last executing test programs: 4m9.19818062s ago: executing program 0 (id=1231): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000067c0)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900021073797a300000000005000400030000000c000300686173683a6970001400078005001500ff000000080011400000000c050005000a00000005000100060000006848065a4cddad1b6315432173b71bad"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100006cf350355bfd8e6795000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000038000000060a010400000000000000000100000008000a40000000000900010073797a3000000000100004800c000180080001006e617400140000001100010000000000000000000000000af9cea36448f7ebf53a61d39547b8e406d0fcc07de293e543ac43d799d7b03a6870e0e2ec07165f7c098e6afb20e2ec22"], 0xac}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES64], 0xcd0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000006880), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4800) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 4m7.778725427s ago: executing program 0 (id=1241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000201010400000000000000000200100024000280140001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 4m6.702848221s ago: executing program 0 (id=1248): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@l={0x92, 0x3, 0xd0, 0x1a, 0x81, 0x1, 0x5}, @l={0x92, 0x0, 0xb0, 0x1c, 0x1, 0x6, 0x2}], 0x10) 4m6.589743649s ago: executing program 0 (id=1250): r0 = socket(0x1e, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89e1, 0xfffffffffffffffe) 4m6.332678148s ago: executing program 0 (id=1254): syz_open_dev$vim2m(0x0, 0x1f7ff6, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1100) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffe4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) 4m5.206133977s ago: executing program 0 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, r2) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) 3m49.946178788s ago: executing program 32 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, r2) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) 2m45.921712694s ago: executing program 5 (id=1534): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2m44.04220522s ago: executing program 5 (id=1542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) r0 = socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000008c0)=[@in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0xfffff07c}], 0x1c) 2m42.883873308s ago: executing program 5 (id=1546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x6558, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x8, 0x1}}}}}, 0x1d) 2m41.473967836s ago: executing program 5 (id=1551): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x6, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0xfffe, 0x2, 0x8, 0xf1f, 0xb, "0900000009d794c1"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 2m39.456064175s ago: executing program 5 (id=1555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}}, 0x0) 2m38.423211971s ago: executing program 5 (id=1556): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000001c0)={0xf, "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"}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 2m23.228095308s ago: executing program 33 (id=1556): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000001c0)={0xf, "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"}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 1m40.643507395s ago: executing program 4 (id=1705): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000"], 0x98}}, 0x0) 1m34.133090389s ago: executing program 4 (id=1725): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x1ff, 0x3) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x409d132, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMERASE(r1, 0x40084d02, 0x0) 1m33.668581154s ago: executing program 4 (id=1727): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) 1m32.31433675s ago: executing program 4 (id=1735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x22180) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, 0x0) 1m30.018946764s ago: executing program 4 (id=1741): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="9ba2", 0x2) 1m28.956859946s ago: executing program 4 (id=1746): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000005c80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="0567376f0e47c6e23511f17edb08a55f61760f7d", 0x14}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4048884) 1m13.324337057s ago: executing program 34 (id=1746): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000005c80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="0567376f0e47c6e23511f17edb08a55f61760f7d", 0x14}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4048884) 37.633510388s ago: executing program 6 (id=1904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)=':2\a>pt', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4a9f2d6ea7e21866fdbf4a0d1e0"]) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) 37.512901898s ago: executing program 6 (id=1905): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_dev$video(0x0, 0xa7, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setpriority(0x2, 0x0, 0x7fff) 26.374478653s ago: executing program 6 (id=1922): syz_open_dev$hidraw(&(0x7f0000000080), 0xfff7fffeffffffff, 0x264001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x67, 0x0, &(0x7f00000005c0)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) r5 = fcntl$getown(r0, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc010}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) ptrace$ARCH_SET_GS(0x1e, r5, &(0x7f0000000180), 0x1001) connect$inet(r1, 0x0, 0x0) socket(0x1d, 0x2, 0x6) recvmmsg(r1, &(0x7f0000000d00), 0x0, 0x10022, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010001480"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 15.624700211s ago: executing program 6 (id=1948): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) pipe(&(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) creat(&(0x7f0000000000)='./file0\x00', 0x70) syz_emit_ethernet(0x5a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x24, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[@hopopts={0x89, 0x1, '\x00', [@generic={0x4, 0x7, "6a092bd064beec"}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) 14.173986613s ago: executing program 6 (id=1949): openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x44100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) 12.650276774s ago: executing program 6 (id=1952): mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)) 10.649253568s ago: executing program 3 (id=1958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xbfe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x60100) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.100334769s ago: executing program 3 (id=1962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d2) write(r4, &(0x7f0000000600)='12', 0x2) 7.555590843s ago: executing program 3 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000201010400000000000000000200100024000280140001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 7.401278133s ago: executing program 1 (id=1966): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x1}, 0xfe}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="000e02"], 0x0, 0x0}) epoll_create(0x8) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x3, @empty, 0x2}, 0x1c) 6.746906298s ago: executing program 7 (id=1967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.573456809s ago: executing program 7 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x22) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x144) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)=':2\a>pt', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4a9f2d6ea7e21866fdbf4a0d1e0"]) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(0x0, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(0xffffffffffffffff, &(0x7f0000000000)="5a0003000100", 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0xfffffffffffffffc, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x38, 0x10, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 6.167608673s ago: executing program 7 (id=1969): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x321, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649ff9", 0x68}], 0x1}, 0x4000010) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) 6.107035858s ago: executing program 1 (id=1970): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xec76, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x400, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000, 0x5400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.33086297s ago: executing program 1 (id=1971): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xe9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0xb, 0x0, 0x80, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x20, 0x9, 0xa8, 0x0, 0x8002, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x0, @value=r1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 4.132494465s ago: executing program 2 (id=1974): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) 4.049032865s ago: executing program 2 (id=1975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d2) write(r4, &(0x7f0000000600)='12', 0x2) 4.004163335s ago: executing program 3 (id=1976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$evdev(0x0, 0x3, 0x822b01) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x800, 0x34) r5 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) fchown(r4, 0x0, 0x0) 3.918079343s ago: executing program 1 (id=1977): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x34, r3, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}}, 0x0) 2.708244482s ago: executing program 1 (id=1978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x42000000) 2.70758249s ago: executing program 2 (id=1979): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f00000029c0)={0x90, 0x0, 0x0, {0x2, 0x1, 0x6, 0x2, 0x1, 0x3, {0x6, 0x2, 0xe7, 0x6, 0xffffffff, 0x7ff, 0x7, 0xfff, 0x7, 0x6000, 0x5, 0x0, r3, 0x2, 0x6153}}}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) flock(r0, 0x5) 2.463286042s ago: executing program 3 (id=1980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x22) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x144) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)=':2\a>pt', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4a9f2d6ea7e21866fdbf4a0d1e0"]) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(0x0, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(0xffffffffffffffff, &(0x7f0000000000)="5a0003000100", 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0xfffffffffffffffc, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x38, 0x10, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2.431071595s ago: executing program 7 (id=1981): syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3ff, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f0000000600)={0x0, 0x3e49, 0x2, 0x3, 0x17}, &(0x7f0000000100)=0x0, &(0x7f0000000300), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000c5"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0}, 0x4000011) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8048004}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b729e4}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000060010220420000000000000001007000000000000"]) 2.01344378s ago: executing program 3 (id=1982): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffffbc) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.583008846s ago: executing program 2 (id=1983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xbfe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x60100) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.562669262s ago: executing program 1 (id=1984): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000000fffa, 0x0) syz_emit_vhci(0x0, 0xe) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCSETS(r2, 0x404c4701, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0xb, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28dbe108598948224ad44afac11d875397bdb22d003d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0xb47, 0x2000000000001]}}) getegid() 925.878288ms ago: executing program 2 (id=1985): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 923.293574ms ago: executing program 7 (id=1986): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$nl_xfrm(r0, 0x0, 0x4040888) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$kcm(0xf, 0x3, 0x2) io_uring_setup(0x724, &(0x7f00000000c0)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 154.253572ms ago: executing program 7 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB, @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r8 = socket(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800ce4018008000300e8030000", 0x54}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r11, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb080045000024010000000011907800000100004e20001090782203000180feffffff00000000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=1988): syz_open_dev$hidraw(&(0x7f0000000080), 0xfff7fffeffffffff, 0x264001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x67, 0x0, &(0x7f00000005c0)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) r5 = fcntl$getown(r0, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc010}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) ptrace$ARCH_SET_GS(0x1e, r5, &(0x7f0000000180), 0x1001) connect$inet(r1, 0x0, 0x0) socket(0x1d, 0x2, 0x6) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10022, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010001480"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): miscuous mode [ 635.286112][T10359] ip6gre1: entered allmulticast mode [ 635.633663][T10372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1241'. [ 635.635263][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 635.635854][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'. [ 635.663559][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 635.663598][ T31] audit: type=1400 audit(1788806943.343:3568): avc: denied { bind } for pid=10363 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 636.186478][ T31] audit: type=1400 audit(1788806943.893:3569): avc: denied { read } for pid=5264 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 636.226725][ T31] audit: type=1400 audit(1788806943.933:3570): avc: denied { read } for pid=10377 comm="syz.2.1247" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 636.251724][ T31] audit: type=1400 audit(1788806943.963:3571): avc: denied { open } for pid=10377 comm="syz.2.1247" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 636.324264][ T31] audit: type=1400 audit(1788806944.033:3572): avc: denied { ioctl } for pid=10377 comm="syz.2.1247" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 636.551645][ T31] audit: type=1400 audit(1788806944.263:3573): avc: denied { create } for pid=10384 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 636.581147][ T31] audit: type=1400 audit(1788806944.283:3574): avc: denied { ioctl } for pid=10384 comm="syz.0.1250" path="socket:[26940]" dev="sockfs" ino=26940 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 637.240244][T10399] Config c/1 of g1 needs at least one function. [ 637.243046][T10399] udc dummy_udc.0: failed to start g1: -22 [ 637.243085][T10399] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 637.243843][T10399] UDC core: g1: couldn't find an available