last executing test programs:

12.301056406s ago: executing program 0 (id=479):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000)

12.23425116s ago: executing program 0 (id=480):
fsopen(0x0, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000001300)=ANY=[@ANYRES8], 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000)=0x80000ba, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304, 0x38}, "0100010800", "73b59657269ef929ee540a8a0a86c5d0", "006ceb00", "43000056e5e0ac0a"}, 0x28)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x4, 0x1ff}})
sendto$inet6(r4, &(0x7f00000001c0)="c3", 0x1, 0x40, 0x0, 0x0)

11.991016681s ago: executing program 0 (id=483):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x11223344]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x11)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="000704000008000000000000000000000000000000000000052600000000000100"/64], 0x40)
sendto$inet6(r2, &(0x7f0000000400)="112233", 0x3, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[@nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x690, 0x31}}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x3}}], 0xb8})
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000600)={0xc, &(0x7f0000000400)=[{0x6, '\x00', @buffer={"bfe27f237b6fd4a7afe7995ae5fc7fe415507a09b64b79da4dbb085ad362a02c", 0x20}, 0x4505}]})
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x5, &(0x7f0000000540)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r10, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40070d0}, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0x10004002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x8d], 0xeeee0000, 0x2010d3})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100001040000000300dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

11.812419075s ago: executing program 0 (id=484):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

11.741884777s ago: executing program 0 (id=485):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001})
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080))
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0x9}, {0xf, 0xfff3}, {0x2, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004810}, 0x8000)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
close(r4)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x40, 0x0)
ioctl$SG_BLKTRACESTOP(r5, 0x1275, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40051)

11.491050904s ago: executing program 0 (id=488):
r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0xffffffff, @local, 0x7, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1}, 0x240280c0)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, {0x0, 0x0, &(0x7f0000000400)=""/154, 0x2, 0x3}}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e000000000000000000000000f7ffff0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x803}, 0x28)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0))
write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', <r7=>0x0, 0x4, 0x6, 0xe6, 0x0, 0x13, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff41, 0x7, 0x6, 0x3}})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x11, 0x0, 0x6, 0xa6, 0x8002, 0xffffffffffffffff, 0x2, '\x00', r7, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @value=r2}, 0x50)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x30801, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xd, 0x4}, 0x14}, 0x10)

11.435769982s ago: executing program 32 (id=488):
r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0xffffffff, @local, 0x7, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1}, 0x240280c0)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, {0x0, 0x0, &(0x7f0000000400)=""/154, 0x2, 0x3}}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e000000000000000000000000f7ffff0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x803}, 0x28)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000002c0))
write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', <r7=>0x0, 0x4, 0x6, 0xe6, 0x0, 0x13, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff41, 0x7, 0x6, 0x3}})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x11, 0x0, 0x6, 0xa6, 0x8002, 0xffffffffffffffff, 0x2, '\x00', r7, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @value=r2}, 0x50)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x30801, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000300)={{0xd, 0x4}, 0x14}, 0x10)

3.034056268s ago: executing program 2 (id=611):
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, <r1=>0xffffffffffffffff})
move_pages(r1, 0x1, &(0x7f00000017c0)=[&(0x7f0000000000/0x4000)=nil], &(0x7f0000002140), &(0x7f0000001840), 0x0)

2.931510894s ago: executing program 2 (id=613):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="080008000700020000002b000000457f003100660000401190780a010102ac1414164e204e20001d907802ff000100000000b68ed34f131c03e57e518e4d4d9d13b7b946"], 0x3f)

2.827413268s ago: executing program 2 (id=618):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x8)
ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4018)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x4000002)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan1\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6c97}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x1001)
pread64(r0, &(0x7f0000000640)=""/53, 0x35, 0x6)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000680))
bind(r0, &(0x7f00000006c0)=@llc={0x1a, 0x321, 0x8, 0x6, 0x4, 0x6c, @broadcast}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r6, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5e}, @void, @val={0xc, 0x99, {0x7d72edc7, 0x19}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000880)={'dvmrp0\x00', 0x1000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000008c0)={0x40000, 0x104000, 0x1})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r0)
sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa8, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb6}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x50}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x53a}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff2297}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff1f}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ca318c7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4084}, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r0, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b80)=[@text64={0x40, &(0x7f0000000b00)="c4c3b95fc7002e66460f388214000f23cac744240000100000c744240200000000c7442406000000000f011c24450f08c74424003c000000c744240200600000ff1c24400f215b36f3450f1ee72e0f01c5430fc77a00", 0x56}], 0x1, 0x20, &(0x7f0000000bc0)=[@cstype3={0x5, 0x5}], 0x1)
ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000c00))
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x108, r13, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfffffffd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4c95}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x64, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x3c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x24040000}, 0x40)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000fc0)={0xa7f4, 0x0, &(0x7f0000000f80)=[0xffffffffffffffff, r1, r11, r10, 0xffffffffffffffff]}, 0x5)

2.827137096s ago: executing program 2 (id=619):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
inotify_init1(0x800)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000001c0)=""/190, 0xbe}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/247, 0xf7}], 0x4)
read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="1b0001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000600)={0x9c0000, 0x0, 0x100, r1, 0x0, &(0x7f00000002c0)={0x9a0964, 0x6, '\x00', @p_u8=&(0x7f0000000280)=0x2}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x29, 0x1f, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000000))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0)
write(r5, &(0x7f0000000140)='((\'v', 0x4)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r1}, 0x8)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000680)={0x6, 0xb8})

2.362433203s ago: executing program 1 (id=628):
r0 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5, 0x7, 0x0, 0x3}, {0xff00, 0x4, 0x2, 0x101}]}, 0x10)
r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x6600, 0x0)
ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x6, @sdr={0x2016011, 0x8001}})
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000440)={{&(0x7f00000001c0)=[{0xc209, 0x9, 0x3, {0x2, 0x5}, 0xfff, 0x3, 0x2}, {0x7fff, 0x7fffffffffffffff, 0x1ecb, {0x10, 0x100}, 0x0, 0x3, 0x8000}], 0x2, 0x40, 0x2, 0x4}, {&(0x7f0000000240)=[{0x8fe6, 0x84d}, {0xefc, 0x7ff}, {0x8, 0x200}, {0x4ba, 0xffffffff}], 0x4, 0x10, 0x80, 0x9095}, {&(0x7f0000000280)=[0x3, 0x7], 0x2, 0x8, 0xeef2, 0x10000}, {&(0x7f00000002c0)=[{0x8, 0x0, 0x7, 0x4, 0x2}, {0xfff, 0x5, 0x3, 0x65, 0x8}, {0x7, 0x8, 0x100000001, 0xff, 0x1ff}, {0x1, 0x9, 0xfffffffffffffffc, 0x80000001, 0xfffffff2}, {0x8, 0x7ff, 0x5, 0x5, 0x3f66}, {0x3, 0x0, 0x592, 0x5, 0x10001}, {0x0, 0x7, 0x15, 0x8, 0x3}], 0x7, 0x28, 0x0, 0xc}, {&(0x7f0000000400)=[0x25a2, 0x10], 0x2, 0x8, 0x2, 0x8000}})
ioctl$sock_ifreq(r0, 0x8918, &(0x7f00000004c0)={'hsr0\x00', @ifru_addrs=@l2={0x1f, 0x20, @none, 0x3, 0x2}})
fsetxattr$security_selinux(r1, &(0x7f0000000500), &(0x7f0000000540)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x3)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0xfff7, 0x3, 0x1, 0x1}]}, 0x10)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000600)=0x40000)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000640)={'vxcan1\x00', @ifru_names='veth0_virt_wifi\x00'})
ioctl(r2, 0xe48, &(0x7f0000000680)="24109964760cbf0cf5242276ddeca1580b1e4a168d9367b6f94dbb3896dd09a3244a215c6b5465642fcba4194293434469b0b68cf81a7867afb98ccc1ad6b65d945e8bce822a2fa8019c7eb6a9647bb390845c311dcfc941d654445f02cdc7540a0d59dad9a1728abe442708c5961170ec664fed2f83b9d73a0e0090b895e64a88229116bf9d95819fbe6aa720a0e08da018524653c93cf0a747f2efd124419834b77f058bf3901201700021bba0812d87352123b289897301d2702fa96d74276f080cf3584c60be43e7bb2f6583e443f04010e0ce74901f15fdf8ea6c5480da08f0799ddbc832c84089dae1590b5690d5")
write$6lowpan_control(r2, &(0x7f0000000780)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4800)
io_uring_enter(r2, 0x2f3a, 0x4d88, 0x6c, &(0x7f00000008c0)={[0x5]}, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000940)={0x0, 0x3})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000009c0)={0x10000, "0215c46dc9937a58af461ef97150da09a5e400c36bb28f925d18f898a860575f"})
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000a00)={'bridge_slave_1\x00', {0x2, 0x4e23, @loopback}})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b80)={'lo\x00', <r5=>0x0})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@fallback=<r6=>r3, 0x13, 0x1, 0x1ff, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0], &(0x7f0000000c80)=[0x0, 0x0], <r7=>0x0}, 0x40)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8, '\x00', r5, r2, 0x0, 0x5, 0x3}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@map=r8, r2, 0x1, 0x2004, 0x0, @value=r2, @void, @void, @void, r7}, 0x20)
ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000dc0)={0xff, 0x7ff, 0x3, 0x0, 0x1, 0x0, [{0x40, 0x8, 0xfffffffffffffffe, '\x00', 0x1602}]})
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r6)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x98, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000894}, 0x40050)

2.357277063s ago: executing program 1 (id=629):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
fcntl$getflags(r4, 0xb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="6684a19a745589cd1766dc61d305f63c51cae58798f5c9ae48b971c13902e1228123ee9345dbea75141a2c5d9c6b953763bb85d711361d48709d468ef773f42d21fb46182f048bdcd09275e77b2ad9f2256d0ea0d7bbcde86afb1eca6f", @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="509543b2545b4c9cc1fd7a0b930c07165b89cfe71b69e0f22421a5dbcc41e0750b0a2454487fcb6105b6d253be21b593", @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c01000010001307000000e2fbdbdf2500000000000000000000ffff64010101ff020000000000000000000000000001000400004e2100020000002021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="03000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
socket$inet6(0xa, 0x3, 0x0)
getrlimit(0x0, &(0x7f0000000240))

2.231848518s ago: executing program 1 (id=630):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000140)=0xf, 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x64, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0xc014)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.182708059s ago: executing program 1 (id=631):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24)
write(r1, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e", 0x24)
r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000a80)={0x0, <r3=>0x0, "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", "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"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='e:my_read_msr2 msr/', 0x13) (async)
write(r4, &(0x7f0000000140)='e:my_read_msr2 msr/', 0x13)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001a80)={{r3, 0x100000001, 0x0, 0x7, 0x200, 0x1, 0x3ff, 0x10001, 0x3, 0x0, 0x7, 0x7, 0x1, 0xc, 0x8}, 0x18, [0x0, 0x0, 0x0]})
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) (async)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0xffffffffffffff45, &(0x7f0000000300)=[{&(0x7f0000000200)=""/186}, {&(0x7f00000002c0)=""/22}], 0x0, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x8d0) (async)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0xffffffffffffff45, &(0x7f0000000300)=[{&(0x7f0000000200)=""/186}, {&(0x7f00000002c0)=""/22}], 0x0, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x8d0)
request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) (async)
request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe)
openat$mice(0xffffffffffffff9c, &(0x7f0000000a40), 0x6800) (async)
openat$mice(0xffffffffffffff9c, &(0x7f0000000a40), 0x6800)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) (async)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c01031000ffffffffffffffff"], 0xf)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES8=r3], 0x100)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000500)="5c0000001700010012aaaaaaaaaa0106000c0002000400000000006400", 0x1d)
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e1301004000000012aaaaaaaaaa10000000640000"], 0x16)
write(r6, &(0x7f0000000700)="5c0000001700010012aaaaaaaaaa0106000c0002000400000000006400", 0x1d)
syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="040f040001a120"], 0x7)
nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) (async)
nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0)
ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x2)
read$FUSE(r5, &(0x7f0000002980)={0x2020}, 0x15be) (async)
read$FUSE(r5, &(0x7f0000002980)={0x2020}, 0x15be)

1.962648911s ago: executing program 1 (id=632):
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000845)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='mountinfo\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"067a0f801fdc798689f49bfcb3c3498e", 0x0, <r3=>0x0, {0x854, 0x10001}, {0x800, 0x7}, 0xb7d, [0x3795, 0x7, 0x918b, 0x401, 0x6, 0x7, 0x7, 0x2, 0x1ff, 0x5, 0xce, 0x7, 0xfffffffffffff1ea, 0xfff, 0x5, 0xffffffffffffffff]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"b63ecd30f1b07391fc42c1f3bee4f56c", r2, r3, {0x3, 0x8}, {0x6, 0x3}, 0xfffffffffffffffe, [0x2, 0x800, 0x80000000, 0x5, 0xff, 0x3, 0x6, 0x4, 0x4, 0x3, 0x6, 0x9, 0x64543d06, 0x4, 0x4, 0x8]})
connect$bt_rfcomm(r1, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xc}, 0xa)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)={0x0, r1, 0x4, 0x9, 0x240000000000, 0x7ff})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xd8211224}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x40809)
lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000b80)=0xe8)
getgroups(0x7, &(0x7f0000000bc0)=[0xee01, 0xee00, 0xee01, 0xee00, <r6=>0x0, 0xee00, 0xee01])
r7 = syz_open_dev$ptys(0xc, 0x3, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0)={<r8=>0x0, <r9=>0x0}, &(0x7f0000001400)=0xc)
getgroups(0x7, &(0x7f0000001440)=[0x0, <r10=>0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0xee01])
r11 = syz_open_dev$hidraw(&(0x7f0000001480), 0x9, 0x4000)
r12 = syz_open_dev$audion(&(0x7f00000014c0), 0x4, 0x240000)
r13 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
sendmmsg$unix(r1, &(0x7f0000001580)=[{{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)="9901f73788d5c7ab580d9caf41f5adfc3c3813b58ac8df0a4edd594f88f982b345233ff140535fe8c9351c489afe04735da608b3c721874254", 0x39}, {&(0x7f00000007c0)="4d5591c89d169fd51e8bb8e5891e8efc5bb50dada73425c224478841f772d9edca56cbc4a065eaaeb49953b51e8c41d53587ad37f8e90e8071c9123f932a5f92bc72b8aed973098b0b66df6b304e6fa1364e0d1586aae60706c0839a91fa1e3b29e4bba41b47d6303532b2958dd5e8672211c4292061", 0x76}, {&(0x7f0000000840)="082d2499", 0x4}, {&(0x7f0000000880)="c98296d0f8ef2173ae5da0c0f4f03fea8fc08c3426684d0f104542a2f86e7f75358c69ebf1c6ceda4f57c2ff88cbb7ed7f402c12a6de247bb22297712705716eb6a6138ce4bc79d3b663db9ab4a62f2f3d670af2dd5ee1204979e65b42377a8f7191142a39f2899929be2cc1c2b861cb5c5b4c4542f1845a731a3265bc6b9878f9b74251ed8614d9def3594f77b55a96e54ba2b87ec027ee19b15d998df829951db81a443213dabaacd9016175d4f74b0573dea38772eb51d337ad38c892f5f63bb288503d94658a412aea0c63f7a02551f7a8c08d4617d20afe1c5187546699e5ab0254ae", 0xe5}], 0x4, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r0, r5, r6}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r1, r7, r1]}}], 0x68, 0xc800}}, {{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d00)="5db5a72aa76b8bcab4577c45c864828be44f3fcf248045872724c7c7632ba4331f776de5db90f44025e5f745482cabc86d3fe31f6eed7ae3c045d72c1b355ec3e3a6701651c24ef358aa88d30cefeb7c9d692173935a464357a274c23ae2d7e5f1fb3a1cf57d0302ad0c2bca6dce69e5f64689dc893c55f7898ed733b3f5340c2a1096a6dd97facc935a4d55c5eca3f8f562bdd0eea26a72f73a04fd557d6ff6ec1474174c5f5a1a8a1798974569bc8406e1e444d8001a5df3ab02d9cc267c4d966d21af0c8bda6e90fd421576ec558674487a14f530717235dcb7e37b028314", 0xe0}], 0x1, 0x0, 0x0, 0x4004888}}, {{&(0x7f0000000e40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000ec0)="28aa3c9fec21b919fca0f4ed4906dff223af4da608a09a80db91cd69154b21d746d699dbe2065ed5483692136c0c1f26200418e4f53eb553391d9b3e06fe1b35e7bb", 0x42}, {&(0x7f0000000f40)="99ac6e7a69388bbd638eb8c9ecdd123d18bf99ce24e6de155f140e1a851dba8e3013312f8b53eaa19054aff953f2593e2901db33feb816d4ee06bef4515eb164fd3fc242fc2042a517f9b94815a690094dbf66356c81cfc6333be7b84ca4c734bd93a2d56e5c4604f43619206fe382d8642717dacfc11dd3eca7f9e55c95cda8825aca08af10febb28f8ea48274926fbf39bad838f2f5b020020bf580ab3", 0x9e}, {&(0x7f0000001000)="c1b506a1bc658efae3c0533010af2cd37fda5c8803933130812faf7b409d72263cb4", 0x22}, {&(0x7f0000001040)="bec976aada1378b6d11fe706c263e7910a8efc323040c6c90f192f0af4cb7c4ad858d512dd44596e0f8066353b243c327ac38eaa53babc880a883d47b357be5954b4feade0154471049b460437382ec0b4d186c81044ad3c1de261980421f549aea5788bb94239fc8b9f69c1087155704a30e9bd00786693d679ac167cbff3438f43f0246481d8f7cec7b5c08eb69ba6a916b106e435e57ec7039da806a98c0ff592001613cca947dee32a3b96a4827a871072c3a0ff16b56c5f62a07d0f635e985186e2dc050f6d2c74851954969c0a5d5381149ce23e8a07f6ea96051f7ac93458", 0xe2}, {&(0x7f0000001140)="b5451e27945d821bd091b855fcd464a0455911f5f404d39a375034066dfe56fe7c46e8614c7fb11722704525d43f63006188c030e61417773498c349ed09ffb6458df3af8878d5b57a28c3e007c248fa3122930cf693a00a2b0015eadc4666ac63e80db32c5cc2b7bc4e20f4ef4b40d68a51e45e26556001d72d1c0abbb078ebbf925444bd7ce17496ee5f5ff9c650", 0x8f}, {&(0x7f0000001200)="15df91fd3e093e0469dd575010de04904b88142f004f995b314a8e5f250c20df49956874243af7ee26640da46ad0d012f8bbe0c237762b906a2455a70f3099ea63d50ff75b6b22f86d1c186522bcf4f170f396603dd47cc77a32865744d62d64c1d12ab3485c51b7deaf754d3a5db189ce9455b650cb72a14a8f67943f36db5a0c53e4280057892cd7bd4933ed840f28dcea5a1c1bae6af86e07f315f83c5b121391e4a749bac7336e014dcc2aab27abaebc2482c19a0663f4c5490ec958c0f80a04d2492edb56378d52dbeb829b2b42d2bfdf756dfd922f94471a5e", 0xdc}, {&(0x7f0000001300)="a38580d96811a2ff9f0dea6b9926544f412303452c17c3e86837aa07eee1b9b288a16d73c871adf0", 0x28}], 0x7, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {r0, r9, r10}}}, @rights={{0x24, 0x1, 0x1, [r11, r1, r12, r1, r13]}}], 0x48, 0x4880}}], 0x3, 0x4090)
mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000004, 0x8010, r1, 0x82000000)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, r5, &(0x7f0000001640))
sendto$x25(r1, &(0x7f00000016c0)="7decd5b4c1ce7a7d06d6b7bf0ae228e6d164645b5c5b73d2ae07b2a940c73188139fa72ee89f328a12c98d35ef0a3a3c6e828a86c15ea863c07341d251ed57ffed5d47cbd338d7eeb4", 0x49, 0x0, &(0x7f0000001740)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
syz_open_procfs(r8, &(0x7f0000001780)='net/nfsfs\x00')
fchmodat(r12, &(0x7f00000017c0)='./file0\x00', 0x6)
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000001800))
mknodat(r1, &(0x7f0000001840)='./file0/file0\x00', 0x100, 0x7f)
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r1)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x80, r14, 0x40fb9dcee05301bb, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048000)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_clone(0xc080, &(0x7f0000001a00)="53225b83096e8ade9707a8088ef0901647434c7bc90fb21609ab5bc2e15dc8d344cce5f119d86b483818e6a54c74e0e626a2b2ecec4fa6f659d87a8797d64a491dc3d49a5c44949521527d5e5345f828e282412d034ae689770717f2df7d193df07d8b68de9d1299af24870786f3de2bfbe391025f60860e738c7d0b73422f7c5dfe083bf98043f7b8e775299a18f843c97517616373e72f745214bb0c7a479d8ec2d1fdfb443ef10c5ed81492e3b0ec2edc45c40e6f5050439e683a312bcafae8e816dd43e7b00a29a4b0763c5703964223d3e0bb717dbb5191d99d5c029de7", 0xe0, &(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)="18340c260e33b58193fedcfe864a523a9ff9fd3da1a09f457b0baccaae4b9b92f9378e745e4a9ca13853a712dd3425113f5d9519d3752b9314b2efbfaa03c0bd9c61a06e0898b80aad3100aa3280d520984d7249b6f2247777e47bd53c571c185b6082")

