last executing test programs:

14.912719782s ago: executing program 0 (id=456):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000050900010073797a310000000130000480100001800c0001006e6f747261636b001c0001800b00010065787468647200000c00028008000640000000010900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044014)

14.854245452s ago: executing program 0 (id=457):
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127.0.0.1:/export\x00', 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="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", 0xfa}, 0x68)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0xc, 0x11, 0x135, 0x0})

14.851804057s ago: executing program 0 (id=458):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001140)=@int=0xd72, 0x4)
r1 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000001180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012dbd70eafddbdf250100000005000600090000000500000000000005000500020000004c7ad344b4ca50f7"], 0x2c}}, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@isdn={0x22, 0x1, 0x7, 0xd0, 0x1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="5475da09d63d278ee796035496e27f966545aad2081117bac339428414c55a3cedccaf6a43adcb267a41090760d6f0e24374da9f9ddfa59238dddac1957cd22e21c9fd4fbce3868b18aa0dd2fc7758ce2e77647dbefc8f96", 0x58}], 0x1}, 0x44890)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

14.772982549s ago: executing program 0 (id=459):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x80542, 0x4)
setuid(0xee01)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000200)={0x6})
r1 = fanotify_init(0x1a, 0x800)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8)
fanotify_mark(r1, 0x441, 0x4800001a, r2, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000640), 0x4)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$poke(0x5, r4, &(0x7f00000004c0), 0x6)
r5 = syz_open_procfs(r4, &(0x7f0000000500)='net/fib_trie\x00')
r6 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
io_setup(0x5, &(0x7f00000001c0)=<r7=>0x0)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x8200, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000300)={0xfffffffb, "42ffe37537853a810000e82e200000000000001e1d00003200"})
io_submit(r7, 0x0, &(0x7f0000000340))
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, 0x0}}], 0x1, 0x20000012)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.swap.events\x00', 0x26e1, 0x0)
close(r9)
socket$alg(0x26, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8b32, &(0x7f0000000480)={'virt_wifi0\x00', @multicast})
fanotify_mark(r1, 0x1, 0x20, r2, 0x0)
lstat(&(0x7f0000000180)='./dev\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
io_pgetevents(0x0, 0x7, 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x0, 0x0)
getgid()
fchownat(r5, &(0x7f0000000140)='./dev\x00', r10, 0xee01, 0x100)

14.651815817s ago: executing program 0 (id=461):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0x0, 0x10, &(0x7f00000012c0), 0xfffffffffffffdbb}, 0x48)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000600)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x6, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000440)=[{}, {0x0, <r1=>0x80000000}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000580)=[{}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001880)={0x0, 0x3, 0x0, &(0x7f0000001300)=[{}, {}, {<r2=>0x80000000}], 0x6, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000001700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000001840)=[{}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000019c0)={0x80000000, &(0x7f0000001900)=[{0x80000000, <r3=>0x0}], &(0x7f0000001940)})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001a00)={{r1, 0x0, 0x3, [0x10, 0x7fffffff]}, {r2, r3, 0x1, [0x10, 0x6]}, 0x2, [0xf, 0x2]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x61f74d23f9077ad0}, 0x2000e852)

14.152708534s ago: executing program 0 (id=465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1be)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

14.14274292s ago: executing program 32 (id=465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1be)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

