x9, 0x100, 0x200, 0x4, 0xb, 0x3, 0x0, 0x2, 0xb, 0x0, 0x1ff, 0x800, 0xc], 0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3c, 0x39, "595f0bf991173ec8be5e31fb42965bd3fa69db5fe6a516fdcb4937f74026"}}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 2.808088607s ago: executing program 3 (id=1246): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x4000000000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10100, 'syz0\x00', 0x200}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRES32=r2, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000011000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) setns(0xc9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_clone3(&(0x7f0000000680)={0x100000400, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000400), {0x13}, &(0x7f0000000480)=""/1, 0x1, &(0x7f0000000580)=""/181, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r7}}, 0x58) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000700)={0x400, 0x5a48, {}, {0xee00}, 0x3, 0xd}) sendmsg$nl_generic(r1, &(0x7f0000000a40)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000040) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0405627, &(0x7f0000000280)={0x3, 0x980900, 0x2}) 1.888741466s ago: executing program 1 (id=1247): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 1.380304867s ago: executing program 1 (id=1248): syz_io_uring_setup(0x585c, &(0x7f0000000240)={0x0, 0x1e84, 0x14021, 0x0, 0x2e7}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ee657720656372797074667320757365723a73797a20"], 0x2b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r3 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r3, r3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) timerfd_gettime(0xffffffffffffffff, 0x0) r5 = socket(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018808000100", @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) 969.49555ms ago: executing program 0 (id=1249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) file_setattr(r1, &(0x7f00000002c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', &(0x7f0000000300)={0x10, 0x4, 0x7fffffff, 0xe502, 0x7fffffff}, 0x18, 0x400) close(r1) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x8, 0x70bd27, 0x25dfdbfe, {0x1, 0x0, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x844) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 964.68114ms ago: executing program 3 (id=1250): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x101080) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') setns(0xc9, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000527000/0x2000)=nil, 0x2000, 0x3) 534.720901ms ago: executing program 4 (id=1251): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x326) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000140)={0xff, 0x0, 0x3, 0x9, 0x4}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xb7}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0', 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000000)) 184.629217ms ago: executing program 1 (id=1252): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 37.154684ms ago: executing program 1 (id=1253): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000a3a000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b4a, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1007, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.460576ms ago: executing program 4 (id=1254): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffffffffffff, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x36a, 0x1, 0xa6}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x148, r1, 0xa00, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xf}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc69}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xdc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x42}, 0x11) 0s ago: executing program 2 (id=1255): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0xae, 0x0, 0x1, 0x80000003}, 0x28) kernel console output (not intermixed with test programs): ump_stack_lvl+0x100/0x190 [ 273.374650][ T9404] should_fail_ex.cold+0x5/0xa [ 273.374672][ T9404] _copy_to_user+0x32/0xd0 [ 273.374698][ T9404] simple_read_from_buffer+0xcb/0x170 [ 273.374719][ T9404] proc_fail_nth_read+0x1af/0x230 [ 273.374740][ T9404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.374759][ T9404] ? rw_verify_area+0xce/0x6d0 [ 273.374782][ T9404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.374800][ T9404] vfs_read+0x1e4/0xb40 [ 273.374815][ T9404] ? lock_acquire+0x1d1/0x380 [ 273.374830][ T9404] ? __fget_files+0x34/0x3d0 [ 273.374848][ T9404] ? __pfx_vfs_read+0x10/0x10 [ 273.374861][ T9404] ? find_held_lock+0x2b/0x80 [ 273.374881][ T9404] ? __fget_files+0x215/0x3d0 [ 273.374903][ T9404] ? __fget_files+0x21f/0x3d0 [ 273.374927][ T9404] ksys_read+0x12a/0x250 [ 273.374941][ T9404] ? __pfx_ksys_read+0x10/0x10 [ 273.374962][ T9404] do_syscall_64+0x123/0x790 [ 273.374984][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.375000][ T9404] RIP: 0033:0x7f48e395e98e [ 273.375013][ T9404] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.375027][ T9404] RSP: 002b:00007f48e48c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.375043][ T9404] RAX: ffffffffffffffda RBX: 00007f48e48c46c0 RCX: 00007f48e395e98e [ 273.375054][ T9404] RDX: 000000000000000f RSI: 00007f48e48c40a0 RDI: 0000000000000003 [ 273.375063][ T9404] RBP: 00007f48e48c4090 R08: 0000000000000000 R09: 0000000000000000 [ 273.375072][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.375082][ T9404] R13: 00007f48e3c26038 R14: 00007f48e3c25fa0 R15: 00007ffc7e5633d8 [ 273.375103][ T9404] [ 273.855771][ T9410] trusted_key: encrypted_key: keyword 'îew' not recognized [ 274.880019][ T9419] FAULT_INJECTION: forcing a failure. [ 274.880019][ T9419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.880053][ T9419] CPU: 1 UID: 0 PID: 9419 Comm: syz.2.1074 Not tainted syzkaller #0 PREEMPT(full) [ 274.880072][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 274.880083][ T9419] Call Trace: [ 274.880090][ T9419] [ 274.880098][ T9419] dump_stack_lvl+0x100/0x190 [ 274.880134][ T9419] should_fail_ex.cold+0x5/0xa [ 274.880160][ T9419] _copy_from_user+0x2e/0xd0 [ 274.880183][ T9419] kstrtouint_from_user+0xd6/0x1d0 [ 274.880197][ T9419] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 274.880215][ T9419] ? lock_acquire+0x1d1/0x380 [ 274.880231][ T9419] proc_fail_nth_write+0x83/0x220 [ 274.880247][ T9419] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 274.880265][ T9419] vfs_write+0x2aa/0x1050 [ 274.880278][ T9419] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 274.880292][ T9419] ? lock_acquire+0x1d1/0x380 [ 274.880304][ T9419] ? __fget_files+0x34/0x3d0 [ 274.880318][ T9419] ? __pfx_vfs_write+0x10/0x10 [ 274.880328][ T9419] ? find_held_lock+0x2b/0x80 [ 274.880345][ T9419] ? __fget_files+0x215/0x3d0 [ 274.880362][ T9419] ? __fget_files+0x21f/0x3d0 [ 274.880380][ T9419] ksys_write+0x12a/0x250 [ 274.880392][ T9419] ? __pfx_ksys_write+0x10/0x10 [ 274.880408][ T9419] do_syscall_64+0x123/0x790 [ 274.880425][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.880438][ T9419] RIP: 0033:0x7f48e395e98e [ 274.880449][ T9419] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 274.880461][ T9419] RSP: 002b:00007f48e48c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.880474][ T9419] RAX: ffffffffffffffda RBX: 00007f48e48c46c0 RCX: 00007f48e395e98e [ 274.880482][ T9419] RDX: 0000000000000001 RSI: 00007f48e48c40a0 RDI: 0000000000000004 [ 274.880489][ T9419] RBP: 00007f48e48c4090 R08: 0000000000000000 R09: 0000000000000000 [ 274.880497][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.880504][ T9419] R13: 00007f48e3c26038 R14: 00007f48e3c25fa0 R15: 00007ffc7e5633d8 [ 274.880520][ T9419] [ 274.921351][ T9420] ªªªªªª: renamed from vlan0 (while UP) [ 275.054689][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1075'. [ 275.135512][ T9420] tmpfs: Unknown parameter '00000000000000000004' [ 275.180594][ T30] audit: type=1400 audit(1788676109.413:750): avc: denied { mount } for pid=9421 comm="syz.0.1073" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 275.229048][ T9422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 275.244375][ T9427] netlink: 'syz.2.1076': attribute type 13 has an invalid length. [ 275.244415][ T9427] netlink: 'syz.2.1076': attribute type 17 has an invalid length. [ 275.252542][ T9427] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 275.339981][ T9431] netlink: NAT attribute has 8 unknown bytes [ 275.340032][ T9431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.343673][ T9432] fuse: Bad value for 'fd' [ 275.365188][ T30] audit: type=1400 audit(1788676109.603:751): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 275.509474][ T9434] netlink: 'syz.1.1080': attribute type 10 has an invalid length. [ 275.509684][ T9434] bridge0: port 3(syz_tun) entered disabled state [ 275.510213][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.510373][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.531415][ T9434] bridge0: port 3(syz_tun) entered blocking state [ 275.531501][ T9434] bridge0: port 3(syz_tun) entered listening state [ 275.533574][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.533668][ T9434] bridge0: port 2(bridge_slave_1) entered listening state [ 275.533837][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.533921][ T9434] bridge0: port 1(bridge_slave_0) entered listening state [ 275.601832][ T9441] xt_hashlimit: size too large, truncated to 1048576 [ 275.799027][ T9434] .`: (slave bridge0): Enslaving as an active interface with an up link [ 276.087309][ T30] audit: type=1400 audit(1788676110.323:752): avc: denied { create } for pid=9444 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 276.093479][ T9449] trusted_key: encrypted_key: keyword 'îew' not recognized [ 276.234593][ T30] audit: type=1400 audit(1788676110.463:753): avc: denied { execute } for pid=9448 comm="syz.1.1084" path=2F6D656D66643A14A3BB07202864656C6574656429 dev="hugetlbfs" ino=22834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 276.241934][ T9457] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1087'. [ 276.418471][ T9462] xt_hashlimit: size too large, truncated to 1048576 [ 276.873923][ T9464] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 276.944464][ T9468] netlink: 'syz.0.1089': attribute type 10 has an invalid length. [ 276.962866][ T9468] .`: (slave bridge0): Enslaving as an active interface with an up link [ 276.996356][ T9472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.035260][ T9470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1091'. [ 277.070025][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'. [ 277.245921][ T9486] FAULT_INJECTION: forcing a failure. [ 277.245921][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.245951][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.4.1095 Not tainted syzkaller #0 PREEMPT(full) [ 277.245964][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 277.245971][ T9486] Call Trace: [ 277.245975][ T9486] [ 277.245980][ T9486] dump_stack_lvl+0x100/0x190 [ 277.245999][ T9486] should_fail_ex.cold+0x5/0xa [ 277.246016][ T9486] _copy_from_user+0x2e/0xd0 [ 277.246033][ T9486] memdup_user+0x6b/0xe0 [ 277.246050][ T9486] strndup_user+0x78/0xe0 [ 277.246066][ T9486] __x64_sys_mount+0x17f/0x310 [ 277.246083][ T9486] ? __pfx___x64_sys_mount+0x10/0x10 [ 277.246107][ T9486] do_syscall_64+0x123/0x790 [ 277.246131][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.246148][ T9486] RIP: 0033:0x7fc7a599e159 [ 277.246163][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.246178][ T9486] RSP: 002b:00007fc7a67d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 277.246191][ T9486] RAX: ffffffffffffffda RBX: 00007fc7a5c25fa0 RCX: 00007fc7a599e159 [ 277.246198][ T9486] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000800 [ 277.246205][ T9486] RBP: 00007fc7a67d1090 R08: 0000200000000500 R09: 0000000000000000 [ 277.246212][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.246218][ T9486] R13: 00007fc7a5c26038 R14: 00007fc7a5c25fa0 R15: 00007fff2ea55448 [ 277.246232][ T9486] [ 277.549116][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'. [ 277.549493][ T9493] xt_cgroup: path and classid specified [ 277.551250][ T9492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1098'. [ 277.555431][ T9492] netlink: 'syz.4.1098': attribute type 10 has an invalid length. [ 277.555728][ T9492] bridge0: port 3(syz_tun) entered disabled state [ 277.555912][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.556018][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.806901][ T9501] xt_hashlimit: size too large, truncated to 1048576 [ 278.076623][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.276893][ T9503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.280959][ T9503] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1101'. [ 278.345979][ T9507] netlink: 'syz.0.1103': attribute type 13 has an invalid length. [ 278.356089][ T9507] netlink: 'syz.0.1103': attribute type 17 has an invalid length. [ 278.359427][ T9507] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 278.399829][ T9509] FAULT_INJECTION: forcing a failure. [ 278.399829][ T9509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.399876][ T9509] CPU: 1 UID: 0 PID: 9509 Comm: syz.4.1104 Not tainted syzkaller #0 PREEMPT(full) [ 278.399896][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 278.399905][ T9509] Call Trace: [ 278.399909][ T9509] [ 278.399915][ T9509] dump_stack_lvl+0x100/0x190 [ 278.399942][ T9509] should_fail_ex.cold+0x5/0xa [ 278.399965][ T9509] _copy_from_iter+0x1f4/0x1690 [ 278.399992][ T9509] ? __asan_memset+0x23/0x50 [ 278.400019][ T9509] ? __pfx__copy_from_iter+0x10/0x10 [ 278.400041][ T9509] ? __pfx___alloc_skb+0x10/0x10 [ 278.400074][ T9509] netlink_sendmsg+0x808/0xda0 [ 278.400107][ T9509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.400132][ T9509] ? selinux_socket_sendmsg+0x198/0x2f0 [ 278.400159][ T9509] ____sys_sendmsg+0xa4d/0xbe0 [ 278.400178][ T9509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.400202][ T9509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.400226][ T9509] ? lock_acquire+0x1d1/0x380 [ 278.400242][ T9509] ? get_pid_task+0x2a/0x250 [ 278.400264][ T9509] ___sys_sendmsg+0x190/0x1e0 [ 278.400286][ T9509] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.400306][ T9509] ? get_pid_task+0x106/0x250 [ 278.400334][ T9509] ? find_held_lock+0x2b/0x80 [ 278.400367][ T9509] __sys_sendmsg+0x160/0x210 [ 278.400383][ T9509] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.400410][ T9509] do_syscall_64+0x123/0x790 [ 278.400433][ T9509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.400449][ T9509] RIP: 0033:0x7fc7a599e159 [ 278.400462][ T9509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.400476][ T9509] RSP: 002b:00007fc7a67d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.400492][ T9509] RAX: ffffffffffffffda RBX: 00007fc7a5c25fa0 RCX: 00007fc7a599e159 [ 278.400503][ T9509] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 278.400512][ T9509] RBP: 00007fc7a67d1090 R08: 0000000000000000 R09: 0000000000000000 [ 278.400522][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.400532][ T9509] R13: 00007fc7a5c26038 R14: 00007fc7a5c25fa0 R15: 00007fff2ea55448 [ 278.400553][ T9509] [ 278.400849][ T9509] netlink: 'syz.4.1104': attribute type 10 has an invalid length. [ 278.407698][ T9507] netlink: NAT attribute has 8 unknown bytes [ 278.407721][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.092273][ T9514] xt_hashlimit: size too large, truncated to 1048576 [ 279.116930][ T9516] xt_hashlimit: size too large, truncated to 1048576 [ 279.366616][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.502733][ T9518] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 279.516001][ T30] audit: type=1400 audit(1788676113.753:754): avc: denied { read write } for pid=9519 comm="syz.4.1109" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 279.517178][ T30] audit: type=1400 audit(1788676113.753:755): avc: denied { open } for pid=9519 comm="syz.4.1109" path="/227/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 279.591048][ T30] audit: type=1400 audit(1788676113.823:756): avc: denied { mounton } for pid=9520 comm="syz.0.1108" path=2F3231362FE91F7189591E9233614B dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 279.600966][ T9525] xt_HMARK: proto mask must be zero with L3 mode [ 279.623527][ T9524] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 279.663150][ T9535] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 279.699564][ T9532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.712710][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 279.712758][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 279.734941][ T9538] netlink: 'syz.0.1115': attribute type 13 has an invalid length. [ 279.734981][ T9538] netlink: 'syz.0.1115': attribute type 17 has an invalid length. [ 279.759676][ T9538] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 279.770338][ T9532] netlink: 'syz.4.1112': attribute type 4 has an invalid length. [ 279.770358][ T9532] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1112'. [ 279.787046][ T9532] .