1.934464447s ago: executing program 1 (id=633):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syslog(0x4, &(0x7f0000000200)=""/117, 0x75)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f009, 0x1})
syslog(0xa, &(0x7f0000000140)=""/23, 0x17)
r1 = socket$kcm(0x10, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x54}, {0x6}]})
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'macvtap0\x00'}}, 0x1e)
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, 0x0)
sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
socket$inet6(0xa, 0x80000, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x20, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x2a}, 0x28)
r5 = getpgrp(0x0)
setpriority(0x1, r5, 0x9)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000)
sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0)

1.432516649s ago: executing program 2 (id=639):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0)
timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}}, &(0x7f0000000100))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})

1.37037969s ago: executing program 3 (id=640):
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0xa0, 0xc9, 0xf7}}}, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500103ddff000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x20000004}, 0x40400d4)

1.347188895s ago: executing program 3 (id=641):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4)
sendfile(r0, r0, 0x0, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c81, 0xffffffe4)

1.281574832s ago: executing program 4 (id=642):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x40, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3d}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
tee(r0, r1, 0x80000000, 0xf)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000)

1.280873089s ago: executing program 3 (id=643):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async)
setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
unshare(0x62000000)
setitimer(0x2, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$key(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x190}}, 0x90)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r5, &(0x7f00000000c0), 0x12) (async)
write$cgroup_int(r5, &(0x7f00000000c0), 0x12)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0)
setns(0xc9, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_deladdr={0x70, 0x15, 0x10, 0x70bd26, 0x25dfdbfc, {0xa, 0x3f, 0xc, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_FLAGS={0x8, 0x8, 0x6e4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', <r9=>r8, 0x10, 0x389, 0x3, 0x3, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x66, 0x0, 0x80, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@cipso={0x86, 0x13, 0x1, [{0x2, 0xd, "fca218a704b6eaad462aa9"}]}, @rr={0x7, 0x17, 0x57, [@multicast2, @rand_addr=0x64010100, @private=0xa010100, @multicast2, @local]}, @lsrr={0x83, 0x17, 0x61, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @multicast2]}, @timestamp={0x44, 0x2c, 0x43, 0x0, 0x8, [0x38, 0x8, 0x5, 0x8, 0x9, 0x10, 0xa00003, 0xada, 0x6, 0x1]}, @cipso={0x86, 0x33, 0x1, [{0x0, 0x11, "bbb73c50a2dc6f63a00d995d779899"}, {0x2, 0x12, "34998ab1d80844ad6bb18835fb050000"}, {0x0, 0xa, "8a9247b4181b7cc7"}]}, @end]}}}}})
r10 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r10, 0x8004af7a, &(0x7f0000000180))
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@setlink={0x0, 0x13, 0x200, 0x220, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x2004, 0x13775}, [@IFLA_ALT_IFNAME={0x0, 0x35, 'caif0\x00'}, @IFLA_LINK={0x0, 0x5, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000)
listen(r1, 0xfffffffc)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120)
socket$nl_generic(0x10, 0x3, 0x10)

1.212456912s ago: executing program 4 (id=644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000008"], 0x30}}, 0x0)

1.209778645s ago: executing program 4 (id=645):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1000, 0x40000)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/13) (async)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) (async)
r2 = dup(r1)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb0000000066e7fb38414210b13008ce7d85a12337f75bf0e1792ac44b0698f6b045bbbed349d820623cd899ca515617dcf25fb79a820e9afecf95309242c04e7cc3b7b19156dd8e5a46a0f0ba4f961b9af8d09376e28c6b0da3f7e6fb02aefd3254a108cdff1d5bc79c07ded8dfe487d0b11a26531e"], 0x18, 0x48d5}, 0x8050)

1.111172835s ago: executing program 4 (id=646):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x8, 0x3)
r1 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000000)="d2a36f3babef7f05383b7be22b55afcf51dae5b69c37007f2ba8688ef09816f00918632ef0", 0x25)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10002, 0x80, 0xc0, &(0x7f0000000340)=[0x1000000000007, 0x0, 0xe, 0x80, 0xe6b4, 0x2, 0xfffffffffffffffa, 0x2, 0x8, 0x3, 0x2, 0x7, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0xfffffffffffffffd, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x4, 0x4, 0x8000000000000007, 0x5, 0x5, 0x2, 0x501, 0x40, 0x5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x40000101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x100000002, 0x1, 0x28, 0x9, 0x6, 0x8, 0x1, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0x7, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0x40dac, 0xe90, 0x7, 0xfffffffffffffffc, 0xa7, 0x5, 0x3, 0x9, 0x0, 0x1, 0x1, 0x44, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xdffffffffffffff9, 0x0, 0x4, 0xa, 0x40000006, 0x9, 0x2, 0xfff, 0x80, 0x8, 0x9, 0x4, 0x9, 0xffff, 0x10000021, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x29})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='maps\x00')
exit(0x5)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x7ad99138}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040844}, 0x0)

1.110879722s ago: executing program 3 (id=647):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r0) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
getsockopt(r3, 0x111, 0x2, 0x0, &(0x7f00000000c0)) (rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000))
ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) (async)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r6 = fcntl$dupfd(r4, 0x0, r5)
write$khugepaged_scan(r6, &(0x7f0000000040), 0x8)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/vlan/vlan1\x00')
sendfile(r7, r7, &(0x7f0000000080)=0x6, 0x8) (async)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0x0, 0x0, 0x1b8, 0x348, 0xd0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@remote, 0x1e, 0x40, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (rerun: 32)
r8 = syz_open_dev$dvb_dvr(&(0x7f0000000140), 0xd, 0x80002) (async)
r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f00000001c0)={0x4, 0x0, r9}) (async)
pselect6(0x40, &(0x7f0000000240)={0x2, 0x3, 0x3, 0x2, 0x1, 0x92, 0x5, 0x15b9}, &(0x7f0000000280)={0x0, 0x2, 0x1, 0x100, 0x1, 0x5, 0x0, 0x8001}, &(0x7f00000002c0)={0x7, 0x7, 0x80000000, 0x7, 0x8, 0xfd, 0x7f, 0xf}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x5]}, 0x8}) (async)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, 0x0, &(0x7f0000000100)) (async, rerun: 64)
r11 = socket(0x18, 0x2, 0x1) (rerun: 64)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r11, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async)
ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, 0x0)

956.294543ms ago: executing program 3 (id=648):
r0 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x4)
r1 = socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x52)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5, @ANYBLOB="654df0da75a85f1032a7bca23e0697161ced2af92d55b30335bafe925fe335a3e3b86d089d1478f5bb372178d15059ad518728d5bdd10fef34ec8c4bb8e7d472624a86e91110dfbafd920de5ce0dca203f0f1b8e078edd15d61ae8d38e62e254766d981b19863a6ecbd4a06c9e8e27d4ce4abf52447040e7918e9b12ff27a542efa407099bb370c09e2ccd0c4afe7c69ce381411c51056d073f72c2a13b6087e55c52bc1066c28fd8550f1f6b92f867c54e4da65546151faf139e0b4b9befde55869c3fcff04c80eb5917009e84eea4e891a1797055c91e427e593f62d0f474a43c74672b2"], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

839.767882ms ago: executing program 3 (id=649):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0x0, 0x2}, @rumble={0x3, 0x9}})
r2 = socket(0x10, 0x3, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
socket$inet(0x2, 0x3, 0x1) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r3, &(0x7f0000000000), &(0x7f0000000600)=@udp=r4, 0x2}, 0x20) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7}, 0x14)
syz_emit_ethernet(0xd81, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xd4b, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0xd4b, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) (async)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

52.961815ms ago: executing program 4 (id=650):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@uuid_null}, {@xino_auto}, {@redirect_dir_off}, {@xino_on}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="080018ed", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
fanotify_mark(r1, 0x1, 0x8000026, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

288.405µs ago: executing program 4 (id=651):
mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x20ad02, 0x100)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x7}}, './sys/module/zswap/parameters/compressor\x00'})
mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x100, &(0x7f00000001c0)={0xf4, 0x80, 0x100000, {r1}}, 0x20)
write(r0, &(0x7f0000000100)='z', 0x1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))

0s ago: executing program 2 (id=652):
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1c, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"})
r2 = syz_open_pts(0xffffffffffffffff, 0x141401)
fcntl$setstatus(r2, 0x4, 0x2000)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

kernel console output (not intermixed with test programs):