UDC or it's busy [ 637.344939][ T31] audit: type=1400 audit(1788806944.943:3575): avc: denied { write } for pid=10387 comm="syz.2.1251" name="c.1" dev="configfs" ino=18028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 637.434240][T10400] FAULT_INJECTION: forcing a failure. [ 637.434240][T10400] name failslab, interval 1, probability 0, space 0, times 0 [ 637.434360][T10400] CPU: 1 UID: 0 PID: 10400 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT(full) [ 637.434389][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 637.434403][T10400] Call Trace: [ 637.434411][T10400] [ 637.434420][T10400] dump_stack_lvl+0x100/0x190 [ 637.434461][T10400] should_fail_ex.cold+0x5/0xa [ 637.434491][T10400] should_failslab+0xc2/0x120 [ 637.434520][T10400] __kmalloc_cache_noprof+0x91/0x6d0 [ 637.434552][T10400] ? tracefs_init_fs_context+0x43/0x110 [ 637.434587][T10400] tracefs_init_fs_context+0x43/0x110 [ 637.434615][T10400] alloc_fs_context+0x60c/0xf40 [ 637.434648][T10400] path_mount+0xdbd/0x24c0 [ 637.434686][T10400] ? __pfx_path_mount+0x10/0x10 [ 637.434711][T10400] ? irqentry_exit+0x24d/0xa10 [ 637.434757][T10400] ? __x64_sys_mount+0x293/0x310 [ 637.434788][T10400] __x64_sys_mount+0x293/0x310 [ 637.434817][T10400] ? __pfx___x64_sys_mount+0x10/0x10 [ 637.434844][T10400] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 637.434878][T10400] do_syscall_64+0x123/0x790 [ 637.434905][T10400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.434927][T10400] RIP: 0033:0x7ff43fb9e159 [ 637.434955][T10400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.434976][T10400] RSP: 002b:00007ff4409f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 637.434999][T10400] RAX: ffffffffffffffda RBX: 00007ff43fe25fa0 RCX: 00007ff43fb9e159 [ 637.435014][T10400] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 637.435028][T10400] RBP: 00007ff43fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 637.435042][T10400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.435055][T10400] R13: 00007ff43fe26038 R14: 00007ff43fe25fa0 R15: 00007fffda373c58 [ 637.435086][T10400] [ 637.962127][ T31] audit: type=1400 audit(1788806945.633:3576): avc: denied { mounton } for pid=10406 comm="syz.0.1258" path="/245/proc/fs/nfsd" dev="proc" ino=4026531847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 637.962207][ T31] audit: type=1400 audit(1788806945.663:3577): avc: denied { mount } for pid=10406 comm="syz.0.1258" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 638.123913][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 638.818052][T10407] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 638.908927][T10416] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 639.813102][T10431] binder: 10428:10431 unknown command 0 [ 639.813137][T10431] binder: 10428:10431 ioctl c0306201 2000000004c0 returned -22 [ 641.370722][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 641.370767][ T31] audit: type=1400 audit(1788806948.693:3589): avc: denied { read } for pid=10432 comm="syz.3.1266" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 641.370816][ T31] audit: type=1400 audit(1788806948.693:3590): avc: denied { open } for pid=10432 comm="syz.3.1266" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 641.745739][ T31] audit: type=1400 audit(1788806949.453:3591): avc: denied { read write } for pid=10449 comm="syz.4.1271" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 641.783699][ T31] audit: type=1400 audit(1788806949.493:3592): avc: denied { open } for pid=10449 comm="syz.4.1271" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 643.770748][ T31] audit: type=1400 audit(1788806951.423:3593): avc: denied { read } for pid=10468 comm="syz.2.1279" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 643.770824][ T31] audit: type=1400 audit(1788806951.423:3594): avc: denied { open } for pid=10468 comm="syz.2.1279" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 643.890784][ T30] psmouse serio2: Failed to reset mouse on : -5 [ 645.573228][ T31] audit: type=1400 audit(1788806953.283:3595): avc: denied { write } for pid=10476 comm="syz.1.1280" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 645.573679][ T31] audit: type=1400 audit(1788806953.283:3596): avc: denied { open } for pid=10476 comm="syz.1.1280" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 645.576143][ T31] audit: type=1400 audit(1788806953.283:3597): avc: denied { ioctl } for pid=10476 comm="syz.1.1280" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 646.920086][ T31] audit: type=1400 audit(1788806954.623:3598): avc: denied { read write } for pid=10491 comm="syz.3.1286" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 646.920487][ T31] audit: type=1400 audit(1788806954.623:3599): avc: denied { open } for pid=10491 comm="syz.3.1286" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 647.271871][ T31] audit: type=1400 audit(1788806954.983:3600): avc: denied { create } for pid=10506 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 647.293066][ T31] audit: type=1400 audit(1788806954.993:3601): avc: denied { connect } for pid=10506 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 648.294102][ T31] audit: type=1400 audit(1788806955.203:3602): avc: denied { mount } for pid=10508 comm="syz.1.1293" name="/" dev="rpc_pipefs" ino=27097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 648.294194][ T31] audit: type=1400 audit(1788806955.233:3603): avc: denied { mount } for pid=10508 comm="syz.1.1293" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 648.294251][ T31] audit: type=1400 audit(1788806955.493:3604): avc: denied { write } for pid=10508 comm="syz.1.1293" name="functions" dev="configfs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.294293][ T31] audit: type=1400 audit(1788806955.503:3605): avc: denied { write } for pid=10508 comm="syz.1.1293" name="header" dev="configfs" ino=27130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.294335][ T31] audit: type=1400 audit(1788806955.583:3606): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 648.294375][ T31] audit: type=1400 audit(1788806955.603:3607): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 649.280735][ T30] misc userio: Buffer overflowed, userio client isn't keeping up [ 651.728069][ T30] input: PS/2 Generic Mouse as /devices/serio2/input/input17 [ 651.970884][ T30] psmouse serio2: Failed to enable mouse on [ 652.430738][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 652.430796][ T31] audit: type=1400 audit(1788806960.123:3613): avc: denied { write } for pid=10559 comm="syz.3.1304" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 653.029829][ T31] audit: type=1400 audit(1788806960.713:3614): avc: denied { map } for pid=10559 comm="syz.3.1304" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 653.068629][ T3351] Bluetooth: (null): Invalid header checksum [ 656.365653][ T31] audit: type=1400 audit(1788806964.063:3615): avc: denied { ioctl } for pid=10586 comm="syz-executor" path="socket:[27304]" dev="sockfs" ino=27304 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 656.400039][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 656.413650][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 656.427952][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 656.440708][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 656.448476][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 656.495521][ T31] audit: type=1400 audit(1788806964.203:3616): avc: denied { mounton } for pid=10586 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 657.213534][T10586] lo speed is unknown, defaulting to 1000 [ 658.675257][ T5608] Bluetooth: hci5: command tx timeout [ 658.676803][ T31] audit: type=1400 audit(1788806965.833:3617): avc: denied { bind } for pid=10607 comm="syz.1.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 658.676854][ T31] audit: type=1400 audit(1788806965.833:3618): avc: denied { name_bind } for pid=10607 comm="syz.1.1322" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 658.676895][ T31] audit: type=1400 audit(1788806965.843:3619): avc: denied { node_bind } for pid=10607 comm="syz.1.1322" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 659.425958][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.426041][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.426150][T10586] bridge_slave_0: entered allmulticast mode [ 659.427595][T10586] bridge_slave_0: entered promiscuous mode [ 659.470433][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.470566][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.474342][T10586] bridge_slave_1: entered allmulticast mode [ 659.488419][T10586] bridge_slave_1: entered promiscuous mode [ 659.679429][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.686773][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.712707][T10586] team0: Port device team_slave_0 added [ 659.715064][T10586] team0: Port device team_slave_1 added [ 660.253126][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.253184][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.255097][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.258640][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.258664][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.259016][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.298515][T10586] hsr_slave_0: entered promiscuous mode [ 660.299374][T10586] hsr_slave_1: entered promiscuous mode [ 660.299926][T10586] debugfs: 'hsr0' already exists in 'hsr' [ 660.299950][T10586] Cannot create hsr debugfs directory [ 660.713477][ T5608] Bluetooth: hci5: command tx timeout [ 661.017177][ T31] audit: type=1400 audit(1788806968.723:3620): avc: denied { create } for pid=10653 comm="syz.4.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 661.071566][ T31] audit: type=1400 audit(1788806968.783:3621): avc: denied { bind } for pid=10653 comm="syz.4.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 661.073427][ T31] audit: type=1400 audit(1788806968.783:3622): avc: denied { write } for pid=10653 comm="syz.4.1337" path="socket:[27490]" dev="sockfs" ino=27490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 661.149964][ T31] audit: type=1400 audit(1788806968.853:3623): avc: denied { sqpoll } for pid=10653 comm="syz.4.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 662.272900][ T31] audit: type=1400 audit(1788806969.973:3624): avc: denied { mount } for pid=10653 comm="syz.4.1337" name="/" dev="gadgetfs" ino=8244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 662.594214][T10586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 662.612655][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 662.634412][T10586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 662.664675][T10656] gadgetfs: bound to dummy_udc driver [ 662.703318][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 662.771765][ T5608] Bluetooth: hci5: command tx timeout [ 662.818187][T10586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 662.829275][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 662.834657][T10586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 662.854431][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 663.158017][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.214233][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.254695][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.254793][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.283004][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.283108][ T8741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.657192][ T31] audit: type=1400 audit(1788806971.363:3625): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 664.498666][ T31] audit: type=1400 audit(1788806972.203:3626): avc: denied { create } for pid=10711 comm="syz.2.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 665.081025][ T5609] Bluetooth: hci5: command tx timeout [ 665.388582][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.789892][T10749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 666.331915][T10586] veth0_vlan: entered promiscuous mode [ 666.337114][ T31] audit: type=1400 audit(1788806974.043:3627): avc: denied { name_bind } for pid=10753 comm="syz.1.1366" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 666.346411][T10586] veth1_vlan: entered promiscuous mode [ 666.410169][T10586] veth0_macvtap: entered promiscuous mode [ 666.468756][T10586] veth1_macvtap: entered promiscuous mode [ 666.520596][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.546120][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.585188][ T5981] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.588366][ T5981] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.588408][ T5981] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.588440][ T5981] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.288972][ T8741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.297247][ T8741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.334769][ T8741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.334803][ T8741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.378305][ T31] audit: type=1400 audit(1788806975.083:3628): avc: denied { mounton } for pid=10586 comm="syz-executor" path="/root/syzkaller.HqbXT2/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 667.515641][ T31] audit: type=1400 audit(1788806975.223:3629): avc: denied { mount } for pid=10586 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 667.515719][ T31] audit: type=1400 audit(1788806975.223:3630): avc: denied { mounton } for pid=10586 comm="syz-executor" path="/root/syzkaller.HqbXT2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 667.526717][ T31] audit: type=1400 audit(1788806975.223:3631): avc: denied { mounton } for pid=10586 comm="syz-executor" path="/root/syzkaller.HqbXT2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 667.611685][ T31] audit: type=1400 audit(1788806975.303:3632): avc: denied { mounton } for pid=10586 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 667.624541][ T31] audit: type=1400 audit(1788806975.323:3633): avc: denied { mount } for pid=10586 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 667.624599][ T31] audit: type=1400 audit(1788806975.323:3634): avc: denied { mounton } for pid=10586 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 668.261187][ T31] audit: type=1400 audit(1788806975.943:3635): avc: denied { read } for pid=10783 comm="syz.3.1377" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 668.416020][T10792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 670.824621][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 670.824669][ T31] audit: type=1400 audit(1788806978.513:3638): avc: denied { ioctl } for pid=10787 comm="syz.1.1379" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29233 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 670.854895][ T31] audit: type=1400 audit(1788806978.543:3639): avc: denied { read write } for pid=10813 comm="syz.3.1385" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 670.854953][ T31] audit: type=1400 audit(1788806978.543:3640): avc: denied { open } for pid=10813 comm="syz.3.1385" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 670.875622][ T31] audit: type=1400 audit(1788806978.573:3641): avc: denied { ioctl } for pid=10813 comm="syz.3.1385" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 672.143748][ T31] audit: type=1400 audit(1788806979.853:3642): avc: denied { bind } for pid=10831 comm="syz.1.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 672.264521][ T31] audit: type=1400 audit(1788806979.973:3643): avc: denied { write } for pid=10831 comm="syz.1.