`: renamed from bond0 [ 279.812748][ T9538] netlink: NAT attribute has 8 unknown bytes [ 279.812802][ T9538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.885690][ T30] audit: type=1400 audit(1788676114.113:757): avc: denied { create } for pid=9546 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 279.959788][ T9553] FAULT_INJECTION: forcing a failure. [ 279.959788][ T9553] name failslab, interval 1, probability 0, space 0, times 0 [ 279.972645][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.1.1118 Not tainted syzkaller #0 PREEMPT(full) [ 279.972676][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 279.972687][ T9553] Call Trace: [ 279.972694][ T9553] [ 279.972702][ T9553] dump_stack_lvl+0x100/0x190 [ 279.972735][ T9553] should_fail_ex.cold+0x5/0xa [ 279.972761][ T9553] should_failslab+0xc2/0x120 [ 279.972784][ T9553] kmem_cache_alloc_noprof+0x92/0x6a0 [ 279.972803][ T9553] ? security_file_alloc+0x34/0x2c0 [ 279.972829][ T9553] security_file_alloc+0x34/0x2c0 [ 279.972848][ T9553] init_file+0x95/0x480 [ 279.972867][ T9553] alloc_empty_file+0x79/0x1c0 [ 279.972889][ T9553] path_openat+0xdb/0x2440 [ 279.972910][ T9553] ? __pfx_path_openat+0x10/0x10 [ 279.972934][ T9553] do_file_open+0x20e/0x430 [ 279.972953][ T9553] ? __pfx_do_file_open+0x10/0x10 [ 279.972984][ T9553] ? _raw_spin_unlock+0x28/0x50 [ 279.973001][ T9553] ? alloc_fd+0x471/0x7a0 [ 279.973030][ T9553] do_sys_openat2+0x10f/0x1e0 [ 279.973055][ T9553] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.973077][ T9553] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.973100][ T9553] ? __fget_files+0x21f/0x3d0 [ 279.973124][ T9553] __x64_sys_openat+0x12d/0x210 [ 279.973149][ T9553] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.973171][ T9553] ? ksys_write+0x1ac/0x250 [ 279.973196][ T9553] do_syscall_64+0x123/0x790 [ 279.973221][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.973238][ T9553] RIP: 0033:0x7f73f739e159 [ 279.973253][ T9553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.973270][ T9553] RSP: 002b:00007f73f8182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.973288][ T9553] RAX: ffffffffffffffda RBX: 00007f73f7625fa0 RCX: 00007f73f739e159 [ 279.973301][ T9553] RDX: 0000000000000001 RSI: 00002000000000e0 RDI: ffffffffffffff9c [ 279.973312][ T9553] RBP: 00007f73f8182090 R08: 0000000000000000 R09: 0000000000000000 [ 279.973323][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.973334][ T9553] R13: 00007f73f7626038 R14: 00007f73f7625fa0 R15: 00007fff91ab6ad8 [ 279.973358][ T9553] [ 280.050865][ T9550] bond1: option mode: unable to set because the bond device is up [ 280.121974][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 280.121995][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 280.133712][ T9545] netlink: 'syz.0.1116': attribute type 4 has an invalid length. [ 280.133735][ T9545] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1116'. [ 280.255266][ T9564] tmpfs: Bad value for 'mpol' [ 280.271058][ T9564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1120'. [ 280.320654][ T9566] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1121'. [ 280.372229][ T9568] xt_hashlimit: size too large, truncated to 1048576 [ 280.874424][ T9577] netlink: 'syz.1.1125': attribute type 10 has an invalid length. [ 280.892358][ T9577] team0 (unregistering): Port device team_slave_0 removed [ 280.902415][ T9577] team0 (unregistering): Port device team_slave_1 removed [ 280.915494][ T9581] fuse: Bad value for 'fd' [ 281.098323][ T9579] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 281.618658][ T9590] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 281.687392][ T9593] netlink: NAT attribute has 8 unknown bytes [ 281.687440][ T9593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.793018][ T9597] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 281.865572][ T9598] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 282.009520][ T9607] FAULT_INJECTION: forcing a failure. [ 282.009520][ T9607] name failslab, interval 1, probability 0, space 0, times 0 [ 282.009565][ T9607] CPU: 1 UID: 0 PID: 9607 Comm: syz.4.1135 Not tainted syzkaller #0 PREEMPT(full) [ 282.009590][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 282.009602][ T9607] Call Trace: [ 282.009609][ T9607] [ 282.009617][ T9607] dump_stack_lvl+0x100/0x190 [ 282.009650][ T9607] should_fail_ex.cold+0x5/0xa [ 282.009676][ T9607] should_failslab+0xc2/0x120 [ 282.009699][ T9607] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 282.009720][ T9607] ? __alloc_skb+0x5b7/0x710 [ 282.009747][ T9607] ? __alloc_skb+0x140/0x710 [ 282.009778][ T9607] __alloc_skb+0x140/0x710 [ 282.009804][ T9607] ? __alloc_skb+0x5b7/0x710 [ 282.009831][ T9607] ? __pfx___alloc_skb+0x10/0x10 [ 282.009866][ T9607] netlink_alloc_large_skb+0x69/0x150 [ 282.009898][ T9607] netlink_sendmsg+0x680/0xda0 [ 282.009930][ T9607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.009960][ T9607] ? selinux_socket_sendmsg+0x198/0x2f0 [ 282.009992][ T9607] ____sys_sendmsg+0xa4d/0xbe0 [ 282.010015][ T9607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.010044][ T9607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.010073][ T9607] ? lock_acquire+0x1d1/0x380 [ 282.010110][ T9607] ? get_pid_task+0x2a/0x250 [ 282.010137][ T9607] ___sys_sendmsg+0x190/0x1e0 [ 282.010163][ T9607] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.010187][ T9607] ? get_pid_task+0x106/0x250 [ 282.010220][ T9607] ? find_held_lock+0x2b/0x80 [ 282.010260][ T9607] __sys_sendmsg+0x160/0x210 [ 282.010280][ T9607] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.010311][ T9607] do_syscall_64+0x123/0x790 [ 282.010337][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.010357][ T9607] RIP: 0033:0x7fc7a599e159 [ 282.010373][ T9607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.010391][ T9607] RSP: 002b:00007fc7a67d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.010409][ T9607] RAX: ffffffffffffffda RBX: 00007fc7a5c25fa0 RCX: 00007fc7a599e159 [ 282.010422][ T9607] RDX: 0000000024000040 RSI: 00002000000001c0 RDI: 0000000000000008 [ 282.010434][ T9607] RBP: 00007fc7a67d1090 R08: 0000000000000000 R09: 0000000000000000 [ 282.010445][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.010456][ T9607] R13: 00007fc7a5c26038 R14: 00007fc7a5c25fa0 R15: 00007fff2ea55448 [ 282.010480][ T9607] [ 282.384434][ T9614] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1137'. [ 282.429715][ T9617] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 282.664684][ T9621] xt_hashlimit: size too large, truncated to 1048576 [ 283.362925][ T9623] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 283.372205][ T9625] validate_nla: 2 callbacks suppressed [ 283.372220][ T9625] netlink: 'syz.4.1140': attribute type 10 has an invalid length. [ 283.498331][ T9628] netlink: 'syz.1.1144': attribute type 13 has an invalid length. [ 283.498375][ T9628] netlink: 'syz.1.1144': attribute type 17 has an invalid length. [ 283.510451][ T9628] net_ratelimit: 2 callbacks suppressed [ 283.510469][ T9628] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 283.512286][ T30] audit: type=1400 audit(1788676117.733:758): avc: denied { bind } for pid=9630 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 283.594450][ T9632] netlink: NAT attribute has 8 unknown bytes [ 283.594489][ T9632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.754987][ T9636] fuse: Bad value for 'fd' [ 283.755352][ T30] audit: type=1400 audit(1788676117.983:759): avc: denied { mounton } for pid=9634 comm="syz.3.1145" path="/203/file0" dev="tmpfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 283.981731][ T9644] xt_hashlimit: size too large, truncated to 1048576 [ 284.236624][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 284.433861][ T9646] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 284.535463][ T9648] FAULT_INJECTION: forcing a failure. [ 284.535463][ T9648] name failslab, interval 1, probability 0, space 0, times 0 [ 284.539869][ T9648] CPU: 0 UID: 0 PID: 9648 Comm: syz.2.1150 Not tainted syzkaller #0 PREEMPT(full) [ 284.539895][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 284.539905][ T9648] Call Trace: [ 284.539911][ T9648] [ 284.539919][ T9648] dump_stack_lvl+0x100/0x190 [ 284.539948][ T9648] should_fail_ex.cold+0x5/0xa [ 284.539971][ T9648] should_failslab+0xc2/0x120 [ 284.539992][ T9648] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 284.540009][ T9648] ? sidtab_sid2str_get+0x84/0x670 [ 284.540029][ T9648] ? sidtab_sid2str_get+0x17a/0x670 [ 284.540050][ T9648] kmemdup_noprof+0x29/0x60 [ 284.540073][ T9648] sidtab_sid2str_get+0x17a/0x670 [ 284.540093][ T9648] security_sid_to_context_core+0x373/0x700 [ 284.540113][ T9648] avc_audit_post_callback+0x109/0x910 [ 284.540134][ T9648] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 284.540151][ T9648] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 284.540168][ T9648] ? skb_put+0x138/0x180 [ 284.540189][ T9648] ? audit_log_n_string+0x2a3/0x5a0 [ 284.540220][ T9648] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 284.540238][ T9648] common_lsm_audit+0x23f/0x2b0 [ 284.540255][ T9648] ? __pfx_common_lsm_audit+0x10/0x10 [ 284.540272][ T9648] ? lockdep_hardirqs_on+0x7d/0x110 [ 284.540291][ T9648] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 284.540312][ T9648] slow_avc_audit+0x186/0x210 [ 284.540332][ T9648] ? __pfx_slow_avc_audit+0x10/0x10 [ 284.540353][ T9648] ? avc_denied+0x14a/0x190 [ 284.540373][ T9648] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 284.540396][ T9648] avc_has_perm+0x1a6/0x1e0 [ 284.540417][ T9648] ? __pfx_avc_has_perm+0x10/0x10 [ 284.540437][ T9648] ? find_held_lock+0x2b/0x80 [ 284.540458][ T9648] ? ksys_write+0x190/0x250 [ 284.540473][ T9648] ? ksys_write+0x190/0x250 [ 284.540491][ T9648] sock_has_perm+0x253/0x2f0 [ 284.540513][ T9648] ? __pfx_sock_has_perm+0x10/0x10 [ 284.540535][ T9648] ? __fget_files+0x34/0x3d0 [ 284.540556][ T9648] ? __fget_files+0x215/0x3d0 [ 284.540573][ T9648] ? __fget_files+0x215/0x3d0 [ 284.540595][ T9648] ? __fget_files+0x21f/0x3d0 [ 284.540617][ T9648] security_socket_shutdown+0x91/0x210 [ 284.540641][ T9648] __sys_shutdown+0xb1/0x1b0 [ 284.540658][ T9648] __x64_sys_shutdown+0x53/0x80 [ 284.540674][ T9648] do_syscall_64+0x123/0x790 [ 284.540696][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.540712][ T9648] RIP: 0033:0x7f48e399e159 [ 284.540727][ T9648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.540742][ T9648] RSP: 002b:00007f48e48c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 284.540759][ T9648] RAX: ffffffffffffffda RBX: 00007f48e3c25fa0 RCX: 00007f48e399e159 [ 284.540769][ T9648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 284.540783][ T9648] RBP: 00007f48e48c4090 R08: 0000000000000000 R09: 0000000000000000 [ 284.540793][ T9648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.540803][ T9648] R13: 00007f48e3c26038 R14: 00007f48e3c25fa0 R15: 00007ffc7e5633d8 [ 284.540825][ T9648] [ 284.540937][ T30] audit: type=1400 audit(1788676118.763:760): avc: denied { shutdown } for pid=9647 comm="syz.2.1150" ssid=147 tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.622784][ T9652] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1151'. [ 284.845720][ T9657] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 285.043883][ T9654] bond1: option mode: unable to set because the bond device is up [ 285.100234][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 285.100285][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 285.108675][ T9658] netlink: 'syz.3.1153': attribute type 4 has an invalid length. [ 285.108697][ T9658] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1153'. [ 285.146502][ T9672] netlink: 'syz.0.1157': attribute type 13 has an invalid length. [ 285.147207][ T9672] netlink: 'syz.0.1157': attribute type 17 has an invalid length. [ 285.152044][ T9672] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 285.210685][ T9674] netlink: NAT attribute has 8 unknown bytes [ 285.226608][ T9674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.838752][ T9682] xt_hashlimit: size too large, truncated to 1048576 [ 286.454346][ T9695] xt_hashlimit: size too large, truncated to 1048576 [ 287.009880][ T9701] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 287.083770][ T30] audit: type=1400 audit(1788676121.313:761): avc: denied { bind } for pid=9704 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 287.446107][ T9711] bond1: option mode: unable to set because the bond device is up [ 287.527800][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 287.527825][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 287.543608][ T9713] netlink: 'syz.1.1170': attribute type 4 has an invalid length. [ 287.543629][ T9713] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1170'. [ 287.546098][ T9722] netlink: 'syz.0.1171': attribute type 13 has an invalid length. [ 287.546114][ T9722] netlink: 'syz.0.1171': attribute type 17 has an invalid length. [ 287.553677][ T9722] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 287.632606][ T9724] netlink: NAT attribute has 8 unknown bytes [ 287.632661][ T9724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.737948][ T9730] netlink: 'syz.3.1172': attribute type 4 has an invalid length. [ 288.067327][ T9741] FAULT_INJECTION: forcing a failure. [ 288.067327][ T9741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.067363][ T9741] CPU: 0 UID: 0 PID: 9741 Comm: syz.1.1178 Not tainted syzkaller #0 PREEMPT(full) [ 288.067383][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 288.067393][ T9741] Call Trace: [ 288.067398][ T9741] [ 288.067408][ T9741] dump_stack_lvl+0x100/0x190 [ 288.067435][ T9741] should_fail_ex.cold+0x5/0xa [ 288.067458][ T9741] _copy_from_user+0x2e/0xd0 [ 288.067483][ T9741] trace_parse_run_command+0xbb/0x3b0 [ 288.067501][ T9741] ? __pfx_create_dyn_event+0x10/0x10 [ 288.067527][ T9741] vfs_write+0x2aa/0x1050 [ 288.067544][ T9741] ? __pfx_dyn_event_write+0x10/0x10 [ 288.067566][ T9741] ? lock_acquire+0x1d1/0x380 [ 288.067582][ T9741] ? __fget_files+0x34/0x3d0 [ 288.067601][ T9741] ? __pfx_vfs_write+0x10/0x10 [ 288.067615][ T9741] ? find_held_lock+0x2b/0x80 [ 288.067636][ T9741] ? __fget_files+0x215/0x3d0 [ 288.067658][ T9741] ? __fget_files+0x21f/0x3d0 [ 288.067682][ T9741] ksys_write+0x12a/0x250 [ 288.067698][ T9741] ? __pfx_ksys_write+0x10/0x10 [ 288.067719][ T9741] do_syscall_64+0x123/0x790 [ 288.067742][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.067758][ T9741] RIP: 0033:0x7f73f739e159 [ 288.067778][ T9741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.067793][ T9741] RSP: 002b:00007f73f8182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.067810][ T9741] RAX: ffffffffffffffda RBX: 00007f73f7625fa0 RCX: 00007f73f739e159 [ 288.067821][ T9741] RDX: 000000000000000e RSI: 0000200000000100 RDI: 0000000000000003 [ 288.067831][ T9741] RBP: 00007f73f8182090 R08: 0000000000000000 R09: 0000000000000000 [ 288.067841][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.067851][ T9741] R13: 00007f73f7626038 R14: 00007f73f7625fa0 R15: 00007fff91ab6ad8 [ 288.067873][ T9741] [ 288.181249][ T9745] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 288.402582][ T9752] xt_hashlimit: size too large, truncated to 1048576 [ 289.371032][ T9769] FAULT_INJECTION: forcing a failure. [ 289.371032][ T9769] name failslab, interval 1, probability 0, space 0, times 0 [ 289.381915][ T9766] netlink: 'syz.2.1186': attribute type 13 has an invalid length. [ 289.381934][ T9766] netlink: 'syz.2.1186': attribute type 17 has an invalid length. [ 289.388149][ T9766] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 289.418530][ T9769] CPU: 1 UID: 0 PID: 9769 Comm: syz.1.1187 Not tainted syzkaller #0 PREEMPT(full) [ 289.418560][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 289.418572][ T9769] Call Trace: [ 289.418579][ T9769] [ 289.418588][ T9769] dump_stack_lvl+0x100/0x190 [ 289.418621][ T9769] should_fail_ex.cold+0x5/0xa [ 289.418649][ T9769] should_failslab+0xc2/0x120 [ 289.418672][ T9769] __kmalloc_noprof+0xfc/0x840 [ 289.418692][ T9769] ? trace_kmalloc+0xeb/0x110 [ 289.418716][ T9769] ? lsm_blob_alloc+0x68/0x90 [ 289.418744][ T9769] lsm_blob_alloc+0x68/0x90 [ 289.418766][ T9769] security_sk_alloc+0x2d/0x290 [ 289.418796][ T9769] sk_prot_alloc+0x12a/0x2a0 [ 289.418822][ T9769] sk_alloc+0x36/0xe80 [ 289.418853][ T9769] __netlink_create+0x5e/0x2c0 [ 289.418877][ T9769] ? __wake_up+0x3f/0x60 [ 289.418906][ T9769] netlink_create+0x29b/0x610 [ 289.418934][ T9769] ? __pfx_rtnetlink_bind+0x10/0x10 [ 289.418961][ T9769] __sock_create+0x339/0x860 [ 289.418989][ T9769] __sys_socket+0x14d/0x260 [ 289.419012][ T9769] ? __pfx___sys_socket+0x10/0x10 [ 289.419044][ T9769] __x64_sys_socket+0x72/0xb0 [ 289.419067][ T9769] ? lockdep_hardirqs_on+0x7d/0x110 [ 289.419088][ T9769] do_syscall_64+0x123/0x790 [ 289.419114][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.419134][ T9769] RIP: 0033:0x7f73f739e159 [ 289.419152][ T9769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.419171][ T9769] RSP: 002b:00007f73f8182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 289.419190][ T9769] RAX: ffffffffffffffda RBX: 00007f73f7625fa0 RCX: 00007f73f739e159 [ 289.419203][ T9769] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 289.419214][ T9769] RBP: 00007f73f7435024 R08: 0000000000000000 R09: 0000000000000000 [ 289.419226][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.419238][ T9769] R13: 00007f73f7626038 R14: 00007f73f7625fa0 R15: 00007fff91ab6ad8 [ 289.419270][ T9769] [ 289.481617][ T9774] bond1: option mode: unable to set because the bond device is up [ 289.491131][ T9772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9772 comm=syz.1.1187 [ 289.491859][ T9773] netlink: NAT attribute has 8 unknown bytes [ 289.491880][ T9773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.572588][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 289.572608][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 289.594493][ T9765] netlink: 'syz.3.1184': attribute type 4 has an invalid length. [ 289.594514][ T9765] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1184'. [ 289.820045][ T30] audit: type=1400 audit(1788676124.053:762): avc: denied { ioctl } for pid=9782 comm="syz.2.1190" path="socket:[23917]" dev="sockfs" ino=23917 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 289.867113][ T30] audit: type=1400 audit(1788676124.103:763): avc: denied { read } for pid=9785 comm="syz.0.1191" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.867576][ T30] audit: type=1400 audit(1788676124.103:764): avc: denied { open } for pid=9785 comm="syz.0.1191" path="/233/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 289.948710][ T30] audit: type=1400 audit(1788676124.173:765): avc: denied { write } for pid=9761 comm="syz.4.1185" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 289.950522][ T30] audit: type=1400 audit(1788676124.173:766): avc: denied { setattr } for pid=9761 comm="syz.4.1185" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 290.547228][ T9801] xt_hashlimit: size too large, truncated to 1048576 [ 290.555339][ T30] audit: type=1400 audit(1788676124.443:767): avc: denied { validate_trans } for pid=9790 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 291.110681][ T30] audit: type=1400 audit(1788676125.333:768): avc: denied { mount } for pid=9802 comm="syz.2.1195" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 291.139328][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 291.139468][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 291.139571][ C0] bridge0: port 3(syz_tun) entered learning state [ 291.193379][ T9807] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 291.354873][ T9818] netlink: 'syz.3.1198': attribute type 13 has an invalid length. [ 291.354902][ T9818] netlink: 'syz.3.1198': attribute type 17 has an invalid length. [ 291.373026][ T9818] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 291.379603][ T9821] trusted_key: encrypted_key: keyword 'îew' not recognized [ 291.455890][ T9823] xt_hashlimit: size too large, truncated to 1048576 [ 291.937550][ T9824] netlink: NAT attribute has 8 unknown bytes [ 291.937587][ T9824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.954836][ T9821] nbd: must specify a size in bytes for the device [ 292.146436][ T9832] FAULT_INJECTION: forcing a failure. [ 292.146436][ T9832] name failslab, interval 1, probability 0, space 0, times 0 [ 292.146473][ T9832] CPU: 0 UID: 0 PID: 9832 Comm: syz.0.1204 Not tainted syzkaller #0 PREEMPT(full) [ 292.146493][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.146507][ T9832] Call Trace: [ 292.146513][ T9832] [ 292.146518][ T9832] dump_stack_lvl+0x100/0x190 [ 292.146544][ T9832] should_fail_ex.cold+0x5/0xa [ 292.146566][ T9832] should_failslab+0xc2/0x120 [ 292.146587][ T9832] __kmalloc_noprof+0xfc/0x840 [ 292.146605][ T9832] ? rcu_is_watching+0x13/0xc0 [ 292.146627][ T9832] ? tomoyo_realpath_from_path+0xb6/0x690 [ 292.146650][ T9832] tomoyo_realpath_from_path+0xb6/0x690 [ 292.146673][ T9832] tomoyo_path_number_perm+0x23c/0x580 [ 292.146694][ T9832] ? tomoyo_path_number_perm+0x22e/0x580 [ 292.146719][ T9832] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 292.146744][ T9832] ? __pfx_futex_wait+0x10/0x10 [ 292.146780][ T9832] ? __lock_acquire+0x4c5/0x1ec0 [ 292.146807][ T9832] ? __fget_files+0x34/0x3d0 [ 292.146828][ T9832] ? find_held_lock+0x2b/0x80 [ 292.146851][ T9832] ? hook_file_ioctl_common+0x140/0x440 [ 292.146877][ T9832] ? __fget_files+0x21f/0x3d0 [ 292.146901][ T9832] security_file_ioctl+0xd3/0x230 [ 292.146930][ T9832] __x64_sys_ioctl+0xb7/0x210 [ 292.146957][ T9832] do_syscall_64+0x123/0x790 [ 292.146979][ T9832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.146996][ T9832] RIP: 0033:0x7fd1c9f9e159 [ 292.147011][ T9832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.147027][ T9832] RSP: 002b:00007fd1caeed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.147045][ T9832] RAX: ffffffffffffffda RBX: 00007fd1ca225fa0 RCX: 00007fd1c9f9e159 [ 292.147056][ T9832] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000008 [ 292.147067][ T9832] RBP: 00007fd1ca035024 R08: 0000000000000000 R09: 0000000000000000 [ 292.147079][ T9832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.147090][ T9832] R13: 00007fd1ca226038 R14: 00007fd1ca225fa0 R15: 00007ffd43191eb8 [ 292.147114][ T9832] [ 292.150691][ T9832] ERROR: Out of memory at tomoyo_realpath_from_path. [ 292.155914][ T9832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9832 comm=syz.0.1204 [ 292.171384][ T9835] tipc: Started in network mode [ 292.171411][ T9835] tipc: Node identity b2c62b7c7c6d, cluster identity 4711 [ 292.171594][ T9835] tipc: Enabled bearer , priority 0 [ 292.174343][ T9835] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 292.191448][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 292.291437][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x5b0c instead [ 292.291458][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x3770 instead [ 292.291472][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x6815 instead [ 292.291486][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x6375 instead [ 292.291499][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x06f1 instead [ 292.291512][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x3a70 instead [ 292.291526][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xe8be instead [ 292.291539][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x4552 instead [ 292.291552][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x5be3 instead [ 292.291566][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xbd9a instead [ 292.304720][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.305064][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xd99f instead [ 292.305084][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xa7a5 instead [ 292.305100][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x05c4 instead [ 292.305418][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x2329 instead [ 292.305433][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xb4cf instead [ 292.305447][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x62ac instead [ 292.305461][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x31da instead [ 292.305475][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x6572 instead [ 292.305489][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x9a00 instead [ 292.305503][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x83f8 instead [ 292.305517][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.305851][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xb3d3 instead [ 292.305865][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x72d5 instead [ 292.305879][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x0348 instead [ 292.305893][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x0c33 instead [ 292.305906][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x33e5 instead [ 292.305921][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xb2d2 instead [ 292.305935][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x0245 instead [ 292.305949][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x4cfe instead [ 292.305963][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xccea instead [ 292.305977][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xc585 instead [ 292.305990][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.306322][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xf711 instead [ 292.306335][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x70cf instead [ 292.306347][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x6fff instead [ 292.306359][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x5491 instead [ 292.306371][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xc525 instead [ 292.306383][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x6fde instead [ 292.306395][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x665c instead [ 292.306408][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x03f5 instead [ 292.306420][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x246f instead [ 292.306433][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x1928 instead [ 292.306446][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.307351][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x52e2 instead [ 292.307366][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x5dcc instead [ 292.307378][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x383f instead [ 292.307391][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xd14f instead [ 292.307406][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xc755 instead [ 292.307419][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x8b4f instead [ 292.307431][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x9272 instead [ 292.307443][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xbd64 instead [ 292.307455][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x2aef instead [ 292.307468][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x4054 instead [ 292.307481][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.307793][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x568f instead [ 292.307806][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x4a57 instead [ 292.307819][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x067e instead [ 292.307831][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x441b instead [ 292.307844][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x0c2f instead [ 292.307856][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xbe1b instead [ 292.307869][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xab9d instead [ 292.307883][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x4b4e instead [ 292.307896][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xfe58 instead [ 292.307910][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x4b55 instead [ 292.307923][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.308250][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xecb4 instead [ 292.308263][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xe266 instead [ 292.308276][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x18e0 instead [ 292.308288][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xee54 instead [ 292.308301][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x6596 instead [ 292.308313][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xe399 instead [ 292.308325][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8a02 instead [ 292.308338][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x799d