  63.509015][ T6522] total_pgpgout 38053
[   63.509018][ T6522] total_pgfault 13031
[   63.509022][ T6522] total_pgmajfault 4
[   63.509026][ T6522] total_inactive_anon 237268992
[   63.509030][ T6522] total_active_anon 68325376
[   63.509034][ T6522] total_inactive_file 0
[   63.509038][ T6522] total_active_file 0
[   63.509042][ T6522] total_unevictable 0
[   63.509046][ T6522] anon_cost 0
[   63.509049][ T6522] file_cost 0
[   63.509053][ T6522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.141,pid=6499,uid=0
[   63.509102][ T6522] Memory cgroup out of memory: Killed process 6499 (syz.0.141) total-vm:98808kB, anon-rss:1312kB, file-rss:41092kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000
[   63.660471][   T43] audit: type=1400 audit(1789063037.415:498): avc:  denied  { write } for  pid=6662 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   63.967356][ T6512] syz.0.141 (6512) used greatest stack depth: 18880 bytes left
[   64.092676][ T6672] jffs2: notice: (6672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   64.099548][   T43] audit: type=1400 audit(1789063037.855:499): avc:  denied  { write } for  pid=6671 comm="syz.3.169" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.365276][ T6521] syz.0.141 (6521) used greatest stack depth: 18800 bytes left
[   64.584591][ T6525] syz.0.141 (6525) used greatest stack depth: 18360 bytes left
[   64.623337][ T6689] xt_hashlimit: size too large, truncated to 1048576
[   64.731540][ T6696] netlink: 'syz.3.174': attribute type 3 has an invalid length.
[   64.781758][ T6696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.174'.
[   64.812510][ T6696] bond1 (unregistering): Released all slaves
[   64.939764][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.174'.
[   64.957277][ T6707] netlink: 'syz.2.176': attribute type 10 has an invalid length.
[   65.086401][ T6707] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.091189][ T6707] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   65.186110][ T6707] netlink: 14 bytes leftover after parsing attributes in process `syz.2.176'.
[   65.246723][ T6707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.287558][ T6707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.297111][ T6707] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[   65.327510][ T6707] bond0 (unregistering): Released all slaves
[   65.565360][   T10] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[   65.620103][ T6571] syz.0.141 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   65.620127][ T6571] CPU: 3 UID: 0 PID: 6571 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) 
[   65.620139][ T6571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.620146][ T6571] Call Trace:
[   65.620151][ T6571]  <TASK>
[   65.620156][ T6571]  dump_stack_lvl+0x100/0x190
[   65.620174][ T6571]  dump_header+0xfb/0x606
[   65.620188][ T6571]  oom_kill_process.cold+0xd/0x380
[   65.620202][ T6571]  out_of_memory+0x340/0x14f0
[   65.620220][ T6571]  ? __pfx_out_of_memory+0x10/0x10
[   65.620238][ T6571]  mem_cgroup_out_of_memory+0xc6/0x130
[   65.620250][ T6571]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   65.620261][ T6571]  ? find_held_lock+0x2b/0x80
[   65.620279][ T6571]  ? do_raw_spin_unlock+0x145/0x1e0
[   65.620309][ T6571]  ? _raw_spin_unlock+0x28/0x50
[   65.620324][ T6571]  try_charge_memcg+0x783/0xf60
[   65.620343][ T6571]  ? __pfx_try_charge_memcg+0x10/0x10
[   65.620361][ T6571]  ? find_held_lock+0x2b/0x80
[   65.620376][ T6571]  ? rcu_read_unlock+0x17/0x60
[   65.620392][ T6571]  ? rcu_read_unlock+0x17/0x60
[   65.620408][ T6571]  ? find_held_lock+0x2b/0x80
[   65.620424][ T6571]  ? rcu_read_unlock+0x17/0x60
[   65.620443][ T6571]  charge_memcg+0x1ae/0x210
[   65.620459][ T6571]  __mem_cgroup_charge+0x2b/0x1c0
[   65.620478][ T6571]  shmem_alloc_and_add_folio+0x451/0xd40
[   65.620498][ T6571]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   65.620515][ T6571]  ? shmem_allowable_huge_orders+0x2bd/0x400
[   65.620534][ T6571]  shmem_get_folio_gfp+0x75b/0x1980
[   65.620555][ T6571]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   65.620572][ T6571]  ? vm_normal_page+0x1d1/0x380
[   65.620584][ T6571]  ? __pfx_vm_normal_page+0x10/0x10
[   65.620599][ T6571]  shmem_write_begin+0x1a4/0x420
[   65.620617][ T6571]  ? __pfx_shmem_write_begin+0x10/0x10
[   65.620634][ T6571]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   65.620655][ T6571]  generic_perform_write+0x292/0xa40
[   65.620668][ T6571]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   65.620683][ T6571]  ? __pfx_generic_perform_write+0x10/0x10
[   65.620698][ T6571]  ? file_update_time_flags+0x38c/0x520
[   65.620716][ T6571]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   65.620728][ T6571]  shmem_file_write_iter+0x10e/0x140
[   65.620740][ T6571]  __kernel_write_iter+0x2ac/0x930
[   65.620843][ T6571]  ? __pfx___kernel_write_iter+0x10/0x10
[   65.620859][ T6571]  ? __up_read+0x333/0x980
[   65.620873][ T6571]  ? dump_user_range+0x65e/0xad0
[   65.620888][ T6571]  dump_user_range+0x3f9/0xad0
[   65.620902][ T6571]  ? __pfx_dump_user_range+0x10/0x10
[   65.620918][ T6571]  ? __pfx_writenote+0x10/0x10
[   65.620929][ T6571]  ? elf_core_dump+0x1f25/0x3d20
[   65.620944][ T6571]  elf_core_dump+0x2d68/0x3d20
[   65.620963][ T6571]  ? __pfx_elf_core_dump+0x10/0x10
[   65.620974][ T6571]  ? kasan_save_stack+0x3f/0x50
[   65.620986][ T6571]  ? kasan_save_stack+0x30/0x50
[   65.620997][ T6571]  ? kasan_save_track+0x14/0x30
[   65.621008][ T6571]  ? __kasan_kmalloc+0xaa/0xb0
[   65.621019][ T6571]  ? vfs_coredump+0x21f6/0x54a0
[   65.621029][ T6571]  ? get_signal+0x1f2a/0x21e0
[   65.621040][ T6571]  ? arch_do_signal_or_restart+0x91/0x7e0
[   65.621060][ T6571]  ? 0xffffffffff600000
[   65.621086][ T6571]  ? lock_acquire+0x1d1/0x380
[   65.621097][ T6571]  ? get_signal+0x1f2a/0x21e0
[   65.621113][ T6571]  ? vfs_coredump+0x281a/0x54a0
[   65.621123][ T6571]  vfs_coredump+0x281a/0x54a0
[   65.621139][ T6571]  ? __pfx_vfs_coredump+0x10/0x10
[   65.621150][ T6571]  ? __lock_acquire+0x5c0/0x1f40
[   65.621165][ T6571]  ? __lock_acquire+0x5c0/0x1f40
[   65.621177][ T6571]  ? lock_acquire+0x1d1/0x380
[   65.621188][ T6571]  ? unwind_next_frame+0xbd/0x2090
[   65.621209][ T6571]  ? lock_acquire+0x1d1/0x380
[   65.621223][ T6571]  ? bpf_ksym_find+0x128/0x1c0
[   65.621240][ T6571]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   65.621262][ T6571]  ? arch_stack_walk+0xa6/0xf0
[   65.621283][ T6571]  ? __sigqueue_free+0xbe/0x2a0
[   65.621297][ T6571]  ? stack_trace_save+0x8e/0xc0
[   65.621316][ T6571]  ? __pfx_stack_trace_save+0x10/0x10
[   65.621335][ T6571]  ? stack_depot_save_flags+0x27/0x9f0
[   65.621350][ T6571]  ? __lock_acquire+0x5c0/0x1f40
[   65.621386][ T6571]  ? proc_coredump_connector+0x2d3/0x4f0
[   65.621403][ T6571]  ? __pfx_proc_coredump_connector+0x10/0x10
[   65.621423][ T6571]  ? rcu_is_watching+0x13/0xc0
[   65.621440][ T6571]  get_signal+0x1f2a/0x21e0
[   65.621458][ T6571]  ? __pfx_get_signal+0x10/0x10
[   65.621470][ T6571]  ? __pfx_force_sig_fault+0x10/0x10
[   65.621486][ T6571]  arch_do_signal_or_restart+0x91/0x7e0
[   65.621503][ T6571]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   65.621529][ T6571]  irqentry_exit+0x402/0xa10
[   65.621546][ T6571]  asm_exc_page_fault+0x26/0x30
[   65.621557][ T6571] RIP: 0033:0x0
[   65.621565][ T6571] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   65.621570][ T6571] RSP: 002b:0000200000000358 EFLAGS: 00010217
[   65.621579][ T6571] RAX: 0000000000000000 RBX: 00007f9a5d426090 RCX: 00007f9a5d19e159
[   65.621586][ T6571] RDX: 0000000000000000 RSI: 0000200000000350 RDI: 0000000008800000
[   65.621593][ T6571] RBP: 00007f9a5d23503b R08: 0000000000000000 R09: 0000000000000000
[   65.621599][ T6571] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   65.621607][ T6571] R13: 00007f9a5d426128 R14: 00007f9a5d426090 R15: 00007fff93c6d788
[   65.621622][ T6571]  </TASK>
[   65.621627][ T6571] memory: usage 307200kB, limit 307200kB, failcnt 37300
[   65.621633][ T6571] memory+swap: usage 432124kB, limit 9007199254740988kB, failcnt 0
[   65.621640][ T6571] kmem: usage 6924kB, limit 9007199254740988kB, failcnt 0
[   65.621646][ T6571] Memory cgroup stats for /syz0:
[   65.621724][ T6571] cache 307404800
[   65.621729][ T6571] rss 77824
[   65.621733][ T6571] rss_huge 0
[   65.621736][ T6571] shmem 307396608
[   65.621740][ T6571] mapped_file 4096
[   65.621744][ T6571] dirty 0
[   65.621748][ T6571] writeback 0
[   65.621751][ T6571] workingset_refault_anon 0
[   65.621755][ T6571] workingset_refault_file 172
[   65.621759][ T6571] swap 127922176
[   65.621763][ T6571] swapcached 211095552
[   65.621767][ T6571] pgpgin 173743
[   65.621771][ T6571] pgpgout 98674
[   65.621774][ T6571] pgfault 16825
[   65.621778][ T6571] pgmajfault 6
[   65.626695][ T6571] inactive_anon 152920064
[   65.626702][ T6571] active_anon 154554368
[   65.626706][ T6571] inactive_file 0
[   65.626710][ T6571] active_file 4096
[   65.626746][ T6571] unevictable 0
[   65.626751][ T6571] hierarchical_memory_limit 314572800
[   65.626756][ T6571] hierarchical_memsw_limit 9223372036854771712
[   65.626760][ T6571] total_cache 307404800
[   65.626764][ T6571] total_rss 77824
[   65.626768][ T6571] total_rss_huge 0
[   65.626771][ T6571] total_shmem 307396608
[   65.626775][ T6571] total_mapped_file 4096
[   65.626779][ T6571] total_dirty 0
[   65.626783][ T6571] total_writeback 0
[   65.626786][ T6571] total_workingset_refault_anon 0
[   65.626791][ T6571] total_workingset_refault_file 172
[   65.626795][ T6571] total_swap 127922176
[   65.626799][ T6571] total_swapcached 211095552
[   65.626803][ T6571] total_pgpgin 173743
[   65.626806][ T6571] total_pgpgout 98674
[   65.626810][ T6571] total_pgfault 16825
[   65.626814][ T6571] total_pgmajfault 6
[   65.626818][ T6571] total_inactive_anon 152920064
[   65.626822][ T6571] total_active_anon 154554368
[   65.626826][ T6571] total_inactive_file 0
[   65.626830][ T6571] total_active_file 4096
[   65.626834][ T6571] total_unevictable 0
[   65.626838][ T6571] anon_cost 0
[   65.626841][ T6571] file_cost 0
[   65.626845][ T6571] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.141,pid=6505,uid=0
[   65.626901][ T6571] Memory cgroup out of memory: Killed process 6505 (syz.0.141) total-vm:98940kB, anon-rss:1292kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000
[   65.727410][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[   65.727440][   T10] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[   65.729071][   T10] usb 8-1: config 8 has an invalid interface number: 109 but max is 0
[   65.729084][   T10] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   65.729093][   T10] usb 8-1: config 8 has no interface number 0
[   65.729110][   T10] usb 8-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[   65.729123][   T10] usb 8-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[   65.729136][   T10] usb 8-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8
[   65.735564][   T10] usb 8-1: string descriptor 0 read error: -22
[   65.735620][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.737921][ T6717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   65.739430][   T10] metro_usb 8-1:8.109: Metrologic USB to Serial converter detected
[   65.744905][   T10] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0
[   65.943666][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.944071][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.946111][   T10] usb 8-1: USB disconnect, device number 2
[   65.958147][   T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[   65.958375][   T10] metro_usb 8-1:8.109: device disconnected
[   65.984880][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.985110][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.036114][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[   66.039516][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.065915][ T6728] bridge_slave_1 (unregistering): left allmulticast mode
[   66.065933][ T6728] bridge_slave_1 (unregistering): left promiscuous mode
[   66.065968][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.204530][ T6734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6734 comm=syz.1.182
[   66.251576][ T6744] UBIFS error (pid: 6744): cannot open "ubi0_0", error -19
[   66.258568][   T25] hid-generic 0005:04F3:0058.0002: item fetching failed at offset 0/1
[   66.258906][   T25] hid-generic 0005:04F3:0058.0002: probe with driver hid-generic failed with error -22
[   66.280955][ T6747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'.
[   66.285625][ T6747] xt_l2tp: invalid flags combination: 8
[   66.326151][ T6753] jffs2: notice: (6753) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   66.424802][ T6753] FAULT_INJECTION: forcing a failure.
[   66.424802][ T6753] name failslab, interval 1, probability 0, space 0, times 0
[   66.424823][ T6753] CPU: 3 UID: 0 PID: 6753 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(full) 
[   66.424835][ T6753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   66.424842][ T6753] Call Trace:
[   66.424846][ T6753]  <TASK>
[   66.424851][ T6753]  dump_stack_lvl+0x100/0x190
[   66.424870][ T6753]  should_fail_ex.cold+0x5/0xa
[   66.424886][ T6753]  should_failslab+0xc2/0x120
[   66.424901][ T6753]  __kmalloc_noprof+0xfc/0x840
[   66.424912][ T6753]  ? rcu_is_watching+0x13/0xc0
[   66.424927][ T6753]  ? tomoyo_realpath_from_path+0xb6/0x690
[   66.424943][ T6753]  tomoyo_realpath_from_path+0xb6/0x690
[   66.425044][ T6753]  tomoyo_path_perm+0x276/0x460
[   66.425062][ T6753]  ? tomoyo_path_perm+0x262/0x460
[   66.425081][ T6753]  ? __pfx_tomoyo_path_perm+0x10/0x10
[   66.425097][ T6753]  ? get_pid_task+0xfc/0x250
[   66.425125][ T6753]  ? hook_file_truncate+0xba/0x280
[   66.425139][ T6753]  ? lock_acquire+0x1d1/0x380
[   66.425151][ T6753]  ? __fget_files+0x34/0x3d0
[   66.425167][ T6753]  security_file_truncate+0xb5/0x1e0
[   66.425182][ T6753]  do_ftruncate+0x216/0x8a0
[   66.425195][ T6753]  ? __pfx_do_ftruncate+0x10/0x10
[   66.425211][ T6753]  ksys_ftruncate+0x61/0xb0
[   66.425223][ T6753]  __x64_sys_ftruncate+0x55/0x80
[   66.425235][ T6753]  do_syscall_64+0x123/0x790
[   66.425253][ T6753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.425267][ T6753] RIP: 0033:0x7fb71e39e159
[   66.425279][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.425293][ T6753] RSP: 002b:00007fb71f186028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[   66.425311][ T6753] RAX: ffffffffffffffda RBX: 00007fb71e625fa0 RCX: 00007fb71e39e159
[   66.425318][ T6753] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000004
[   66.425325][ T6753] RBP: 00007fb71f186090 R08: 0000000000000000 R09: 0000000000000000
[   66.425331][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.425337][ T6753] R13: 00007fb71e626038 R14: 00007fb71e625fa0 R15: 00007ffc3739f468
[   66.425352][ T6753]  </TASK>
[   66.425356][ T6753] ERROR: Out of memory at tomoyo_realpath_from_path.
[   66.474370][ T6751] syz.1.183 (6751): drop_caches: 2
[   66.511460][ T6758] jffs2: notice: (6758) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   66.549386][ T6758] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   66.693896][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   66.739766][ T6769] tipc: Enabled bearer <eth:team0>, priority 0
[   66.741703][ T6769] netlink: 'syz.3.191': attribute type 11 has an invalid length.
[   66.744781][ T6771] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   66.765837][ T6772] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   66.807889][ T6778] MINIX-fs: blocksize too small for device
[   66.928685][ T6791] kAFS: unable to lookup cell '(,c¾Ì'
[   67.168821][   T43] kauditd_printk_skb: 30 callbacks suppressed
[   67.168834][   T43] audit: type=1400 audit(1789063040.925:530): avc:  denied  { write } for  pid=6798 comm="syz.1.197" name="trace_marker" dev="tracefs" ino=5293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   67.168859][   T43] audit: type=1400 audit(1789063040.925:531): avc:  denied  { open } for  pid=6798 comm="syz.1.197" path="/42/mnt/trace_marker" dev="tracefs" ino=5293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   67.171256][ T6805] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   67.410044][ T6828] jffs2: notice: (6828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   67.411781][   T43] audit: type=1400 audit(1789063041.165:532): avc:  denied  { write } for  pid=6827 comm="syz.1.206" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   67.549210][ T6828] FAULT_INJECTION: forcing a failure.
[   67.549210][ T6828] name failslab, interval 1, probability 0, space 0, times 0
[   67.549232][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.1.206 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   67.549247][ T6828] Tainted: [L]=SOFTLOCKUP
[   67.549251][ T6828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   67.549258][ T6828] Call Trace:
[   67.549262][ T6828]  <TASK>
[   67.549267][ T6828]  dump_stack_lvl+0x100/0x190
[   67.549286][ T6828]  should_fail_ex.cold+0x5/0xa
[   67.549302][ T6828]  ? __pfx_jffs2_setattr+0x10/0x10
[   67.549314][ T6828]  should_failslab+0xc2/0x120
[   67.549327][ T6828]  ? __pfx_jffs2_setattr+0x10/0x10
[   67.549338][ T6828]  kmem_cache_alloc_noprof+0x92/0x6a0
[   67.549349][ T6828]  ? avc_has_perm+0x135/0x1e0
[   67.549363][ T6828]  ? jffs2_do_setattr+0x170/0x1fd0
[   67.549376][ T6828]  ? __pfx_jffs2_setattr+0x10/0x10
[   67.549386][ T6828]  jffs2_do_setattr+0x170/0x1fd0
[   67.549406][ T6828]  ? ktime_get_coarse_real_ts64_mg+0x235/0x300
[   67.549424][ T6828]  ? __pfx_jffs2_do_setattr+0x10/0x10
[   67.549435][ T6828]  ? inode_newsize_ok+0x13d/0x200
[   67.549447][ T6828]  ? setattr_prepare+0x1d4/0xa40
[   67.549458][ T6828]  ? evm_inode_setattr+0x41/0x6d0
[   67.549469][ T6828]  ? __pfx_make_vfsgid+0x10/0x10
[   67.549482][ T6828]  ? __pfx_jffs2_setattr+0x10/0x10
[   67.549493][ T6828]  jffs2_setattr+0x7b/0x120
[   67.549504][ T6828]  notify_change+0xb25/0x1330
[   67.549519][ T6828]  do_truncate+0x1df/0x240
[   67.549531][ T6828]  ? __pfx_do_truncate+0x10/0x10
[   67.549550][ T6828]  do_ftruncate+0x57b/0x8a0
[   67.549563][ T6828]  ? __pfx_do_ftruncate+0x10/0x10
[   67.549579][ T6828]  ksys_ftruncate+0x61/0xb0
[   67.549591][ T6828]  __x64_sys_ftruncate+0x55/0x80
[   67.549603][ T6828]  do_syscall_64+0x123/0x790
[   67.549619][ T6828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.549630][ T6828] RIP: 0033:0x7fceccd9e159
[   67.549640][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.549651][ T6828] RSP: 002b:00007fcecdb91028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[   67.549663][ T6828] RAX: ffffffffffffffda RBX: 00007fcecd025fa0 RCX: 00007fceccd9e159
[   67.549670][ T6828] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000004
[   67.549676][ T6828] RBP: 00007fcecdb91090 R08: 0000000000000000 R09: 0000000000000000
[   67.549682][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.549689][ T6828] R13: 00007fcecd026038 R14: 00007fcecd025fa0 R15: 00007ffcbbb971d8
[   67.549703][ T6828]  </TASK>
[   67.610423][   T43] audit: type=1400 audit(1789063041.365:533): avc:  denied  { unmount } for  pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   67.699773][   T43] audit: type=1400 audit(1789063041.455:534): avc:  denied  { ioctl } for  pid=6841 comm="syz.1.209" path="socket:[15037]" dev="sockfs" ino=15037 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   67.734824][   T43] audit: type=1400 audit(1789063041.495:535): avc:  denied  { setopt } for  pid=6843 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   67.735155][ T1355] tipc: Node number set to 1989955988
[   68.041399][   T43] audit: type=1400 audit(1789063041.795:536): avc:  denied  { write } for  pid=6849 comm="syz.2.212" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   68.175534][   T43] audit: type=1400 audit(1789063041.935:537): avc:  denied  { ioctl } for  pid=6849 comm="syz.2.212" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   68.197186][ T6864] netlink: 'syz.0.216': attribute type 1 has an invalid length.
[   68.217946][ T6864] bond1: entered promiscuous mode
[   68.218242][ T6864] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.240234][ T6864] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.240529][ T6864] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   68.240546][ T6864] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   68.243124][ T6864] bond1: (slave ip6gre1): making interface the new active one
[   68.243142][ T6864] ip6gre1: entered promiscuous mode