1.762351611s ago: executing program 2 (id=635):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000032c0)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000003440), r1)
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={0x0}, 0x1, 0x0, 0x0, 0x20000054}, 0x81)
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8)
close(r3)
fcntl$setstatus(r3, 0x4, 0x2c00)
read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000003180)={&(0x7f0000002180)=[0x2d2f, 0x7fff, 0xb, 0x7, 0x1, 0xa9, 0x0, 0x2a, 0x8e, 0x7fffffff, 0x4952, 0x8000, 0xcfee, 0x2, 0x6, 0x9932, 0x7, 0x88ca, 0x5, 0x1, 0x86b, 0x3340000, 0x80000000, 0xdcd4, 0x100, 0x2, 0x4, 0x1, 0xb7a, 0x9000000, 0x0, 0x2, 0xb, 0x7, 0xc3, 0x0, 0x1, 0x9, 0x6, 0x8, 0x8000, 0x6, 0x5, 0x5, 0x0, 0xf7e, 0x6, 0x7f, 0x524f, 0x7, 0xed1b, 0x3ff, 0x7, 0x3, 0x5, 0x7, 0x6d, 0x1, 0x80, 0x7, 0x7, 0x6, 0x5, 0x7ff, 0x6, 0x2, 0x2, 0x10, 0x2, 0x8, 0x7fffffff, 0x9, 0x100, 0xfffffffe, 0x7fff, 0x200, 0x5, 0x3, 0x6, 0x48, 0x5, 0x101, 0x5, 0x2, 0x2, 0x9, 0x6b, 0xe, 0xfffffffd, 0x947d, 0x6, 0x0, 0x5, 0xae, 0x5, 0xa, 0xffff8000, 0xa, 0x401, 0x4, 0xc, 0x7fff, 0xbaf, 0x200, 0x0, 0x8, 0x8, 0x4, 0xc, 0x175, 0x100, 0x6, 0x59b, 0x3, 0x0, 0x3, 0xde80, 0xffffffff, 0x7, 0x80000001, 0x3, 0xfffffff9, 0x80000000, 0x7, 0x1, 0xfffffff8, 0x1, 0x9, 0x4, 0x6c3f, 0xe0b, 0x5, 0x6, 0x3d0, 0x4, 0xfffff862, 0x76a4, 0x85, 0x100, 0x1, 0x6, 0x7, 0x7, 0x5, 0x8, 0x5, 0x6, 0x13e, 0x2, 0x6, 0xed, 0x80000001, 0xfff, 0xdb51, 0x7f, 0x7, 0x0, 0x40, 0xfffff800, 0x10, 0x3, 0x0, 0xe, 0x5, 0x0, 0x3, 0x800, 0xffffffff, 0x9, 0x9, 0x5, 0x2, 0xa, 0x10, 0x1, 0x9, 0x7, 0x7fffffff, 0xfffffffb, 0x84, 0x97b5, 0x7f, 0x4, 0x9b5b, 0xc0000, 0x6f37, 0x2, 0x82c, 0x6, 0xe7, 0x7d9f, 0x2, 0x4, 0xba3, 0x5, 0x10000, 0x7, 0x3, 0x1, 0x2a9a, 0x9, 0x8001, 0x5, 0x7, 0x7c38, 0x80000001, 0x3ff, 0x62aa0af3, 0xf84, 0x70000000, 0x5, 0x7a, 0x2, 0x1, 0x3fdc, 0x6, 0x0, 0x10000000, 0x2, 0x6, 0x8, 0x761, 0x8, 0x1, 0x2, 0x80000000, 0x8, 0x8, 0xbee, 0x5, 0x7fff, 0x4, 0xffffffff, 0x3, 0x101, 0x10001, 0x20000, 0x80000000, 0x10001, 0x6, 0x9, 0x1, 0x3c, 0x884c, 0x1, 0x2, 0xc, 0x587, 0x80000000, 0xb59d, 0x7f, 0x7f, 0x3, 0x4, 0x0, 0x4, 0x441, 0x1a, 0xc, 0x8, 0x6, 0x4, 0x5, 0xf, 0xe91, 0x6, 0x1, 0x8, 0xfffffffd, 0x4, 0x9, 0x7fffffff, 0x6, 0x401, 0x4, 0x5, 0x6, 0x9, 0x3, 0x4, 0x4, 0x0, 0x7ff, 0x6, 0x7, 0x71a, 0x4, 0x2, 0x50f3326c, 0x4, 0x6, 0x7, 0xe, 0x9, 0xfffffffd, 0x3, 0x10000, 0x8, 0xe4, 0x2, 0xa20, 0x0, 0x9, 0x6, 0x8, 0x7, 0x4b, 0x9, 0x1, 0x800, 0x4, 0x4b7, 0x10, 0x8, 0x7f, 0x5, 0x8, 0x3, 0x5b8, 0x6, 0x4, 0x9, 0x6, 0x7ff, 0xa, 0x2, 0x1, 0x8000, 0x8, 0x2, 0x570e, 0x200, 0x35, 0xcc, 0x6, 0x7ff, 0x6, 0xd0, 0x3, 0x4, 0x80, 0x5ab7, 0xffffffff, 0x3, 0x40, 0x7, 0x3ff, 0x619e, 0x8, 0x7fff, 0x1, 0x5, 0x0, 0x5, 0x9, 0xe10, 0x5, 0xf10, 0x9, 0x7, 0x80000000, 0x9, 0x10, 0x7ff, 0x10, 0x6, 0x5, 0x8, 0x8, 0x401, 0x4, 0x676, 0x0, 0x5, 0x5, 0xf8, 0x453, 0x6, 0x7, 0x6, 0x100, 0x84, 0x2, 0xfffff800, 0xa, 0x0, 0x9, 0x400, 0x8, 0x1, 0x2, 0x81, 0x7fff, 0x10001, 0x3, 0x3, 0x2, 0x9, 0x1, 0x9, 0x4, 0x5, 0x1, 0x6, 0x5, 0x81, 0x7ff, 0x3, 0xa725, 0xfffffff9, 0xfbf8, 0xb85, 0x5, 0x7, 0x18a0000, 0x4, 0x8000, 0x1, 0x3, 0xffff0000, 0x3, 0x42, 0x9, 0x5, 0xc, 0x4, 0x2, 0x7, 0xd, 0x9, 0x7019, 0x9, 0x5, 0x2, 0xa, 0x219, 0x7, 0x2, 0x1, 0x963, 0x6d, 0x1, 0x80000001, 0x2e7, 0x6, 0x99, 0x1, 0x80000000, 0x7f, 0x8, 0x7fff, 0x0, 0x1, 0x3, 0x0, 0x6, 0x1, 0x7, 0x7, 0x6, 0x40, 0x6, 0x9, 0xc1, 0x2b, 0x326, 0x7ff, 0xffffff01, 0x9, 0x7, 0x8, 0xe956, 0x3, 0x4, 0xe43, 0x7, 0x0, 0x7, 0x1, 0x6, 0x8000, 0x6, 0x5, 0x400, 0xe, 0x1, 0x0, 0x8e9, 0x7, 0xfffffffa, 0x6, 0xe00, 0x3, 0xf9a8, 0xdb, 0x6, 0xfffff695, 0x3, 0x81, 0x7, 0xfffffffb, 0x0, 0x1e5, 0x1, 0x3, 0x3, 0x6, 0x8, 0x1, 0x7, 0x1, 0x8, 0x5, 0x5, 0x4, 0xf16, 0x4, 0x8, 0x4, 0x92c6, 0x4, 0x8, 0x2, 0x6, 0x0, 0x8, 0x4, 0x2, 0x8, 0x4, 0xffff, 0xf07, 0x3, 0x1, 0x3, 0x8, 0x200, 0x1, 0x7fff, 0x2, 0x401, 0x0, 0xa82c, 0x3, 0x80000000, 0x8, 0x5, 0x0, 0x10000, 0x10000, 0xd50b, 0x1, 0x83b9, 0x8, 0x2, 0x0, 0x440, 0x2c, 0x8, 0x2, 0x1, 0xa2, 0x81, 0x7, 0xffff, 0x0, 0x9, 0x6, 0x9, 0x7f, 0x9, 0x7, 0x3, 0x80, 0x3, 0x9e, 0xffff8a23, 0xfffffffd, 0xfffffffc, 0xc8c, 0x3, 0x7, 0xd0, 0x7fffffff, 0x1ff, 0x1, 0x8001, 0x6, 0x8, 0xfe7, 0x0, 0x7b2, 0x6, 0x4, 0x8, 0x7fffffff, 0x200, 0x10, 0x0, 0x3, 0xe0, 0x7, 0x1, 0x9, 0x6, 0x3c59b52f, 0xf, 0x3, 0x1, 0x5, 0x8, 0xb, 0x1, 0x1, 0x8, 0x400, 0x7, 0x9, 0x0, 0x8, 0x0, 0x3, 0xa1, 0x4, 0x8, 0x286, 0x6, 0x8, 0x6, 0x7, 0x2, 0x2, 0x10001, 0x9, 0x8001, 0x7, 0xf8cb, 0xc, 0x4, 0x7, 0x5, 0x6, 0x80000000, 0x4, 0x8, 0x5, 0x7, 0x3, 0xd38, 0xfffffff9, 0xa, 0x9, 0x2, 0x7f, 0x3, 0xe00000, 0x3, 0x8, 0x1, 0x5, 0x9, 0x1, 0x9, 0x7, 0x7, 0xfffffff9, 0x9, 0x1, 0x9, 0x2, 0x3, 0x2, 0x7, 0xfffffff9, 0x800, 0x6, 0xfffffffc, 0x9, 0x6, 0x3, 0x3ff, 0x4, 0x3a60, 0x5, 0x10001, 0x2, 0xa15b, 0x5, 0xe6, 0x9, 0x1448, 0xf, 0x8, 0x0, 0x8, 0x75, 0x7, 0x7, 0xffffffff, 0x3, 0x7, 0x4, 0x8000, 0x0, 0x200, 0x5, 0x6, 0x9, 0x8, 0x9, 0x0, 0x5, 0x3, 0x0, 0x800, 0x100, 0x676, 0xabc, 0xf4cb, 0x3, 0x2, 0x8b9d, 0x3, 0x8, 0x6ba, 0xffffffff, 0x400, 0x8, 0x2, 0x5, 0x5748b65c, 0xf, 0xa, 0x53, 0x7, 0xe28, 0x9, 0x9, 0x9, 0x7, 0x4, 0x8, 0x6, 0x4, 0xfffffeff, 0x5, 0x401, 0x2, 0x7, 0xa75b, 0x8, 0x1, 0x6, 0xfffffffa, 0x6, 0x4835, 0x73c, 0x0, 0x9, 0x8a, 0x0, 0x7, 0x1b7f, 0x5, 0x4, 0x0, 0x6, 0x4, 0x2073, 0x3, 0x8b86b21, 0x7, 0x0, 0x6, 0x2, 0x8, 0x7, 0x1, 0x7, 0x0, 0x7, 0xe554, 0x9, 0x9, 0x8, 0x3, 0x7, 0x187525a7, 0x1, 0x1, 0x9, 0x9, 0x9, 0x5c8, 0x1, 0x5, 0x9f6c, 0x13, 0x5, 0x2, 0x3, 0x6, 0x4, 0x7, 0xd, 0x8001, 0x0, 0x80000001, 0xf, 0xab, 0x7fffffff, 0xfffffffe, 0x1ff, 0x1, 0x6, 0x6, 0x3, 0x1, 0x0, 0x2, 0xfffffff7, 0x54, 0x1, 0x8, 0x9, 0xfffffffb, 0x9, 0xff, 0x7, 0x2c54, 0xfffffff7, 0x6, 0x7, 0x4, 0x597a5546, 0x1, 0x2, 0x6, 0xfffffffa, 0x1, 0x0, 0xb6bf, 0x1, 0x10, 0x5, 0x1, 0x100, 0xc7c, 0x3, 0x1ff, 0xd, 0x6, 0x1ff, 0xb14, 0x0, 0xd, 0x5, 0x7ff, 0x2, 0x7, 0x7fffffff, 0x6, 0x1ab200, 0x6, 0x8, 0x15d, 0xfffffffc, 0x6, 0xffffffff, 0x3, 0xfffff1de, 0x0, 0x7ff, 0x2, 0x0, 0x99, 0x2b5, 0x4, 0x2, 0x5, 0x9, 0x9, 0x19, 0x8, 0x4, 0xf, 0x2, 0x5, 0x7, 0x4, 0x3, 0x5, 0x5d5d, 0x8, 0x13e990be, 0x4, 0x6, 0x8, 0x4, 0x3, 0x31, 0x5, 0x2, 0x2, 0xffffffff, 0x5, 0x0, 0x6, 0xffff, 0x8, 0x7, 0x4, 0xff, 0x401, 0x0, 0x4, 0x1, 0x3, 0x5, 0x4, 0x6, 0x0, 0x2, 0x4, 0x10001, 0x3, 0x80, 0x1, 0x2, 0x4, 0x5, 0x401, 0x3, 0x2, 0x5, 0x595, 0x0, 0x6, 0x6, 0x89b, 0x8, 0xff, 0x2, 0x9c29, 0x2ce1, 0x8, 0x269c, 0x40000000, 0x8a9, 0x8, 0x7fff, 0x1, 0x10000, 0x7, 0x401, 0x800, 0x7fff, 0x5, 0xe1f, 0x2, 0x8000, 0x10, 0x6, 0x93, 0x7, 0x2, 0x5, 0x6, 0x3, 0x1, 0x8, 0x4, 0x3, 0x0, 0x7, 0x1, 0x6, 0x9, 0x9dcd, 0x2, 0x47, 0x8, 0xe53, 0x0, 0x2, 0x1609, 0x3, 0x0, 0x2, 0xfffffffc, 0xffffffc0, 0xffffffff, 0x80, 0x10, 0xc, 0x3, 0x2b4, 0x10001, 0x758, 0xffff0975, 0xfffffffa, 0x1000, 0x2, 0x4, 0x9, 0x2, 0x5, 0x8, 0x6, 0x5, 0x4, 0xe, 0x9, 0x4, 0x6, 0x7, 0x2, 0x0, 0x1, 0xfffffffa, 0x8, 0x6, 0xc, 0x54e], 0x6, 0x400, 0x5})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\n\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fddbdf250100000008000700a800000008000700cdc60000"], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x40010)