instead [ 292.308349][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x0282 instead [ 292.308361][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x87ee instead [ 292.308373][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.311014][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xf7d9 instead [ 292.311033][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xd3cf instead [ 292.311048][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xb5da instead [ 292.311063][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x2004 instead [ 292.311079][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x3f8b instead [ 292.311094][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xb99a instead [ 292.311109][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x0373 instead [ 292.311124][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x0318 instead [ 292.311139][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xcd35 instead [ 292.311153][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xa2cb instead [ 292.311167][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.311549][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xcefa instead [ 292.311562][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xce06 instead [ 292.311572][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x03b3 instead [ 292.311582][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x0c22 instead [ 292.311591][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x8f6a instead [ 292.311601][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x518d instead [ 292.311610][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x40e0 instead [ 292.311619][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x80c5 instead [ 292.311628][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x1e7b instead [ 292.311636][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x608b instead [ 292.311645][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.311887][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xc6d9 instead [ 292.311896][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x40e7 instead [ 292.311906][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x54c4 instead [ 292.311914][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x6eb9 instead [ 292.311922][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xec98 instead [ 292.311930][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x0fbe instead [ 292.311938][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd7f3 instead [ 292.311947][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x24ad instead [ 292.311954][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xf7f3 instead [ 292.311963][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x2ef6 instead [ 292.311970][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.312202][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x35c4 instead [ 292.312211][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xc764 instead [ 292.312219][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xbb3a instead [ 292.312228][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xb419 instead [ 292.312236][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x74bb instead [ 292.312244][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xb029 instead [ 292.312254][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x00d1 instead [ 292.312263][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xd422 instead [ 292.312271][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x57eb instead [ 292.312279][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x97da instead [ 292.315226][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.315548][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x9f6d instead [ 292.315564][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x7ea9 instead [ 292.315576][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x8884 instead [ 292.315589][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xd0bf instead [ 292.315601][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x59fc instead [ 292.315614][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xb612 instead [ 292.315627][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xa850 instead [ 292.315639][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x8299 instead [ 292.315652][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x2413 instead [ 292.315665][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x8f6d instead [ 292.315677][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.315990][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xa455 instead [ 292.316003][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x75f5 instead [ 292.316016][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x2339 instead [ 292.316028][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x1479 instead [ 292.316041][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xe765 instead [ 292.316053][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x08eb instead [ 292.316066][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x036e instead [ 292.316078][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xbb8d instead [ 292.316091][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x7752 instead [ 292.316103][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xefe9 instead [ 292.316115][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.316427][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xa7aa instead [ 292.316440][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x1b4d instead [ 292.316453][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x23f5 instead [ 292.316465][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x2597 instead [ 292.316478][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xc37d instead [ 292.316490][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x78df instead [ 292.316504][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xfe77 instead [ 292.316516][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x9b8a instead [ 292.316528][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x1797 instead [ 292.326735][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x130b instead [ 292.326759][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.327319][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xe72a instead [ 292.327334][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xfdf6 instead [ 292.327348][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x97cc instead [ 292.327361][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xc8c4 instead [ 292.327374][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x9ed7 instead [ 292.327388][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x02af instead [ 292.327401][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1deb instead [ 292.327418][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x6ef5 instead [ 292.327431][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x1e83 instead [ 292.327444][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x9c05 instead [ 292.327457][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.327765][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x270e instead [ 292.327778][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x241a instead [ 292.327791][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x86b0 instead [ 292.327805][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xa775 instead [ 292.327817][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x35b3 instead [ 292.327830][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xef8a instead [ 292.327843][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x08b4 instead [ 292.327856][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x67b1 instead [ 292.327868][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x5828 instead [ 292.327881][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x6a34 instead [ 292.327894][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.328196][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x5ef4 instead [ 292.328209][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x6b23 instead [ 292.328221][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xf288 instead [ 292.328236][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x49a9 instead [ 292.328249][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x12e4 instead [ 292.328262][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0xba81 instead [ 292.328275][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xe088 instead [ 292.328288][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x2f13 instead [ 292.328313][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x6e40 instead [ 292.328328][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x604d instead [ 292.328341][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.329801][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xbfb2 instead [ 292.329816][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x2874 instead [ 292.329829][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x2be1 instead [ 292.329841][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xbcb3 instead [ 292.329854][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x2815 instead [ 292.329867][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xea2c instead [ 292.329879][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5a40 instead [ 292.329892][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x1bc4 instead [ 292.329904][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0xb9fe instead [ 292.329917][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0xd5a6 instead [ 292.329929][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.330247][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4490 instead [ 292.330260][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x228b instead [ 292.330273][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x43a7 instead [ 292.330286][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x0e56 instead [ 292.330299][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x8359 instead [ 292.330312][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x2dcc instead [ 292.330325][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xb72e instead [ 292.330338][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x6830 instead [ 292.330350][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xd6b6 instead [ 292.330364][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x6fe5 instead [ 292.330376][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.330683][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x7cc2 instead [ 292.330697][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xa4ac instead [ 292.330709][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xa13d instead [ 292.330721][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x1336 instead [ 292.330733][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x31d1 instead [ 292.330750][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x8929 instead [ 292.330763][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xc65a instead [ 292.330776][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x2233 instead [ 292.330789][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x6f06 instead [ 292.330802][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x8a1b instead [ 292.330815][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.331124][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x8790 instead [ 292.331137][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xaaa6 instead [ 292.331160][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x0869 instead [ 292.331172][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x8417 instead [ 292.331185][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x2fd1 instead [ 292.336637][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xcace instead [ 292.336656][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xc7bf instead [ 292.336669][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xf00b instead [ 292.336681][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0xf213 instead [ 292.336694][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x2421 instead [ 292.336707][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.337021][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x96af instead [ 292.337035][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x6353 instead [ 292.337048][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xb3e1 instead [ 292.337060][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xcf0d instead [ 292.337073][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x344f instead [ 292.337086][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x475b instead [ 292.337100][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x052d instead [ 292.337113][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xd04d instead [ 292.337126][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0xfd90 instead [ 292.337139][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x1a0d instead [ 292.337152][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.337459][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xb0cd instead [ 292.337472][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xbc49 instead [ 292.337485][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x6af4 instead [ 292.337498][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x3c7f instead [ 292.337510][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x1899 instead [ 292.337522][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x4467 instead [ 292.337535][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x97e5 instead [ 292.337547][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x6078 instead [ 292.337560][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x9ec8 instead [ 292.337573][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x3c14 instead [ 292.337585][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.337892][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x9cfd instead [ 292.337905][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x1537 instead [ 292.337918][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0xc652 instead [ 292.337930][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x8925 instead [ 292.337943][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x6ac5 instead [ 292.337955][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x9e2e instead [ 292.337968][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x80c4 instead [ 292.337980][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0xc023 instead [ 292.337993][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x2c39 instead [ 292.338005][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0xba6b instead [ 292.338017][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.338383][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xbcaf instead [ 292.338397][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0xba9f instead [ 292.338409][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0xa289 instead [ 292.338421][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x56b5 