[   68.261545][ T6864] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[   68.402650][ T6868] jffs2: notice: (6868) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   68.405044][   T43] audit: type=1400 audit(1789063042.165:538): avc:  denied  { write } for  pid=6867 comm="syz.3.217" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.568075][   T43] audit: type=1400 audit(1789063042.325:539): avc:  denied  { connect } for  pid=6872 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   68.627249][ T6878] jffs2: notice: (6878) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   68.912198][ T6892] FAULT_INJECTION: forcing a failure.
[   68.912198][ T6892] name failslab, interval 1, probability 0, space 0, times 0
[   68.912230][ T6892] CPU: 2 UID: 0 PID: 6892 Comm: syz.2.224 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   68.912255][ T6892] Tainted: [L]=SOFTLOCKUP
[   68.912261][ T6892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.912272][ T6892] Call Trace:
[   68.912279][ T6892]  <TASK>
[   68.912286][ T6892]  dump_stack_lvl+0x100/0x190
[   68.912316][ T6892]  should_fail_ex.cold+0x5/0xa
[   68.912343][ T6892]  should_failslab+0xc2/0x120
[   68.912365][ T6892]  __kmalloc_noprof+0xfc/0x840
[   68.912384][ T6892]  ? tomoyo_encode2+0xfb/0x3c0
[   68.912408][ T6892]  tomoyo_encode2+0xfb/0x3c0
[   68.912431][ T6892]  tomoyo_encode+0x29/0x50
[   68.912450][ T6892]  tomoyo_realpath_from_path+0x18c/0x690
[   68.912477][ T6892]  tomoyo_path_number_perm+0x23c/0x580
[   68.912502][ T6892]  ? tomoyo_path_number_perm+0x22e/0x580
[   68.912522][ T6892]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   68.912544][ T6892]  ? __lock_acquire+0x5c0/0x1f40
[   68.912563][ T6892]  ? __fget_files+0x34/0x3d0
[   68.912578][ T6892]  ? find_held_lock+0x2b/0x80
[   68.912593][ T6892]  ? hook_file_ioctl_common+0x140/0x440
[   68.912610][ T6892]  ? __fget_files+0x21f/0x3d0
[   68.912625][ T6892]  security_file_ioctl+0xd3/0x230
[   68.912638][ T6892]  __x64_sys_ioctl+0xb7/0x210
[   68.912650][ T6892]  do_syscall_64+0x123/0x790
[   68.912666][ T6892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.912678][ T6892] RIP: 0033:0x7fb71e39e159
[   68.912687][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.912698][ T6892] RSP: 002b:00007fb71f186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   68.912709][ T6892] RAX: ffffffffffffffda RBX: 00007fb71e625fa0 RCX: 00007fb71e39e159
[   68.912716][ T6892] RDX: 0000200000000080 RSI: 0000000000004b47 RDI: 0000000000000003
[   68.912723][ T6892] RBP: 00007fb71f186090 R08: 0000000000000000 R09: 0000000000000000
[   68.912729][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.912736][ T6892] R13: 00007fb71e626038 R14: 00007fb71e625fa0 R15: 00007ffc3739f468
[   68.912781][ T6892]  </TASK>
[   68.912796][ T6892] ERROR: Out of memory at tomoyo_realpath_from_path.
[   68.996675][ T6900] batman_adv: batadv0: Adding interface: veth0
[   68.996686][ T6900] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.996701][ T6900] batman_adv: batadv0: Interface activated: veth0
[   68.996786][ T6893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.998222][ T6900] bridge_slave_0: invalid flags given to default FDB implementation
[   68.999691][ T6900] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[   68.999897][ T6900] __nla_validate_parse: 1 callbacks suppressed
[   68.999905][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.227'.
[   68.999913][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.999922][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.000853][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.000864][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.001367][ T6900] batman_adv: batadv0: Interface deactivated: veth0
[   69.001377][ T6900] batman_adv: batadv0: Removing interface: veth0
[   69.099200][ T6893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.145071][ T6906] 9pnet_virtio: no channels available for device syz
[   69.213769][ T6910] jffs2: notice: (6910) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   69.312400][ T6915] netlink: 'syz.0.233': attribute type 10 has an invalid length.
[   69.335123][ T6915] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   69.336618][ T6915] team0: Port device netdevsim1 added
[   69.338189][ T6915] netlink: 'syz.0.233': attribute type 10 has an invalid length.
[   69.370151][ T6915] SELinux:  Context system_u:object_r:tetex_data_t:s0 is not valid (left unmapped).
[   69.447285][ T6923] jffs2: notice: (6923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   69.567339][ T6923] FAULT_INJECTION: forcing a failure.
[   69.567339][ T6923] name failslab, interval 1, probability 0, space 0, times 0
[   69.567365][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.0.236 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   69.567385][ T6923] Tainted: [L]=SOFTLOCKUP
[   69.567390][ T6923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   69.567399][ T6923] Call Trace:
[   69.567404][ T6923]  <TASK>
[   69.567410][ T6923]  dump_stack_lvl+0x100/0x190
[   69.567435][ T6923]  should_fail_ex.cold+0x5/0xa
[   69.567456][ T6923]  should_failslab+0xc2/0x120
[   69.567475][ T6923]  kmem_cache_alloc_noprof+0x92/0x6a0
[   69.567491][ T6923]  ? jffs2_add_full_dnode_to_inode+0xa7/0x1740
[   69.567515][ T6923]  jffs2_add_full_dnode_to_inode+0xa7/0x1740
[   69.567533][ T6923]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[   69.567555][ T6923]  ? __local_bh_enable_ip+0xa5/0x120
[   69.567575][ T6923]  jffs2_do_setattr+0x18e4/0x1fd0
[   69.567596][ T6923]  ? __pfx_jffs2_do_setattr+0x10/0x10
[   69.567610][ T6923]  ? inode_newsize_ok+0x13d/0x200
[   69.567626][ T6923]  ? setattr_prepare+0x1d4/0xa40
[   69.567640][ T6923]  ? evm_inode_setattr+0x41/0x6d0
[   69.567654][ T6923]  ? __pfx_make_vfsgid+0x10/0x10
[   69.567671][ T6923]  ? __pfx_jffs2_setattr+0x10/0x10
[   69.567685][ T6923]  jffs2_setattr+0x7b/0x120
[   69.567699][ T6923]  notify_change+0xb25/0x1330
[   69.567720][ T6923]  do_truncate+0x1df/0x240
[   69.567754][ T6923]  ? __pfx_do_truncate+0x10/0x10
[   69.567782][ T6923]  do_ftruncate+0x57b/0x8a0
[   69.567802][ T6923]  ? __pfx_do_ftruncate+0x10/0x10
[   69.567824][ T6923]  ksys_ftruncate+0x61/0xb0
[   69.567840][ T6923]  __x64_sys_ftruncate+0x55/0x80
[   69.567856][ T6923]  do_syscall_64+0x123/0x790
[   69.567877][ T6923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.567891][ T6923] RIP: 0033:0x7f9a5d19e159
[   69.567903][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.567917][ T6923] RSP: 002b:00007f9a5e005028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[   69.567932][ T6923] RAX: ffffffffffffffda RBX: 00007f9a5d425fa0 RCX: 00007f9a5d19e159
[   69.567941][ T6923] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000004
[   69.567950][ T6923] RBP: 00007f9a5e005090 R08: 0000000000000000 R09: 0000000000000000
[   69.567958][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.567967][ T6923] R13: 00007f9a5d426038 R14: 00007f9a5d425fa0 R15: 00007fff93c6d788
[   69.567988][ T6923]  </TASK>
[   69.569227][ T6923] jffs2: error: (6923) new_fragment: cannot allocate a jffs2_node_frag object
[   69.702304][ T6931] netlink: 112 bytes leftover after parsing attributes in process `syz.2.238'.
[   69.705162][ T6931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6931 comm=syz.2.238
[   69.705700][ T6931] netlink: 'syz.2.238': attribute type 2 has an invalid length.
[   69.847229][   T13] syzkaller0: tun_net_xmit 76
[   69.847330][   T13] syzkaller0: tun_net_xmit 48
[   69.853431][ T6949] syzkaller0: create flow: hash 3505607171 index 1
[   69.875112][   T10] syzkaller0: tun_net_xmit 76
[   69.964070][   T10] syzkaller0: tun_net_xmit 76
[   69.982201][ T6948] syzkaller0: delete flow: hash 3505607171 index 1
[   70.093790][   T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   70.245076][   T50] usb 8-1: Using ep0 maxpacket: 8
[   70.251572][   T50] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   70.252334][   T50] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7
[   70.252354][   T50] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   70.254069][   T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.254081][   T50] usb 8-1: Product: �㾑⵿阶鼋鸌컻�隆㊟硹캙容ߎⵢ変铈冻饉�茉⤕㻢⫂ꪣ�郲丄㶡₫찱᣷לּ饴炧뼪ᚈ� 溰벲徖�䥙窉츅䟹ﴥ
[   70.254093][   T50] usb 8-1: Manufacturer: Ж
[   70.254100][   T50] usb 8-1: SerialNumber: �
[   70.503815][   T50] usb 8-1: 1:1 : bogus bTerminalLink 9
[   70.793916][   T50] usb 8-1: USB disconnect, device number 4
[   70.909905][ T6963] udevd[6963]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   71.111268][ T6969] FAULT_INJECTION: forcing a failure.
[   71.111268][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   71.111297][ T6969] CPU: 3 UID: 0 PID: 6969 Comm: syz.2.249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   71.111320][ T6969] Tainted: [L]=SOFTLOCKUP
[   71.111326][ T6969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   71.111337][ T6969] Call Trace:
[   71.111343][ T6969]  <TASK>
[   71.111350][ T6969]  dump_stack_lvl+0x100/0x190
[   71.111379][ T6969]  should_fail_ex.cold+0x5/0xa
[   71.111402][ T6969]  _copy_to_user+0x32/0xd0
[   71.111418][ T6969]  simple_read_from_buffer+0xcb/0x170
[   71.111442][ T6969]  proc_fail_nth_read+0x1af/0x230
[   71.111464][ T6969]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   71.111486][ T6969]  ? rw_verify_area+0xce/0x6d0
[   71.111510][ T6969]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   71.111530][ T6969]  vfs_read+0x1e4/0xb40
[   71.111543][ T6969]  ? lock_acquire+0x1d1/0x380
[   71.111560][ T6969]  ? __fget_files+0x34/0x3d0
[   71.111580][ T6969]  ? __pfx_vfs_read+0x10/0x10
[   71.111594][ T6969]  ? find_held_lock+0x2b/0x80
[   71.111617][ T6969]  ? __fget_files+0x215/0x3d0
[   71.111641][ T6969]  ? __fget_files+0x21f/0x3d0
[   71.111666][ T6969]  ksys_read+0x12a/0x250
[   71.111678][ T6969]  ? __pfx_ksys_read+0x10/0x10
[   71.111702][ T6969]  do_syscall_64+0x123/0x790
[   71.111727][ T6969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.111745][ T6969] RIP: 0033:0x7fb71e35e98e
[   71.111759][ T6969] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   71.111780][ T6969] RSP: 002b:00007fb71f185fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   71.111796][ T6969] RAX: ffffffffffffffda RBX: 00007fb71f1866c0 RCX: 00007fb71e35e98e
[   71.111804][ T6969] RDX: 000000000000000f RSI: 00007fb71f1860a0 RDI: 0000000000000005
[   71.111813][ T6969] RBP: 00007fb71f186090 R08: 0000000000000000 R09: 0000000000000000
[   71.111823][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.111833][ T6969] R13: 00007fb71e626038 R14: 00007fb71e625fa0 R15: 00007ffc3739f468
[   71.111858][ T6969]  </TASK>
[   71.188026][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[   71.188062][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[   71.206594][    T9] cfg80211: failed to load regulatory.db
[   71.222208][ T6976] netlink: 'syz.2.251': attribute type 21 has an invalid length.
[   71.245416][ T6976] kAFS: No cell specified
[   71.248461][ T6976] tmpfs: Bad value for 'mpol'
[   71.248894][ T6976] fuse: fd is not a fuse device
[   71.255969][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'.
[   71.258863][ T6983] jffs2: notice: (6983) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   71.301416][ T6986] x_tables: duplicate underflow at hook 1
[   71.335603][ T6988] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[   71.382942][ T6995] netdevsim netdevsim3: Direct firmware load for .
[   71.382942][ T6995]  failed with error -2
[   71.383635][ T6995] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[   71.383635][ T6995] 
[   71.457565][ T6996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   71.569519][ T7009] trusted_key: encrypted_key: insufficient parameters specified
[   71.686146][ T5440] veth1_vlan: left promiscuous mode
[   71.732714][ T7029] SELinux:  invalid class
[   71.765468][ T7029] SELinux: failed to load policy
[   71.857311][ T7054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7054 comm=syz.2.269
[   71.898241][ T7059] jffs2: notice: (7059) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   72.392335][ T7069] netlink: 'syz.3.273': attribute type 23 has an invalid length.
[   72.539747][   T43] kauditd_printk_skb: 38 callbacks suppressed
[   72.539763][   T43] audit: type=1400 audit(1789063046.295:578): avc:  denied  { setattr } for  pid=7074 comm="syz.3.276" name="HCI" dev="sockfs" ino=15175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   72.547018][   T43] audit: type=1400 audit(1789063046.305:579): avc:  denied  { ioctl } for  pid=7074 comm="syz.3.276" path="socket:[15177]" dev="sockfs" ino=15177 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   72.610115][ T7079] netlink: 'syz.1.278': attribute type 32 has an invalid length.
[   72.610135][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'.
[   72.627346][ T7079] bond1: Setting coupled_control to off (0)
[   72.714812][   T43] audit: type=1400 audit(1789063046.465:580): avc:  denied  { search } for  pid=7084 comm="syz.3.280" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   72.764975][ T7094] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[   72.765433][   T43] audit: type=1400 audit(1789063046.525:581): avc:  denied  { relabelto } for  pid=7092 comm="syz.3.283" name="88" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   72.765475][   T43] audit: type=1400 audit(1789063046.525:582): avc:  denied  { associate } for  pid=7092 comm="syz.3.283" name="88" dev="tmpfs" ino=520 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0"
[   72.767766][ T7094] netlink: 'syz.3.283': attribute type 4 has an invalid length.
[   72.768147][ T7094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=7094 comm=syz.3.283
[   72.786782][   T43] audit: type=1400 audit(1789063046.545:583): avc:  denied  { write } for  pid=5733 comm="syz-executor" name="88" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   72.787456][   T43] audit: type=1400 audit(1789063046.545:584): avc:  denied  { remove_name } for  pid=5733 comm="syz-executor" name="binderfs" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   72.789120][   T43] audit: type=1400 audit(1789063046.545:585): avc:  denied  { write } for  pid=5733 comm="syz-executor" name="88" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   72.789146][   T43] audit: type=1400 audit(1789063046.545:586): avc:  denied  { write } for  pid=5733 comm="syz-executor" name="88" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   72.789169][   T43] audit: type=1400 audit(1789063046.545:587): avc:  denied  { write } for  pid=5733 comm="syz-executor" name="88" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[   72.817426][ T7100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7100 comm=syz.2.284
[   72.840208][ T7099] netlink: 'syz.3.286': attribute type 39 has an invalid length.
[   72.965838][ T7113] xt_socket: unknown flags 0x58
[   72.967659][ T7113] iommufd_mock iommufd_mock0: Adding to iommu group 5
[   73.074754][ T7126] jffs2: notice: (7126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   73.297702][ T7132] random: crng reseeded on system resumption
[   73.308141][ T7133] can0: slcan on ttynull.
[   73.353282][   T25] Process accounting resumed
[   73.357162][   T25] Process accounting resumed
[   73.357913][   T25] Process accounting resumed
[   73.359024][   T25] Process accounting resumed
[   73.359339][   T25] Process accounting resumed
[   73.361118][   T25] Process accounting resumed
[   73.361352][   T25] Process accounting resumed
[   73.361608][   T25] Process accounting resumed
[   73.361848][   T25] Process accounting resumed
[   73.362171][   T25] Process accounting resumed
[   73.362978][   T25] Process accounting resumed
[   73.363341][   T25] Process accounting resumed
[   73.363672][   T25] Process accounting resumed
[   73.376268][ T7131] can0 (unregistered): slcan off ttynull.
[   73.386168][   T58] Process accounting resumed
[   73.387484][   T58] Process accounting resumed
[   73.388138][   T58] Process accounting resumed
[   73.388897][   T58] Process accounting resumed
[   73.389192][   T58] Process accounting resumed
[   73.389590][   T58] Process accounting resumed
[   73.389977][   T58] Process accounting resumed
[   73.390228][   T58] Process accounting resumed
[   73.390859][   T58] Process accounting resumed
[   73.391860][   T58] Process accounting resumed
[   73.392251][   T58] Process accounting resumed
[   73.392471][   T58] Process accounting resumed
[   73.392693][   T58] Process accounting resumed
[   73.392925][   T58] Process accounting resumed
[   73.393261][   T58] Process accounting resumed
[   73.393510][   T58] Process accounting resumed
[   73.394231][   T58] Process accounting resumed
[   73.394628][   T58] Process accounting resumed
[   73.395047][   T58] Process accounting resumed
[   73.418365][ T7137] Process accounting resumed
[   73.439030][ T7144] FAULT_INJECTION: forcing a failure.
[   73.439030][ T7144] name failslab, interval 1, probability 0, space 0, times 0
[   73.439053][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.2.297 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   73.439068][ T7144] Tainted: [L]=SOFTLOCKUP
[   73.439072][ T7144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   73.439079][ T7144] Call Trace:
[   73.439083][ T7144]  <TASK>
[   73.439088][ T7144]  dump_stack_lvl+0x100/0x190
[   73.439108][ T7144]  should_fail_ex.cold+0x5/0xa
[   73.439123][ T7144]  should_failslab+0xc2/0x120
[   73.439138][ T7144]  kmem_cache_alloc_noprof+0x92/0x6a0
[   73.439150][ T7144]  ? d_instantiate+0x8a/0xb0
[   73.439165][ T7144]  ? alloc_empty_file+0x5b/0x1c0
[   73.439182][ T7144]  alloc_empty_file+0x5b/0x1c0
[   73.439198][ T7144]  alloc_file_pseudo+0x183/0x290
[   73.439213][ T7144]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   73.439229][ T7144]  ? security_inode_init_security_anon+0x7b/0x230
[   73.439250][ T7144]  __anon_inode_getfile+0xe8/0x280
[   73.439261][ T7144]  ? _copy_to_user+0xaf/0xd0
[   73.439272][ T7144]  io_uring_setup.cold+0x19ce/0x1cde
[   73.439286][ T7144]  ? __pfx_io_uring_setup+0x10/0x10
[   73.439298][ T7144]  ? find_held_lock+0x2b/0x80
[   73.439322][ T7144]  ? xfd_validate_state+0x129/0x190
[   73.439338][ T7144]  __x64_sys_io_uring_setup+0xc2/0x170
[   73.439351][ T7144]  do_syscall_64+0x123/0x790
[   73.439367][ T7144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.439379][ T7144] RIP: 0033:0x7fb71e39e159
[   73.439388][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.439399][ T7144] RSP: 002b:00007fb71f186028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[   73.439410][ T7144] RAX: ffffffffffffffda RBX: 00007fb71e625fa0 RCX: 00007fb71e39e159
[   73.439417][ T7144] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[   73.439423][ T7144] RBP: 00007fb71e43503b R08: 0000000000000000 R09: 0000000000000000
[   73.439443][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.439451][ T7144] R13: 00007fb71e626038 R14: 00007fb71e625fa0 R15: 00007ffc3739f468
[   73.439465][ T7144]  </TASK>
[   73.522003][ T7148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.298'.
[   73.564482][ T7155] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[   73.564498][ T7155] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   73.565269][ T7155] vhci_hcd vhci_hcd.0: Device attached
[   73.568906][ T7156] vhci_hcd: connection closed
[   73.573639][ T6223] vhci_hcd vhci_hcd.2: stop threads
[   73.574196][ T6223] vhci_hcd vhci_hcd.2: release socket
[   73.574215][ T6223] vhci_hcd vhci_hcd.2: disconnect device
[   73.810782][ T7165] random: crng reseeded on system resumption
[   74.187957][ T7175] trusted_key: encrypted_key: master key parameter '*-Ò®' is invalid
[   74.251703][ T7179] capability: warning: `syz.2.307' uses deprecated v2 capabilities in a way that may be insecure
[   74.278947][ T7180] netlink: 36 bytes leftover after parsing attributes in process `syz.1.306'.
[   74.342897][ T7184] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   74.801537][ T7206] netlink: 'syz.3.314': attribute type 1 has an invalid length.
[   74.801551][ T7206] netlink: 'syz.3.314': attribute type 2 has an invalid length.
[   74.855390][ T7208] syz_tun: entered allmulticast mode
[   75.113035][ T7215] x_tables: duplicate underflow at hook 1
[   75.170174][ T7220] binder: 7219:7220 ioctl 400c620e 200000000040 returned -22
[   75.236120][ T7233] binder: 7232:7233 ioctl 4018620d 0 returned -22
[   75.294265][ T7235] syzkaller0: entered promiscuous mode
[   75.294286][ T7235] syzkaller0: entered allmulticast mode