951.115982ms ago: executing program 4 (id=647):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f00000003c0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x6000, 0x0, 0x0, 0x2}, 0x48)

890.783448ms ago: executing program 2 (id=649):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller1\x00', @link_local})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f00000000c0)=0x7, 0x4)
write$tun(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fcf5ff18c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

890.504404ms ago: executing program 4 (id=650):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000100003050000000400ff000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900feefa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040)

822.903123ms ago: executing program 4 (id=652):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(r0, &(0x7f00000004c0)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38)
write(r0, &(0x7f0000000500)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060008000000100007000101010102020202060040001c000200180003001400100008000200010101010500040040000000", 0x60)
write(r0, &(0x7f0000000580)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202060040001c000200180003001400100008000200010101010500040040000000", 0x60)
write(r0, &(0x7f0000004a00)="4400000041000100030000000000000003010000000000002c00010010000400000000000000000000000000060006000800000010000700010101010202020206004000", 0x44)
write(r0, &(0x7f0000004a80)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000700010101010202020206004000", 0x44)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004e00)=@newsa={0x140, 0x1a, 0x633, 0x70bd29, 0x25dfdbfd, {{@in6=@local, @in=@broadcast, 0x4, 0x4000, 0x4e24, 0x8001, 0xa, 0x80}, {@in=@remote, 0x0, 0x32}, @in=@rand_addr=0x64010101, {0x323, 0x80000001, 0x9b83, 0x4000000bc, 0x42, 0x0, 0x0, 0x8}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x5, 0x0, 0x6c}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4)
fallocate(r0, 0x4, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004bc0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in=@loopback, 0x4e22, 0xd3a, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x64cd, 0x80}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d6, 0x33}, 0x2, @in=@private=0xa010102, 0x3500, 0x5, 0x1, 0x8a, 0x9, 0x2, 0xc}, {{@in6=@mcast2, 0x4d6, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3505, 0x0, 0x0, 0xd, 0x2, 0xfff, 0x7}, {{@in6=@local, 0x4d6, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x4, 0x0, 0xe, 0x5, 0x98, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x6c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0xf1, 0x1, 0x1, 0xffffff00}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3507, 0x2, 0x3, 0xa0, 0x8, 0x4, 0xffff}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4d5, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3501, 0x1, 0x2, 0xf0, 0x6, 0x80000001, 0x200}]}]}, 0x23c}}, 0x90)
write$USERIO_CMD_REGISTER(r2, &(0x7f0000004b00)={0x0, 0xe}, 0x2)
mount(0x0, 0x0, &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0x10)
mount(&(0x7f0000004940)=@filename='mtd0\x00', &(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)='jffs2\x00', 0x800004, 0x0)

822.772631ms ago: executing program 2 (id=653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000003480)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000040000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a303a00000028000480080002400000000008000140000000051400030073797a5f74756e0000000000000000000900010073797a31000000004c000000050a01020000000000000000010020020c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0)

771.466852ms ago: executing program 2 (id=655):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64)
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000400)="3082010c3081baa003020102020101300a06082a85030701010303130141301e170d3230303130313030303030305a300d3330303130313030303030aafbdd92305a300c310a3008ef025504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a85030701666345e2637667010302034100020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202306ed00a32874f", 0x110, r2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000380)=0x7f, 0x4) (async)
socket$packet(0x11, 0x3, 0x300) (async)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x3, @mcast1, 0x7}, 0x1c) (async)
connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf253900000008000300", @ANYBLOB="98d881b65a5304fe3faec8403ddb95b8c53830541c2529ae92c5d45fee10ba122cc1f45c7a36a01721d6e2ba8e3ecb212a80c663b21097a2ab8a3bae62282b15dabe8cb1e62d9015d1f8644f9dcbcec3f9425e489f821e6a36e7cee546e5672652e4c7fd3ff9f5d1d680300e671e73c32eb5e547e24cecb1e4abbf60ce3a04e0936ef6515792f3fefd01ae5fcf3c1ac12f44ce458a87f6d0512227d454cd6dfdde0d2e6321792f4801d6af91eeeef814e0", @ANYBLOB="28005a8024000280050001000b00000015000200040c0a01334d52483b03000000b200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f00000006c0), &(0x7f0000000800)=0x10) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x102, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000680)=0x3) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000840)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async)
r6 = fcntl$dupfd(r5, 0x406, r5)
setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000880)=0x23ff, 0x4)
sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000900)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000980)="67d628c20f6a631cc7", 0x9}], 0x1}}], 0x1, 0x4000004)
write$FUSE_DIRENT(r4, &(0x7f00000006c0)=ANY=[], 0x128) (async)
read(r4, &(0x7f0000000700)=""/21, 0x15) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r7, r3, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffec8}, 0x94)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000001c80), 0x0)
close(r9) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d80)={0x3, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="8500000051fdaf00"], &(0x7f0000000600)='GPL\x00'}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002f00)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="219fb440c4d5e08145fc1d75f80c96869a409aba364ced2986e5cf3560ed6dadacd65d4997c2bd11bfdff8335b909235d9b03808670f8a0044c64e9e729438a3947534745188b6cbabadd5494ae1e332c4849c5b03287fce530ea253dde3d8919e0838636724a78086a6645799142820a55f4fddbc08c3391b4fadb51fc14f43890c2d511ca5b6437d76a8d33fb6caac1bd8b96577614a54a2fc90ef2843b5269d903747b0d794d39b15aa70840bf078688539bfe0821e6a86217474e4", @ANYRES64=0x0], 0x20) (async, rerun: 64)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000002c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002cc0)={r10, 0x18000000000002a0, 0xc0, 0x0, &(0x7f0000002e40)="ba1303076804268c989e14f0880100e089021416ed885a040f1d157bb9fafe3d000000000013ac13d4cec959cfc2e18bae951ce10ba5d5f0f0ac5e9101cdc5da8b1fb735e7185c8ee75299fa44141611c72d131201f2ae86ef745bcdf92510bf450cdb73d7b2788bdb3a37b56b0cddc1c61b54ce43761be4db9adecfbf9b12244ee06ac57ab1ef523ea2268d9daad2de3e9b73cf6dea1996aef7fbf4bf589ea3236f63dd4238a2529130ae2045376375d0b5568f8a3321a2ae2f610151e548d9", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50)