instead [ 292.338433][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x5f43 instead [ 292.338446][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0xf288 instead [ 292.338458][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x561f instead [ 292.338471][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xb029 instead [ 292.338483][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x5315 instead [ 292.338496][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x0fe3 instead [ 292.338508][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.338817][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4988 instead [ 292.338833][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xa11b instead [ 292.338847][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xc186 instead [ 292.338862][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xdd50 instead [ 292.338875][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x2720 instead [ 292.338889][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x20a2 instead [ 292.338903][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xee34 instead [ 292.338915][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0xe15f instead [ 292.338928][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xd528 instead [ 292.338941][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xb897 instead [ 292.338953][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.342653][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x8fb3 instead [ 292.342672][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x7d40 instead [ 292.342685][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x7571 instead [ 292.342698][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0xf0ff instead [ 292.342711][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x888f instead [ 292.342725][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xa87a instead [ 292.342738][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x41e9 instead [ 292.342756][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x96b8 instead [ 292.342769][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x3659 instead [ 292.342782][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x9143 instead [ 292.342795][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.343105][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x8f43 instead [ 292.343119][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x650f instead [ 292.343131][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x621c instead [ 292.343144][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x183d instead [ 292.343157][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x5c31 instead [ 292.343170][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x5b26 instead [ 292.343182][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1717 instead [ 292.343195][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x152e instead [ 292.343207][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x8e0f instead [ 292.343220][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x9fc4 instead [ 292.343233][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.343573][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x6688 instead [ 292.343587][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x2044 instead [ 292.343600][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x573e instead [ 292.343614][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x35f3 instead [ 292.343626][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x025e instead [ 292.343639][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x1ee3 instead [ 292.343652][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd284 instead [ 292.343664][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0xbf07 instead [ 292.343677][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x99de instead [ 292.343691][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x5b74 instead [ 292.343703][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.344010][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x56ee instead [ 292.344023][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xcf0e instead [ 292.344036][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xe86b instead [ 292.344050][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x690a instead [ 292.351640][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x05eb instead [ 292.351657][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0xd780 instead [ 292.351670][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd9b1 instead [ 292.351684][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x0983 instead [ 292.351697][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xe027 instead [ 292.351710][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xa997 instead [ 292.351723][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.352044][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x7187 instead [ 292.352058][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x9ebc instead [ 292.352071][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xeb70 instead [ 292.352083][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x5920 instead [ 292.352096][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x4f8d instead [ 292.352108][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x63b5 instead [ 292.352120][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x9f75 instead [ 292.352133][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xe7ee instead [ 292.352145][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x2e30 instead [ 292.352158][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xf1b8 instead [ 292.352170][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.352476][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xf7d0 instead [ 292.352489][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x42d2 instead [ 292.352502][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x4f73 instead [ 292.352514][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0xe3ef instead [ 292.352527][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x0b04 instead [ 292.352539][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x7d9b instead [ 292.352552][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xcae6 instead [ 292.352564][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x0fae instead [ 292.352577][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x9752 instead [ 292.352589][ T9841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x8cd7 instead [ 292.352602][ T9841] jffs2: Further such events for this erase block will not be printed [ 292.352898][ T9841] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 292.352906][ T9841] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 292.426682][ T9844] xt_hashlimit: size too large, truncated to 1048576 [ 293.277779][ T9] tipc: Node number set to 3467324284 [ 293.365857][ T9849] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 293.461312][ T30] audit: type=1400 audit(1788676127.693:769): avc: denied { lock } for pid=9846 comm="syz.0.1208" path="socket:[24727]" dev="sockfs" ino=24727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 293.508360][ T9854] trusted_key: encrypted_key: keyword 'îew' not recognized [ 293.523080][ T9854] nbd: must specify a size in bytes for the device [ 293.593090][ T30] audit: type=1400 audit(1788676127.833:770): avc: denied { bind } for pid=9846 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 293.625710][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1212'. [ 293.625740][ T9856] netlink: 'syz.3.1212': attribute type 7 has an invalid length. [ 293.625752][ T9856] netlink: 'syz.3.1212': attribute type 8 has an invalid length. [ 293.625762][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 293.683205][ T30] audit: type=1400 audit(1788676127.923:771): avc: denied { ioctl } for pid=9862 comm="syz.2.1214" path="socket:[24776]" dev="sockfs" ino=24776 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 293.991438][ T9873] FAULT_INJECTION: forcing a failure. [ 293.991438][ T9873] name failslab, interval 1, probability 0, space 0, times 0 [ 293.991469][ T9873] CPU: 1 UID: 0 PID: 9873 Comm: syz.1.1216 Not tainted syzkaller #0 PREEMPT(full) [ 293.991490][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 293.991503][ T9873] Call Trace: [ 293.991509][ T9873] [ 293.991517][ T9873] dump_stack_lvl+0x100/0x190 [ 293.991547][ T9873] should_fail_ex.cold+0x5/0xa [ 293.991573][ T9873] should_failslab+0xc2/0x120 [ 293.991595][ T9873] __kmalloc_cache_noprof+0x91/0x6d0 [ 293.991621][ T9873] ? orangefs_init_fs_context+0x43/0x150 [ 293.991648][ T9873] orangefs_init_fs_context+0x43/0x150 [ 293.991673][ T9873] alloc_fs_context+0x60c/0xf40 [ 293.991697][ T9873] __x64_sys_fsopen+0xed/0x220 [ 293.991711][ T9873] do_syscall_64+0x123/0x790 [ 293.991730][ T9873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.991745][ T9873] RIP: 0033:0x7f73f739e159 [ 293.991757][ T9873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.991771][ T9873] RSP: 002b:00007f73f8182028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 293.991785][ T9873] RAX: ffffffffffffffda RBX: 00007f73f7625fa0 RCX: 00007f73f739e159 [ 293.991795][ T9873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 293.991804][ T9873] RBP: 00007f73f8182090 R08: 0000000000000000 R09: 0000000000000000 [ 293.991813][ T9873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.991822][ T9873] R13: 00007f73f7626038 R14: 00007f73f7625fa0 R15: 00007fff91ab6ad8 [ 293.991841][ T9873] [ 294.026296][ T9875] FAULT_INJECTION: forcing a failure. [ 294.026296][ T9875] name failslab, interval 1, probability 0, space 0, times 0 [ 294.026325][ T9875] CPU: 0 UID: 0 PID: 9875 Comm: syz.0.1217 Not tainted syzkaller #0 PREEMPT(full) [ 294.026343][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 294.026354][ T9875] Call Trace: [ 294.026360][ T9875] [ 294.026366][ T9875] dump_stack_lvl+0x100/0x190 [ 294.026393][ T9875] should_fail_ex.cold+0x5/0xa [ 294.026416][ T9875] should_failslab+0xc2/0x120 [ 294.026436][ T9875] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 294.026453][ T9875] ? __alloc_skb+0x5b7/0x710 [ 294.026476][ T9875] ? __alloc_skb+0x140/0x710 [ 294.026502][ T9875] __alloc_skb+0x140/0x710 [ 294.026524][ T9875] ? __alloc_skb+0x5b7/0x710 [ 294.026550][ T9875] ? __pfx___alloc_skb+0x10/0x10 [ 294.026579][ T9875] netlink_alloc_large_skb+0x69/0x150 [ 294.026605][ T9875] netlink_sendmsg+0x680/0xda0 [ 294.026637][ T9875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.026663][ T9875] ? selinux_socket_sendmsg+0x198/0x2f0 [ 294.026691][ T9875] ____sys_sendmsg+0xa4d/0xbe0 [ 294.026710][ T9875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.026735][ T9875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.026760][ T9875] ? lock_acquire+0x1d1/0x380 [ 294.026776][ T9875] ? get_pid_task+0x2a/0x250 [ 294.026799][ T9875] ___sys_sendmsg+0x190/0x1e0 [ 294.026821][ T9875] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.026842][ T9875] ? get_pid_task+0x106/0x250 [ 294.026871][ T9875] ? find_held_lock+0x2b/0x80 [ 294.026906][ T9875] __sys_sendmsg+0x160/0x210 [ 294.026922][ T9875] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.026950][ T9875] do_syscall_64+0x123/0x790 [ 294.026972][ T9875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.026988][ T9875] RIP: 0033:0x7fd1c9f9e159 [ 294.027003][ T9875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.027018][ T9875] RSP: 002b:00007fd1caeed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.027035][ T9875] RAX: ffffffffffffffda RBX: 00007fd1ca225fa0 RCX: 00007fd1c9f9e159 [ 294.027046][ T9875] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 294.027056][ T9875] RBP: 00007fd1caeed090 R08: 0000000000000000 R09: 0000000000000000 [ 294.027066][ T9875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.027076][ T9875] R13: 00007fd1ca226038 R14: 00007fd1ca225fa0 R15: 00007ffd43191eb8 [ 294.027098][ T9875] [ 294.117975][ T9878] FAULT_INJECTION: forcing a failure. [ 294.117975][ T9878] name fail_futex, interval 1, probability 0, space 0, times 0 [ 294.118004][ T9878] CPU: 0 UID: 0 PID: 9878 Comm: syz.3.1218 Not tainted syzkaller #0 PREEMPT(full) [ 294.118025][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 294.118036][ T9878] Call Trace: [ 294.118042][ T9878] [ 294.118049][ T9878] dump_stack_lvl+0x100/0x190 [ 294.118078][ T9878] should_fail_ex.cold+0x5/0xa [ 294.118101][ T9878] get_futex_key+0x1d0/0x14f0 [ 294.118126][ T9878] ? __pfx_get_futex_key+0x10/0x10 [ 294.118153][ T9878] futex_wake+0xf4/0x5e0 [ 294.118181][ T9878] ? __pfx_futex_wake+0x10/0x10 [ 294.118209][ T9878] ? percpu_counter_add_batch+0xb9/0x230 [ 294.118228][ T9878] ? errseq_sample+0x51/0x70 [ 294.118254][ T9878] ? file_init_path+0x48e/0x670 [ 294.118277][ T9878] do_futex+0x2b2/0x440 [ 294.118299][ T9878] ? __pfx_do_futex+0x10/0x10 [ 294.118320][ T9878] ? fd_install+0x223/0x580 [ 294.118342][ T9878] __x64_sys_futex+0x34f/0x4d0 [ 294.118364][ T9878] ? __sys_socket+0xac/0x260 [ 294.118387][ T9878] ? __pfx___x64_sys_futex+0x10/0x10 [ 294.118416][ T9878] do_syscall_64+0x123/0x790 [ 294.118438][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.118455][ T9878] RIP: 0033:0x7f5ac7d9e159 [ 294.118470][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.118485][ T9878] RSP: 002b:00007f5ac8d3d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 294.118503][ T9878] RAX: ffffffffffffffda RBX: 00007f5ac8025fa8 RCX: 00007f5ac7d9e159 [ 294.118514][ T9878] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ac8025fac [ 294.118525][ T9878] RBP: 00007f5ac8025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 294.118536][ T9878] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 294.118546][ T9878] R13: 00007f5ac8026038 R14: 00007fff0fd40d00 R15: 00007fff0fd40de8 [ 294.118568][ T9878] [ 294.168250][ T9878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9878 comm=syz.3.1218 [ 294.281615][ T9888] xt_hashlimit: size too large, truncated to 1048576 [ 294.486299][ T5610] Bluetooth: hci4: link tx timeout [ 294.486380][ T5610] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.488390][ T5605] Bluetooth: hci4: link tx timeout [ 294.488404][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.488504][ T5605] Bluetooth: hci4: link tx timeout [ 294.488514][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.488577][ T5605] Bluetooth: hci4: link tx timeout [ 294.488586][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.488651][ T5605] Bluetooth: hci4: link tx timeout [ 294.488659][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.488716][ T5605] Bluetooth: hci4: link tx timeout [ 294.488725][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.488781][ T5605] Bluetooth: hci4: link tx timeout [ 294.488790][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.488848][ T5605] Bluetooth: hci4: link tx timeout [ 294.488857][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.488914][ T5605] Bluetooth: hci4: link tx timeout [ 294.488922][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.488984][ T5605] Bluetooth: hci4: link tx timeout [ 294.488992][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489048][ T5605] Bluetooth: hci4: link tx timeout [ 