[   75.353809][   T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   75.443900][   T65] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[   75.516537][   T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   75.517425][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.517441][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.517454][   T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   75.517473][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.520283][   T25] usb 6-1: config 0 descriptor??
[   75.702513][ T7258] nftables ruleset with unbound set
[   75.929291][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.929332][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.929349][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.929366][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.929384][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.929401][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.929418][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.929435][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.929453][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.929470][   T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   75.946996][   T25] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   76.055510][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[   76.055758][ T7275] BIDI support in bsg has been removed.
[   76.166630][ T7282] netlink: 'syz.0.337': attribute type 1 has an invalid length.
[   76.192282][ T7282] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.196664][ T7283] netlink: 'syz.0.337': attribute type 10 has an invalid length.
[   76.196678][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[   76.200383][ T7283] dummy0: entered promiscuous mode
[   76.203341][ T7283] netlink: 'syz.0.337': attribute type 10 has an invalid length.
[   76.203354][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[   76.203498][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[   76.203604][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[   76.204157][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[   76.204261][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[   76.204355][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[   76.204457][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[   76.207867][   T58] usb 6-1: USB disconnect, device number 4
[   76.256341][ T7290] validate_nla: 31 callbacks suppressed
[   76.256354][ T7290] netlink: 'syz.0.340': attribute type 1 has an invalid length.
[   76.290347][ T7290] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.306493][ T7290] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.306747][ T7290] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address
[   76.307350][ T7290] bond3: (slave ip6gre2): Error -95 calling set_mac_address
[   76.386444][ T7290] netlink: 'syz.0.340': attribute type 10 has an invalid length.
[   76.473559][ T7307] 9pnet_virtio: no channels available for device syz
[   76.534788][ T7322] syz.0.350: calling unsupported SCSI_IOCTL_SEND_COMMAND
[   77.203289][ T7407] block nbd0: Unsupported socket: should be TCP or UNIX.
[   77.265316][ T7418] bonding: rdma is being created...
[   77.597208][ T6353] IPVS: starting estimator thread 0...
[   77.647269][   T43] kauditd_printk_skb: 42 callbacks suppressed
[   77.647286][   T43] audit: type=1400 audit(1789063051.405:630): avc:  denied  { listen } for  pid=7456 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   77.683805][ T7454] IPVS: using max 43 ests per chain, 103200 per kthread
[   77.689916][   T43] audit: type=1400 audit(1789063051.445:631): avc:  denied  { setopt } for  pid=7458 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.692231][   T43] audit: type=1400 audit(1789063051.445:632): avc:  denied  { append } for  pid=7458 comm="syz.1.372" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   77.862060][ T7469] i2c i2c-0: new_device: Can't parse I2C address
[   78.063350][   T43] audit: type=1400 audit(1789063051.815:633): avc:  denied  { write } for  pid=7481 comm="syz.0.380" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   78.063898][   T43] audit: type=1400 audit(1789063051.815:634): avc:  denied  { open } for  pid=7481 comm="syz.0.380" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   78.111715][   T43] audit: type=1400 audit(1789063051.865:635): avc:  denied  { unmount } for  pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   78.124766][   T43] audit: type=1400 audit(1789063051.885:636): avc:  denied  { ioctl } for  pid=7481 comm="syz.0.380" path="/dev/input/mice" dev="devtmpfs" ino=938 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   78.161214][ T7493] netlink: 'syz.2.381': attribute type 34 has an invalid length.
[   78.203410][ T7484] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[   78.220563][   T43] audit: type=1400 audit(1789063051.975:637): avc:  denied  { override_creds } for  pid=7490 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   78.251646][   T43] audit: type=1400 audit(1789063052.005:638): avc:  denied  { read } for  pid=5123 comm="acpid" name="event1" dev="devtmpfs" ino=3021 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   78.251677][   T43] audit: type=1400 audit(1789063052.005:639): avc:  denied  { open } for  pid=5123 comm="acpid" path="/dev/input/event1" dev="devtmpfs" ino=3021 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   78.314961][ T7502] syzkaller0: entered promiscuous mode
[   78.314986][ T7502] syzkaller0: entered allmulticast mode
[   78.363170][ T7512] FAULT_INJECTION: forcing a failure.
[   78.363170][ T7512] name fail_futex, interval 1, probability 0, space 0, times 1
[   78.363194][ T7512] CPU: 1 UID: 0 PID: 7512 Comm: syz.2.388 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   78.363211][ T7512] Tainted: [L]=SOFTLOCKUP
[   78.363215][ T7512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   78.363222][ T7512] Call Trace:
[   78.363226][ T7512]  <TASK>
[   78.363231][ T7512]  dump_stack_lvl+0x100/0x190
[   78.363266][ T7512]  should_fail_ex.cold+0x5/0xa
[   78.363283][ T7512]  get_futex_key+0x1d0/0x14f0
[   78.363300][ T7512]  ? __pfx_get_futex_key+0x10/0x10
[   78.363312][ T7512]  ? __wake_up+0x3f/0x60
[   78.363329][ T7512]  ? netlink_recvmsg+0x6b6/0xa90
[   78.363353][ T7512]  futex_wake+0xf4/0x5e0
[   78.363371][ T7512]  ? __pfx_futex_wake+0x10/0x10
[   78.363387][ T7512]  ? rcu_is_watching+0x13/0xc0
[   78.363403][ T7512]  ? fput+0x7c/0x100
[   78.363420][ T7512]  ? __sys_recvfrom+0x258/0x2f0
[   78.363434][ T7512]  do_futex+0x2b2/0x440
[   78.363449][ T7512]  ? __pfx_do_futex+0x10/0x10
[   78.363470][ T7512]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[   78.363487][ T7512]  __x64_sys_futex+0x34f/0x4d0
[   78.363504][ T7512]  ? __pfx___x64_sys_futex+0x10/0x10
[   78.363525][ T7512]  do_syscall_64+0x123/0x790
[   78.363545][ T7512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.363556][ T7512] RIP: 0033:0x7fb71e39e159
[   78.363566][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.363576][ T7512] RSP: 002b:00007fb71f1860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   78.363588][ T7512] RAX: ffffffffffffffda RBX: 00007fb71e625fa8 RCX: 00007fb71e39e159
[   78.363596][ T7512] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb71e625fac
[   78.363603][ T7512] RBP: 00007fb71e625fa0 R08: 0000000000000001 R09: 0000000000000000
[   78.363610][ T7512] R10: 0000000000000026 R11: 0000000000000246 R12: 0000000000000000
[   78.363618][ T7512] R13: 00007fb71e626038 R14: 00007ffc3739f380 R15: 00007ffc3739f468
[   78.363632][ T7512]  </TASK>
[   78.734959][ T7522] ip6t_frag: unknown flags 6
[   79.537028][ T7553] ADFS-fs (nbd0): error: unable to read block 3, try 0
[   79.589125][ T7563] vivid-007: =================  START STATUS  =================
[   79.589166][ T7563] vivid-007: Enable Output Cropping: true
[   79.589188][ T7563] vivid-007: Enable Output Composing: true
[   79.589206][ T7563] vivid-007: Enable Output Scaler: true
[   79.589230][ T7563] vivid-007: Tx RGB Quantization Range: Automatic
[   79.589248][ T7563] vivid-007: Transmit Mode: HDMI
[   79.589264][ T7563] vivid-007: Hotplug Present: 0x00000000
[   79.589279][ T7563] vivid-007: RxSense Present: 0x00000000
[   79.589295][ T7563] vivid-007: EDID Present: 0x00000000
[   79.589313][ T7563] vivid-007: ==================  END STATUS  ==================
[   79.607587][ T7570] orangefs_devreq_open: device cannot be opened in blocking mode
[   79.922309][ T7592] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   80.104877][ T7622] netlink: 'syz.0.422': attribute type 4 has an invalid length.
[   80.104896][ T7622] __nla_validate_parse: 33 callbacks suppressed
[   80.104905][ T7622] netlink: 152 bytes leftover after parsing attributes in process `syz.0.422'.
[   80.106295][ T7621] Cannot find add_set index 65532 as target
[   80.111478][ T7622] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   80.657650][ T7630] ip6tnl1: left allmulticast mode
[   80.663461][ T7630] macvlan2: left allmulticast mode
[   80.663539][ T7630] batadv_slave_1: left allmulticast mode
[   80.708837][ T7630] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.856408][ T7652] ubi0: attaching mtd0
[   80.859438][ T7652] ubi0: scanning is finished
[   80.859479][ T7652] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   81.044962][ T5823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   81.228861][ T7688] netlink: 92 bytes leftover after parsing attributes in process `syz.0.439'.
[   81.241856][ T7652] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[   81.261815][ T7690] netlink: 17 bytes leftover after parsing attributes in process `syz.3.440'.
[   81.271268][ T7686] evm: overlay not supported
[   81.290176][ T7690] netlink: 484 bytes leftover after parsing attributes in process `syz.3.440'.
[   81.305418][ T7693] Bluetooth: hci0: unsupported parameter 255
[   81.305431][ T7693] Bluetooth: hci0: unsupported parameter 255
[   81.313310][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb0ec instead
[   81.313327][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xcf03 instead
[   81.313337][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x498c instead
[   81.313346][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x6ee2 instead
[   81.313355][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x7416 instead
[   81.313364][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x67ed instead
[   81.313373][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x312b instead
[   81.313381][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xfc86 instead
[   81.313390][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x382d instead
[   81.313399][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x7ed0 instead
[   81.313407][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.313645][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x76d7 instead
[   81.313654][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x93ed instead
[   81.313662][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xb09b instead
[   81.313670][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xd03d instead
[   81.315071][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x12c5 instead
[   81.315083][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x655d instead
[   81.315092][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe8bb instead
[   81.315102][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xea64 instead
[   81.315111][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xe503 instead
[   81.315120][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x28a6 instead
[   81.315129][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.315407][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x3c74 instead
[   81.315417][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xfe1a instead
[   81.315426][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x59b5 instead
[   81.315435][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xbb0f instead
[   81.315444][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x696d instead
[   81.315453][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x965a instead
[   81.315463][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xe263 instead
[   81.315472][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x074a instead
[   81.315481][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xf6c5 instead
[   81.315490][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x4fb3 instead
[   81.315498][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.315727][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x47ca instead
[   81.315737][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x4490 instead
[   81.315746][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x78f5 instead
[   81.315755][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x663b instead
[   81.315763][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0xe915 instead
[   81.315773][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xf831 instead
[   81.315781][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8624 instead
[   81.315791][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x1751 instead
[   81.315799][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xa1fb instead
[   81.315808][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xe3cc instead
[   81.315818][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.316050][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xdba9 instead
[   81.316059][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x6ed1 instead
[   81.316067][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x926b instead
[   81.316075][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x6435 instead
[   81.316083][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xa558 instead
[   81.316091][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x8c0f instead
[   81.316099][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x17ee instead
[   81.316107][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xe767 instead
[   81.316115][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xe9cf instead
[   81.316123][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x6d1f instead
[   81.316130][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.316348][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4d54 instead
[   81.316357][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x989f instead
[   81.316364][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x2194 instead
[   81.316372][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x7eed instead
[   81.316380][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x237c instead
[   81.316388][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x7245 instead
[   81.316396][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x2a7b instead
[   81.316404][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x88e6 instead
[   81.316413][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xe284 instead
[   81.316421][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x7de5 instead
[   81.316429][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.316649][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4fa1 instead
[   81.316657][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xe21c instead
[   81.316665][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x0d70 instead
[   81.316673][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x02eb instead
[   81.316681][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x4257 instead
[   81.316725][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x45b7 instead
[   81.316734][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xa8d6 instead
[   81.316743][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x0b3b instead
[   81.316752][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xa7fe instead
[   81.316760][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x22c5 instead
[   81.316769][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.317006][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x07ed instead
[   81.317015][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xbc21 instead
[   81.317023][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x5c2c instead
[   81.317031][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xcdbf instead
[   81.317039][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0xecb9 instead
[   81.317047][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x5424 instead
[   81.317055][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x53c8 instead
[   81.317063][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xe89f instead
[   81.317071][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x520f instead
[   81.317079][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xb72a instead
[   81.317087][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.317364][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x2ad4 instead
[   81.317375][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xd774 instead
[   81.317383][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x1df9 instead
[   81.317391][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x20ca instead
[   81.317400][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x88c1 instead
[   81.317408][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xd33e instead
[   81.317416][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5c0b instead
[   81.317424][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x424d instead
[   81.317432][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x233c instead
[   81.317440][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x4a25 instead
[   81.317447][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.317666][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x3d9e instead
[   81.317674][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x8d1c instead
[   81.317682][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xb3d9 instead
[   81.317690][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xd896 instead
[   81.317698][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xa23f instead
[   81.317706][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x4929 instead
[   81.317721][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x4a64 instead
[   81.317731][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x0b80 instead
[   81.317739][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xcf02 instead
[   81.317749][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xccbb instead
[   81.317757][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.317996][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x77c3 instead
[   81.318005][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xea7e instead
[   81.318013][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x043f instead
[   81.318021][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x96d9 instead
[   81.318029][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xa8df instead
[   81.318037][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x8592 instead
[   81.318046][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x4b41 instead
[   81.318054][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xa776 instead
[   81.318062][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x2402 instead
[   81.318071][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x533b instead
[   81.318079][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.318304][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x1b21 instead
[   81.318314][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xa789 instead
[   81.318322][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x353d instead
[   81.318331][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x9b58 instead
[   81.318339][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xcc1c instead
[   81.318347][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xd804 instead
[   81.318355][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x6853 instead
[   81.318363][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x796d instead
[   81.318371][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x1d38 instead
[   81.318379][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x3d1d instead
[   81.318387][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.318611][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x28f2 instead
[   81.318620][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xc8e4 instead
[   81.318628][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x7cf4 instead
[   81.318636][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x1a27 instead