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 672.787922][T10838] Invalid ELF header magic: != ELF [ 673.251692][ T31] audit: type=1400 audit(1788806980.493:3644): avc: denied { module_load } for pid=10834 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 675.621947][ T31] audit: type=1400 audit(1788806982.893:3645): avc: denied { mount } for pid=10857 comm="syz.2.1398" name="/" dev="ramfs" ino=28478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 675.776400][ T31] audit: type=1400 audit(1788806983.483:3646): avc: denied { write } for pid=10853 comm="syz.3.1396" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 677.193269][T10884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1407'. [ 677.193381][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 677.193446][T10884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1407'. [ 677.686370][ T31] audit: type=1400 audit(1788806985.393:3647): avc: denied { connect } for pid=10892 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 678.234241][T10896] tipc: Started in network mode [ 678.234284][T10896] tipc: Node identity 4, cluster identity 4711 [ 678.234330][T10896] tipc: Node number set to 4 [ 679.253924][ T31] audit: type=1326 audit(1788806986.803:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.2.1411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644b9e159 code=0x7ffc0000 [ 679.282895][ T31] audit: type=1326 audit(1788806986.813:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.2.1411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644b9e159 code=0x7ffc0000 [ 679.283072][ T31] audit: type=1326 audit(1788806986.813:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.2.1411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5644b9e159 code=0x7ffc0000 [ 679.283273][ T31] audit: type=1326 audit(1788806986.813:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.2.1411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644b9e159 code=0x7ffc0000 [ 679.283440][ T31] audit: type=1326 audit(1788806986.813:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.2.1411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644b9e159 code=0x7ffc0000 [ 679.283628][ T31] audit: type=1326 audit(1788806986.823:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.2.1411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f5644b9e159 code=0x7ffc0000 [ 679.283801][ T31] audit: type=1326 audit(1788806986.823:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.2.1411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644b9e159 code=0x7ffc0000 [ 679.283971][ T31] audit: type=1326 audit(1788806986.823:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.2.1411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644b9e159 code=0x7ffc0000 [ 679.284124][ T31] audit: type=1326 audit(1788806986.823:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10899 comm="syz.2.1411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5644b9e159 code=0x7ffc0000 [ 679.768650][T10916] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 679.768650][T10916] The task syz.1.1414 (10916) triggered the difference, watch for misbehavior. [ 679.964841][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 679.965663][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 679.969547][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 679.970255][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 679.974671][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 679.975371][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 679.988881][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 679.989607][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 680.405004][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 680.405801][T10915] kvm [10912]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 680.727997][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.366483][T10941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1422'. [ 681.366610][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 681.366669][T10941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'. [ 683.752166][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 683.752221][ T31] audit: type=1400 audit(1788806991.433:3672): avc: denied { map } for pid=10948 comm="syz.2.1427" path="socket:[29482]" dev="sockfs" ino=29482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 683.805823][ T31] audit: type=1400 audit(1788806991.513:3673): avc: denied { cmd } for pid=10948 comm="iou-wrk-10951" path="socket:[29482]" dev="sockfs" ino=29482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 685.683605][ T31] audit: type=1400 audit(1788806993.393:3674): avc: denied { read } for pid=10991 comm="syz.3.1436" path="socket:[29737]" dev="sockfs" ino=29737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 686.480604][ T31] audit: type=1400 audit(1788806994.053:3675): avc: denied { read write } for pid=11007 comm="syz.2.1441" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 686.481170][ T31] audit: type=1400 audit(1788806994.173:3676): avc: denied { open } for pid=11007 comm="syz.2.1441" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 690.419567][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1452'. [ 692.493516][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1466'. [ 693.682181][T11092] binder: 11078:11092 ioctl c0306201 0 returned -14 [ 694.184695][ T31] audit: type=1400 audit(1788807001.893:3677): avc: denied { write } for pid=11094 comm="syz.3.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 694.713410][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1479'. [ 698.869474][ T31] audit: type=1400 audit(1788807006.023:3678): avc: denied { audit_write } for pid=11133 comm="syz.4.1488" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 698.901307][ T280] IPVS: starting estimator thread 0... [ 698.990980][T11138] IPVS: using max 47 ests per chain, 112800 per kthread [ 699.356341][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 702.829398][ T31] audit: type=1400 audit(1788807010.533:3679): avc: denied { write } for pid=11173 comm="syz.3.1500" path="socket:[30823]" dev="sockfs" ino=30823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 703.023813][ T31] audit: type=1400 audit(1788807010.733:3680): avc: denied { mount } for pid=11179 comm="syz.3.1503" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 704.383421][ T5741] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 704.517433][ T31] audit: type=1400 audit(1788807012.223:3681): avc: denied { create } for pid=11190 comm="syz.5.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 705.962921][ T5741] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 705.964944][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.111256][ T31] audit: type=1400 audit(1788807013.823:3682): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 706.270809][ T5741] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 706.275788][ T5741] usb 4-1: USB disconnect, device number 39 [ 706.344212][T11203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 710.724829][ T31] audit: type=1400 audit(1788807017.863:3683): avc: denied { create } for pid=11223 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 710.724899][ T31] audit: type=1400 audit(1788807017.873:3684): avc: denied { connect } for pid=11223 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 710.724931][ T31] audit: type=1400 audit(1788807017.873:3685): avc: denied { write } for pid=11223 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 711.060123][T11240] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 0, id = 0 [ 711.512326][T11248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 714.120573][T11272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1527'. [ 714.120712][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'. [ 714.120778][T11272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1527'. [ 716.104535][ T31] audit: type=1400 audit(1788807023.793:3686): avc: denied { watch watch_reads } for pid=11276 comm="syz.4.1531" path="/292/control" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 716.923627][ T31] audit: type=1400 audit(1788807024.633:3687): avc: denied { ioctl } for pid=11277 comm="syz.1.1529" path="socket:[30940]" dev="sockfs" ino=30940 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 720.973569][T11320] ima: policy update failed [ 721.207515][ T31] audit: type=1802 audit(1788807028.683:3688): pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.1543" res=0 errno=0 [ 728.582291][ T31] audit: type=1400 audit(1788807036.293:3689): avc: denied { read write } for pid=11393 comm="syz.1.1566" name="sg0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 728.589006][ T31] audit: type=1400 audit(1788807036.293:3690): avc: denied { open } for pid=11393 comm="syz.1.1566" path="/dev/sg0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 728.604431][ T31] audit: type=1400 audit(1788807036.293:3691): avc: denied { ioctl } for pid=11393 comm="syz.1.1566" path="/dev/sg0" dev="devtmpfs" ino=949 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 728.744886][ T31] audit: type=1400 audit(1788807036.453:3692): avc: denied { read } for pid=11393 comm="syz.1.1566" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 728.744959][ T31] audit: type=1400 audit(1788807036.453:3693): avc: denied { open } for pid=11393 comm="syz.1.1566" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 728.772481][ T31] audit: type=1400 audit(1788807036.483:3694): avc: denied { ioctl } for pid=11393 comm="syz.1.1566" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 730.700828][ T5741] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 730.862541][ T5741] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 730.879581][ T5741] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 730.879629][ T5741] usb 2-1: config 0 has no interface number 0 [ 730.879680][ T5741] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.913435][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.913499][ T5741] usb 2-1: Product: syz [ 730.913514][ T5741] usb 2-1: Manufacturer: syz [ 730.913528][ T5741] usb 2-1: SerialNumber: syz [ 730.923841][ T5741] usb 2-1: config 0 descriptor?? [ 730.955031][ T5741] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 731.366921][ T5741] usb 2-1: USB disconnect, device number 39 [ 731.509952][T11402] yurex 2-1:0.50: yurex_write - failed to send bulk msg, error -19 [ 731.813487][ T5741] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 736.354628][T11445] netlink: 'syz.2.1580': attribute type 10 has an invalid length. [ 736.354674][T11445] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1580'. [ 738.694678][T11477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1591'. [ 738.694782][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1591'. [ 738.694845][T11477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1591'. [ 741.002486][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 741.023357][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 741.044669][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 741.073977][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 741.088561][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 741.437206][T11522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1606'. [ 741.437298][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1606'. [ 741.437355][T11522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1606'. [ 742.461236][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 743.171253][ T5608] Bluetooth: hci6: command tx timeout [ 744.437068][T11508] lo speed is unknown, defaulting to 1000 [ 744.541465][T11566] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1621'. [ 744.541560][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 744.541622][T11566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1621'. [ 745.252191][ T5608] Bluetooth: hci6: command tx timeout [ 746.776774][T11508] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.776859][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.777210][T11508] bridge_slave_0: entered allmulticast mode [ 746.784598][T11508] bridge_slave_0: entered promiscuous mode [ 746.820335][T11508] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.820539][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.823079][T11508] bridge_slave_1: entered allmulticast mode [ 746.834517][T11508] bridge_slave_1: entered promiscuous mode [ 746.941074][T11508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.957165][T11508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.072599][T11508] team0: Port device team_slave_0 added [ 747.086333][T11508] team0: Port device team_slave_1 added [ 747.595313][ T5608] Bluetooth: hci6: command tx timeout [ 747.886318][T11508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.886354][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.886375][T11508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.888189][T11508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.888204][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.888226][T11508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.941692][T11508] hsr_slave_0: entered promiscuous mode [ 747.943630][T11508] hsr_slave_1: entered promiscuous mode [ 747.945795][T11508] debugfs: 'hsr0' already exists in 'hsr' [ 747.945815][T11508] Cannot create hsr debugfs directory [ 749.494213][ T5829] wlan1: Trigger new scan to find an IBSS to join [ 749.516500][ T50] IPVS: starting estimator thread 0... [ 749.605152][T11608] IPVS: using max 65 ests per chain, 156000 per kthread [ 749.660796][ T5608] Bluetooth: hci6: command tx timeout [ 749.665230][T11601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.241480][ T31] audit: type=1400 audit(1788807058.943:3695): avc: denied { read } for pid=11620 comm="syz.3.1637" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 751.267660][ T31] audit: type=1400 audit(1788807058.973:3696): avc: denied { open } for pid=11620 comm="syz.3.1637" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 751.465502][T11621] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 751.465711][T11621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 751.465843][T11621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 751.465969][T11621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 751.466092][T11621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 751.466216][T11621] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 751.466269][T11621] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 751.535566][T11621] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 751.598239][T11621] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 751.603720][T11621] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 751.659950][T11621] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 752.719004][T11508] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 752.798928][T11508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 752.807480][T11508] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 752.848224][T11508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 752.858494][T11508] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 752.876183][T11508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 752.899601][T11508] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 752.927439][T11508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 752.996854][T11632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'. [ 752.996947][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 