294.489057][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489113][ T5605] Bluetooth: hci4: link tx timeout [ 294.489122][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489179][ T5605] Bluetooth: hci4: link tx timeout [ 294.489187][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489459][ T5605] Bluetooth: hci4: link tx timeout [ 294.489468][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489526][ T5605] Bluetooth: hci4: link tx timeout [ 294.489535][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489593][ T5605] Bluetooth: hci4: link tx timeout [ 294.489601][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489663][ T5605] Bluetooth: hci4: link tx timeout [ 294.489672][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489730][ T5605] Bluetooth: hci4: link tx timeout [ 294.489738][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489796][ T5605] Bluetooth: hci4: link tx timeout [ 294.489805][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489863][ T5605] Bluetooth: hci4: link tx timeout [ 294.489871][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489929][ T5605] Bluetooth: hci4: link tx timeout [ 294.489938][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.489995][ T5605] Bluetooth: hci4: link tx timeout [ 294.490004][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.490087][ T5605] Bluetooth: hci4: link tx timeout [ 294.490096][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.490483][ T5605] Bluetooth: hci4: link tx timeout [ 294.490492][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.490550][ T5605] Bluetooth: hci4: link tx timeout [ 294.490558][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.490621][ T5605] Bluetooth: hci4: link tx timeout [ 294.490630][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.490688][ T5605] Bluetooth: hci4: link tx timeout [ 294.490696][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.490764][ T5605] Bluetooth: hci4: link tx timeout [ 294.490772][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.490830][ T5605] Bluetooth: hci4: link tx timeout [ 294.490838][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.490906][ T5605] Bluetooth: hci4: link tx timeout [ 294.490914][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.490994][ T5605] Bluetooth: hci4: link tx timeout [ 294.491002][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.491063][ T5605] Bluetooth: hci4: link tx timeout [ 294.491071][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.491127][ T5605] Bluetooth: hci4: link tx timeout [ 294.491135][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.491190][ T5605] Bluetooth: hci4: link tx timeout [ 294.491198][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.491254][ T5605] Bluetooth: hci4: link tx timeout [ 294.491263][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.491318][ T5605] Bluetooth: hci4: link tx timeout [ 294.491327][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.491383][ T5605] Bluetooth: hci4: link tx timeout [ 294.491391][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.492456][ T5605] Bluetooth: hci4: link tx timeout [ 294.492496][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.492555][ T5605] Bluetooth: hci4: link tx timeout [ 294.492563][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.492625][ T5605] Bluetooth: hci4: link tx timeout [ 294.492633][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.492690][ T5605] Bluetooth: hci4: link tx timeout [ 294.492698][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.492754][ T5605] Bluetooth: hci4: link tx timeout [ 294.492762][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.492819][ T5605] Bluetooth: hci4: link tx timeout [ 294.492827][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.492883][ T5605] Bluetooth: hci4: link tx timeout [ 294.492892][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.492948][ T5605] Bluetooth: hci4: link tx timeout [ 294.492956][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.493012][ T5605] Bluetooth: hci4: link tx timeout [ 294.493021][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.493078][ T5605] Bluetooth: hci4: link tx timeout [ 294.493087][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.493143][ T5605] Bluetooth: hci4: link tx timeout [ 294.493152][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.493207][ T5605] Bluetooth: hci4: link tx timeout [ 294.493216][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.493272][ T5605] Bluetooth: hci4: link tx timeout [ 294.493280][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.493336][ T5605] Bluetooth: hci4: link tx timeout [ 294.493345][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.493400][ T5605] Bluetooth: hci4: link tx timeout [ 294.493409][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.493464][ T5605] Bluetooth: hci4: link tx timeout [ 294.493473][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495072][ T5605] Bluetooth: hci4: link tx timeout [ 294.495083][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495143][ T5605] Bluetooth: hci4: link tx timeout [ 294.495152][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495211][ T5605] Bluetooth: hci4: link tx timeout [ 294.495219][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495277][ T5605] Bluetooth: hci4: link tx timeout [ 294.495286][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495343][ T5605] Bluetooth: hci4: link tx timeout [ 294.495352][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495410][ T5605] Bluetooth: hci4: link tx timeout [ 294.495418][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495480][ T5605] Bluetooth: hci4: link tx timeout [ 294.495488][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495602][ T5605] Bluetooth: hci4: link tx timeout [ 294.495616][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495727][ T5605] Bluetooth: hci4: link tx timeout [ 294.495736][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495794][ T5605] Bluetooth: hci4: link tx timeout [ 294.495803][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495861][ T5605] Bluetooth: hci4: link tx timeout [ 294.495870][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.495939][ T5605] Bluetooth: hci4: link tx timeout [ 294.495948][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496010][ T5605] Bluetooth: hci4: link tx timeout [ 294.496019][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496085][ T5605] Bluetooth: hci4: link tx timeout [ 294.496094][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496156][ T5605] Bluetooth: hci4: link tx timeout [ 294.496164][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496249][ T5605] Bluetooth: hci4: link tx timeout [ 294.496258][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496315][ T5605] Bluetooth: hci4: link tx timeout [ 294.496323][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496380][ T5605] Bluetooth: hci4: link tx timeout [ 294.496388][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496445][ T5605] Bluetooth: hci4: link tx timeout [ 294.496453][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496509][ T5605] Bluetooth: hci4: link tx timeout [ 294.496518][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496631][ T5605] Bluetooth: hci4: link tx timeout [ 294.496640][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496696][ T5605] Bluetooth: hci4: link tx timeout [ 294.496705][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496761][ T5605] Bluetooth: hci4: link tx timeout [ 294.496769][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496825][ T5605] Bluetooth: hci4: link tx timeout [ 294.496833][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496889][ T5605] Bluetooth: hci4: link tx timeout [ 294.496898][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.496953][ T5605] Bluetooth: hci4: link tx timeout [ 294.496962][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.497018][ T5605] Bluetooth: hci4: link tx timeout [ 294.497026][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.497083][ T5605] Bluetooth: hci4: link tx timeout [ 294.497091][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.497146][ T5605] Bluetooth: hci4: link tx timeout [ 294.497155][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.497212][ T5605] Bluetooth: hci4: link tx timeout [ 294.497221][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.497278][ T5605] Bluetooth: hci4: link tx timeout [ 294.497287][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.497419][ T5605] Bluetooth: hci4: link tx timeout [ 294.497428][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.497487][ T5605] Bluetooth: hci4: link tx timeout [ 294.497495][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.497552][ T5605] Bluetooth: hci4: link tx timeout [ 294.497561][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.497660][ T5605] Bluetooth: hci4: link tx timeout [ 294.497669][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.498589][ T5605] Bluetooth: hci4: link tx timeout [ 294.498640][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.498705][ T5605] Bluetooth: hci4: link tx timeout [ 294.498714][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.498772][ T5605] Bluetooth: hci4: link tx timeout [ 294.498780][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.498838][ T5605] Bluetooth: hci4: link tx timeout [ 294.498846][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.498904][ T5605] Bluetooth: hci4: link tx timeout [ 294.498913][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.498974][ T5605] Bluetooth: hci4: link tx timeout [ 294.498983][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499040][ T5605] Bluetooth: hci4: link tx timeout [ 294.499049][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499106][ T5605] Bluetooth: hci4: link tx timeout [ 294.499115][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499173][ T5605] Bluetooth: hci4: link tx timeout [ 294.499181][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499238][ T5605] Bluetooth: hci4: link tx timeout [ 294.499247][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499303][ T5605] Bluetooth: hci4: link tx timeout [ 294.499312][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499380][ T5605] Bluetooth: hci4: link tx timeout [ 294.499388][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499447][ T5605] Bluetooth: hci4: link tx timeout [ 294.499455][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499512][ T5605] Bluetooth: hci4: link tx timeout [ 294.499520][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499576][ T5605] Bluetooth: hci4: link tx timeout [ 294.499584][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499679][ T5605] Bluetooth: hci4: link tx timeout [ 294.499687][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499746][ T5605] Bluetooth: hci4: link tx timeout [ 294.499754][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499811][ T5605] Bluetooth: hci4: link tx timeout [ 294.499829][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499890][ T5605] Bluetooth: hci4: link tx timeout [ 294.499899][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.499967][ T5605] Bluetooth: hci4: link tx timeout [ 294.499983][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500061][ T5605] Bluetooth: hci4: link tx timeout [ 294.500070][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500126][ T5605] Bluetooth: hci4: link tx timeout [ 294.500134][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500191][ T5605] Bluetooth: hci4: link tx timeout [ 294.500199][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500255][ T5605] Bluetooth: hci4: link tx timeout [ 294.500263][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500319][ T5605] Bluetooth: hci4: link tx timeout [ 294.500327][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500382][ T5605] Bluetooth: hci4: link tx timeout [ 294.500390][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500446][ T5605] Bluetooth: hci4: link tx timeout [ 294.500454][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500533][ T5605] Bluetooth: hci4: link tx timeout [ 294.500541][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500598][ T5605] Bluetooth: hci4: link tx timeout [ 294.500606][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500700][ T5605] Bluetooth: hci4: link tx timeout [ 294.500708][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500765][ T5605] Bluetooth: hci4: link tx timeout [ 294.500774][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500830][ T5605] Bluetooth: hci4: link tx timeout [ 294.500838][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500893][ T5605] Bluetooth: hci4: link tx timeout [ 294.500901][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.500962][ T5605] Bluetooth: hci4: link tx timeout [ 294.500970][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501026][ T5605] Bluetooth: hci4: link tx timeout [ 294.501034][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501089][ T5605] Bluetooth: hci4: link tx timeout [ 294.501098][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501170][ T5605] Bluetooth: hci4: link tx timeout [ 294.501179][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501285][ T5605] Bluetooth: hci4: link tx timeout [ 294.501294][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501351][ T5605] Bluetooth: hci4: link tx timeout [ 294.501359][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501416][ T5605] Bluetooth: hci4: link tx timeout [ 294.501424][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501480][ T5605] Bluetooth: hci4: link tx timeout [ 294.501488][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501751][ T5605] Bluetooth: hci4: link tx timeout [ 294.501760][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501818][ T5605] Bluetooth: hci4: link tx timeout [ 294.501826][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501884][ T5605] Bluetooth: hci4: link tx timeout [ 294.501892][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.501950][ T5605] Bluetooth: hci4: link tx timeout [ 294.501959][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.502016][ T5605] Bluetooth: hci4: link tx timeout [ 294.502025][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.502082][ T5605] Bluetooth: hci4: link tx timeout [ 294.502091][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.504265][ T5605] Bluetooth: hci4: link tx timeout [ 294.504276][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.504336][ T5605] Bluetooth: hci4: link tx timeout [ 294.504344][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.504402][ T5605] Bluetooth: hci4: link tx timeout [ 294.504410][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.504467][ T5605] Bluetooth: hci4: link tx timeout [ 294.504475][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.504588][ T5605] Bluetooth: hci4: link tx timeout [ 294.504597][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505085][ T5605] Bluetooth: hci4: link tx timeout [ 294.505094][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505153][ T5605] Bluetooth: hci4: link tx timeout [ 294.505161][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505219][ T5605] Bluetooth: hci4: link tx timeout [ 