[   81.318644][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x6e58 instead
[   81.318653][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xf155 instead
[   81.318661][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1a0d instead
[   81.318669][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x32ee instead
[   81.318677][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x316d instead
[   81.318685][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xbcea instead
[   81.318693][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.318930][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x067f instead
[   81.318939][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xc6d2 instead
[   81.318948][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xfe01 instead
[   81.318956][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x71c5 instead
[   81.318963][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x959c instead
[   81.318972][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x4797 instead
[   81.318980][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd732 instead
[   81.318988][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x5137 instead
[   81.318996][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xf73e instead
[   81.319004][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xe323 instead
[   81.319012][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.319236][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xfa84 instead
[   81.319245][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xe98d instead
[   81.319253][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xede8 instead
[   81.319261][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x2128 instead
[   81.319271][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x3182 instead
[   81.319279][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xf4ce instead
[   81.319287][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd3fd instead
[   81.319295][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x1cc5 instead
[   81.319303][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x913b instead
[   81.319311][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x9096 instead
[   81.319319][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.319542][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x706e instead
[   81.319551][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x4d58 instead
[   81.319559][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xbff9 instead
[   81.319567][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xb926 instead
[   81.319575][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xc020 instead
[   81.319583][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xd932 instead
[   81.319591][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x645d instead
[   81.319599][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x6b2e instead
[   81.319607][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x573a instead
[   81.319615][ T7696] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xf15d instead
[   81.319623][ T7696] jffs2: Further such events for this erase block will not be printed
[   81.320124][ T7696] jffs2: notice: (7696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   81.486102][   T38] Bluetooth: hci4: Frame reassembly failed (-84)
[   81.523945][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   81.631747][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.447'.
[   81.835785][ T7718] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[   81.860973][ T7718] netlink: 52 bytes leftover after parsing attributes in process `syz.0.448'.
[   81.892273][ T7718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7718 comm=syz.0.448
[   81.961038][ T7722] ip6t_hbh: too many supported opts specified
[   81.961588][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'.
[   82.040727][ T7722] Process accounting resumed
[   82.166051][ T7728] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[   82.271659][ T7738] jffs2: notice: (7738) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[   82.615269][ T7754] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[   82.617099][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'.
[   82.617381][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'.
[   82.703863][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   82.880386][ T7779] FAULT_INJECTION: forcing a failure.
[   82.880386][ T7779] name failslab, interval 1, probability 0, space 0, times 0
[   82.880413][ T7779] CPU: 2 UID: 0 PID: 7779 Comm: syz.0.463 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   82.880430][ T7779] Tainted: [L]=SOFTLOCKUP
[   82.880434][ T7779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   82.880441][ T7779] Call Trace:
[   82.880445][ T7779]  <TASK>
[   82.880449][ T7779]  dump_stack_lvl+0x100/0x190
[   82.880469][ T7779]  should_fail_ex.cold+0x5/0xa
[   82.880485][ T7779]  should_failslab+0xc2/0x120
[   82.880499][ T7779]  kmem_cache_alloc_noprof+0x92/0x6a0
[   82.880511][ T7779]  ? do_getname+0x35/0x390
[   82.880529][ T7779]  do_getname+0x35/0x390
[   82.880545][ T7779]  do_sys_openat2+0xc7/0x1e0
[   82.880560][ T7779]  ? __pfx_do_sys_openat2+0x10/0x10
[   82.880575][ T7779]  ? fput+0x7c/0x100
[   82.880591][ T7779]  __x64_sys_openat+0x12d/0x210
[   82.880607][ T7779]  ? __pfx___x64_sys_openat+0x10/0x10
[   82.880629][ T7779]  do_syscall_64+0x123/0x790
[   82.880644][ T7779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.880655][ T7779] RIP: 0033:0x7f9a5d15e98e
[   82.880665][ T7779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   82.880699][ T7779] RSP: 002b:00007f9a5dfe3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   82.880715][ T7779] RAX: ffffffffffffffda RBX: 00007f9a5dfe46c0 RCX: 00007f9a5d15e98e
[   82.880723][ T7779] RDX: 0000000000000000 RSI: 00007f9a5dfe3c00 RDI: ffffffffffffff9c
[   82.880729][ T7779] RBP: 00007f9a5dfe3c00 R08: 0000000000000000 R09: 0000000000000000
[   82.880737][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   82.880744][ T7779] R13: 00007f9a5d426128 R14: 00007f9a5d426090 R15: 00007fff93c6d788
[   82.880759][ T7779]  </TASK>
[   83.085425][   T42] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[   83.240071][ T7781] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[   83.349938][   T43] kauditd_printk_skb: 29 callbacks suppressed
[   83.349951][   T43] audit: type=1400 audit(1789063057.105:669): avc:  denied  { write } for  pid=7783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.406672][   T43] audit: type=1400 audit(1789063057.165:670): avc:  denied  { write } for  pid=7788 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.478254][   T43] audit: type=1400 audit(1789063057.235:671): avc:  denied  { write } for  pid=7793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.493795][ T5740] Bluetooth: hci4: command 0x1003 tx timeout
[   83.495134][   T65] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   83.546403][   T43] audit: type=1400 audit(1789063057.305:672): avc:  denied  { write } for  pid=7796 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.631644][   T43] audit: type=1400 audit(1789063057.385:673): avc:  denied  { write } for  pid=7802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.681460][   T43] audit: type=1400 audit(1789063057.435:674): avc:  denied  { write } for  pid=7807 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.709905][   T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
[   83.715606][   T43] audit: type=1400 audit(1789063057.475:675): avc:  denied  { ioctl } for  pid=7813 comm="syz.1.470" path="socket:[21000]" dev="sockfs" ino=21000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   83.768748][   T43] audit: type=1400 audit(1789063057.525:676): avc:  denied  { write } for  pid=7818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.818817][   T43] audit: type=1400 audit(1789063057.575:677): avc:  denied  { write } for  pid=7823 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.902423][   T43] audit: type=1400 audit(1789063057.655:678): avc:  denied  { write } for  pid=7831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   83.932985][ T7834] ip6tnl0: Caught tx_queue_len zero misconfig
[   85.790243][ T7773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.413443][   T43] kauditd_printk_skb: 8 callbacks suppressed
[   88.413459][   T43] audit: type=1400 audit(1789063062.165:687): avc:  denied  { write } for  pid=7868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   88.465027][   T43] audit: type=1400 audit(1789063062.215:688): avc:  denied  { write } for  pid=7871 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   90.931101][   T43] audit: type=1400 audit(1789063064.685:689): avc:  denied  { write } for  pid=7875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   90.982183][   T43] audit: type=1400 audit(1789063064.735:690): avc:  denied  { write } for  pid=7878 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   93.387707][ T7885] device-mapper: raid: Ignoring chunk size parameter for RAID 1
[   93.387717][ T7885] device-mapper: raid: Choosing default region size of 4MiB
[   93.389541][ T7885] device-mapper: table: 248:0: raid: Component device(s) too small (-EINVAL)
[   93.389555][ T7885] device-mapper: ioctl: error adding target to table
[   93.415305][   T43] audit: type=1400 audit(1789063067.175:691): avc:  denied  { mmap_zero } for  pid=7884 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   93.449232][ T7886] input: syz0 as /devices/virtual/input/input6
[   93.474105][ T7894] UBIFS error (pid: 7894): cannot open "ubi0_0", error -19
[   93.749322][   T43] audit: type=1400 audit(1789063067.505:692): avc:  denied  { name_connect } for  pid=7910 comm="syz.2.481" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[   93.890235][ T7924] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   93.917816][ T7924] bridge0: port 3(macsec1) entered blocking state
[   93.917885][ T7924] bridge0: port 3(macsec1) entered disabled state
[   93.917945][ T7924] macsec1: entered allmulticast mode
[   93.920302][ T7924] macsec1: left allmulticast mode
[   94.277859][ T7931] syzkaller0: entered promiscuous mode
[   94.277872][ T7931] syzkaller0: entered allmulticast mode
[   94.467644][   T43] audit: type=1400 audit(1789063068.225:693): avc:  denied  { execute } for  pid=7936 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   94.467687][   T43] audit: type=1400 audit(1789063068.225:694): avc:  denied  { execute_no_trans } for  pid=7936 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   94.552804][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.555967][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.563029][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.567577][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.567971][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.614762][ T7944] bond2 (unregistering): Released all slaves
[   94.654559][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'.
[   94.715076][   T43] audit: type=1400 audit(1789063068.475:695): avc:  denied  { read } for  pid=7953 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   94.860001][ T7973] iommufd_mock iommufd_mock0: Adding to iommu group 5
[   94.865873][   T43] audit: type=1400 audit(1789063068.625:696): avc:  denied  { setattr } for  pid=7972 comm="syz.2.497" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   94.912893][   T43] audit: type=1400 audit(1789063068.665:697): avc:  denied  { create } for  pid=7977 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   95.045958][ T7995] tipc: Started in network mode
[   95.045997][ T7995] tipc: Node identity ac14140f, cluster identity 4711
[   95.046215][ T7995] tipc: New replicast peer: 172.30.0.3
[   95.046340][ T7995] tipc: Enabled bearer <udp:syz2>, priority 10
[   95.076338][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.076415][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.076481][ T7937] bridge_slave_0: entered allmulticast mode
[   95.077275][ T7937] bridge_slave_0: entered promiscuous mode
[   95.079512][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.079552][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.079612][ T7937] bridge_slave_1: entered allmulticast mode
[   95.080975][ T7937] bridge_slave_1: entered promiscuous mode
[   95.096178][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.097845][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.114601][   T43] audit: type=1400 audit(1789063068.875:698): avc:  denied  { write } for  pid=7999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.114820][ T7937] team0: Port device team_slave_0 added
[   95.116142][ T7937] team0: Port device team_slave_1 added
[   95.130733][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.130749][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.130762][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.135337][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.135346][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.135359][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.136411][   T43] audit: type=1400 audit(1789063068.885:699): avc:  denied  { shutdown } for  pid=7992 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.185446][ T7937] hsr_slave_0: entered promiscuous mode
[   95.185956][ T7937] hsr_slave_1: entered promiscuous mode
[   95.186324][ T7937] debugfs: 'hsr0' already exists in 'hsr'
[   95.186336][ T7937] Cannot create hsr debugfs directory
[   95.210776][   T43] audit: type=1400 audit(1789063068.965:700): avc:  denied  { write } for  pid=8004 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   95.320866][ T7937] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.322823][ T7937] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   95.323189][ T7937] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.325580][ T7937] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   95.326033][ T7937] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.330047][ T7937] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   95.332777][ T7937] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.346264][ T7937] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   95.368539][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.368590][ T7937] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.368756][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.368802][ T7937] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.404804][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.409305][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.410218][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.424198][ T7937] 8021q: adding VLAN 0 to HW filter on device team0
[   95.427203][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.427249][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.431233][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.431281][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.507698][ T8027] syzkaller1: entered promiscuous mode
[   95.507713][ T8027] syzkaller1: entered allmulticast mode
[   95.517791][ T8027] batadv_slave_0: Caught tx_queue_len zero misconfig
[   95.637759][ T8035] netlink: 'syz.2.508': attribute type 1 has an invalid length.
[   95.647729][ T8035] bond1: entered promiscuous mode
[   95.647913][ T8035] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.681858][ T8040] overlayfs: failed to resolve 'lower': -2
[   95.697800][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.701956][ T8041] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[   95.771561][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'.
[   95.808096][ T8060] syzkaller0: Caught tx_queue_len zero misconfig
[   95.817816][ T8060] netlink: 71 bytes leftover after parsing attributes in process `syz.2.513'.
[   95.865770][ T8066] jffs2: notice: (8066) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[   95.897354][ T7937] veth0_vlan: entered promiscuous mode
[   95.904371][ T7937] veth1_vlan: entered promiscuous mode
[   95.926482][ T7937] veth0_macvtap: entered promiscuous mode
[   95.929024][ T7937] veth1_macvtap: entered promiscuous mode
[   95.945088][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.948984][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.988594][ T5801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.988750][ T5801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.988774][ T5801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.988792][ T5801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.030980][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.030994][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.049176][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.049189][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.050856][ T8073] netlink: 'syz.1.517': attribute type 11 has an invalid length.
[   96.050874][ T8073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.517'.
[   96.063799][  T852] tipc: Node number set to 2886997007
[   96.187098][   T50] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[   96.344535][   T50] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   96.345771][   T50] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[   96.345851][   T50] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   96.345871][   T50] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   96.345890][   T50] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   96.345910][   T50] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   96.347014][   T50] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[   96.347045][   T50] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   96.347064][   T50] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   96.347082][   T50] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   96.347102][   T50] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   96.348202][   T50] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[   96.348233][   T50] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   96.348252][   T50] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   96.348270][   T50] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   96.348290][   T50] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   96.352725][   T50] usb 7-1: string descriptor 0 read error: -22
[   96.352779][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.374088][   T50] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   96.383818][   T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   96.513890][   T25] usb 9-1: device descriptor read/64, error -71
[   96.570009][ T8071] xt_REDIRECT: bad rangesize 26624.
[   96.570807][   T10] usb 7-1: USB disconnect, device number 3
[   96.613892][ T5740] Bluetooth: hci0: command tx timeout
[   96.753847][   T25] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   96.883933][   T25] usb 9-1: device descriptor read/64, error -71
[   96.994055][   T25] usb usb9-port1: attempt power cycle
[   97.032543][ T8083] netlink: 'syz.1.520': attribute type 4 has an invalid length.
[   97.032562][ T8083] netlink: 152 bytes leftover after parsing attributes in process `syz.1.520'.
[   97.034168][ T8083] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   97.101975][ T8083] ufs: You didn't specify the type of your ufs filesystem
[   97.101975][ T8083] 
[   97.101975][ T8083] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   97.101975][ T8083] 
[   97.101975][ T8083] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   97.101995][ T8083] ufs: failed to set blocksize
[   97.134269][ T8088] tmpfs: Unknown parameter 'mp€'
[   97.221848][ T8095] bond2: invalid ARP target 0.0.0.0 specified for addition
[   97.221865][ T8095] bond2: option arp_ip_target: invalid value (0)
[   97.222711][ T8095] bond2 (unregistering): Released all slaves
[   97.297245][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[   97.297324][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[   97.297390][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[   97.297451][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[   97.297509][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[   97.333963][   T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   97.354422][   T25] usb 9-1: device descriptor read/8, error -71
[   97.475163][ T8115] syzkaller1: entered promiscuous mode
[   97.475177][ T8115] syzkaller1: entered allmulticast mode
[   97.593901][   T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   97.614960][   T25] usb 9-1: device descriptor read/8, error -71
[   97.704740][ T8140] null_blk: nullb1: using native zone append