767.912837ms ago: executing program 4 (id=656):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

623.136043ms ago: executing program 2 (id=658):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e22, @rand_addr=0xfffffffd}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000496000/0x1000)=nil, 0x1000, 0xc)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r4 = socket$kcm(0x29, 0x2, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040)
bind$inet6(r4, &(0x7f0000000440)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet6(r3, &(0x7f0000000280)="04", 0x1, 0x2404c081, &(0x7f00000002c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./cifs\x00', 0x1ed)
mount(&(0x7f00000004c0)=@filename='\\\\::1\\share\x00', &(0x7f0000000500)='./cifs\x00', &(0x7f0000000540)='cifs\x00', 0x0, 0x0)
shutdown(r3, 0x1)

531.921917ms ago: executing program 3 (id=660):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x28, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}, 0x1, 0x0, 0x300, 0xc082}, 0x20004080)

531.556722ms ago: executing program 1 (id=661):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000080)='GPL\x00', 0x6}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[], 0x0)
syz_socket_connect_nvme_tcp()

471.596489ms ago: executing program 3 (id=662):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f00000004c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
listen(r0, 0xa)
sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0)
recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f9050002008300000008000640"], 0xf8}}, 0x6044040)
listen(r0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
timer_create(0x7, &(0x7f00000026c0)={0x0, 0x2, 0x0, @tid=r2}, &(0x7f0000002700))

471.382849ms ago: executing program 1 (id=663):
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffffffff0200000008000300", @ANYRES32, @ANYBLOB="6778a3b5288d8014679669ec29220a000800caf4b7a410d287170d81f4cfc3bca02eb71a26d078b65644bf95d78da0c81ec49ad7c1c25b65bf32fc8e967b25e46cfb413ced6129548ddb2dc5e001ab504766a97c102227e0cb826607a642b9809033f5522949f9d842205c2f88f0a26a27f8b8a4c7124e64c9445ef9e8c59c01b98368ddf8e42f0f3fd3f1d646d354c28b0ada38480e602be0ef31684aef15efb320ea9e75d5caa452e521432ee906452bfc3bea2eb5a21f2d46673b9dbd442db5633ce1"], 0x2c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/237], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7f, 0x200004d, 0x6})
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x200, 0x4f, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x1, 0x3, 0x9})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x8, 0x404d, 0x2ba9})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000980)={0x5, 0x2, 0x9})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
mq_unlink(&(0x7f0000000000)='/dev/dri/card#\x00')
close_range(r6, 0xffffffffffffffff, 0x0)

412.94405ms ago: executing program 2 (id=664):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x400000001ff, 0x101201)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xfffffff6, 0xc0, &(0x7f00000000c0)={0x2, 0x3, 0x1, 0x5}, 0x8, 0x8000, 0x4, 0x0, 0x1000010, 0x20004, 0x0})
syz_emit_vhci(0x0, 0xe)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$vcs(0xffffffffffffff9c, 0x0, 0x220000, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(0x0, 0x80)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f0000000900)=0x8, 0x4)
write(r2, &(0x7f0000000940)="f9", 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x10)
mkdir(0x0, 0x34)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, 0x0)
mount(0x0, 0x0, 0x0, 0x2, 0x0)
chdir(0x0)
r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20402, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x60700, 0x0)
open(0x0, 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, 0x0)
sendmsg$netlink(r3, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket$nl_route(0x10, 0x3, 0x0)

412.750407ms ago: executing program 4 (id=665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(r0, &(0x7f00000004c0)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38)
write(r0, &(0x7f0000000500)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060008000000100007000101010102020202060040001c000200180003001400100008000200010101010500040040000000", 0x60)
write(r0, &(0x7f0000000580)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202060040001c000200180003001400100008000200010101010500040040000000", 0x60)
write(r0, &(0x7f0000004a00)="4400000041000100030000000000000003010000000000002c00010010000400000000000000000000000000060006000800000010000700010101010202020206004000", 0x44)
write(r0, &(0x7f0000004a80)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000700010101010202020206004000", 0x44)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004e00)=@newsa={0x140, 0x1a, 0x633, 0x70bd29, 0x25dfdbfd, {{@in6=@local, @in=@broadcast, 0x4, 0x4000, 0x4e24, 0x8001, 0xa, 0x80}, {@in=@remote, 0x0, 0x32}, @in=@rand_addr=0x64010101, {0x323, 0x80000001, 0x9b83, 0x4000000bc, 0x42, 0x0, 0x0, 0x8}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x5, 0x0, 0x6c}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4)
fallocate(r0, 0x4, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300)='100', 0x3)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004bc0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in=@loopback, 0x4e22, 0xd3a, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x64cd, 0x80}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d6, 0x33}, 0x2, @in=@private=0xa010102, 0x3500, 0x5, 0x1, 0x8a, 0x9, 0x2, 0xc}, {{@in6=@mcast2, 0x4d6, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3505, 0x0, 0x0, 0xd, 0x2, 0xfff, 0x7}, {{@in6=@local, 0x4d6, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x4, 0x0, 0xe, 0x5, 0x98, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x6c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0xf1, 0x1, 0x1, 0xffffff00}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3507, 0x2, 0x3, 0xa0, 0x8, 0x4, 0xffff}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4d5, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3501, 0x1, 0x2, 0xf0, 0x6, 0x80000001, 0x200}]}]}, 0x23c}}, 0x90)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000004b00)={0x0, 0xe}, 0x2)
mount(0x0, 0x0, &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000004900)='./file0\x00', 0x10)
mount(&(0x7f0000004940)=@filename='mtd0\x00', &(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)='jffs2\x00', 0x800004, 0x0)

361.791198ms ago: executing program 1 (id=666):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
write$binfmt_format(r0, &(0x7f0000000140)='0\x00', 0x2)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180))
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000240), 0x2000)
mkdir(&(0x7f0000000300)='./bus\x00', 0x63)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6)
r1 = fsopen(&(0x7f00000002c0)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
io_uring_enter(r2, 0x41fe, 0xfc5d, 0x40, &(0x7f0000000340)={[0x7]}, 0x8)