294.505227][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505319][ T5605] Bluetooth: hci4: link tx timeout [ 294.505327][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505395][ T5605] Bluetooth: hci4: link tx timeout [ 294.505404][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505484][ T5605] Bluetooth: hci4: link tx timeout [ 294.505493][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505580][ T5605] Bluetooth: hci4: link tx timeout [ 294.505589][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505650][ T5605] Bluetooth: hci4: link tx timeout [ 294.505659][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505715][ T5605] Bluetooth: hci4: link tx timeout [ 294.505724][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505785][ T5605] Bluetooth: hci4: link tx timeout [ 294.505793][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505849][ T5605] Bluetooth: hci4: link tx timeout [ 294.505858][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505913][ T5605] Bluetooth: hci4: link tx timeout [ 294.505922][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.505978][ T5605] Bluetooth: hci4: link tx timeout [ 294.505986][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.506044][ T5605] Bluetooth: hci4: link tx timeout [ 294.506052][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.506110][ T5605] Bluetooth: hci4: link tx timeout [ 294.506119][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.506176][ T5605] Bluetooth: hci4: link tx timeout [ 294.506185][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.506242][ T5605] Bluetooth: hci4: link tx timeout [ 294.506251][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.506310][ T5605] Bluetooth: hci4: link tx timeout [ 294.506318][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.506375][ T5605] Bluetooth: hci4: link tx timeout [ 294.506384][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.506441][ T5605] Bluetooth: hci4: link tx timeout [ 294.506449][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.506506][ T5605] Bluetooth: hci4: link tx timeout [ 294.506515][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.507756][ T5605] Bluetooth: hci4: link tx timeout [ 294.507767][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.507898][ T5605] Bluetooth: hci4: link tx timeout [ 294.507906][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.508029][ T5605] Bluetooth: hci4: link tx timeout [ 294.508038][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.509088][ T5605] Bluetooth: hci4: link tx timeout [ 294.509098][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.509155][ T5605] Bluetooth: hci4: link tx timeout [ 294.509164][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.509220][ T5605] Bluetooth: hci4: link tx timeout [ 294.509229][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.509285][ T5605] Bluetooth: hci4: link tx timeout [ 294.509294][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.509350][ T5605] Bluetooth: hci4: link tx timeout [ 294.509369][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.509427][ T5605] Bluetooth: hci4: link tx timeout [ 294.509436][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.509754][ T5605] Bluetooth: hci4: link tx timeout [ 294.509763][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.509854][ T5605] Bluetooth: hci4: link tx timeout [ 294.509863][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.510318][ T5605] Bluetooth: hci4: link tx timeout [ 294.510328][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.510385][ T5605] Bluetooth: hci4: link tx timeout [ 294.510394][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.510450][ T5605] Bluetooth: hci4: link tx timeout [ 294.510459][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.510516][ T5605] Bluetooth: hci4: link tx timeout [ 294.510524][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.510776][ T5605] Bluetooth: hci4: link tx timeout [ 294.510785][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.510844][ T5605] Bluetooth: hci4: link tx timeout [ 294.510853][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.511526][ T5605] Bluetooth: hci4: link tx timeout [ 294.511535][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.511825][ T5605] Bluetooth: hci4: link tx timeout [ 294.511834][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513199][ T5605] Bluetooth: hci4: link tx timeout [ 294.513220][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513284][ T5605] Bluetooth: hci4: link tx timeout [ 294.513293][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513350][ T5605] Bluetooth: hci4: link tx timeout [ 294.513359][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513415][ T5605] Bluetooth: hci4: link tx timeout [ 294.513424][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513479][ T5605] Bluetooth: hci4: link tx timeout [ 294.513489][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513545][ T5605] Bluetooth: hci4: link tx timeout [ 294.513554][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513609][ T5605] Bluetooth: hci4: link tx timeout [ 294.513622][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513678][ T5605] Bluetooth: hci4: link tx timeout [ 294.513686][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513761][ T5605] Bluetooth: hci4: link tx timeout [ 294.513769][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513914][ T5605] Bluetooth: hci4: link tx timeout [ 294.513924][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.513983][ T5605] Bluetooth: hci4: link tx timeout [ 294.513992][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514048][ T5605] Bluetooth: hci4: link tx timeout [ 294.514057][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514113][ T5605] Bluetooth: hci4: link tx timeout [ 294.514121][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514178][ T5605] Bluetooth: hci4: link tx timeout [ 294.514186][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514241][ T5605] Bluetooth: hci4: link tx timeout [ 294.514250][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514306][ T5605] Bluetooth: hci4: link tx timeout [ 294.514314][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514370][ T5605] Bluetooth: hci4: link tx timeout [ 294.514379][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514700][ T5605] Bluetooth: hci4: link tx timeout [ 294.514709][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514774][ T5605] Bluetooth: hci4: link tx timeout [ 294.514783][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514877][ T5605] Bluetooth: hci4: link tx timeout [ 294.514885][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.514945][ T5605] Bluetooth: hci4: link tx timeout [ 294.514953][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.515011][ T5605] Bluetooth: hci4: link tx timeout [ 294.515019][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.515076][ T5605] Bluetooth: hci4: link tx timeout [ 294.515085][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.515143][ T5605] Bluetooth: hci4: link tx timeout [ 294.515152][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.515213][ T5605] Bluetooth: hci4: link tx timeout [ 294.515222][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.515279][ T5605] Bluetooth: hci4: link tx timeout [ 294.515287][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.515902][ T5605] Bluetooth: hci4: link tx timeout [ 294.515911][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.516070][ T5605] Bluetooth: hci4: link tx timeout [ 294.516079][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.516138][ T5605] Bluetooth: hci4: link tx timeout [ 294.516157][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.516220][ T5605] Bluetooth: hci4: link tx timeout [ 294.516229][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.516287][ T5605] Bluetooth: hci4: link tx timeout [ 294.516295][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.516362][ T5605] Bluetooth: hci4: link tx timeout [ 294.516371][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.516432][ T5605] Bluetooth: hci4: link tx timeout [ 294.516441][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.517337][ T5605] Bluetooth: hci4: link tx timeout [ 294.517346][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.517404][ T5605] Bluetooth: hci4: link tx timeout [ 294.517412][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.517469][ T5605] Bluetooth: hci4: link tx timeout [ 294.517477][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.517642][ T5605] Bluetooth: hci4: link tx timeout [ 294.517651][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.517708][ T5605] Bluetooth: hci4: link tx timeout [ 294.517716][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.517941][ T5605] Bluetooth: hci4: link tx timeout [ 294.517950][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.518007][ T5605] Bluetooth: hci4: link tx timeout [ 294.518016][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.518237][ T5605] Bluetooth: hci4: link tx timeout [ 294.518246][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.518302][ T5605] Bluetooth: hci4: link tx timeout [ 294.518311][ T5605] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 294.835496][ T9900] trusted_key: encrypted_key: keyword 'îew' not recognized [ 294.853429][ T9900] nbd: must specify a size in bytes for the device [ 296.556900][ T5605] Bluetooth: hci4: command 0x0405 tx timeout [ 297.210071][ T9925] 9p: Bad value for 'version' [ 297.239921][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 297.239939][ T30] audit: type=1400 audit(1788676131.463:774): avc: denied { map } for pid=9924 comm="syz.0.1233" path="socket:[24021]" dev="sockfs" ino=24021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 297.240332][ T30] audit: type=1400 audit(1788676131.473:775): avc: denied { read } for pid=9904 comm="syz.2.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 297.382152][ T9927] netlink: 'syz.4.1232': attribute type 13 has an invalid length. [ 297.382173][ T9927] netlink: 'syz.4.1232': attribute type 17 has an invalid length. [ 297.401318][ T9927] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 297.564083][ T9931] netlink: NAT attribute has 8 unknown bytes [ 297.564108][ T9931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.245335][ T9943] trusted_key: encrypted_key: keyword 'îew' not recognized [ 298.274117][ T9938] FAULT_INJECTION: forcing a failure. [ 298.274117][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 298.274149][ T9938] CPU: 1 UID: 0 PID: 9938 Comm: syz.1.1235 Not tainted syzkaller #0 PREEMPT(full) [ 298.274170][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 298.274181][ T9938] Call Trace: [ 298.274187][ T9938] [ 298.274194][ T9938] dump_stack_lvl+0x100/0x190 [ 298.274225][ T9938] should_fail_ex.cold+0x5/0xa [ 298.274250][ T9938] should_failslab+0xc2/0x120 [ 298.274272][ T9938] __kmalloc_noprof+0xfc/0x840 [ 298.274288][ T9938] ? trace_kmalloc+0xeb/0x110 [ 298.274307][ T9938] ? lsm_blob_alloc+0x68/0x90 [ 298.274330][ T9938] lsm_blob_alloc+0x68/0x90 [ 298.274349][ T9938] security_sk_alloc+0x2d/0x290 [ 298.274373][ T9938] sk_prot_alloc+0x12a/0x2a0 [ 298.274395][ T9938] sk_alloc+0x36/0xe80 [ 298.274420][ T9938] __netlink_create+0x5e/0x2c0 [ 298.274440][ T9938] ? __wake_up+0x3f/0x60 [ 298.274465][ T9938] netlink_create+0x29b/0x610 [ 298.274486][ T9938] ? __pfx_rtnetlink_bind+0x10/0x10 [ 298.274512][ T9938] __sock_create+0x339/0x860 [ 298.274537][ T9938] __sys_socket+0x14d/0x260 [ 298.274559][ T9938] ? __pfx___sys_socket+0x10/0x10 [ 298.274586][ T9938] __x64_sys_socket+0x72/0xb0 [ 298.274606][ T9938] ? lockdep_hardirqs_on+0x7d/0x110 [ 298.274626][ T9938] do_syscall_64+0x123/0x790 [ 298.274650][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.274666][ T9938] RIP: 0033:0x7f73f739e159 [ 298.274680][ T9938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.274696][ T9938] RSP: 002b:00007f73f8182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 298.274714][ T9938] RAX: ffffffffffffffda RBX: 00007f73f7625fa0 RCX: 00007f73f739e159 [ 298.274727][ T9938] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 298.274739][ T9938] RBP: 00007f73f7435024 R08: 0000000000000000 R09: 0000000000000000 [ 298.274750][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.274760][ T9938] R13: 00007f73f7626038 R14: 00007f73f7625fa0 R15: 00007fff91ab6ad8 [ 298.274783][ T9938] [ 298.322203][ T9938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9938 comm=syz.1.1235 [ 298.349797][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 298.349819][ T9943] nbd: must specify a size in bytes for the device [ 299.238422][ T30] audit: type=1326 audit(1788676133.473:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1241" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a599e159 code=0x7ffc0000 [ 299.239163][ T30] audit: type=1326 audit(1788676133.473:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1241" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a599e159 code=0x7ffc0000 [ 299.239329][ T30] audit: type=1326 audit(1788676133.473:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1241" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc7a599e159 code=0x7ffc0000 [ 299.239466][ T30] audit: type=1326 audit(1788676133.473:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1241" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a599e159 code=0x7ffc0000 [ 299.239723][ T30] audit: type=1400 audit(1788676133.473:780): avc: denied { execute } for pid=9953 comm="syz.4.1241" name="file1" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 299.243080][ T9956] process 'syz.4.1241' launched './file1' with NULL argv: empty string added [ 299.244711][ T30] audit: type=1400 audit(1788676133.473:781): avc: denied { execute_no_trans } for pid=9953 comm="syz.4.1241" path="/255/file1" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 299.281416][ T30] audit: type=1326 audit(1788676133.513:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1241" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a599e159 code=0x7ffc0000 [ 299.284043][ T30] audit: type=1326 audit(1788676133.513:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.4.1241" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a599e159 code=0x7ffc0000 [ 299.344497][ T9958] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 300.035337][ T9969] xt_hashlimit: size too large, truncated to 1048576 [ 300.839953][ T9967] netlink: 'syz.3.1246': attribute type 13 has an invalid length. [ 300.839971][ T9967] netlink: 'syz.3.1246': attribute type 17 has an invalid length. [ 300.841460][ T9967] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 301.159698][ T9974] netlink: NAT attribute has 8 unknown bytes [ 301.159715][ T9974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.749225][ T9976] trusted_key: encrypted_key: keyword 'îew' not recognized [ 302.283214][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 302.292306][ T9976] nbd: must specify a size in bytes for the device [ 302.393576][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 302.394071][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 302.394084][ T30] audit: type=1400 audit(1788676136.623:786): avc: denied { setopt } for pid=9981 comm="syz.1.