[   97.724113][   T25] usb usb9-port1: unable to enumerate USB device
[   97.762591][ T8140] null_blk: disk nullb1 created
[   97.979653][ T8157] Bluetooth: MGMT ver 1.23
[   97.984431][   T65] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[   98.105411][ T8170] tipc: Resetting bearer <eth:team0>
[   98.106859][ T8170] team0: entered allmulticast mode
[   98.106871][ T8170] team_slave_0: entered allmulticast mode
[   98.106880][ T8170] team_slave_1: entered allmulticast mode
[   98.213900][   T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   98.241759][ T8178] FAULT_INJECTION: forcing a failure.
[   98.241759][ T8178] name failslab, interval 1, probability 0, space 0, times 0
[   98.241781][ T8178] CPU: 0 UID: 0 PID: 8178 Comm: syz.3.543 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   98.241796][ T8178] Tainted: [L]=SOFTLOCKUP
[   98.241800][ T8178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   98.241807][ T8178] Call Trace:
[   98.241811][ T8178]  <TASK>
[   98.241816][ T8178]  dump_stack_lvl+0x100/0x190
[   98.241845][ T8178]  should_fail_ex.cold+0x5/0xa
[   98.241881][ T8178]  should_failslab+0xc2/0x120
[   98.241900][ T8178]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[   98.241914][ T8178]  ? kstrdup_const+0x63/0x80
[   98.241934][ T8178]  kstrdup+0x51/0xe0
[   98.241950][ T8178]  kstrdup_const+0x63/0x80
[   98.241966][ T8178]  __kernfs_new_node+0x9b/0xa10
[   98.241985][ T8178]  ? __pfx___kernfs_new_node+0x10/0x10
[   98.242003][ T8178]  ? lock_acquire+0x1d1/0x380
[   98.242015][ T8178]  ? kernfs_root+0x23/0x2a0
[   98.242029][ T8178]  ? find_held_lock+0x2b/0x80
[   98.242044][ T8178]  ? kernfs_root+0xee/0x2a0
[   98.242058][ T8178]  ? kernfs_root+0xee/0x2a0
[   98.242075][ T8178]  kernfs_new_node+0x117/0x150
[   98.242094][ T8178]  __kernfs_create_file+0x53/0x350
[   98.242108][ T8178]  cgroup_addrm_files+0x4ef/0xdb0
[   98.242129][ T8178]  ? __pfx_cgroup_addrm_files+0x10/0x10
[   98.242148][ T8178]  ? idr_replace+0xfa/0x170
[   98.242169][ T8178]  css_populate_dir+0x161/0x590
[   98.242185][ T8178]  cgroup_apply_control_enable+0x441/0xdd0
[   98.242208][ T8178]  cgroup_mkdir+0x57f/0x1330
[   98.242227][ T8178]  ? __pfx_cgroup_mkdir+0x10/0x10
[   98.242239][ T8178]  kernfs_iop_mkdir+0x111/0x190
[   98.242255][ T8178]  ? bpf_lsm_inode_mkdir+0x9/0x10
[   98.242268][ T8178]  vfs_mkdir+0x364/0x850
[   98.242288][ T8178]  filename_mkdirat+0x48b/0x5e0
[   98.242303][ T8178]  ? __pfx_filename_mkdirat+0x10/0x10
[   98.242318][ T8178]  ? strncpy_from_user+0x19d/0x2d0
[   98.242332][ T8178]  ? do_getname+0x191/0x390
[   98.242349][ T8178]  __x64_sys_mkdirat+0x89/0xc0
[   98.242364][ T8178]  do_syscall_64+0x123/0x790
[   98.242380][ T8178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.242392][ T8178] RIP: 0033:0x7f6105b9e159
[   98.242401][ T8178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.242412][ T8178] RSP: 002b:00007f6106a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   98.242423][ T8178] RAX: ffffffffffffffda RBX: 00007f6105e25fa0 RCX: 00007f6105b9e159
[   98.242430][ T8178] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[   98.242437][ T8178] RBP: 00007f6105c3503b R08: 0000000000000000 R09: 0000000000000000
[   98.242443][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.242450][ T8178] R13: 00007f6105e26038 R14: 00007f6105e25fa0 R15: 00007ffeb037c8b8
[   98.242464][ T8178]  </TASK>
[   98.242502][ T8178] cgroup: cgroup_addrm_files: failed to add usage_percpu, err=-12
[   98.243871][ T8179] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   98.374376][   T25] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[   98.374809][   T25] usb 6-1: config 0 has no interfaces?
[   98.374827][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.378209][   T25] usb 6-1: config 0 descriptor??
[   98.693925][ T5740] Bluetooth: hci0: command tx timeout
[   98.814136][ T8198] loop5: detected capacity change from 0 to 7
[   98.821825][ T8198] Dev loop5: unable to read RDB block 7
[   98.821843][ T8198]  loop5: AHDI p2
[   98.821856][ T8198] loop5: partition table partially beyond EOD, truncated
[   98.847194][ T8198] MTRR 1 not used
[   98.932423][ T5740] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200'
[   98.932449][ T5740] CPU: 3 UID: 0 PID: 5740 Comm: kworker/u34:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   98.932475][ T5740] Tainted: [L]=SOFTLOCKUP
[   98.932482][ T5740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   98.932495][ T5740] Workqueue: hci3 hci_rx_work
[   98.932531][ T5740] Call Trace:
[   98.932538][ T5740]  <TASK>
[   98.932546][ T5740]  dump_stack_lvl+0x100/0x190
[   98.932575][ T5740]  sysfs_warn_dup.cold+0x1c/0x28
[   98.932628][ T5740]  sysfs_create_dir_ns+0x24b/0x2b0
[   98.932660][ T5740]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   98.932683][ T5740]  ? find_held_lock+0x2b/0x80
[   98.932707][ T5740]  ? kobject_add_internal+0x25f/0x930
[   98.932741][ T5740]  ? kobject_add_internal+0x25f/0x930
[   98.932773][ T5740]  ? do_raw_spin_unlock+0x145/0x1e0
[   98.932798][ T5740]  kobject_add_internal+0x2c8/0x930
[   98.932830][ T5740]  kobject_add+0x16a/0x1e0
[   98.932848][ T5740]  ? __pfx_kobject_add+0x10/0x10
[   98.932865][ T5740]  ? class_to_subsys+0x10f/0x150
[   98.932895][ T5740]  ? kobject_put+0xb9/0x640
[   98.932921][ T5740]  ? _raw_spin_unlock+0x28/0x50
[   98.932947][ T5740]  device_add+0x294/0x1970
[   98.932972][ T5740]  ? __pfx_dev_set_name+0x10/0x10
[   98.932999][ T5740]  ? __pfx_device_add+0x10/0x10
[   98.933023][ T5740]  ? mgmt_send_event_skb+0x2fb/0x460
[   98.933054][ T5740]  hci_conn_add_sysfs+0x1a3/0x260
[   98.933081][ T5740]  le_conn_complete_evt+0x122f/0x2130
[   98.933109][ T5740]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   98.933132][ T5740]  ? hci_event_packet+0x186/0xcd0
[   98.933161][ T5740]  hci_le_conn_complete_evt+0x23c/0x3a0
[   98.933186][ T5740]  ? skb_pull_data+0x15f/0x1e0
[   98.933217][ T5740]  hci_le_meta_evt+0x34a/0x5f0
[   98.933240][ T5740]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[   98.933266][ T5740]  hci_event_packet+0x51c/0xcd0
[   98.933295][ T5740]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   98.933320][ T5740]  ? __pfx_hci_event_packet+0x10/0x10
[   98.933348][ T5740]  ? lockdep_hardirqs_on+0x7d/0x110
[   98.933381][ T5740]  hci_rx_work+0x451/0xfc0
[   98.933408][ T5740]  process_one_work+0xac7/0x1b10
[   98.933448][ T5740]  ? __pfx_process_one_work+0x10/0x10
[   98.933478][ T5740]  ? lock_acquire+0x1d1/0x380
[   98.933506][ T5740]  ? __pfx_hci_rx_work+0x10/0x10
[   98.933529][ T5740]  worker_thread+0x5ef/0xe50
[   98.933565][ T5740]  ? __pfx_worker_thread+0x10/0x10
[   98.933595][ T5740]  ? kthread+0x13a/0x450
[   98.933620][ T5740]  ? __pfx_worker_thread+0x10/0x10
[   98.933647][ T5740]  kthread+0x373/0x450
[   98.933671][ T5740]  ? __pfx_kthread+0x10/0x10
[   98.933720][ T5740]  ret_from_fork+0x730/0xd60
[   98.933744][ T5740]  ? __pfx_ret_from_fork+0x10/0x10
[   98.933765][ T5740]  ? __switch_to+0x800/0x10f0
[   98.933790][ T5740]  ? __pfx_kthread+0x10/0x10
[   98.933817][ T5740]  ret_from_fork_asm+0x1a/0x30
[   98.933851][ T5740]  </TASK>
[   98.936454][ T5740] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory.
[   98.936488][ T5740] Bluetooth: hci3: failed to register connection device
[   98.937001][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937056][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937104][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937153][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937199][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937265][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937321][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937368][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937417][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937465][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937512][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937609][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.937693][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.940805][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.940904][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.940989][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.941074][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.941157][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.941239][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.941327][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.942426][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.942514][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.942596][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.942680][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.942763][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.942844][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.942926][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.942998][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943079][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943161][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943243][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943332][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943415][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943514][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943598][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943810][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943860][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943927][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.943994][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944079][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944171][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944252][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944339][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944421][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944503][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944584][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944685][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944768][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944851][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.944936][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.945020][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.945102][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.945187][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.945235][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.945328][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.945414][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.945500][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.946582][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.946676][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.946760][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.946842][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.946927][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.947007][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   98.947083][ T5740] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[   99.119975][ T8208] IPVS: length: 18 != 170052583800
[   99.185210][   T43] kauditd_printk_skb: 7 callbacks suppressed
[   99.185285][   T43] audit: type=1400 audit(1789063072.945:708): avc:  denied  { map } for  pid=8212 comm="syz.4.554" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   99.185572][   T43] audit: type=1400 audit(1789063072.945:709): avc:  denied  { execute } for  pid=8212 comm="syz.4.554" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   99.293482][   T43] audit: type=1400 audit(1789063073.045:710): avc:  denied  { bind } for  pid=8229 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   99.306337][   T43] audit: type=1400 audit(1789063073.065:711): avc:  denied  { accept } for  pid=8229 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   99.437459][ T8249] ADFS-fs (nbd4): error: unable to read block 3, try 0
[   99.612867][ T8257] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0
[   99.693774][ T1846] usb 9-1: new low-speed USB device number 6 using dummy_hcd
[   99.704719][ T8267] capability: warning: `syz.2.566' uses 32-bit capabilities (legacy support in use)
[   99.760791][ T8268] CIFS: Attempting to mount //127.0.0.1/share
[   99.846342][ T1846] usb 9-1: device descriptor read/64, error -71
[  100.083895][ T1846] usb 9-1: new low-speed USB device number 7 using dummy_hcd
[  100.213841][ T1846] usb 9-1: device descriptor read/64, error -71
[  100.272310][ T8270] __nla_validate_parse: 32 callbacks suppressed
[  100.272323][ T8270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.567'.
[  100.326262][ T1846] usb usb9-port1: attempt power cycle
[  100.449976][ T8288] netlink: 60 bytes leftover after parsing attributes in process `syz.3.571'.
[  100.450056][ T8288] netlink: 60 bytes leftover after parsing attributes in process `syz.3.571'.
[  100.529213][ T8289] SELinux:  invalid class
[  100.540400][ T8268] CIFS: VFS: Error connecting to socket. Aborting operation.
[  100.540451][ T8268] CIFS: VFS: cifs_mount failed w/return code = -4
[  100.549087][ T8289] SELinux: failed to load policy
[  100.595339][   T43] audit: type=1400 audit(1789063074.355:712): avc:  denied  { perfmon } for  pid=8296 comm="syz.2.573" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  100.595571][   T43] audit: type=1400 audit(1789063074.355:713): avc:  denied  { bpf } for  pid=8296 comm="syz.2.573" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  100.664084][ T1846] usb 9-1: new low-speed USB device number 8 using dummy_hcd
[  100.684710][ T1846] usb 9-1: device descriptor read/8, error -71
[  100.773960][   T65] Bluetooth: hci0: command tx timeout
[  100.793997][ T1355] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  100.943821][ T1846] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  100.956482][ T1355] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  100.957293][ T1355] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x61, changing to 0x1
[  100.957308][ T1355] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid maxpacket 26465, setting to 64
[  100.957321][ T1355] usb 8-1: config 0 interface 0 has no altsetting 0
[  100.958821][ T1355] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  100.958833][ T1355] usb 8-1: Product: syz
[  100.958840][ T1355] usb 8-1: Manufacturer: syz
[  100.958847][ T1355] usb 8-1: SerialNumber: syz
[  100.962558][ T1355] usb 8-1: config 0 descriptor??
[  100.963915][ T8288] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  100.964628][ T1846] usb 9-1: device descriptor read/8, error -71
[  100.970842][ T1355] usb 8-1: selecting invalid altsetting 0
[  100.984519][   T58] usb 6-1: USB disconnect, device number 5
[  101.074388][ T1846] usb usb9-port1: unable to enumerate USB device
[  101.170996][ T1846] usb 8-1: USB disconnect, device number 5
[  101.489016][ T8319] macvtap0: entered allmulticast mode
[  101.489030][ T8319] veth0_macvtap: entered allmulticast mode
[  101.555285][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'.
[  101.571953][   T43] audit: type=1400 audit(1789063075.325:714): avc:  denied  { read } for  pid=8322 comm="syz.2.580" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  101.572327][   T43] audit: type=1400 audit(1789063075.325:715): avc:  denied  { open } for  pid=8322 comm="syz.2.580" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  101.572826][   T43] audit: type=1400 audit(1789063075.325:716): avc:  denied  { ioctl } for  pid=8322 comm="syz.2.580" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  101.628856][ T8325] FAULT_INJECTION: forcing a failure.
[  101.628856][ T8325] name failslab, interval 1, probability 0, space 0, times 0
[  101.628877][ T8325] CPU: 1 UID: 0 PID: 8325 Comm: syz.2.581 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  101.628892][ T8325] Tainted: [L]=SOFTLOCKUP
[  101.628896][ T8325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.628903][ T8325] Call Trace:
[  101.628906][ T8325]  <TASK>
[  101.628911][ T8325]  dump_stack_lvl+0x100/0x190
[  101.628942][ T8325]  should_fail_ex.cold+0x5/0xa
[  101.628959][ T8325]  should_failslab+0xc2/0x120
[  101.628977][ T8325]  kmem_cache_alloc_noprof+0x92/0x6a0
[  101.628990][ T8325]  ? copy_utsname+0x1a8/0x690
[  101.629004][ T8325]  copy_utsname+0x1a8/0x690
[  101.629016][ T8325]  create_new_namespaces+0x16a/0xac0
[  101.629029][ T8325]  ? bpf_lsm_capable+0x9/0x10
[  101.629046][ T8325]  ? security_capable+0x80/0x260
[  101.629064][ T8325]  unshare_nsproxy_namespaces+0xf2/0x220
[  101.629078][ T8325]  ksys_unshare+0x4a2/0xa70
[  101.629091][ T8325]  ? __pfx_ksys_unshare+0x10/0x10
[  101.629109][ T8325]  __x64_sys_unshare+0x31/0x40
[  101.629121][ T8325]  do_syscall_64+0x123/0x790
[  101.629140][ T8325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.629152][ T8325] RIP: 0033:0x7fb71e39e159
[  101.629161][ T8325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.629171][ T8325] RSP: 002b:00007fb71f186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  101.629183][ T8325] RAX: ffffffffffffffda RBX: 00007fb71e625fa0 RCX: 00007fb71e39e159
[  101.629190][ T8325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080
[  101.629196][ T8325] RBP: 00007fb71e43503b R08: 0000000000000000 R09: 0000000000000000
[  101.629207][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.629215][ T8325] R13: 00007fb71e626038 R14: 00007fb71e625fa0 R15: 00007ffc3739f468
[  101.629229][ T8325]  </TASK>
[  101.629797][ T8325] 9pnet_fd: Insufficient options for proto=fd
[  101.722037][   T43] audit: type=1400 audit(1789063075.475:717): avc:  denied  { mounton } for  pid=8328 comm="syz.3.583" path="/proc/538/cgroup" dev="proc" ino=22153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  101.724285][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'.
[  101.744944][ T6223] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.744987][ T6223] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.745019][ T6223] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.745049][ T6223] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.041284][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.593'.
[  102.199278][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.597'.
[  102.311408][ T8383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.599'.
[  102.524079][ T8392] bond2: Unable to set up delay as MII monitoring is disabled
[  102.527169][ T8392] bond2 (unregistering): Released all slaves
[  102.647788][ T8407] binder: 8396:8407 ioctl 4018620d 0 returned -22
[  102.649602][ T8407] binder: 8396:8407 ioctl c0306201 2000000007c0 returned -14
[  102.738188][ T8412] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[  102.756805][ T8412] pci 0000:00:00.0: Adding to iommu group 0
[  102.777500][ T8412] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint
[  102.787169][ T8412] pci 0000:00:05.0: BAR 0 [io  0xc0c0-0xc0df]
[  102.787264][ T8412] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff]
[  102.787555][ T8412] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]
[  102.803489][ T8412] pci 0000:00:05.0: Adding to iommu group 5
[  102.827137][ T8412] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]: assigned
[  102.831161][ T8412] pci 0000:00:05.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned
[  102.832374][ T8412] pci 0000:00:05.0: BAR 0 [io  0x2000-0x201f]: assigned
[  102.863782][   T65] Bluetooth: hci0: command tx timeout
[  102.968473][ T8428] netlink: 64 bytes leftover after parsing attributes in process `syz.2.613'.
[  102.976079][ T8428] syzkaller1: entered allmulticast mode
[  103.008119][ T8430] comedi comedi4: bad chanlist[0]=0x0000ddb7 chan=56759 range length=2
[  103.146074][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'.
[  103.323793][ T5823] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  103.474180][ T5823] usb 7-1: Using ep0 maxpacket: 8
[  103.474660][ T5823] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  103.475501][ T5823] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  103.475514][ T5823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  103.475526][ T5823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  103.475538][ T5823] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  103.475556][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.680627][ T5823] usb 7-1: GET_CAPABILITIES returned 0
[  103.680654][ T5823] usbtmc 7-1:16.0: can't read capabilities
[  103.894001][    C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  103.901798][   T25] usb 7-1: USB disconnect, device number 4