752.997009][T11632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1630'. [ 753.491219][ T5609] Bluetooth: hci5: command 0x0c1a tx timeout [ 753.491292][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 753.501349][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 753.501385][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 753.501409][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 753.501433][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 753.680816][T11641] Bluetooth: hci6: command 0x0c1a tx timeout [ 753.898195][ T6316] wlan1: Trigger new scan to find an IBSS to join [ 754.224437][T11508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.284615][T11508] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.306650][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.306761][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.335828][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.335949][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.607640][T11641] Bluetooth: hci5: command 0x0c1a tx timeout [ 755.730999][T11641] Bluetooth: hci6: command 0x0c1a tx timeout [ 755.765195][T11654] misc userio: Invalid payload size [ 755.773455][T11654] misc userio: No port type given on /dev/userio [ 755.784839][T11654] misc userio: The device must be registered before sending interrupts [ 756.404087][ T5829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.714851][T11641] Bluetooth: hci5: command 0x0c1a tx timeout [ 757.820734][T11641] Bluetooth: hci6: command 0x0c1a tx timeout [ 758.095199][T11692] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1649'. [ 758.095256][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1649'. [ 758.095282][T11692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1649'. [ 760.113290][T11508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.312530][T11719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1655'. [ 760.312575][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1655'. [ 760.312602][T11719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1655'. [ 764.342047][T11508] veth0_vlan: entered promiscuous mode [ 764.439099][T11508] veth1_vlan: entered promiscuous mode [ 764.705364][T11762] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1668'. [ 764.705418][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'. [ 764.705445][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1668'. [ 765.129796][T11508] veth0_macvtap: entered promiscuous mode [ 765.200592][T11508] veth1_macvtap: entered promiscuous mode [ 765.325833][T11508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.354501][T11508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.571065][ T70] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.571546][ T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.571603][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.571638][ T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.099765][T11780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1662'. [ 767.099863][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 767.099928][T11780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1662'. [ 767.490126][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.504284][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.774346][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.774385][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.303378][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'. [ 771.856530][T11819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1684'. [ 771.856582][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1684'. [ 771.856614][T11819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1684'. [ 781.461787][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 781.611399][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 781.612228][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 781.613225][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.613247][ T25] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 781.614998][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.615021][ T25] usb 2-1: Product: syz [ 781.615036][ T25] usb 2-1: Manufacturer: syz [ 781.615051][ T25] usb 2-1: SerialNumber: syz [ 781.891485][ T5732] usb 2-1: USB disconnect, device number 40 [ 782.335096][T11891] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1698'. [ 782.335152][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1698'. [ 782.335183][T11891] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1698'. [ 782.724026][T11896] lo speed is unknown, defaulting to 1000 [ 782.761929][T11899] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1706'. [ 782.783633][T11899] gre0: entered promiscuous mode [ 782.827367][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'. [ 783.307869][T11913] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 784.353546][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'. [ 787.347694][T11935] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe00 [ 787.347733][T11935] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 787.347753][T11935] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 787.347769][T11935] page_type: f5(slab) [ 787.347786][T11935] raw: 00fff00000000040 ffff88801c02fdc0 dead000000000100 dead000000000122 [ 787.347801][T11935] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 787.347815][T11935] head: 00fff00000000040 ffff88801c02fdc0 dead000000000100 dead000000000122 [ 787.347826][T11935] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 787.347839][T11935] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 787.347852][T11935] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 787.347861][T11935] page dumped because: unmovable page [ 787.347872][T11935] page_owner tracks the page as allocated [ 787.347885][T11935] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15, tgid 15 (ksoftirqd/0), ts 150262502235 [ 787.347908][T11935] post_alloc_hook+0xfd/0x120 [ 787.347934][T11935] get_page_from_freelist+0x110d/0x35d0 [ 787.347953][T11935] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 787.347973][T11935] new_slab+0xa9/0x6e0 [ 787.347989][T11935] refill_objects+0xe3/0x410 [ 787.348006][T11935] __pcs_replace_empty_main+0x35e/0x650 [ 787.348023][T11935] __kmalloc_noprof+0x67c/0x840 [ 787.348036][T11935] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 787.348050][T11935] ieee80211_inform_bss+0x159/0x1170 [ 787.348067][T11935] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 787.348085][T11935] cfg80211_inform_bss_data+0x230/0x3c20 [ 787.348103][T11935] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 787.348122][T11935] ieee80211_bss_info_update+0x310/0xab0 [ 787.348140][T11935] ieee80211_scan_rx+0x4e6/0xb60 [ 787.348156][T11935] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 787.348169][T11935] ieee80211_rx_list+0xf19/0x2160 [ 787.348181][T11935] page last free pid 6391 tgid 6391 ts 149232413027 stack trace: [ 787.348191][T11935] __free_frozen_pages+0x79f/0x10f0 [ 787.348206][T11935] qlist_free_all+0x47/0xf0 [ 787.348218][T11935] kasan_quarantine_reduce+0x1a0/0x1f0 [ 787.348231][T11935] __kasan_slab_alloc+0x69/0x90 [ 787.348245][T11935] kmem_cache_alloc_noprof+0x269/0x6a0 [ 787.348257][T11935] ptlock_alloc+0x1f/0x70 [ 787.348273][T11935] pte_alloc_one+0x82/0x3d0 [ 787.348291][T11935] __pte_alloc+0x6d/0x380 [ 787.348306][T11935] get_locked_pte+0xa1/0xc0 [ 787.348326][T11935] insert_page+0xcc/0x220 [ 787.348348][T11935] vm_insert_page+0x2c0/0x400 [ 787.428471][T11946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1718'. [ 787.428498][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1718'. [ 787.428512][T11946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1718'. [ 787.776978][ T31] audit: type=1400 audit(1788807095.483:3697): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 787.777027][ T31] audit: type=1400 audit(1788807095.483:3698): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.777075][ T31] audit: type=1400 audit(1788807095.483:3699): avc: denied { append } for pid=4951 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 787.777112][ T31] audit: type=1400 audit(1788807095.483:3700): avc: denied { open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 787.777149][ T31] audit: type=1400 audit(1788807095.483:3701): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 788.139641][T11935] kcov_mmap+0xca/0x130 [ 788.139688][T11935] __mmap_region+0x157e/0x32c0 [ 788.139710][T11935] mmap_region+0x5a8/0x6d0 [ 788.139729][T11935] do_mmap+0x12c7/0x1c30 [ 788.139745][T11935] vm_mmap_pgoff+0x28d/0x470 [ 788.877839][ T31] audit: type=1400 audit(1788807096.583:3702): avc: denied { name_bind } for pid=11954 comm="syz.6.1723" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 788.920373][T11955] FAULT_INJECTION: forcing a failure. [ 788.920373][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 788.920434][T11955] CPU: 1 UID: 0 PID: 11955 Comm: syz.6.1723 Not tainted syzkaller #0 PREEMPT(full) [ 788.920461][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 788.920474][T11955] Call Trace: [ 788.920481][T11955] [ 788.920490][T11955] dump_stack_lvl+0x100/0x190 [ 788.920527][T11955] should_fail_ex.cold+0x5/0xa [ 788.920558][T11955] should_failslab+0xc2/0x120 [ 788.920588][T11955] kmem_cache_alloc_noprof+0x92/0x6a0 [ 788.920611][T11955] ? inet_twsk_alloc+0x124/0xa20 [ 788.920638][T11955] inet_twsk_alloc+0x124/0xa20 [ 788.920658][T11955] tcp_time_wait+0x5d/0xed0 [ 788.920687][T11955] tcp_rcv_state_process+0x259e/0x7190 [ 788.920718][T11955] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 788.920754][T11955] ? __lock_acquire+0x5c0/0x1f40 [ 788.920778][T11955] ? tcp_write_xmit+0x18cb/0x8470 [ 788.920803][T11955] ? lock_acquire+0x1d1/0x380 [ 788.920825][T11955] ? tcp_v6_do_rcv+0x7ff/0x1ff0 [ 788.920848][T11955] tcp_v6_do_rcv+0x7ff/0x1ff0 [ 788.920864][T11955] ? __local_bh_enable_ip+0xa5/0x120 [ 788.920881][T11955] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 788.920891][T11955] __release_sock+0x151/0x440 [ 788.920904][T11955] ? sock_def_wakeup+0x118/0x2c0 [ 788.920916][T11955] ? __pfx_tcp_shutdown+0x10/0x10 [ 788.920941][T11955] release_sock+0x1e5/0x280 [ 788.920960][T11955] ? __pfx_tcp_shutdown+0x10/0x10 [ 788.920988][T11955] inet_shutdown+0x1e3/0x410 [ 788.921007][T11955] __sys_shutdown+0x116/0x1b0 [ 788.921021][T11955] __x64_sys_shutdown+0x53/0x80 [ 788.921032][T11955] do_syscall_64+0x123/0x790 [ 788.921049][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.921063][T11955] RIP: 0033:0x7f67ddb9e159 [ 788.921074][T11955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.921086][T11955] RSP: 002b:00007f67dea0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 788.921099][T11955] RAX: ffffffffffffffda RBX: 00007f67dde25fa0 RCX: 00007f67ddb9e159 [ 788.921106][T11955] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 788.921114][T11955] RBP: 00007f67ddc35024 R08: 0000000000000000 R09: 0000000000000000 [ 788.921121][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.921129][T11955] R13: 00007f67dde26038 R14: 00007f67dde25fa0 R15: 00007ffeae3745d8 [ 788.921146][T11955] [ 789.084075][ T31] audit: type=1400 audit(1788807096.793:3703): avc: denied { append } for pid=11961 comm="syz.1.1724" name="demux0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 789.221000][ T31] audit: type=1400 audit(1788807096.923:3704): avc: denied { map } for pid=11961 comm="syz.1.1724" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 789.227377][T11958] lo speed is unknown, defaulting to 1000 [ 790.821261][T11987] netlink: 'syz.1.1733': attribute type 10 has an invalid length. [ 790.821312][T11987] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1733'. [ 792.540919][T12001] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 792.608153][T11999] lo speed is unknown, defaulting to 1000 [ 792.751127][ T31] audit: type=1400 audit(1788807100.463:3705): avc: denied { wake_alarm } for pid=12002 comm="syz.3.1739" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 793.267379][ T31] audit: type=1400 audit(1788807100.973:3706): avc: denied { read } for pid=12010 comm="syz.3.1742" path="socket:[33861]" dev="sockfs" ino=33861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 794.080125][ T31] audit: type=1400 audit(1788807101.783:3707): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 796.879235][ T31] audit: type=1400 audit(1788807104.583:3708): avc: denied { getopt } for pid=12030 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 797.027363][T12031] lo speed is unknown, defaulting to 1000 [ 799.462083][ T31] audit: type=1400 audit(1788807107.173:3709): avc: denied { ioctl } for pid=12073 comm="syz.6.1761" path="socket:[33956]" dev="sockfs" ino=33956 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 799.545404][ T31] audit: type=1400 audit(1788807107.253:3710): avc: denied { mount } for pid=12073 comm="syz.6.1761" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 800.586056][ T31] audit: type=1400 audit(1788807108.293:3711): avc: denied { unmount } for pid=11508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 800.694674][ T31] audit: type=1400 audit(1788807108.403:3712): avc: denied { map } for pid=12083 comm="syz.6.1765" path="socket:[33715]" dev="sockfs" ino=33715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 800.965139][ T31] audit: type=1400 audit(1788807108.673:3713): avc: denied { append } for pid=12092 comm="syz.6.1769" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 803.575478][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.448236][ T31] audit: type=1400 audit(1788807112.153:3714): avc: denied { create } for pid=12128 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 804.945704][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1775'. [ 804.948923][ T31] audit: type=1400 audit(1788807112.643:3715): avc: denied { create } for pid=12135 comm="syz.6.