360.821476ms ago: executing program 3 (id=667):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)
r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="1d", 0xfe3a, 0xfffffffffffffffe)
r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000c40), 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x9, 0x2000000, 0x0, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000780), 0x422800, 0x0)
read$nci(r2, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
r4 = gettid()
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000380)={0x100000800, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x3d}, &(0x7f0000000240)=""/22, 0x16, &(0x7f0000000280)=""/48, &(0x7f0000000300)=[r3, r4, 0xffffffffffffffff], 0x3, {r5}}, 0x58)
listen(0xffffffffffffffff, 0xb)
listen(0xffffffffffffffff, 0xffffffc0)
close_range(0xffffffffffffffff, r5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000040000000a00", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES16=r0], 0x48)
socket$tipc(0x1e, 0x2, 0x0)
syz_emit_ethernet(0x42b, &(0x7f0000000800)={@local, @empty, @void, {@ipv4={0x800, @esp={{0x1b, 0x4, 0x3, 0x28, 0x41d, 0x66, 0x0, 0x5, 0x32, 0x0, @local, @private=0xa010101, {[@cipso={0x86, 0x2b, 0x1, [{0x1, 0xa, "005cee5bd3ec9bdb"}, {0x0, 0x6, "4024d111"}, {0x7, 0x7, "b793110d40"}, {0x2, 0xe, "e3ad255bf401ea76428ac6c1"}]}, @rr={0x7, 0x23, 0xf1, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2, @multicast1]}, @timestamp={0x44, 0x8, 0xc6, 0x0, 0x6, [0xcc]}]}}, {0x4d3, 0x4, @basic={0x0, 0x0, 0x81, [@ipv6=@icmpv6={0x5, 0x6, "63febf", 0x375, 0x3a, 0x1ff, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x3b, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0xec9}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x87, 0x6, 0x0, 0x80, 0x0, [@private0, @private0, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x87, 0x2, 0x4, 0x1, 0x9, 0x8, 0x0, [@mcast1]}, @srh={0x21, 0x2, 0x4, 0x1, 0x6, 0x58, 0x2, [@rand_addr=' \x01\x00']}, @dstopts={0x2f, 0xb, '\x00', [@pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x5, 0x6, [0x100000000000000, 0x401, 0x0]}}, @ra={0x5, 0x2, 0x86d1}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x5, [0x8, 0x7]}}]}, @dstopts={0x89, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x4, 0x6, "39758a", 0x400, 0x2b, 0x1, @local, @private0, [@routing={0x6, 0x0, 0x2, 0x40}, @dstopts={0x88, 0x5, '\x00', [@ra={0x5, 0x2, 0xd6df}, @jumbo={0xc2, 0x4, 0x485}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0xf}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x16, 0x0, 0x6, 0x1, 0x0, 0x17, 0x65}, @hopopts={0x5e, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x6c}, @enc_lim={0x4, 0x1, 0xa0}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x7, 0x8, [0x1, 0x7f, 0xfeb0, 0xfff]}}]}, @fragment={0x1d, 0x0, 0x8, 0x0, 0x0, 0x18, 0x64}, @hopopts={0x3a, 0xc, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x8, 0x5, [0x0, 0x80, 0x3, 0x7]}}, @generic={0x40, 0x34, "9f52009a070670617de6736e85fb98f70fb7b3f9fb8d3255fc0ca2168fecea0cac03f29517c40942e8e01b5b670ea61974ca9e89"}, @enc_lim={0x4, 0x1, 0x1}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x8, 0x24, 0x3b9f, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @local, @loopback]}, @fragment={0x3c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x68}], "937afd77945cb95f974dd1bbd0f67c2fdd5df70795a9a9bcf5f642bd45f366e252ffc2a82490a89144eae0c53bad9aab4145957bba020d9a89b30208baab15daba59edc106a48b82c943ed95132511a99006793dc71f57ceae704d74045bb0037947af4d77b61bd2deec73556826d9c4ad661142d785f5f958772bbcaf6d2b99283801b5a6b15492988a6c4649ed3f5cd1d2b44b0aceb8b3680ee412b7b47c82326bfd3c8f12dab52c2d2d7e825399490cebea3acee1efdae5c8442f63f0cc62378c7b369e6e26b41b86c358d17d25ceb2989020f2591bbfcd6946d705"}}}}]}, "9d0000000000", 0x6}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r6, &(0x7f0000000700)='27', 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x121301, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000114000028bd7000fddbdf2508000100020004000800010000000000080001000000000008000100000000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a20000000000a010300000000000000000100ffff0900010073797a310000000040000000030a01020000000000000000010000000900030073797a3000000000140004800800024000000000080002400eb25a1d0900010073797a31000000002c000000050a010400000000000000000100200003d3bf0c00024000000000000000010a000700726f7574650000001400000011000100"/180], 0xb4}}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

331.794047ms ago: executing program 4 (id=668):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a401fe000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303fdff00000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e4b4d08fda9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94b193499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d800000000310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe3130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef679a49564f67e4cbb86f9993f87dbabcefa1ccb0b8edb952729de3ed287c3e1591967ef7e9d456c17b8844439af907221478626467a8e827614663eafaed23edb1ac48ef4e2e75daee189faf6c5ce9f94ca2a449f30126c45acc0bca19bd70e0d7b850049cb3f365083c31bac82aa0077a3bb568f7c3289a5dc988136ef637151e1b197f4fa91e1d10a0ffb428"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c00), 0x8, 0x10, &(0x7f0000000c40), 0x10}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
fchown(r1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @multicast2}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000c80)={0x2, [0x0, 0x0]}, &(0x7f0000000cc0)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='+p', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='rd_pages=64', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000540)='1\x00', 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x4, 0x4)

286.713666ms ago: executing program 1 (id=669):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40, 0x28, 0x28}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000580)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)=""/242, 0xf2}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r2, &(0x7f0000000780)={0x0, 0x18, &(0x7f00000007c0), 0x31}, 0x0)
close(r2)
r3 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @auto="8a606fce1e1818b2"}, 0x21, r3, '\x00', @c})
syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x103800)
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x189482)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ac5000/0x3000)=nil, 0x3000}})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000400)=0x100000b3, 0x4)
bind$inet(r7, &(0x7f0000000440)={0x2, 0x4e20, @empty}, 0x10)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000480)=0x80000004, 0x4)
bind$inet6(r8, &(0x7f00000004c0)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000500)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfd, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r5, r9, 0x0, 0x20000023896)

280.382885ms ago: executing program 3 (id=670):
setns(0xc9, 0x0)
setns(0xc9, 0x0)
r0 = socket(0x1f, 0x5, 0x8)
bind(r0, &(0x7f00000002c0)=@generic={0x1f, "00000000000001001122334455660101010100000000000000000000000000000000000000000000000000000000000000000000000100"}, 0x32)

81.769954ms ago: executing program 3 (id=671):
syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x6, 0xff, @local, @remote, [], '\x00P\x00P\x00\x00\x00\x00'}}}}}}}, 0x0) (async)
llistxattr(&(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x0, 0x0) (async)
landlock_create_ruleset(&(0x7f0000000000)={0x200, 0xe, 0x3, 0x3800, 0x6, 0x3}, 0x30, 0x2)

81.555781ms ago: executing program 1 (id=672):
mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000d00)='./dev\x00', &(0x7f0000000d40)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd09, &(0x7f0000000e00)="0400000000000000000032009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e2030")

286.95µs ago: executing program 3 (id=673):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x1f00, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

0s ago: executing program 1 (id=674):
setns(0xc9, 0x0) (async)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x80042, 0x4d)
write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x347)
fallocate(r0, 0x0, 0x37e9, 0x2f92)
socket$rds(0x15, 0x5, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28079}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="087934e9cff9"}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28079}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="087934e9cff9"}]}, 0x44}}, 0x0)
mount$afs(&(0x7f0000000000)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1840408, &(0x7f00000000c0)={[{@flock_openafs}]})
bind$rds(r1, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x42}], 0x10}, 0x4000000) (async)
sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x42}], 0x10}, 0x4000000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x10, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, &(0x7f0000000600)={'syz', 0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f00000003c0), &(0x7f0000000400)=@udp=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000480)=r0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000480)=r0}, 0x20)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000440)={0x3ca84f756654fc27, r3}, 0x0)

kernel console output (not intermixed with test programs):