[  104.591261][ T8520] deleting an unspecified loop device is not supported.
[  104.672256][   T43] kauditd_printk_skb: 27 callbacks suppressed
[  104.672270][   T43] audit: type=1400 audit(1789063078.425:743): avc:  denied  { bind } for  pid=8523 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  104.772284][   T43] audit: type=1400 audit(1789063078.525:744): avc:  denied  { setattr } for  pid=8534 comm="syz.4.646" name="tun" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  104.837322][   T43] audit: type=1400 audit(1789063078.595:745): avc:  denied  { getopt } for  pid=8536 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  104.851178][   T43] audit: type=1400 audit(1789063078.605:746): avc:  denied  { getopt } for  pid=8536 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  104.951392][ T8545] netlink: 'syz.3.648': attribute type 1 has an invalid length.
[  104.980706][ T8545] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.992483][ T8545] gretap1: entered promiscuous mode
[  105.285108][ T8304] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  105.443883][ T8304] usb 8-1: Using ep0 maxpacket: 8
[  105.444746][ T8304] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  105.445814][ T8304] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  105.445835][ T8304] usb 8-1: config 179 has no interface number 0
[  105.445869][ T8304] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  105.445891][ T8304] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  105.445913][ T8304] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  105.445934][ T8304] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  105.445955][ T8304] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  105.445988][ T8304] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.452000][ T8548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  105.701896][ T1846] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input7
[  105.821965][ T8550] overlayfs: conflicting lowerdir path
[  105.825824][   T65] Bluetooth: hci3: command 0x2016 tx timeout
[  105.887790][ T8554] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.652/8554
[  105.887805][ T8554] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
SYZFAIL: failed to recv rpc
[  105.887828][ T8554] CPU: 2 UID: 0 PID: 8554 Comm: syz.2.652 Tainted: G             L      syzkaller #0 PREEMPT(full) 
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  105.887843][ T8554] Tainted: [L]=SOFTLOCKUP
[  105.887847][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.887853][ T8554] Call Trace:
[  105.887857][ T8554]  <TASK>
[  105.887862][ T8554]  dump_stack_lvl+0x100/0x190
[  105.887879][ T8554]  check_preemption_disabled+0xd2/0xe0
[  105.887897][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.887910][ T8554]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.887926][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.887940][ T8554]  trace_kfree_skb+0x18b/0x230
[  105.887955][ T8554]  sk_skb_reason_drop+0xb7/0x1b0
[  105.887969][ T8554]  skb_queue_purge_reason+0x2aa/0x420
[  105.887982][ T8554]  ? synchronize_rcu_expedited+0x3c3/0x450
[  105.887996][ T8554]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  105.888017][ T8554]  packet_release+0x839/0xd70
[  105.888032][ T8554]  ? __pfx_packet_release+0x10/0x10
[  105.888045][ T8554]  ? __pfx_down_write+0x10/0x10
[  105.888063][ T8554]  __sock_release+0xb3/0x260
[  105.888076][ T8554]  ? __pfx_sock_close+0x10/0x10
[  105.888088][ T8554]  sock_close+0x1c/0x30
[  105.888100][ T8554]  __fput+0x3ff/0xb50
[  105.888115][ T8554]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.888128][ T8554]  task_work_run+0x150/0x240
[  105.888146][ T8554]  ? __pfx_task_work_run+0x10/0x10
[  105.888165][ T8554]  exit_to_user_mode_loop+0x1d8/0x700
[  105.888178][ T8554]  ? rcu_is_watching+0x13/0xc0
[  105.888194][ T8554]  do_syscall_64+0x661/0x790
[  105.888209][ T8554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.888221][ T8554] RIP: 0033:0x7fb71e39e159
[  105.888230][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.888241][ T8554] RSP: 002b:00007ffc3739f5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  105.888252][ T8554] RAX: 0000000000000000 RBX: 00007ffc3739f6b0 RCX: 00007fb71e39e159
[  105.888259][ T8554] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  105.888265][ T8554] RBP: 0000000000019d10 R08: 0000000000000001 R09: 0000000000000000
[  105.888271][ T8554] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffc3739f6f0
[  105.888278][ T8554] R13: 00007fb71e625fac R14: 0000000000019d44 R15: 00007fb71e625fa0
[  105.888308][ T8554]  </TASK>
[  105.888718][ T8554] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.652/8554
[  105.888735][ T8554] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.888755][ T8554] CPU: 2 UID: 0 PID: 8554 Comm: syz.2.652 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  105.888769][ T8554] Tainted: [L]=SOFTLOCKUP
[  105.888773][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.888779][ T8554] Call Trace:
[  105.888782][ T8554]  <TASK>
[  105.888786][ T8554]  dump_stack_lvl+0x100/0x190
[  105.888804][ T8554]  check_preemption_disabled+0xd2/0xe0
[  105.888821][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.888833][ T8554]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.888849][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.888863][ T8554]  trace_kfree_skb+0x18b/0x230
[  105.888878][ T8554]  sk_skb_reason_drop+0xb7/0x1b0
[  105.888892][ T8554]  skb_queue_purge_reason+0x2aa/0x420
[  105.888905][ T8554]  ? synchronize_rcu_expedited+0x3c3/0x450
[  105.888919][ T8554]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  105.888940][ T8554]  packet_release+0x839/0xd70
[  105.888955][ T8554]  ? __pfx_packet_release+0x10/0x10
[  105.888968][ T8554]  ? __pfx_down_write+0x10/0x10
[  105.888986][ T8554]  __sock_release+0xb3/0x260
[  105.888999][ T8554]  ? __pfx_sock_close+0x10/0x10
[  105.889011][ T8554]  sock_close+0x1c/0x30
[  105.889023][ T8554]  __fput+0x3ff/0xb50
[  105.889037][ T8554]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.889051][ T8554]  task_work_run+0x150/0x240
[  105.889067][ T8554]  ? __pfx_task_work_run+0x10/0x10
[  105.889087][ T8554]  exit_to_user_mode_loop+0x1d8/0x700
[  105.889100][ T8554]  ? rcu_is_watching+0x13/0xc0
[  105.889115][ T8554]  do_syscall_64+0x661/0x790
[  105.889130][ T8554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.889142][ T8554] RIP: 0033:0x7fb71e39e159
[  105.889150][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.889160][ T8554] RSP: 002b:00007ffc3739f5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  105.889171][ T8554] RAX: 0000000000000000 RBX: 00007ffc3739f6b0 RCX: 00007fb71e39e159
[  105.889178][ T8554] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  105.889184][ T8554] RBP: 0000000000019d10 R08: 0000000000000001 R09: 0000000000000000
[  105.889190][ T8554] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffc3739f6f0
[  105.889197][ T8554] R13: 00007fb71e625fac R14: 0000000000019d44 R15: 00007fb71e625fa0
[  105.889210][ T8554]  </TASK>
[  105.890100][ T8554] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.652/8554
[  105.890111][ T8554] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.890129][ T8554] CPU: 2 UID: 0 PID: 8554 Comm: syz.2.652 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  105.890143][ T8554] Tainted: [L]=SOFTLOCKUP
[  105.890147][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.890166][ T8554] Call Trace:
[  105.890170][ T8554]  <TASK>
[  105.890174][ T8554]  dump_stack_lvl+0x100/0x190
[  105.890191][ T8554]  check_preemption_disabled+0xd2/0xe0
[  105.890207][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.890220][ T8554]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.890236][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.890250][ T8554]  trace_kfree_skb+0x18b/0x230
[  105.890265][ T8554]  sk_skb_reason_drop+0xb7/0x1b0
[  105.890279][ T8554]  skb_queue_purge_reason+0x2aa/0x420
[  105.890292][ T8554]  ? synchronize_rcu_expedited+0x3c3/0x450
[  105.890305][ T8554]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  105.890326][ T8554]  packet_release+0x839/0xd70
[  105.890340][ T8554]  ? __pfx_packet_release+0x10/0x10
[  105.890353][ T8554]  ? __pfx_down_write+0x10/0x10
[  105.890371][ T8554]  __sock_release+0xb3/0x260
[  105.890383][ T8554]  ? __pfx_sock_close+0x10/0x10
[  105.890396][ T8554]  sock_close+0x1c/0x30
[  105.890408][ T8554]  __fput+0x3ff/0xb50
[  105.890422][ T8554]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.890436][ T8554]  task_work_run+0x150/0x240
[  105.890452][ T8554]  ? __pfx_task_work_run+0x10/0x10
[  105.890472][ T8554]  exit_to_user_mode_loop+0x1d8/0x700
[  105.890485][ T8554]  ? rcu_is_watching+0x13/0xc0
[  105.890500][ T8554]  do_syscall_64+0x661/0x790
[  105.890515][ T8554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.890526][ T8554] RIP: 0033:0x7fb71e39e159
[  105.890535][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.890545][ T8554] RSP: 002b:00007ffc3739f5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  105.890555][ T8554] RAX: 0000000000000000 RBX: 00007ffc3739f6b0 RCX: 00007fb71e39e159
[  105.890562][ T8554] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  105.890568][ T8554] RBP: 0000000000019d10 R08: 0000000000000001 R09: 0000000000000000
[  105.890574][ T8554] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffc3739f6f0
[  105.890581][ T8554] R13: 00007fb71e625fac R14: 0000000000019d44 R15: 00007fb71e625fa0
[  105.890594][ T8554]  </TASK>
[  105.890715][ T8554] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.652/8554
[  105.890725][ T8554] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.890747][ T8554] CPU: 2 UID: 0 PID: 8554 Comm: syz.2.652 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  105.890761][ T8554] Tainted: [L]=SOFTLOCKUP
[  105.890765][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.890771][ T8554] Call Trace:
[  105.890774][ T8554]  <TASK>
[  105.890778][ T8554]  dump_stack_lvl+0x100/0x190
[  105.890794][ T8554]  check_preemption_disabled+0xd2/0xe0
[  105.890810][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.890823][ T8554]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.890843][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.890857][ T8554]  trace_kfree_skb+0x18b/0x230
[  105.890876][ T8554]  sk_skb_reason_drop+0xb7/0x1b0
[  105.890890][ T8554]  skb_queue_purge_reason+0x2aa/0x420
[  105.890903][ T8554]  ? synchronize_rcu_expedited+0x3c3/0x450
[  105.890916][ T8554]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  105.890937][ T8554]  packet_release+0x839/0xd70
[  105.890952][ T8554]  ? __pfx_packet_release+0x10/0x10
[  105.890964][ T8554]  ? __pfx_down_write+0x10/0x10
[  105.890983][ T8554]  __sock_release+0xb3/0x260
[  105.890995][ T8554]  ? __pfx_sock_close+0x10/0x10
[  105.891007][ T8554]  sock_close+0x1c/0x30
[  105.891019][ T8554]  __fput+0x3ff/0xb50
[  105.891034][ T8554]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.891047][ T8554]  task_work_run+0x150/0x240
[  105.891063][ T8554]  ? __pfx_task_work_run+0x10/0x10
[  105.891100][ T8554]  exit_to_user_mode_loop+0x1d8/0x700
[  105.891113][ T8554]  ? rcu_is_watching+0x13/0xc0
[  105.891129][ T8554]  do_syscall_64+0x661/0x790
[  105.891148][ T8554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.891163][ T8554] RIP: 0033:0x7fb71e39e159
[  105.891175][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.891188][ T8554] RSP: 002b:00007ffc3739f5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  105.891201][ T8554] RAX: 0000000000000000 RBX: 00007ffc3739f6b0 RCX: 00007fb71e39e159
[  105.891210][ T8554] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  105.891220][ T8554] RBP: 0000000000019d10 R08: 0000000000000001 R09: 0000000000000000
[  105.891229][ T8554] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffc3739f6f0
[  105.891239][ T8554] R13: 00007fb71e625fac R14: 0000000000019d44 R15: 00007fb71e625fa0
[  105.891253][ T8554]  </TASK>
[  105.892331][ T8554] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.652/8554
[  105.892349][ T8554] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.892379][ T8554] CPU: 1 UID: 0 PID: 8554 Comm: syz.2.652 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  105.892403][ T8554] Tainted: [L]=SOFTLOCKUP
[  105.892409][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.892419][ T8554] Call Trace:
[  105.892425][ T8554]  <TASK>
[  105.892431][ T8554]  dump_stack_lvl+0x100/0x190
[  105.892457][ T8554]  check_preemption_disabled+0xd2/0xe0
[  105.892484][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.892505][ T8554]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.892531][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.892552][ T8554]  trace_kfree_skb+0x18b/0x230
[  105.892607][ T8554]  sk_skb_reason_drop+0xb7/0x1b0
[  105.892630][ T8554]  skb_queue_purge_reason+0x2aa/0x420
[  105.892651][ T8554]  ? synchronize_rcu_expedited+0x3c3/0x450
[  105.892672][ T8554]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  105.892710][ T8554]  packet_release+0x839/0xd70
[  105.892735][ T8554]  ? __pfx_packet_release+0x10/0x10
[  105.892758][ T8554]  ? __pfx_down_write+0x10/0x10
[  105.892788][ T8554]  __sock_release+0xb3/0x260
[  105.892808][ T8554]  ? __pfx_sock_close+0x10/0x10
[  105.892827][ T8554]  sock_close+0x1c/0x30
[  105.892847][ T8554]  __fput+0x3ff/0xb50
[  105.892872][ T8554]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.892894][ T8554]  task_work_run+0x150/0x240
[  105.892921][ T8554]  ? __pfx_task_work_run+0x10/0x10
[  105.892954][ T8554]  exit_to_user_mode_loop+0x1d8/0x700
[  105.892976][ T8554]  ? rcu_is_watching+0x13/0xc0
[  105.892999][ T8554]  do_syscall_64+0x661/0x790
[  105.893041][ T8554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.893059][ T8554] RIP: 0033:0x7fb71e39e159
[  105.893074][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.893091][ T8554] RSP: 002b:00007ffc3739f5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  105.893106][ T8554] RAX: 0000000000000000 RBX: 00007ffc3739f6b0 RCX: 00007fb71e39e159
[  105.893117][ T8554] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  105.893128][ T8554] RBP: 0000000000019d10 R08: 0000000000000001 R09: 0000000000000000
[  105.893138][ T8554] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffc3739f6f0
[  105.893149][ T8554] R13: 00007fb71e625fac R14: 0000000000019d44 R15: 00007fb71e625fa0
[  105.893172][ T8554]  </TASK>
[  105.893536][ T8554] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.652/8554
[  105.893552][ T8554] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.893619][ T8554] CPU: 1 UID: 0 PID: 8554 Comm: syz.2.652 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  105.893656][ T8554] Tainted: [L]=SOFTLOCKUP
[  105.893663][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  105.893673][ T8554] Call Trace:
[  105.893694][ T8554]  <TASK>
[  105.893701][ T8554]  dump_stack_lvl+0x100/0x190
[  105.893728][ T8554]  check_preemption_disabled+0xd2/0xe0
[  105.893753][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.893773][ T8554]  net_dm_packet_trace_kfree_skb_hit+0x119/0x350
[  105.893813][ T8554]  ? skb_queue_purge_reason+0x2aa/0x420
[  105.893835][ T8554]  trace_kfree_skb+0x18b/0x230
[  105.893860][ T8554]  sk_skb_reason_drop+0xb7/0x1b0
[  105.893883][ T8554]  skb_queue_purge_reason+0x2aa/0x420
[  105.893902][ T8554]  ? synchronize_rcu_expedited+0x3c3/0x450
[  105.893924][ T8554]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  105.893962][ T8554]  packet_release+0x839/0xd70
[  105.893987][ T8554]  ? __pfx_packet_release+0x10/0x10
[  105.894008][ T8554]  ? __pfx_down_write+0x10/0x10
[  105.894039][ T8554]  __sock_release+0xb3/0x260
[  105.894059][ T8554]  ? __pfx_sock_close+0x10/0x10
[  105.894079][ T8554]  sock_close+0x1c/0x30
[  105.894099][ T8554]  __fput+0x3ff/0xb50
[  105.894122][ T8554]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.894142][ T8554]  task_work_run+0x150/0x240
[  105.894166][ T8554]  ? __pfx_task_work_run+0x10/0x10
[  105.894202][ T8554]  exit_to_user_mode_loop+0x1d8/0x700
[  105.894225][ T8554]  ? rcu_is_watching+0x13/0xc0
[  105.894248][ T8554]  do_syscall_64+0x661/0x790
[  105.894271][ T8554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.894288][ T8554] RIP: 0033:0x7fb71e39e159
[  105.894301][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.894313][ T8554] RSP: 002b:00007ffc3739f5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  105.894324][ T8554] RAX: 0000000000000000 RBX: 00007ffc3739f6b0 RCX: 00007fb71e39e159
[  105.894330][ T8554] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  105.894337][ T8554] RBP: 0000000000019d10 R08: 0000000000000001 R09: 0000000000000000
[  105.894343][ T8554] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007ffc3739f6f0
[  105.894350][ T8554] R13: 00007fb71e625fac R14: 0000000000019d44 R15: 00007fb71e625fa0
[  105.894363][ T8554]  </TASK>
[  105.920593][   T25] usb 8-1: USB disconnect, device number 7
[  105.920643][    C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  105.920665][    C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  106.402182][ T6223] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.428329][ T8553] syz_tun (unregistering): left allmulticast mode
[  106.450780][ T6223] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.591300][ T6223] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.675859][ T6223] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.879675][ T6223] bridge_slave_1: left allmulticast mode
[  106.879715][ T6223] bridge_slave_1: left promiscuous mode
[  106.883570][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.889821][ T6223] bridge_slave_0: left allmulticast mode
[  106.889841][ T6223] bridge_slave_0: left promiscuous mode
[  106.889980][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.997483][ T6223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.999257][ T6223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.000113][ T6223] bond0 (unregistering): Released all slaves
[  107.173152][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2
[  107.322221][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3
[  107.352095][ T6223] hsr_slave_0: left promiscuous mode
[  107.352517][ T6223] hsr_slave_1: left promiscuous mode
[  107.352911][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.352928][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.353446][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.353455][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.359864][ T6223] veth1_macvtap: left promiscuous mode
[  107.359896][ T6223] veth0_macvtap: left promiscuous mode
[  107.359995][ T6223] veth1_vlan: left promiscuous mode
[  107.360037][ T6223] veth0_vlan: left promiscuous mode
[  107.509160][ T6223] team0 (unregistering): Port device team_slave_1 removed
[  107.518821][ T6223] team0 (unregistering): Port device team_slave_0 removed
[  107.586893][ T5440] 8021q: adding VLAN 0 to HW filter on device eth4
[  107.738251][ T5440] 8021q: adding VLAN 0 to HW filter on device eth5
[  108.430704][ T5801] bridge_slave_1: left allmulticast mode
[  108.430721][ T5801] bridge_slave_1: left promiscuous mode
[  108.430833][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.436580][ T5801] bridge_slave_0: left allmulticast mode
[  108.436604][ T5801] bridge_slave_0: left promiscuous mode
[  108.436767][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.527878][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.529496][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.531371][ T5801] bond0 (unregistering): Released all slaves
[  108.542492][ T5801] bond1 (unregistering): Released all slaves
[  108.549018][ T5801] rdma (unregistering): Released all slaves
[  108.584391][ T5440] 8021q: adding VLAN 0 to HW filter on device eth6
[  108.619287][ T5801] tipc: Disabling bearer <udp:syz0>
[  108.619389][ T5801] tipc: Left network mode
[  108.745729][ T5440] 8021q: adding VLAN 0 to HW filter on device eth7
[  108.779272][ T5801] hsr_slave_0: left promiscuous mode
[  108.779731][ T5801] hsr_slave_1: left promiscuous mode
[  108.780339][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.781092][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.892519][ T5801] team0 (unregistering): Port device team_slave_1 removed
[  108.899074][ T5801] team0 (unregistering): Port device team_slave_0 removed
[  108.959554][ T5440] 8021q: adding VLAN 0 to HW filter on device eth8
[  109.122182][ T5440] 8021q: adding VLAN 0 to HW filter on device eth9
[  109.256552][ T5801] IPVS: stop unused estimator thread 0...
[  114.053936][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!