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 807.436917][T12161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 809.992322][T12184] Cannot find del_set index 3 as target [ 811.634637][ T228] IPVS: starting estimator thread 0... [ 811.762354][T12191] netlink: 'syz.2.1801': attribute type 10 has an invalid length. [ 811.762404][T12191] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1801'. [ 811.800883][T12189] IPVS: using max 37 ests per chain, 88800 per kthread [ 812.867136][ T5608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 812.882997][ T5608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 812.899649][ T5608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 812.908621][ T5608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 812.916431][ T5608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 813.081058][T12211] FAULT_INJECTION: forcing a failure. [ 813.081058][T12211] name failslab, interval 1, probability 0, space 0, times 0 [ 813.081143][T12211] CPU: 0 UID: 0 PID: 12211 Comm: syz.1.1806 Not tainted syzkaller #0 PREEMPT(full) [ 813.081170][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 813.081184][T12211] Call Trace: [ 813.081191][T12211] [ 813.081200][T12211] dump_stack_lvl+0x100/0x190 [ 813.081236][T12211] should_fail_ex.cold+0x5/0xa [ 813.081268][T12211] should_failslab+0xc2/0x120 [ 813.081293][T12211] __kmalloc_cache_noprof+0x91/0x6d0 [ 813.081322][T12211] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 813.081351][T12211] ? nfs_alloc_fhandle+0x3b/0x90 [ 813.081383][T12211] nfs_alloc_fhandle+0x3b/0x90 [ 813.081407][T12211] nfs_init_fs_context+0x65/0x1510 [ 813.081452][T12211] alloc_fs_context+0x60c/0xf40 [ 813.081503][T12211] __x64_sys_fsopen+0xed/0x220 [ 813.081527][T12211] do_syscall_64+0x123/0x790 [ 813.081559][T12211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.081582][T12211] RIP: 0033:0x7f4fc8d9e159 [ 813.081601][T12211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.081624][T12211] RSP: 002b:00007f4fc9c31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 813.081645][T12211] RAX: ffffffffffffffda RBX: 00007f4fc9026180 RCX: 00007f4fc8d9e159 [ 813.081658][T12211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 813.081671][T12211] RBP: 00007f4fc8e35024 R08: 0000000000000000 R09: 0000000000000000 [ 813.081684][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.081696][T12211] R13: 00007f4fc9026218 R14: 00007f4fc9026180 R15: 00007ffd2a968fa8 [ 813.081725][T12211] [ 813.836002][T12206] lo speed is unknown, defaulting to 1000 [ 815.301172][T11641] Bluetooth: hci7: command tx timeout [ 815.477587][T12233] syzkaller0: entered promiscuous mode [ 815.490920][T12233] syzkaller0: entered allmulticast mode [ 815.765960][ T31] audit: type=1400 audit(1788807123.473:3716): avc: denied { unmount } for pid=12248 comm="syz.2.1814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 815.999795][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1813'. [ 816.544628][T12254] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1812'. [ 816.544680][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1812'. [ 816.544714][T12254] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1812'. [ 817.430126][T11641] Bluetooth: hci7: command tx timeout [ 819.503553][T12285] mount: server 127.0.0.1 not responding, timed out [ 819.517896][ T5608] Bluetooth: hci7: command tx timeout [ 819.900023][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'. [ 821.580821][ T5608] Bluetooth: hci7: command tx timeout [ 823.528412][T12310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 823.564523][T12206] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.571870][T12206] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.579172][T12206] bridge_slave_0: entered allmulticast mode [ 823.586849][T12206] bridge_slave_0: entered promiscuous mode [ 823.598383][T12206] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.605814][T12206] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.614918][T12206] bridge_slave_1: entered allmulticast mode [ 823.632724][T12206] bridge_slave_1: entered promiscuous mode [ 823.778368][T12206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.794000][T12206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.881513][T12319] Cannot find add_set index 0 as target [ 823.917304][T12206] team0: Port device team_slave_0 added [ 823.929559][T12206] team0: Port device team_slave_1 added [ 824.323969][T12206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.324003][T12206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.325467][T12206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.336934][T12206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.336951][T12206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.337020][T12206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.628611][T12206] hsr_slave_0: entered promiscuous mode [ 824.635072][T12206] hsr_slave_1: entered promiscuous mode [ 824.635711][T12206] debugfs: 'hsr0' already exists in 'hsr' [ 824.635751][T12206] Cannot create hsr debugfs directory [ 824.671320][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1834'. [ 825.396056][ T31] audit: type=1400 audit(1788807133.103:3717): avc: denied { setopt } for pid=12341 comm="syz.2.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 825.399011][T12336] syzkaller0: entered promiscuous mode [ 825.399038][T12336] syzkaller0: entered allmulticast mode [ 825.723229][T12346] sd 0:0:1:0: PR command failed: 1026 [ 825.723524][T12346] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 825.723730][T12346] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 826.173570][T12348] FAULT_INJECTION: forcing a failure. [ 826.173570][T12348] name failslab, interval 1, probability 0, space 0, times 0 [ 826.173617][T12348] CPU: 0 UID: 0 PID: 12348 Comm: syz.6.1843 Not tainted syzkaller #0 PREEMPT(full) [ 826.173639][T12348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 826.173651][T12348] Call Trace: [ 826.173657][T12348] [ 826.173665][T12348] dump_stack_lvl+0x100/0x190 [ 826.173705][T12348] should_fail_ex.cold+0x5/0xa [ 826.173739][T12348] should_failslab+0xc2/0x120 [ 826.173778][T12348] kmem_cache_alloc_noprof+0x92/0x6a0 [ 826.173805][T12348] ? sctp_get_port_local+0x828/0x1630 [ 826.173847][T12348] sctp_get_port_local+0x828/0x1630 [ 826.173889][T12348] ? __pfx_sctp_get_port_local+0x10/0x10 [ 826.173927][T12348] ? sctp_bind_addr_match+0x19d/0x300 [ 826.173963][T12348] sctp_do_bind+0x2b9/0x760 [ 826.173995][T12348] sctp_connect_new_asoc+0x5e7/0x770 [ 826.174024][T12348] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 826.174054][T12348] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 826.174090][T12348] __sctp_connect+0x3e7/0xc70 [ 826.174121][T12348] ? __pfx___sctp_connect+0x10/0x10 [ 826.174147][T12348] ? selinux_sctp_bind_connect+0xe0/0x230 [ 826.174193][T12348] __sctp_setsockopt_connectx+0x100/0x190 [ 826.174223][T12348] sctp_setsockopt+0x46a9/0xb370 [ 826.174255][T12348] ? __pfx_sctp_setsockopt+0x10/0x10 [ 826.174280][T12348] ? __fget_files+0x215/0x3d0 [ 826.174311][T12348] ? selinux_socket_setsockopt+0x6a/0x80 [ 826.174344][T12348] ? sock_common_setsockopt+0x2e/0xf0 [ 826.174373][T12348] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 826.174408][T12348] do_sock_setsockopt+0xf3/0x1d0 [ 826.174434][T12348] __sys_setsockopt+0x195/0x220 [ 826.174468][T12348] __x64_sys_setsockopt+0xbd/0x160 [ 826.174491][T12348] ? do_syscall_64+0xae/0x790 [ 826.174522][T12348] ? lockdep_hardirqs_on+0x7d/0x110 [ 826.174551][T12348] do_syscall_64+0x123/0x790 [ 826.174586][T12348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.174612][T12348] RIP: 0033:0x7f67ddb9e159 [ 826.174633][T12348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.174658][T12348] RSP: 002b:00007f67dea0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 826.174683][T12348] RAX: ffffffffffffffda RBX: 00007f67dde25fa0 RCX: 00007f67ddb9e159 [ 826.174699][T12348] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 826.174715][T12348] RBP: 00007f67ddc35024 R08: 000000000000001c R09: 0000000000000000 [ 826.174730][T12348] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 826.174754][T12348] R13: 00007f67dde26038 R14: 00007f67dde25fa0 R15: 00007ffeae3745d8 [ 826.174793][T12348] [ 828.494337][T12376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 829.453403][T12385] FAULT_INJECTION: forcing a failure. [ 829.453403][T12385] name failslab, interval 1, probability 0, space 0, times 0 [ 829.453456][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.2.1855 Not tainted syzkaller #0 PREEMPT(full) [ 829.453480][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 829.453492][T12385] Call Trace: [ 829.453499][T12385] [ 829.453508][T12385] dump_stack_lvl+0x100/0x190 [ 829.453543][T12385] should_fail_ex.cold+0x5/0xa [ 829.453572][T12385] should_failslab+0xc2/0x120 [ 829.453598][T12385] kmem_cache_alloc_noprof+0x92/0x6a0 [ 829.453620][T12385] ? sctp_get_port_local+0x828/0x1630 [ 829.453653][T12385] sctp_get_port_local+0x828/0x1630 [ 829.453686][T12385] ? __pfx_sctp_get_port_local+0x10/0x10 [ 829.453715][T12385] ? sctp_bind_addr_match+0x19d/0x300 [ 829.453739][T12385] sctp_do_bind+0x2b9/0x760 [ 829.453763][T12385] sctp_connect_new_asoc+0x5e7/0x770 [ 829.453782][T12385] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 829.453801][T12385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 829.453829][T12385] __sctp_connect+0x3e7/0xc70 [ 829.453859][T12385] ? __pfx___sctp_connect+0x10/0x10 [ 829.453882][T12385] ? selinux_sctp_bind_connect+0xe0/0x230 [ 829.453923][T12385] __sctp_setsockopt_connectx+0x100/0x190 [ 829.453947][T12385] sctp_setsockopt+0x46a9/0xb370 [ 829.453975][T12385] ? __pfx_sctp_setsockopt+0x10/0x10 [ 829.453995][T12385] ? __fget_files+0x215/0x3d0 [ 829.454022][T12385] ? selinux_socket_setsockopt+0x6a/0x80 [ 829.454053][T12385] ? sock_common_setsockopt+0x2e/0xf0 [ 829.454077][T12385] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 829.454107][T12385] do_sock_setsockopt+0xf3/0x1d0 [ 829.454138][T12385] __sys_setsockopt+0x195/0x220 [ 829.454163][T12385] __x64_sys_setsockopt+0xbd/0x160 [ 829.454181][T12385] ? do_syscall_64+0xae/0x790 [ 829.454204][T12385] ? lockdep_hardirqs_on+0x7d/0x110 [ 829.454227][T12385] do_syscall_64+0x123/0x790 [ 829.454252][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.454273][T12385] RIP: 0033:0x7f5644b9e159 [ 829.454291][T12385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.454308][T12385] RSP: 002b:00007f56459fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 829.454329][T12385] RAX: ffffffffffffffda RBX: 00007f5644e25fa0 RCX: 00007f5644b9e159 [ 829.454342][T12385] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 829.454354][T12385] RBP: 00007f5644c35024 R08: 000000000000001c R09: 0000000000000000 [ 829.454365][T12385] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 829.454376][T12385] R13: 00007f5644e26038 R14: 00007f5644e25fa0 R15: 00007fff233ed458 [ 829.454418][T12385] [ 829.825786][T12393] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1858'. [ 829.829237][ T31] audit: type=1400 audit(1788807137.533:3718): avc: denied { create } for pid=12392 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 829.829294][ T31] audit: type=1400 audit(1788807137.533:3719): avc: denied { write } for pid=12392 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 832.380801][ T31] audit: type=1400 audit(1788807140.083:3720): avc: denied { write } for pid=12410 comm="syz.2.1864" name="nullb" dev="configfs" ino=2862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 832.553121][ T31] audit: type=1400 audit(1788807140.253:3721): avc: denied { execute } for pid=12410 comm="syz.2.1864" name="file0" dev="tmpfs" ino=2292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 832.553207][ T31] audit: type=1400 audit(1788807140.253:3722): avc: denied { execute_no_trans } for pid=12410 comm="syz.2.1864" path="/421/file0" dev="tmpfs" ino=2292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 832.637196][T12414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 832.853442][T12413] null_blk: disk nullb1 created [ 834.124077][T12420] ceph: No mds server is up or the cluster is laggy [ 834.264435][ T5691] libceph: connect (1)[c::]:6789 error -101 [ 834.267093][ T5691] libceph: mon0 (1)[c::]:6789 connect error [ 837.429937][T12456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 838.715273][ T31] audit: type=1400 audit(1788807146.423:3723): avc: denied { ioctl } for pid=12473 comm="syz.2.1885" path="socket:[35726]" dev="sockfs" ino=35726 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 840.036020][ T31] audit: type=1400 audit(1788807147.693:3724): avc: denied { ioctl } for pid=12478 comm="syz.2.1887" path="socket:[35734]" dev="sockfs" ino=35734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 840.436493][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1881'. [ 840.462656][ T31] audit: type=1326 audit(1788807148.173:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12486 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0b39e159 code=0x7ffc0000 [ 840.490991][ T31] audit: type=1326 audit(1788807148.203:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12486 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0b39e159 code=0x7ffc0000 [ 840.518415][ T31] audit: type=1326 audit(1788807148.223:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12486 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8d0b39e159 code=0x7ffc0000 [ 840.545882][ T31] audit: type=1326 audit(1788807148.253:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12486 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0b39e159 code=0x7ffc0000 [ 840.574118][ T31] audit: type=1326 audit(1788807148.283:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12486 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8d0b39e159 code=0x7ffc0000 [ 840.595350][ T31] audit: type=1326 audit(1788807148.283:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12486 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0b39e159 code=0x7ffc0000 [ 840.595587][ T31] audit: type=1326 audit(1788807148.283:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12486 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d0b39e159 code=0x7ffc0000 [ 840.595822][ T31] audit: type=1326 audit(1788807148.283:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12486 comm="syz.3.1888" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0b39e159 code=0x7ffc0000 [ 840.767478][T12206] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 840.824179][T12206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 840.839629][T12206] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 840.964951][T12491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1890'. [ 840.964997][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1890'. [ 840.965022][T12491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1890'. [ 840.968906][T12206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 840.969776][T12206] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 841.269186][T12206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.290981][T12206] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 841.444191][T12206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 841.871021][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1895'. [ 841.873472][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1895'. [ 841.873488][T12507] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1895'. [ 843.074769][T12206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.150350][T12206] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.178005][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.178155][ T1417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.232183][T12521] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 843.252357][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.252471][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.552082][T12206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 845.897677][T12206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.202283][T12206] veth0_vlan: entered promiscuous mode [ 846.228361][T12206] veth1_vlan: entered promiscuous mode [ 846.371241][T12206] veth0_macvtap: entered promiscuous mode [ 846.382826][T12206] veth1_macvtap: entered promiscuous mode [ 846.407907][T12206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.431919][T12206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.679681][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.691219][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.691276][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.691311][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.382434][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.382469][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.469408][T12575] netlink: 'syz.3.1910': attribute type 21 has an invalid length. [ 850.469505][T12575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1910'. [ 850.469551][T12575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1910'. [ 850.482382][ T5981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.482404][ T5981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.512580][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 850.512599][ T31] audit: type=1400 audit(1788807158.223:3735): avc: denied { connect } for pid=12573 comm="syz.3.