abeled_t tclass=filesystem permissive=1
[   87.046057][ T7190] jffs2: notice: (7190) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   87.063823][   T43] audit: type=1400 audit(1792142958.573:590): avc:  denied  { append } for  pid=7186 comm="syz.1.370" path="/89/file0/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=71827927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.083389][   T43] audit: type=1400 audit(1792142958.593:591): avc:  denied  { write } for  pid=7186 comm="syz.1.370" name="/" dev="9p" ino=71827609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.086928][   T43] audit: type=1400 audit(1792142958.593:592): avc:  denied  { write } for  pid=7186 comm="syz.1.370" name="file0" dev="9p" ino=71827671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.091282][   T43] audit: type=1400 audit(1792142958.593:593): avc:  denied  { mounton } for  pid=7186 comm="syz.1.370" path="/89/file0/file0/file0" dev="9p" ino=71827671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.109576][   T43] audit: type=1400 audit(1792142958.613:594): avc:  denied  { write } for  pid=7186 comm="syz.1.370" name="/" dev="9p" ino=71827609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.330273][ T1690] usb 5-1: USB disconnect, device number 9
[   87.665422][ T7211] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2)
[   87.707184][ T7213] geneve1: entered allmulticast mode
[   87.721843][ T5836] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[   87.780625][ T7217] jffs2: notice: (7217) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   87.882709][ T5836] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   87.883649][ T5836] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.883686][ T5836] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[   87.883708][ T5836] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[   87.883739][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.050854][ T7224] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   88.340823][ T7236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7236 comm=syz.1.387
[   88.421379][ T7242] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   88.421875][ T7242] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   88.422244][ T7242] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   88.422471][ T7242] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   88.688471][ T7248] __nla_validate_parse: 6 callbacks suppressed
[   88.688485][ T7248] netlink: 148 bytes leftover after parsing attributes in process `syz.2.391'.
[   88.696506][ T7248] FAULT_INJECTION: forcing a failure.
[   88.696506][ T7248] name failslab, interval 1, probability 0, space 0, times 0
[   88.696535][ T7248] CPU: 2 UID: 0 PID: 7248 Comm: syz.2.391 Not tainted syzkaller #0 PREEMPT(full) 
[   88.696555][ T7248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   88.696565][ T7248] Call Trace:
[   88.696571][ T7248]  <TASK>
[   88.696579][ T7248]  dump_stack_lvl+0x100/0x190
[   88.696608][ T7248]  should_fail_ex.cold+0x5/0xa
[   88.696634][ T7248]  should_failslab+0xc2/0x120
[   88.696662][ T7248]  kmem_cache_alloc_noprof+0x92/0x6a0
[   88.696686][ T7248]  ? do_getname+0x35/0x390
[   88.696709][ T7248]  do_getname+0x35/0x390
[   88.696731][ T7248]  do_sys_openat2+0xc7/0x1e0
[   88.696748][ T7248]  ? __pfx_do_sys_openat2+0x10/0x10
[   88.696765][ T7248]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   88.696797][ T7248]  __x64_sys_openat+0x12d/0x210
[   88.696814][ T7248]  ? __pfx___x64_sys_openat+0x10/0x10
[   88.696830][ T7248]  ? ksys_write+0x1ac/0x250
[   88.696859][ T7248]  do_syscall_64+0x123/0x790
[   88.696887][ T7248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.696905][ T7248] RIP: 0033:0x7facd999e559
[   88.696919][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.696934][ T7248] RSP: 002b:00007facda8c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   88.696953][ T7248] RAX: ffffffffffffffda RBX: 00007facd9c25fa0 RCX: 00007facd999e559
[   88.696964][ T7248] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[   88.696975][ T7248] RBP: 00007facd9a358b0 R08: 0000000000000000 R09: 0000000000000000
[   88.696985][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.696996][ T7248] R13: 00007facd9c26038 R14: 00007facd9c25fa0 R15: 00007ffe5d5b5b78
[   88.697019][ T7248]  </TASK>
[   88.704550][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'.
[   88.751062][ T7250] sctp: [Deprecated]: syz.2.392 (pid 7250) Use of int in max_burst socket option deprecated.
[   88.751062][ T7250] Use struct sctp_assoc_value instead
[   88.753340][ T7250] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.392'.
[   88.792026][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'.
[   88.822776][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.394'.
[   88.823139][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[   88.823153][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'.
[   89.336693][ T7269] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   89.337027][ T7269] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   89.337324][ T7269] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   89.337545][ T7269] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   89.408934][ T7278] sctp: [Deprecated]: syz.1.401 (pid 7278) Use of int in max_burst socket option deprecated.
[   89.408934][ T7278] Use struct sctp_assoc_value instead
[   89.647306][ T7291] syzkaller0: entered promiscuous mode
[   89.647326][ T7291] syzkaller0: entered allmulticast mode
[   89.820282][ T7297] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   89.821537][ T7297] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   89.855591][ T7299] sctp: [Deprecated]: syz.1.410 (pid 7299) Use of int in max_burst socket option deprecated.
[   89.855591][ T7299] Use struct sctp_assoc_value instead
[   90.123600][   T63] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[   90.153619][ T5836] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104
[   90.153634][ T5836] ATM dev 0: usbatm_atm_init: atm_start failed: -104!
[   90.157595][ T5836] cxacru 8-1:1.0: probe with driver cxacru failed with error -104
[   90.232520][ T7318] netlink: 80 bytes leftover after parsing attributes in process `syz.0.417'.
[   90.251810][   T63] usb 6-1: device descriptor read/64, error -71
[   90.273410][ T7320] FAULT_INJECTION: forcing a failure.
[   90.273410][ T7320] name failslab, interval 1, probability 0, space 0, times 0
[   90.273439][ T7320] CPU: 1 UID: 0 PID: 7320 Comm: syz.0.418 Not tainted syzkaller #0 PREEMPT(full) 
[   90.273458][ T7320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   90.273468][ T7320] Call Trace:
[   90.273474][ T7320]  <TASK>
[   90.273481][ T7320]  dump_stack_lvl+0x100/0x190
[   90.273509][ T7320]  should_fail_ex.cold+0x5/0xa
[   90.273533][ T7320]  should_failslab+0xc2/0x120
[   90.273578][ T7320]  kmem_cache_alloc_noprof+0x92/0x6a0
[   90.273600][ T7320]  ? jffs2_prealloc_raw_node_refs+0x1db/0x370
[   90.273625][ T7320]  jffs2_prealloc_raw_node_refs+0x1db/0x370
[   90.273648][ T7320]  jffs2_scan_medium+0x5e4/0x59c0
[   90.273684][ T7320]  ? __pfx_jffs2_scan_medium+0x10/0x10
[   90.273705][ T7320]  ? trace_kmalloc+0xeb/0x110
[   90.273727][ T7320]  ? __kasan_kmalloc+0xaa/0xb0
[   90.273750][ T7320]  ? __kmalloc_noprof+0x350/0x840
[   90.273770][ T7320]  ? jffs2_sum_init+0xc4/0x1b0
[   90.273797][ T7320]  jffs2_do_mount_fs+0x8a0/0x2300
[   90.273823][ T7320]  ? rcu_is_watching+0x13/0xc0
[   90.273846][ T7320]  ? trace_kmalloc+0xeb/0x110
[   90.273868][ T7320]  ? lockdep_init_map_type+0x5c/0x250
[   90.273890][ T7320]  ? __pfx_jffs2_do_mount_fs+0x10/0x10
[   90.273910][ T7320]  ? __raw_spin_lock_init+0x3a/0x110