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.636844][ T31] INFO: task kworker/0:1:10 blocked for mor ** replaying previous printk message ** [ 302.636844][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 302.636877][ T31] Not tainted syzkaller #0 [ 302.636897][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.636908][ T31] task:kworker/0:1 state:D stack:23304 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 302.636970][ T31] Workqueue: events_freezable mmc_rescan [ 302.637011][ T31] Call Trace: [ 302.637019][ T31] [ 302.637032][ T31] __schedule+0x1259/0x6920 [ 302.637059][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 302.637091][ T31] ? __pfx___schedule+0x10/0x10 [ 302.637110][ T31] ? find_held_lock+0x2b/0x80 [ 302.637136][ T31] ? schedule+0x225/0x2c0 [ 302.637160][ T31] schedule+0xdd/0x2c0 [ 302.637181][ T31] schedule_timeout+0x1b2/0x280 [ 302.637209][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 302.637245][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 302.637272][ T31] __wait_for_common+0x2e7/0x4c0 [ 302.637288][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 302.637314][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 302.637345][ T31] ? led_trigger_event+0x60/0x270 [ 302.637375][ T31] mmc_wait_for_req_done+0xcd/0x3d0 [ 302.637402][ T31] mmc_wait_for_req+0x207/0x2c0 [ 302.637424][ T31] mmc_wait_for_cmd+0x154/0x200 [ 302.637445][ T31] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 302.637478][ T31] ? __pfx_mmc_wait_done+0x10/0x10 [ 302.637501][ T31] ? rpm_resume+0x7eb/0x1320 [ 302.637525][ T31] mmc_io_rw_direct_host+0x126/0x330 [ 302.637548][ T31] ? __pfx_mmc_io_rw_direct_host+0x10/0x10 [ 302.637574][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 302.637592][ T31] ? __pm_runtime_resume+0xc3/0x170 [ 302.637609][ T31] ? __mmc_claim_host+0x2e2/0x5f0 [ 302.637630][ T31] sdio_reset+0x92/0x240 [ 302.637655][ T31] ? __pfx_sdio_reset+0x10/0x10 [ 302.637674][ T31] ? mmc_sw_reset+0x20/0xd0 [ 302.637694][ T31] ? __pfx_default_wake_function+0x10/0x10 [ 302.637716][ T31] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 302.637738][ T31] mmc_rescan+0xba9/0x11c0 [ 302.637768][ T31] process_one_work+0xac7/0x1b10 [ 302.637802][ T31] ? __pfx_process_one_work+0x10/0x10 [ 302.637826][ T31] ? lock_acquire+0x1d1/0x380 [ 302.637849][ T31] ? __pfx_mmc_rescan+0x10/0x10 [ 302.637873][ T31] worker_thread+0x5ef/0xe50 [ 302.637905][ T31] ? kthread+0x13a/0x450 [ 302.637930][ T31] ? __pfx_worker_thread+0x10/0x10 [ 302.637951][ T31] kthread+0x373/0x450 [ 302.637971][ T31] ? __pfx_kthread+0x10/0x10 [ 302.637994][ T31] ret_from_fork+0x730/0xd60 [ 302.638014][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 302.638033][ T31] ? __switch_to+0x800/0x10f0 [ 302.638055][ T31] ? __pfx_kthread+0x10/0x10 [ 302.638078][ T31] ret_from_fork_asm+0x1a/0x30 [ 302.638106][ T31] [ 302.638218][ T31] INFO: task kworker/0:5:5708 blocked for more than 143 seconds. [ 302.638230][ T31] Not tainted syzkaller #0 [ 302.638238][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.638245][ T31] task:kworker/0:5 state:D stack:20216 pid:5708 tgid:5708 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 302.638289][ T31] Workqueue: usb_hub_wq hub_event [ 302.638309][ T31] Call Trace: [ 302.638315][ T31] [ 302.638324][ T31] __schedule+0x1259/0x6920 [ 302.638358][ T31] ? lock_acquire+0x1d1/0x380 [ 302.638381][ T31] ? mark_held_locks+0x40/0x70 [ 302.638397][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.638413][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 302.638434][ T31] ? __pfx___schedule+0x10/0x10 [ 302.638449][ T31] ? find_held_lock+0x2b/0x80 [ 302.638471][ T31] ? schedule+0x225/0x2c0 [ 302.638491][ T31] schedule+0xdd/0x2c0 [ 302.638507][ T31] schedule_timeout+0x1b2/0x280 [ 302.638531][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 302.638562][ T31] ? mark_held_locks+0x40/0x70 [ 302.638581][ T31] __wait_for_common+0x2e7/0x4c0 [ 302.638599][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 302.638627][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 302.638644][ T31] ? __flush_work+0x4ca/0xcb0 [ 302.638673][ T31] ? find_held_lock+0x2b/0x80 [ 302.638694][ T31] ? __flush_work+0x928/0xcb0 [ 302.638716][ T31] ? __flush_work+0x928/0xcb0 [ 302.638742][ T31] ? __flush_work+0x4ca/0xcb0 [ 302.638765][ T31] __flush_work+0x7c7/0xcb0 [ 302.638790][ T31] ? __timer_delete+0xd1/0x1b0 [ 302.638816][ T31] ? __pfx___flush_work+0x10/0x10 [ 302.638842][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 302.638871][ T31] ? __pfx___might_resched+0x10/0x10 [ 302.638887][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 302.638902][ T31] ? usb_hcd_flush_endpoint+0x359/0x400 [ 302.638928][ T31] cancel_delayed_work_sync+0xd1/0xf0 [ 302.638948][ T31] mmc_stop_host+0xe9/0x400 [ 302.638971][ T31] mmc_remove_host+0x15/0x60 [ 302.638994][ T31] vub300_disconnect+0x12d/0x170 [ 302.639019][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 302.639045][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 302.639067][ T31] device_remove+0x12a/0x180 [ 302.639092][ T31] device_release_driver_internal+0x44e/0x620 [ 302.639162][ T31] bus_remove_device+0x2bc/0x560 [ 302.639188][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 302.639210][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 302.639239][ T31] device_del+0x376/0x9b0 [ 302.639258][ T31] ? __pfx_device_del+0x10/0x10 [ 302.639273][ T31] ? kobject_put+0xb9/0x640 [ 302.639306][ T31] usb_disable_device+0x367/0x810 [ 302.639332][ T31] usb_disconnect+0x2e2/0x9a0 [ 302.639355][ T31] hub_event+0x1bb1/0x4420 [ 302.639388][ T31] ? __lock_acquire+0x4c5/0x1ec0 [ 302.639409][ T31] ? __pfx_hub_event+0x10/0x10 [ 302.639426][ T31] ? mark_lock+0xea0/0x1020 [ 302.639445][ T31] ? lock_acquire+0x1d1/0x380 [ 302.639461][ T31] ? process_one_work+0xa2c/0x1b10 [ 302.639485][ T31] ? process_one_work+0x906/0x1b10 [ 302.639507][ T31] ? process_one_work+0x906/0x1b10 [ 302.639534][ T31] process_one_work+0xac7/0x1b10 [ 302.639567][ T31] ? __pfx_process_one_work+0x10/0x10 [ 302.639591][ T31] ? lock_acquire+0x1d1/0x380 [ 302.639613][ T31] ? __pfx_hub_event+0x10/0x10 [ 302.639633][ T31] worker_thread+0x5ef/0xe50 [ 302.639667][ T31] ? __pfx_worker_thread+0x10/0x10 [ 302.639692][ T31] ? kthread+0x13a/0x450 [ 302.639711][ T31] ? __pfx_worker_thread+0x10/0x10 [ 302.639733][ T31] kthread+0x373/0x450 [ 302.639754][ T31] ? __pfx_kthread+0x10/0x10 [ 302.639777][ T31] ret_from_fork+0x730/0xd60 [ 302.639795][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 302.639814][ T31] ? __switch_to+0x800/0x10f0 [ 302.639836][ T31] ? __pfx_kthread+0x10/0x10 [ 302.639859][ T31] ret_from_fork_asm+0x1a/0x30 [ 302.639891][ T31] [ 302.639935][ T31] [ 302.639935][ T31] Showing all locks held in the system: [ 302.639943][ T31] locks held by kworker/0:1/10: 2, on CPU#0: [ 302.639955][ T31] #0: ffff88801c05a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 302.640002][ T31] #1: ffffc900000f7d08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 302.640047][ T31] locks held by pr/ttyS0/16: 2, last CPU#0: [ 302.640059][ T31] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 302.640099][ T31] #1: ffffffff9bc65c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 302.640144][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 302.640155][ T31] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 302.640223][ T31] locks held by getty/5358: 2, on CPU#0: [ 302.640234][ T31] #0: ffff8880363a40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 302.640277][ T31] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 302.640318][ T31] locks held by syz-executor/5599: 4, last CPU#0: [ 302.640330][ T31] #0: ffffffff8ef3cc30 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 302.640369][ T31] #1: ffff888032f2c378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 302.640414][ T31] #2: ffff88802a209078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 302.640456][ T31] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 302.640492][ T31] locks held by syz-executor/5600: 4, last CPU#0: [ 302.640503][ T31] #0: ffffffff8ef3cc30 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 302.640540][ T31] #1: ffff88802a6669b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 302.640578][ T31] #2: ffff88801c087678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 302.640619][ T31] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 302.640661][ T31] locks held by syz-executor/5602: 1, last CPU#1: [ 302.640672][ T31] #0: ffff88807b45c460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 302.640722][ T31] locks held by kworker/0:5/5708: 5, on CPU#0: [ 302.640737][ T31] #0: ffff888023ab7d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 302.640781][ T31] #1: ffffc90002e17d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 302.640824][ T31] #2: ffff88802a8a41d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 302.640862][ T31] #3: ffff88804cae71d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 302.640900][ T31] #4: ffff888035c291a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 302.640947][ T31] locks held by syz.4.1228/9913: 1, last CPU#1: [ 302.640959][ T31] #0: ffff88802a5ea460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 302.641000][ T31] locks held by syz-executor/9984: 5, last CPU#0: [ 302.641012][ T31] #0: ffff8880374aa460 (sb_writers#6){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 302.641052][ T31] #1: ffff888055acb8d0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 302.641097][ T31] #2: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: security_sid_to_context_core+0x21f/0x700 [ 302.641135][ T31] #3: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: sidtab_sid2str_get+0x84/0x670 [ 302.641172][ T31] #4: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 302.641214][ T31] [ 302.641218][ T31] ============================================= [ 302.641218][ T31] [ 302.641225][ T31] NMI backtrace for cpu 1 [ 302.641235][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 302.641253][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 302.641262][ T31] Call Trace: [ 302.641268][ T31] [ 302.641274][ T31] dump_stack_lvl+0x100/0x190 [ 302.641297][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 302.641321][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 302.641339][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 302.641365][ T31] sys_info+0x141/0x190 [ 302.641386][ T31] watchdog+0xcb1/0x1030 [ 302.641408][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 302.641424][ T31] ? __pfx_watchdog+0x10/0x10 [ 302.641442][ T31] ? __kthread_parkme+0x18f/0x230 [ 302.641462][ T31] ? kthread+0x13a/0x450 [ 302.641481][ T31] ? __pfx_watchdog+0x10/0x10 [ 302.641497][ T31] kthread+0x373/0x450 [ 302.641517][ T31] ? __pfx_kthread+0x10/0x10 [ 302.641544][ T31] ret_from_fork+0x730/0xd60 [ 302.641562][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 302.641580][ T31] ? __switch_to+0x800/0x10f0 [ 302.641601][ T31] ? __pfx_kthread+0x10/0x10 [ 302.641623][ T31] ret_from_fork_asm+0x1a/0x30 [ 302.641656][ T31] [ 302.641662][ T31] Sending NMI from CPU 1 to CPUs 0: [ 302.641683][ C0] NMI backtrace for cpu 0 [ 302.641693][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 302.641709][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 302.641718][ C0] RIP: 0010:delay_tsc+0x32/0xc0 [ 302.641739][ C0] Code: fd bf 01 00 00 00 41 54 55 53 e8 d9 59 08 f6 e8 04 7e 01 00 41 89 c4 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 f3 90 01 00 00 00 e8 b4 59 08 f6 e8 df 7d 01 00 44 39 e0 75 36 0f 01 [ 302.641752][ C0] RSP: 0018:ffffc90000157950 EFLAGS: 00000082 [ 302.641764][ C0] RAX: 8000000000000002 RBX: 000000cbca961e49 RCX: 0000000000000000 [ 302.641774][ C0] RDX: 0000000000000004 RSI: ffffffff8c620f00 RDI: 0000000000000001 [ 302.641783][ C0] RBP: 000000cbca961bc5 R08: 0000000000000005 R09: 0000000000000000 [ 302.641792][ C0] R10: 0000000000000814 R11: 205d313354202020 R12: 0000000000000000 [ 302.641800][ C0] R13: 0000000000000af1 R14: fffffbfff378cbe9 R15: dffffc0000000000 [ 302.641810][ C0] FS: 0000000000000000(0000) GS:ffff888123b5f000(0000) knlGS:0000000000000000 [ 302.641825][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.641835][ C0] CR2: 00007f73f732d380 CR3: 000000005ca75000 CR4: 00000000003526f0 [ 302.641844][ C0] Call Trace: [ 302.641849][ C0] [ 302.641855][ C0] wait_for_lsr+0xf3/0x210 [ 302.641871][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 302.641887][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 302.641901][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 302.641923][ C0] serial8250_console_write+0xf46/0x1330 [ 302.641943][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 302.641959][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 302.641980][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 302.642003][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 302.642025][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 302.642045][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 302.642064][ C0] ? do_raw_spin_lock+0x90/0x260 [ 302.642083][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 302.642101][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 302.642116][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 302.642135][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 302.642163][ C0] nbcon_kthread_func+0x613/0x7d0 [ 302.642184][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 302.642206][ C0] ? __kthread_parkme+0x18f/0x230 [ 302.642223][ C0] ? kthread+0x13a/0x450 [ 302.642239][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 302.642258][ C0] kthread+0x373/0x450 [ 302.642274][ C0] ? __pfx_kthread+0x10/0x10 [ 302.642292][ C0] ret_from_fork+0x730/0xd60 [ 302.642307][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 302.642322][ C0] ? __switch_to+0x800/0x10f0 [ 302.642339][ C0] ? __pfx_kthread+0x10/0x10 [ 302.642357][ C0] ret_from_fork_asm+0x1a/0x30 [ 302.642376][ C0] [ 302.642679][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 304.024127][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 304.033232][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 304.043285][ T31] Call Trace: [ 304.046559][ T31] [ 304.049487][ T31] dump_stack_lvl+0x100/0x190 [ 304.054170][ T31] vpanic+0x553/0x970 [ 304.058134][ T31] ? __pfx_vpanic+0x10/0x10 [ 304.062632][ T31] panic+0xd1/0xe0 [ 304.066341][ T31] ? __pfx_panic+0x10/0x10 [ 304.070746][ T31] ? wq_watchdog_touch+0xec/0x1a0 [ 304.075767][ T31] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 304.081908][ T31] ? watchdog.cold+0x1ec/0x234 [ 304.086658][ T31] watchdog.cold+0x1fd/0x234 [ 304.091237][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 304.097029][ T31] ? __pfx_watchdog+0x10/0x10 [ 304.101688][ T31] ? __kthread_parkme+0x18f/0x230 [ 304.106698][ T31] ? kthread+0x13a/0x450 [ 304.110925][ T31] ? __pfx_watchdog+0x10/0x10 [ 304.115582][ T31] kthread+0x373/0x450 [ 304.119638][ T31] ? __pfx_kthread+0x10/0x10 [ 304.124215][ T31] ret_from_fork+0x730/0xd60 [ 304.128788][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 304.133885][ T31] ? __switch_to+0x800/0x10f0 [ 304.138548][ T31] ? __pfx_kthread+0x10/0x10 [ 304.143125][ T31] ret_from_fork_asm+0x1a/0x30 [ 304.147883][ T31] [ 304.151099][ T31] Kernel Offset: disabled [ 304.155407][ T31] Rebooting in 86400 seconds..