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 850.515623][ T31] audit: type=1400 audit(1788807158.223:3736): avc: denied { write } for pid=12573 comm="syz.3.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 850.833333][ T5732] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 850.990788][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 850.993162][ T5732] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 850.996997][ T5732] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 850.997025][ T5732] usb 4-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 850.997045][ T5732] usb 4-1: config 0 has no interface number 0 [ 850.998958][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.998984][ T5732] usb 4-1: Product: syz [ 850.998999][ T5732] usb 4-1: Manufacturer: syz [ 850.999014][ T5732] usb 4-1: SerialNumber: syz [ 851.018304][ T5732] usb 4-1: config 0 descriptor?? [ 851.070527][ T5732] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 851.070565][ T5732] uvcvideo 4-1:0.105: No valid video chain found. [ 851.953298][T11938] usb 4-1: USB disconnect, device number 40 [ 854.687019][T12598] netlink: 'syz.3.1917': attribute type 10 has an invalid length. [ 854.687067][T12598] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1917'. [ 856.022393][T12611] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1914'. [ 858.291008][ T31] audit: type=1400 audit(1788807165.993:3737): avc: denied { execute } for pid=12621 comm="syz.3.1925" path="/dev/dsp" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 858.879037][T12627] nvme_rdma: malformed address passed: 1:4420 [ 859.260407][ T31] audit: type=1400 audit(1788807166.943:3738): avc: denied { bind } for pid=12630 comm="syz.3.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 860.023602][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 861.246166][T12651] netlink: 'syz.3.1933': attribute type 10 has an invalid length. [ 861.254341][T12651] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1933'. [ 861.643769][T12655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.210760][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.859407][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 866.228439][T12686] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1938'. [ 867.357596][ T3351] IPVS: starting estimator thread 0... [ 867.441368][T12696] IPVS: using max 37 ests per chain, 88800 per kthread [ 867.727149][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xada5 instead [ 867.727201][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x7ab0 instead [ 867.727234][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x9ebc instead [ 867.727254][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xa2dd instead [ 867.727274][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x471e instead [ 867.727294][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xb956 instead [ 867.727314][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xe431 instead [ 867.727343][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x9708 instead [ 867.727363][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x4d60 instead [ 867.727384][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xb159 instead [ 867.727403][T12705] jffs2: Further such events for this erase block will not be printed [ 867.727513][T12705] jffs2: Old JFFS2 bitmask found at 0x000002b8 [ 867.727527][T12705] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 867.727890][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x0f7a instead [ 867.727912][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xd1a6 instead [ 867.727931][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x52ce instead [ 867.727952][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x00e8 instead [ 867.727972][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x576e instead [ 867.727993][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x9c4d instead [ 867.728012][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe438 instead [ 867.728030][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xa2dc instead [ 867.728048][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xba76 instead [ 867.728067][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xd460 instead [ 867.728085][T12705] jffs2: Further such events for this erase block will not be printed [ 867.728552][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x2d5c instead [ 867.728574][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xc088 instead [ 867.728595][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x35b4 instead [ 867.728615][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x73c8 instead [ 867.728636][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x1979 instead [ 867.728657][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xabc5 instead [ 867.728678][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x30df instead [ 867.728698][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xf74b instead [ 867.728719][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x97ad instead [ 867.728737][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x29f0 instead [ 867.728755][T12705] jffs2: Further such events for this erase block will not be printed [ 867.729166][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x275a instead [ 867.729186][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x3ad7 instead [ 867.729206][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xaff4 instead [ 867.729225][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x42b7 instead [ 867.729246][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x0610 instead [ 867.729266][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xebda instead [ 867.729287][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xdfda instead [ 867.729307][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x4d5f instead [ 867.729334][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xa8ff instead [ 867.729354][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x313c instead [ 867.729373][T12705] jffs2: Further such events for this erase block will not be printed [ 867.729840][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x3cd6 instead [ 867.729862][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xff8e instead [ 867.729882][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x394f instead [ 867.729903][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x9c4c instead [ 867.729923][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xe843 instead [ 867.729943][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xad97 instead [ 867.729963][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x458f instead [ 867.729983][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xe26f instead [ 867.730002][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x8e72 instead [ 867.730021][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xb247 instead [ 867.730039][T12705] jffs2: Further such events for this erase block will not be printed [ 867.730507][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x8d33 instead [ 867.730536][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x9131 instead [ 867.730556][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x1ad7 instead [ 867.730576][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xe7af instead [ 867.730597][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xfcba instead [ 867.730616][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xe0b8 instead [ 867.730797][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xcad7 instead [ 867.730818][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x3244 instead [ 867.730839][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x5cc8 instead [ 867.730858][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xef1c instead [ 867.730879][T12705] jffs2: Further such events for this erase block will not be printed [ 867.731303][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x708d instead [ 867.731323][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xc6be instead [ 867.731352][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xbc79 instead [ 867.731373][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x0959 instead [ 867.731392][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xadf1 instead [ 867.731412][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x4293 instead [ 867.731432][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf35b instead [ 867.731474][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xe2dd instead [ 867.731493][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xd6a0 instead [ 867.731515][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x338a instead [ 867.731534][T12705] jffs2: Further such events for this erase block will not be printed [ 867.731957][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x5861 instead [ 867.731979][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x6a5c instead [ 867.732002][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x5c68 instead [ 867.732022][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x2fcd instead [ 867.732043][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x5fb3 instead [ 867.732064][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x2133 instead [ 867.732083][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xb702 instead [ 867.732103][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x0a99 instead [ 867.732121][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xd4a9 instead [ 867.732140][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x74e0 instead [ 867.732159][T12705] jffs2: Further such events for this erase block will not be printed [ 867.732629][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x3fde instead [ 867.732650][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x8218 instead [ 867.732671][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x19ea instead [ 867.732691][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x6fb6 instead [ 867.732712][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x343d instead [ 867.732731][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xedbf instead [ 867.732750][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x25ff instead [ 867.732769][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x85e1 instead [ 867.732787][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xcee8 instead [ 867.732805][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x66ef instead [ 867.732823][T12705] jffs2: Further such events for this erase block will not be printed [ 867.733235][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x1323 instead [ 867.733255][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x96b7 instead [ 867.733273][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x9a81 instead [ 867.733292][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xd5d3 instead [ 867.733312][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x00de instead [ 867.733339][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x0a67 instead [ 867.733360][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xdda6 instead [ 867.733380][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xf15c instead [ 867.733400][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x23eb instead [ 867.733420][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x1492 instead [ 867.733440][T12705] jffs2: Further such events for this erase block will not be printed [ 867.733895][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x5d78 instead [ 867.733917][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x35ac instead [ 867.733936][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xce87 instead [ 867.733956][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x5619 instead [ 867.733977][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xab27 instead [ 867.733998][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x3ae9 instead [ 867.734018][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x2215 instead [ 867.734038][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xdae9 instead [ 867.734058][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x4246 instead [ 867.734079][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x988c instead [ 867.734098][T12705] jffs2: Further such events for this erase block will not be printed [ 867.734536][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x8f11 instead [ 867.734557][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x8be3 instead [ 867.734576][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xb3f4 instead [ 867.734595][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xe279 instead [ 867.734614][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x798e instead [ 867.734633][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x5436 instead [ 867.734651][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x94c8 instead [ 867.734669][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x6a01 instead [ 867.734688][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xb3f7 instead [ 867.734706][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x6f98 instead [ 867.734724][T12705] jffs2: Further such events for this erase block will not be printed [ 867.735127][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xb91a instead [ 867.735146][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xd354 instead [ 867.735164][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x7d12 instead [ 867.735182][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x226b instead [ 867.735200][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x3bfd instead [ 867.735219][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x4759 instead [ 867.735237][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x545b instead [ 867.735255][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x8eab instead [ 867.735273][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x0fdc instead [ 867.735291][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x4021 instead [ 867.735309][T12705] jffs2: Further such events for this erase block will not be printed [ 867.735737][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xf8dc instead [ 867.735757][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x09f1 instead [ 867.735774][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xce2f instead [ 867.735793][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xb196 instead [ 867.735811][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xd064 instead [ 867.735830][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x27c1 instead [ 867.735848][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0174 instead [ 867.735866][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x05d3 instead [ 867.735884][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x8f60 instead [ 867.735902][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x1aab instead [ 867.735920][T12705] jffs2: Further such events for this erase block will not be printed [ 867.736329][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x72fb instead [ 867.736348][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0800 instead [ 867.736367][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x2e3f instead [ 867.736385][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xc2b7 instead [ 867.736404][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xf489 instead [ 867.736422][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x85ce