[   90.273933][ T7320]  ? __init_rwsem+0x10e/0x180
[   90.273956][ T7320]  jffs2_do_fill_super+0x3d4/0xa50
[   90.273981][ T7320]  jffs2_fill_super+0x283/0x370
[   90.274004][ T7320]  ? __pfx_get_mtd_device+0x10/0x10
[   90.274029][ T7320]  ? __pfx_jffs2_fill_super+0x10/0x10
[   90.274053][ T7320]  mtd_get_sb+0x2f0/0x4c0
[   90.274071][ T7320]  ? __pfx_jffs2_fill_super+0x10/0x10
[   90.274094][ T7320]  get_tree_mtd+0x6f9/0x8a0
[   90.274112][ T7320]  ? __pfx_get_tree_mtd+0x10/0x10
[   90.274129][ T7320]  ? cap_capable+0x107/0x430
[   90.274151][ T7320]  ? bpf_lsm_capable+0x9/0x10
[   90.274168][ T7320]  ? security_capable+0x80/0x260
[   90.274188][ T7320]  vfs_get_tree+0x92/0x320
[   90.274234][ T7320]  path_mount+0x7d0/0x2850
[   90.274256][ T7320]  ? __pfx_path_mount+0x10/0x10
[   90.274274][ T7320]  ? lockdep_hardirqs_on+0x7d/0x110
[   90.274301][ T7320]  ? putname+0xb1/0x110
[   90.274316][ T7320]  ? kmem_cache_free+0x127/0x6c0
[   90.274349][ T7320]  ? __x64_sys_mount+0x293/0x310
[   90.274367][ T7320]  __x64_sys_mount+0x293/0x310
[   90.274386][ T7320]  ? __pfx___x64_sys_mount+0x10/0x10
[   90.274410][ T7320]  do_syscall_64+0x123/0x790
[   90.274436][ T7320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.274452][ T7320] RIP: 0033:0x7fc65479e559
[   90.274467][ T7320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.274483][ T7320] RSP: 002b:00007fc6555de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   90.274501][ T7320] RAX: ffffffffffffffda RBX: 00007fc654a25fa0 RCX: 00007fc65479e559
[   90.274513][ T7320] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940
[   90.274523][ T7320] RBP: 00007fc6548358b0 R08: 0000000000000000 R09: 0000000000000000
[   90.274533][ T7320] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000
[   90.274543][ T7320] R13: 00007fc654a26038 R14: 00007fc654a25fa0 R15: 00007ffe32485c28
[   90.274566][ T7320]  </TASK>
[   90.280076][ T3375] usb 8-1: USB disconnect, device number 12
[   90.458611][ T7331] syzkaller0: entered promiscuous mode
[   90.458626][ T7331] syzkaller0: entered allmulticast mode
[   90.460990][ T7331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.463723][ T7329] tipc: Resetting bearer <eth:syzkaller0>
[   90.482708][ T7329] tipc: Disabling bearer <eth:syzkaller0>
[   90.492217][   T63] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[   90.564139][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[   90.608720][ T7346] netlink: 'syz.2.428': attribute type 7 has an invalid length.
[   90.608734][ T7346] netlink: 'syz.2.428': attribute type 5 has an invalid length.
[   90.608740][ T7346] netlink: 17 bytes leftover after parsing attributes in process `syz.2.428'.
[   90.608914][ T7346] netlink: 'syz.2.428': attribute type 7 has an invalid length.
[   90.608922][ T7346] netlink: 'syz.2.428': attribute type 5 has an invalid length.
[   90.609400][ T7346] netlink: 'syz.2.428': attribute type 2 has an invalid length.
[   90.622481][   T63] usb 6-1: device descriptor read/64, error -71
[   90.661126][ T7347] syzkaller0: entered promiscuous mode
[   90.732276][   T63] usb usb6-port1: attempt power cycle
[   90.784795][ T7365] binder: 7364:7365 ioctl 81f8943c 200000000200 returned -22
[   90.803902][ T7365] binder: 7364:7365 ioctl d000943e 200000104b80 returned -22
[   90.803996][ T7365] binder: 7364:7365 ioctl c0709411 200000105b80 returned -22
[   90.804297][ T7365] binder: 7364:7365 ioctl d000943d 200000109040 returned -22
[   90.804375][ T7365] binder: 7364:7365 ioctl 81f8943c 20000010a040 returned -22
[   90.804449][ T7365] binder: 7364:7365 ioctl 81f8943c 20000010a240 returned -22
[   90.804640][ T7365] binder: 7364:7365 ioctl d000943d 20000010a440 returned -22
[   90.804747][ T7365] binder: 7364:7365 ioctl d0009411 20000010b640 returned -22
[   90.804858][ T7365] binder: 7364:7365 ioctl d000943e 20000010c640 returned -22
[   91.013963][ T7376] sctp: [Deprecated]: syz.3.439 (pid 7376) Use of int in max_burst socket option deprecated.
[   91.013963][ T7376] Use struct sctp_assoc_value instead
[   91.072316][   T63] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[   91.094262][   T63] usb 6-1: device descriptor read/8, error -71
[   91.124968][ T7382] ecryptfs_get_tree: kern_path() failed
[   91.126711][ T7382] Reading sb failed; rc = [-2]
[   91.154346][ T7385] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[   91.154363][ T7385] overlayfs: missing 'lowerdir'
[   91.254645][ T7396] sctp: [Deprecated]: syz.3.448 (pid 7396) Use of int in max_burst socket option deprecated.
[   91.254645][ T7396] Use struct sctp_assoc_value instead
[   91.275836][   T43] kauditd_printk_skb: 24 callbacks suppressed
[   91.275850][   T43] audit: type=1400 audit(1792142962.783:618): avc:  denied  { bind } for  pid=7397 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   91.331889][   T63] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[   91.358370][   T63] usb 6-1: device descriptor read/8, error -71
[   91.397194][   T43] audit: type=1400 audit(1792142962.903:619): avc:  denied  { create } for  pid=7404 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   91.398212][   T43] audit: type=1400 audit(1792142962.903:620): avc:  denied  { ioctl } for  pid=7404 comm="syz.3.452" path="socket:[19094]" dev="sockfs" ino=19094 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   91.426658][ T7407] netlink: 'syz.3.453': attribute type 10 has an invalid length.
[   91.436380][ T7407] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[   91.440389][ T7407] team0: Port device wlan0 added
[   91.442499][ T7406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.462126][   T63] usb usb6-port1: unable to enumerate USB device
[   91.462531][   T43] audit: type=1400 audit(1792142962.973:621): avc:  denied  { read } for  pid=7408 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   91.562043][ T7419] sctp: [Deprecated]: syz.0.458 (pid 7419) Use of int in max_burst socket option deprecated.
[   91.562043][ T7419] Use struct sctp_assoc_value instead
[   91.589436][   T43] audit: type=1400 audit(1792142963.093:622): avc:  denied  { append } for  pid=7420 comm="syz.0.459" name="sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   91.590249][ T7421] sd 0:0:0:0: PR command failed: 1026
[   91.590286][ T7421] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   91.590333][ T7421] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   91.643005][   T43] audit: type=1326 audit(1792142963.153:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7423 comm="syz.3.460" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6647b9e559 code=0x0
[   91.706070][   T43] audit: type=1400 audit(1792142963.213:624): avc:  denied  { unlink } for  pid=5726 comm="syz-executor" name="my_zoned_dev" dev="devtmpfs" ino=3208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   92.136511][   T43] audit: type=1400 audit(1792142963.643:625): avc:  denied  { setopt } for  pid=7431 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   92.136769][   T43] audit: type=1400 audit(1792142963.643:626): avc:  denied  { write } for  pid=7431 comm="syz.2.464" path="socket:[19712]" dev="sockfs" ino=19712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   92.150111][   T43] audit: type=1400 audit(1792142963.653:627): avc:  denied  { read } for  pid=7431 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   92.297913][ T7441] sctp: [Deprecated]: syz.2.467 (pid 7441) Use of int in max_burst socket option deprecated.
[   92.297913][ T7441] Use struct sctp_assoc_value instead
[   92.317212][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.320670][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.324253][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.325038][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.325439][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.509933][ T7442] rxe_eth0 speed is unknown, defaulting to 1000