instead [ 867.736440][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xa545 instead [ 867.736477][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xa7fc instead [ 867.736496][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xbe0c instead [ 867.736514][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x55f8 instead [ 867.736532][T12705] jffs2: Further such events for this erase block will not be printed [ 867.736944][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xc1c3 instead [ 867.736964][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xeb45 instead [ 867.736982][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x559f instead [ 867.737001][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x8489 instead [ 867.737019][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x271a instead [ 867.737038][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x2732 instead [ 867.737056][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf93a instead [ 867.737074][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xa4f1 instead [ 867.737093][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xb377 instead [ 867.737111][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x94df instead [ 867.737129][T12705] jffs2: Further such events for this erase block will not be printed [ 867.737565][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x3873 instead [ 867.737585][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x21e2 instead [ 867.737604][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x5dd0 instead [ 867.737623][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x3649 instead [ 867.737641][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xf100 instead [ 867.737660][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x56d9 instead [ 867.737678][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd2d8 instead [ 867.737696][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0xb0b5 instead [ 867.737715][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x4a5f instead [ 867.737733][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x4fcf instead [ 867.737751][T12705] jffs2: Further such events for this erase block will not be printed [ 867.738156][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xed16 instead [ 867.738175][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xf9a0 instead [ 867.738194][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x5251 instead [ 867.738213][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x7087 instead [ 867.738231][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xddad instead [ 867.738249][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x7872 instead [ 867.738267][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x41d3 instead [ 867.738286][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0xa343 instead [ 867.738304][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x02ea instead [ 867.738322][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x834d instead [ 867.738346][T12705] jffs2: Further such events for this erase block will not be printed [ 867.738767][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xdb9b instead [ 867.738787][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xfd5f instead [ 867.738805][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xcfcf instead [ 867.738824][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x45cf instead [ 867.738839][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0xd506 instead [ 867.738857][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xf3ef instead [ 867.738876][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xe912 instead [ 867.738894][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xdbc0 instead [ 867.738912][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xc904 instead [ 867.738931][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x27a6 instead [ 867.738949][T12705] jffs2: Further such events for this erase block will not be printed [ 867.739368][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xef9d instead [ 867.739387][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x5986 instead [ 867.739405][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xcf66 instead [ 867.739424][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x5497 instead [ 867.739443][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xc58e instead [ 867.739480][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x275f instead [ 867.739500][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8088 instead [ 867.739519][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xf5b1 instead [ 867.739538][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0xe436 instead [ 867.739556][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x09e8 instead [ 867.739576][T12705] jffs2: Further such events for this erase block will not be printed [ 867.739981][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0xd63b instead [ 867.740001][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xb72a instead [ 867.740019][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0xc669 instead [ 867.740037][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x144b instead [ 867.740061][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xfa49 instead [ 867.740079][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x8f78 instead [ 867.740098][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1e02 instead [ 867.740117][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x1e6a instead [ 867.740136][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x08f8 instead [ 867.740154][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x554a instead [ 867.740172][T12705] jffs2: Further such events for this erase block will not be printed [ 867.740599][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x3796 instead [ 867.740619][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x116c instead [ 867.740672][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xe36b instead [ 867.740687][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x197c instead [ 867.740701][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x9795 instead [ 867.740714][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x41a0 instead [ 867.740729][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x834b instead [ 867.740747][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x613f instead [ 867.740765][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x8a25 instead [ 867.740783][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xcb8e instead [ 867.740801][T12705] jffs2: Further such events for this erase block will not be printed [ 867.741206][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4fa9 instead [ 867.741225][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x7e1d instead [ 867.741244][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x9ab6 instead [ 867.741262][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x2355 instead [ 867.741280][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x8eb1 instead [ 867.741298][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xd7e9 instead [ 867.741316][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x27c3 instead [ 867.741340][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x74e8 instead [ 867.741359][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x2625 instead [ 867.741377][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0xf60a instead [ 867.741395][T12705] jffs2: Further such events for this erase block will not be printed [ 867.741837][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0xc678 instead [ 867.741857][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x3a2e instead [ 867.741876][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x407f instead [ 867.741894][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x1249 instead [ 867.741912][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x01d9 instead [ 867.741931][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x0be2 instead [ 867.741949][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xac69 instead [ 867.741968][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x70be instead [ 867.741986][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x8443 instead [ 867.742005][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x567d instead [ 867.742024][T12705] jffs2: Further such events for this erase block will not be printed [ 867.742436][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x6de7 instead [ 867.742473][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x65a2 instead [ 867.742492][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x2407 instead [ 867.742511][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xd70b instead [ 867.742529][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x6901 instead [ 867.742548][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0xd12b instead [ 867.742567][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1d02 instead [ 867.742585][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xcb9b instead [ 867.742604][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xd72e instead [ 867.742622][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0xea89 instead [ 867.742640][T12705] jffs2: Further such events for this erase block will not be printed [ 867.743044][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xaa55 instead [ 867.743063][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xc567 instead [ 867.743082][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x2fbb instead [ 867.743101][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x2126 instead [ 867.743120][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x2fc3 instead [ 867.743138][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0xe08c instead [ 867.743157][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x583e instead [ 867.743175][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0xb287 instead [ 867.743193][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xc1df instead [ 867.743211][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xaa4d instead [ 867.743229][T12705] jffs2: Further such events for this erase block will not be printed [ 867.743655][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xe186 instead [ 867.743674][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0xbe24 instead [ 867.743693][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xf5bb instead [ 867.743711][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0xc0a5 instead [ 867.743730][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xa0e1 instead [ 867.743748][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x618b instead [ 867.743766][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf52a instead [ 867.743785][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x5179 instead [ 867.743804][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xe623 instead [ 867.743822][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xb349 instead [ 867.743840][T12705] jffs2: Further such events for this erase block will not be printed [ 867.744248][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0xbf94 instead [ 867.744267][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x008a instead [ 867.744287][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x81bd instead [ 867.744305][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xa197 instead [ 867.744328][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x194a instead [ 867.744347][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x559b instead [ 867.744365][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x4679 instead [ 867.744384][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0xf316 instead [ 867.744402][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xb589 instead [ 867.744420][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xbed5 instead [ 867.744438][T12705] jffs2: Further such events for this erase block will not be printed [ 867.747389][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x2089 instead [ 867.747422][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x309e instead [ 867.747441][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xa796 instead [ 867.747479][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x84d8 instead [ 867.747499][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x096b instead [ 867.747518][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x3f1d instead [ 867.747537][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x0657 instead [ 867.747556][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x361b instead [ 867.747576][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x57b6 instead [ 867.747595][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xbc18 instead [ 867.747613][T12705] jffs2: Further such events for this erase block will not be printed [ 867.748021][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x6174 instead [ 867.748042][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x99e2 instead [ 867.748061][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xe86f instead [ 867.748080][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xa327 instead [ 867.748100][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x19de instead [ 867.748124][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0xd8a5 instead [ 867.748144][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x4547 instead [ 867.748163][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xeee8 instead [ 867.748182][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x3350 instead [ 867.748201][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x2c0c instead [ 867.748219][T12705] jffs2: Further such events for this erase block will not be printed [ 867.748648][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0xd950 instead [ 867.748668][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xa873 instead [ 867.748687][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xd808 instead [ 867.748706][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x2c38 instead [ 867.748726][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x92fb instead [ 867.748745][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x0704 instead [ 867.748763][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x582d instead [ 867.748782][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xfb34 instead [ 867.748801][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x7741 instead [ 867.748820][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x4e56 instead [ 867.748838][T12705] jffs2: Further such events for this erase block will not be printed [ 867.749244][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4ccf instead [ 867.749264][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0xd71e instead [ 867.749282][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xdd88 instead [ 867.749301][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0xb168 instead [ 867.749320][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0xe244 instead [ 867.749345][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xcb8b instead [ 867.749364][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x078b instead [ 867.749383][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x3e21 instead [ 867.749402][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0xfdff instead [ 867.749421][T12705] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x54fe instead [ 867.749439][T12705] jffs2: Further such events for this erase block will not be printed [ 867.749850][T12705] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 867.749863][T12705] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 872.324965][T12754] netlink: 'syz.3.1945': attribute type 10 has an invalid length. [ 872.324997][T12754] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1945'. [ 873.520340][T12766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 875.749797][T12782] FAULT_INJECTION: forcing a failure. [ 875.749797][T12782] name failslab, interval 1, probability 0, space 0, times 0 [ 875.749887][T12782] CPU: 1 UID: 0 PID: 12782 Comm: syz.7.1964 Not tainted syzkaller #0 PREEMPT(full) [ 875.749915][T12782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 875.749928][T12782] Call Trace: [ 875.749936][T12782] [ 875.749945][T12782] dump_stack_lvl+0x100/0x190 [ 875.749981][T12782] should_fail_ex.cold+0x5/0xa [ 875.750013][T12782] should_failslab+0xc2/0x120 [ 875.750041][T12782] __kmalloc_cache_noprof+0x91/0x6d0 [ 875.750069][T12782] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 875.750097][T12782] ? nfs_alloc_fhandle+0x3b/0x90 [ 875.750130][T12782] nfs_alloc_fhandle+0x3b/0x90 [ 875.750155][T12782] nfs_init_fs_context+0x65/0x1510 [ 875.750188][T12782] alloc_fs_context+0x60c/0xf40 [ 875.750225][T12782] __x64_sys_fsopen+0xed/0x220 [ 875.750247][T12782] do_syscall_64+0x123/0x790 [ 875.750278][T12782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.750300][T12782] RIP: 0033:0x7f9f4999e159 [ 875.750319][T12782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.750339][T12782] RSP: 002b:00007f9f4a80b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 875.750361][T12782] RAX: ffffffffffffffda RBX: 00007f9f49c26180 RCX: 00007f9f4999e159 [ 875.750376][T12782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 875.750389][T12782] RBP: 00007f9f49a35024 R08: 0000000000000000 R09: 0000000000000000 [ 875.750402][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.750415][T12782] R13: 00007f9f49c26218 R14: 00007f9f49c26180 R15: 00007fff8b380f48 [ 875.750451][T12782] [ 877.028399][T12805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1965'. [ 877.028446][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 877.028476][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1965'. [ 878.255273][T12817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 879.805526][T12831] netlink: 'syz.7.1969': attribute type 10 has an invalid length. [ 879.813791][T12831] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1969'. [ 881.546057][ T31] audit: type=1400 audit(1788807189.253:3739): avc: denied { write } for pid=12847 comm="syz.7.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 881.599314][T12849] siw: device registration error -23 [ 882.236167][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1986'. [ 882.364815][T12860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 882.810776][ T30] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 883.041373][ T30] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 883.043465][ T30] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 883.043492][ T30] usb 2-1: Product: syz [ 883.047650][ T30] usb 2-1: config 0 descriptor?? [ 883.053568][ T30] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 883.054687][ T30] usb 2-1: Detected FT232H [ 883.056626][T12864] futex_wake_op: syz.7.1987 tries to shift op by 144; fix this program [ 883.639016][ T30] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 883.671384][ T30] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 883.710621][ T30] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 884.005343][ T30] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 884.228415][ T32] INFO: task syz.5.1556:11366 blocked for more than 144 seconds. [ 884.228453][ T32] Not tainted syzkaller #0 [ 884.228478][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.228491][ T32] task:syz.5.1556 state:D stack:28728 pid:11366 tgid:11360 ppid:10586 task_flags:0x400040 flags:0x00080002 [ 884.228551][ T32] Call Trace: [ 884.228558][ T32] [ 884.228571][ T32] __schedule+0x1259/0x6920 [ 884.228600][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 884.228639][ T32] ? __pfx___schedule+0x10/0x10 [ 884.228656][ T32] ? find_held_lock+0x2b/0x80 [ 884.228683][ T32] ? schedule+0x225/0x2c0 [ 884.228709][ T32] schedule+0xdd/0x2c0 [ 884.228729][ T32] cgroup_lock_and_drain_offline+0x383/0x800 [ 884.228766][ T32] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 884.228797][ T32] ? kernfs_root+0xee/0x2a0 [ 884.228823][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 884.228853][ T32] ? cgroup_kn_lock_live+0xf4/0x520 [ 884.228890][ T32] ? kernfs_root+0xf8/0x2a0 [ 884.228919][ T32] cgroup_kn_lock_live+0x188/0x520 [ 884.228947][ T32] ? cgroup_subtree_control_write+0x15a/0xe90 [ 884.228972][ T32] cgroup_subtree_control_write+0x3dd/0xe90 [ 884.229000][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 884.229023][ T32] ? kernfs_root+0xf8/0x2a0 [ 884.229051][ T32] cgroup_file_write+0x1e6/0x8a0 [ 884.229076][ T32] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 884.229099][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 884.229122][ T32] ? __kmalloc_noprof+0x350/0x840 [ 884.229151][ T32] kernfs_fop_write_iter+0x3e0/0x5f0 [ 884.229171][ T32] ? __pfx_cgroup_file_write+0x10/0x10 [ 884.229198][ T32] vfs_write+0x6af/0x1050 [ 884.229220][ T32] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 884.229243][ T32] ? __pfx_vfs_write+0x10/0x10 [ 884.229261][ T32] ? find_held_lock+0x2b/0x80 [ 884.229305][ T32] ksys_write+0x12a/0x250 [ 884.229323][ T32] ? __pfx_ksys_write+0x10/0x10 [ 884.229352][ T32] do_syscall_64+0x123/0x790 [ 884.229378][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.229399][ T32] RIP: 0033:0x7f92a919e159 [ 884.229416][ T32] RSP: 002b:00007f92aa0fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 884.229436][ T32] RAX: ffffffffffffffda RBX: 00007f92a9426090 RCX: 00007f92a919e159 [ 884.229450][ T32] RDX: 000000000000000b RSI: 0000200000000180 RDI: 0000000000000005 [ 884.229463][ T32] RBP: 00007f92a9235024 R08: 0000000000000000 R09: 0000000000000000 [ 884.229475][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.229488][ T32] R13: 00007f92a9426128 R14: 00007f92a9426090 R15: 00007ffccafb8638 [ 884.229516][ T32] [ 884.229570][ T32] [ 884.229570][ T32] Showing all locks held in the system: [ 884.229584][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 884.229600][ T32] #0: ffffffff8edd85b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 884.229651][ T32] #1: ffffffff9bc67c78 (&port_lock_key){-.-.}-{3:3}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 884.248757][ T32] locks held by kworker/1:1/30: 5, last CPU#1: [ 884.248768][ T32] #0: ffff8880222ed540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 884.248803][ T32] #1: ffffc90000a57d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 884.248836][ T32] #2: ffff88802a54a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 884.248870][ T32] #3: ffff88802a54e568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0xb38/0x4420 [ 884.248899][ T32] #4: ffff88802a548090 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x5e/0x690 [ 884.248931][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 884.248940][ T32] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 884.249001][ T32] locks held by getty/5356: 2, on CPU#0: [ 884.249010][ T32] #0: ffff888037ad30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 884.249042][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 884.249073][ T32] locks held by syz-executor/5604: 2, on CPU#1: [ 884.249082][ T32] #0: ffff888037d900e8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 884.249111][ T32] #1: ffffffff8f2882c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 884.249146][ T32] locks held by kworker/0:6/5711: 2, last CPU#0: [ 884.249154][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 884.249186][ T32] #1: ffffc90004c0fd08 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 884.249220][ T32] locks held by kworker/0:7/5732: 2, last CPU#0: [ 884.249228][ T32] #0: ffff88808f0ba540 ((wq_completion)wg-crypt-wg1#8){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 884.249263][ T32] #1: ffffc90004cafd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 884.249307][ T32] locks held by kworker/u8:15/6316: 3, last CPU#0: [ 884.249315][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 884.249347][ T32] #1: ffffc9000710fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 884.249382][ T32] #2: ffff888088c6b258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 884.249415][ T32] locks held by syz.0.1258/10407: 3, on CPU#0: [ 884.249423][ T32] #0: ffff8880569d0ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 884.249457][ T32] #1: ffff88807b4dc460 (sb_writers#21){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 884.249497][ T32] #2: ffffffff8f2882c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 884.249528][ T32] locks held by syz.5.1556/11366: 3, on CPU#1: [ 884.249536][ T32] #0: ffff888079a60630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 884.249564][ T32] #1: ffff88802f6f6460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 884.249592][ T32] #2: ffff888055e6fc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 884.249622][ T32] locks held by kworker/1:2/11938: 2, last CPU#1: [ 884.249630][ T32] #0: ffff88807b51dd40 ((wq_completion)wg-crypt-wg2#8){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 884.249664][ T32] #1: ffffc9000e37fd08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 884.249699][ T32] locks held by udevd/12583: 4, last CPU#0: [ 884.249707][ T32] #0: ffff8880596f5bd8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 884.249734][ T32] #1: ffff888037101480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 884.249762][ T32] #2: ffff8880572585a8 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 884.249791][ T32] #3: ffff8880967f91d8 (&dev->mutex){....}-{4:4}, at: product_show+0x26/0xa0 [ 884.249816][ T32] locks held by syz.6.1952/12783: 2, last CPU#0: [ 884.249824][ T32] #0: ffff88807ca51078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 884.249854][ T32] #1: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 884.249886][ T32] locks held by syz.3.1982/12866: 1, last CPU#0: [ 884.249894][ T32] #0: ffff88802989fcf0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 884.249922][ T32] locks held by syz.7.1987/12864: 2, on CPU#0: [ 884.249930][ T32] #0: ffff888033f97960 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_release+0x66/0x110 [ 884.249962][ T32] #1: ffffffff8edf81e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 884.249990][ T32] [ 884.249993][ T32] ============================================= [ 884.249993][ T32] [ 884.250015][ T32] NMI backtrace for cpu 1 [ 884.250025][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 884.250039][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 884.250046][ T32] Call Trace: [ 884.250052][ T32] [ 884.250059][ T32] dump_stack_lvl+0x100/0x190 [ 884.250077][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 884.250095][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 884.250109][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 884.250132][ T32] sys_info+0x141/0x190 [ 884.250148][ T32] watchdog+0xcb1/0x1030 [ 884.250164][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 884.250177][ T32] ? __pfx_watchdog+0x10/0x10 [ 884.250190][ T32] ? __kthread_parkme+0x18f/0x230 [ 884.250205][ T32] ? kthread+0x13a/0x450 [ 884.250219][ T32] ? __pfx_watchdog+0x10/0x10 [ 884.250231][ T32] kthread+0x373/0x450 [ 884.250245][ T32] ? __pfx_kthread+0x10/0x10 [ 884.250260][ T32] ret_from_fork+0x730/0xd60 [ 884.250275][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 884.250288][ T32] ? __switch_to+0x800/0x10f0 [ 884.250305][ T32] ? __pfx_kthread+0x10/0x10 [ 884.250321][ T32] ret_from_fork_asm+0x1a/0x30 [ 884.250339][ T32] [ 884.250355][ T32] Sending NMI from CPU 1 to CPUs 0: [ 884.250389][ C0] NMI backtrace for cpu 0 [ 884.250400][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 884.250420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 884.250430][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 884.250456][ C0] Code: 58 9b 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 76 1b 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 884.250472][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000242 [ 884.250486][ C0] RAX: 000000000304b7cd RBX: ffffffff8ea91500 RCX: ffffffff8bd04185 [ 884.250499][ C0] RDX: 0000000000000001 RSI: ffffffff8e3ec063 RDI: ffffffff8c621080 [ 884.250511][ C0] RBP: fffffbfff1d522a0 R08: 0000000000000001 R09: ffffed10170867bd [ 884.250523][ C0] R10: ffff8880b8433deb R11: 0000000000000001 R12: 0000000000000000 [ 884.250534][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 884.250546][ C0] FS: 0000000000000000(0000) GS:ffff888123b5d000(0000) knlGS:0000000000000000 [ 884.250563][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 884.250575][ C0] CR2: 00007fa7ec59d68c CR3: 000000007337e000 CR4: 00000000003526f0 [ 884.250587][ C0] Call Trace: [ 884.250593][ C0] [ 884.250599][ C0] default_idle+0x9/0x10 [ 884.250620][ C0] default_idle_call+0x6c/0xb0 [ 884.250640][ C0] do_idle+0x3ae/0x5b0 [ 884.250661][ C0] ? __pfx_do_idle+0x10/0x10 [ 884.250685][ C0] cpu_startup_entry+0x4f/0x60 [ 884.250706][ C0] rest_init+0x2d3/0x2e0 [ 884.250729][ C0] ? __pfx_rest_init+0x10/0x10 [ 884.250752][ C0] ? __pfx_acpi_read_bit_register+0x10/0x10 [ 884.250775][ C0] ? lock_acquire+0x1d1/0x380 [ 884.250797][ C0] ? __pfx_kernel_init+0x10/0x10 [ 884.250821][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 884.250845][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 884.250869][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 884.250890][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 884.250912][ C0] start_kernel+0x48e/0x490 [ 884.250933][ C0] x86_64_start_reservations+0x24/0x30 [ 884.250954][ C0] x86_64_start_kernel+0x12b/0x130 [ 884.250975][ C0] common_startup_64+0x13e/0x158 [ 884.251004][ C0] [ 884.251667][ T30] usb 2-1: USB disconnect, device number 41 [ 884.253091][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 885.349681][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 885.358779][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 885.368844][ T32] Call Trace: [ 885.372132][ T32] [ 885.375048][ T32] dump_stack_lvl+0x100/0x190 [ 885.379732][ T32] vpanic+0x553/0x970 [ 885.383705][ T32] ? __pfx_vpanic+0x10/0x10 [ 885.388192][ T32] panic+0xd1/0xe0 [ 885.391899][ T32] ? __pfx_panic+0x10/0x10 [ 885.396317][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 885.402488][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 885.408657][ T32] ? watchdog.cold+0x1ec/0x234 [ 885.413454][ T32] watchdog.cold+0x1fd/0x234 [ 885.418047][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 885.423836][ T32] ? __pfx_watchdog+0x10/0x10 [ 885.428504][ T32] ? __kthread_parkme+0x18f/0x230 [ 885.433521][ T32] ? kthread+0x13a/0x450 [ 885.437752][ T32] ? __pfx_watchdog+0x10/0x10 [ 885.442459][ T32] kthread+0x373/0x450 [ 885.446523][ T32] ? __pfx_kthread+0x10/0x10 [ 885.451101][ T32] ret_from_fork+0x730/0xd60 [ 885.455674][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 885.460784][ T32] ? __switch_to+0x800/0x10f0 [ 885.465463][ T32] ? __pfx_kthread+0x10/0x10 [ 885.470039][ T32] ret_from_fork_asm+0x1a/0x30 [ 885.474790][ T32] [ 885.478055][ T32] Kernel Offset: disabled [ 885.482371][ T32] Rebooting in 86400 seconds..