[   92.641905][ T7468] trusted_key: encrypted_key: insufficient parameters specified
[   92.649725][ T7468] FAULT_INJECTION: forcing a failure.
[   92.649725][ T7468] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   92.649756][ T7468] CPU: 2 UID: 0 PID: 7468 Comm: syz.3.475 Not tainted syzkaller #0 PREEMPT(full) 
[   92.649779][ T7468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   92.649791][ T7468] Call Trace:
[   92.649798][ T7468]  <TASK>
[   92.649806][ T7468]  dump_stack_lvl+0x100/0x190
[   92.649848][ T7468]  should_fail_ex.cold+0x5/0xa
[   92.649871][ T7468]  ? prepare_alloc_pages+0x16d/0x5b0
[   92.649900][ T7468]  should_fail_alloc_page+0xeb/0x140
[   92.649929][ T7468]  prepare_alloc_pages+0x1f0/0x5b0
[   92.649961][ T7468]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[   92.649988][ T7468]  ? prepare_alloc_pages+0x111/0x5b0
[   92.650015][ T7468]  ? is_bpf_text_address+0x94/0x1a0
[   92.650045][ T7468]  ? rcu_is_watching+0x13/0xc0
[   92.650072][ T7468]  ? __alloc_frozen_pages_noprof+0x56b/0x3300
[   92.650096][ T7468]  ? do_raw_spin_lock+0x128/0x260
[   92.650120][ T7468]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   92.650146][ T7468]  ? mark_held_locks+0x40/0x70
[   92.650167][ T7468]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   92.650223][ T7468]  ? lockdep_hardirqs_on+0x7d/0x110
[   92.650251][ T7468]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   92.650276][ T7468]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   92.650305][ T7468]  ? kasan_save_track+0x14/0x30
[   92.650329][ T7468]  ? __kasan_slab_alloc+0x89/0x90
[   92.650359][ T7468]  ? kmem_cache_alloc_node_noprof+0x282/0x6e0
[   92.650383][ T7468]  ? alloc_vmap_area+0x640/0x2bb0
[   92.650406][ T7468]  ? __get_vm_area_node+0x1ed/0x350
[   92.650433][ T7468]  ? __vmalloc_node_range_noprof+0x268/0x1420
[   92.650459][ T7468]  ? __vmalloc_node_noprof+0xad/0xf0
[   92.650485][ T7468]  ? __snd_dma_alloc_pages+0xd2/0x150
[   92.650502][ T7468]  ? snd_dma_alloc_dir_pages+0x151/0x240
[   92.650519][ T7468]  ? do_alloc_pages+0xe5/0x1e0
[   92.650541][ T7468]  ? snd_pcm_lib_malloc_pages+0x4bd/0x9b0
[   92.650567][ T7468]  ? snd_pcm_hw_params+0x1738/0x1cd0
[   92.650591][ T7468]  ? snd_pcm_kernel_ioctl+0x104/0x280
[   92.650616][ T7468]  ? snd_pcm_oss_change_params_locked+0x1973/0x39f0
[   92.650638][ T7468]  ? snd_pcm_oss_make_ready_locked+0xb7/0x130
[   92.650666][ T7468]  alloc_pages_bulk_noprof+0x5e1/0x13c0
[   92.650695][ T7468]  ? policy_nodemask+0xed/0x4f0
[   92.650726][ T7468]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[   92.650764][ T7468]  __kasan_populate_vmalloc+0xf0/0x210
[   92.650794][ T7468]  alloc_vmap_area+0x95d/0x2bb0
[   92.650829][ T7468]  ? kasan_save_track+0x14/0x30
[   92.650854][ T7468]  ? __kasan_kmalloc+0xaa/0xb0
[   92.650877][ T7468]  ? __pfx_alloc_vmap_area+0x10/0x10
[   92.650905][ T7468]  ? __get_vm_area_node+0x124/0x350
[   92.650933][ T7468]  __get_vm_area_node+0x1ed/0x350
[   92.650965][ T7468]  __vmalloc_node_range_noprof+0x268/0x1420
[   92.650994][ T7468]  ? __snd_dma_alloc_pages+0xd2/0x150
[   92.651012][ T7468]  ? lock_acquire+0x1d1/0x380
[   92.651034][ T7468]  ? do_alloc_pages+0x39/0x1e0
[   92.651062][ T7468]  ? __snd_dma_alloc_pages+0xd2/0x150
[   92.651082][ T7468]  ? __mutex_lock+0x26c/0x1bd0
[   92.651109][ T7468]  ? do_alloc_pages+0x39/0x1e0
[   92.651132][ T7468]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   92.651160][ T7468]  ? do_alloc_pages+0xb3/0x1e0
[   92.651183][ T7468]  ? do_alloc_pages+0xb3/0x1e0
[   92.651214][ T7468]  ? __snd_dma_alloc_pages+0xd2/0x150
[   92.651231][ T7468]  __vmalloc_node_noprof+0xad/0xf0
[   92.651259][ T7468]  ? __snd_dma_alloc_pages+0xd2/0x150
[   92.651276][ T7468]  ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10
[   92.651304][ T7468]  __snd_dma_alloc_pages+0xd2/0x150
[   92.651323][ T7468]  snd_dma_alloc_dir_pages+0x151/0x240
[   92.651345][ T7468]  do_alloc_pages+0xe5/0x1e0
[   92.651382][ T7468]  snd_pcm_lib_malloc_pages+0x4bd/0x9b0
[   92.651414][ T7468]  snd_pcm_hw_params+0x1738/0x1cd0
[   92.651442][ T7468]  ? do_raw_spin_lock+0x128/0x260
[   92.651468][ T7468]  ? __pfx_snd_pcm_hw_params+0x10/0x10
[   92.651492][ T7468]  ? find_held_lock+0x2b/0x80
[   92.651522][ T7468]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   92.651545][ T7468]  ? lockdep_hardirqs_on+0x7d/0x110
[   92.651571][ T7468]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   92.651599][ T7468]  snd_pcm_kernel_ioctl+0x104/0x280
[   92.651627][ T7468]  snd_pcm_oss_change_params_locked+0x1973/0x39f0
[   92.651682][ T7468]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[   92.651710][ T7468]  ? __pfx___mutex_lock+0x10/0x10
[   92.651741][ T7468]  ? find_held_lock+0x2b/0x80
[   92.651781][ T7468]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[   92.651807][ T7468]  snd_pcm_oss_read+0x3d4/0x730
[   92.651834][ T7468]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[   92.651858][ T7468]  vfs_read+0x1e4/0xb40
[   92.651881][ T7468]  ? lock_acquire+0x1d1/0x380
[   92.651902][ T7468]  ? __fget_files+0x34/0x3d0
[   92.651928][ T7468]  ? __pfx_vfs_read+0x10/0x10
[   92.651948][ T7468]  ? find_held_lock+0x2b/0x80
[   92.651975][ T7468]  ? __fget_files+0x215/0x3d0
[   92.652000][ T7468]  ? __fget_files+0x215/0x3d0
[   92.652031][ T7468]  ? __fget_files+0x21f/0x3d0
[   92.652065][ T7468]  ksys_read+0x12a/0x250
[   92.652087][ T7468]  ? __pfx_ksys_read+0x10/0x10
[   92.652117][ T7468]  do_syscall_64+0x123/0x790
[   92.652145][ T7468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.652165][ T7468] RIP: 0033:0x7f6647b9e559
[   92.652181][ T7468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.652198][ T7468] RSP: 002b:00007f6648ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   92.652217][ T7468] RAX: ffffffffffffffda RBX: 00007f6647e25fa0 RCX: 00007f6647b9e559
[   92.652229][ T7468] RDX: 0000000000001000 RSI: 0000200000000600 RDI: 0000000000000004
[   92.652241][ T7468] RBP: 00007f6647c358b0 R08: 0000000000000000 R09: 0000000000000000
[   92.652252][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.652263][ T7468] R13: 00007f6647e26038 R14: 00007f6647e25fa0 R15: 00007fffe6048be8
[   92.652289][ T7468]  </TASK>
[   92.655767][ T7468] syz.3.475: vmalloc error: size 2097152, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[   92.655939][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.3.475 Not tainted syzkaller #0 PREEMPT(full) 
[   92.655954][ T7468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   92.655962][ T7468] Call Trace:
[   92.655966][ T7468]  <TASK>
[   92.655970][ T7468]  dump_stack_lvl+0x100/0x190
[   92.655990][ T7468]  warn_alloc.cold+0x9e/0xb2
[   92.656003][ T7468]  ? __pfx_warn_alloc+0x10/0x10
[   92.656016][ T7468]  ? lockdep_hardirqs_on+0x7d/0x110
[   92.656034][ T7468]  ? __get_vm_area_node+0x2f0/0x350
[   92.656052][ T7468]  ? __get_vm_area_node+0x22b/0x350
[   92.656071][ T7468]  __vmalloc_node_range_noprof+0xfa2/0x1420
[   92.656088][ T7468]  ? lock_acquire+0x1d1/0x380
[   92.656100][ T7468]  ? do_alloc_pages+0x39/0x1e0
[   92.656118][ T7468]  ? __snd_dma_alloc_pages+0xd2/0x150
[   92.656129][ T7468]  ? __mutex_lock+0x26c/0x1bd0
[   92.656145][ T7468]  ? do_alloc_pages+0x39/0x1e0
[   92.656159][ T7468]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   92.656175][ T7468]  ? do_alloc_pages+0xb3/0x1e0
[   92.656189][ T7468]  ? do_alloc_pages+0xb3/0x1e0
[   92.656206][ T7468]  ? __snd_dma_alloc_pages+0xd2/0x150
[   92.656222][ T7468]  __vmalloc_node_noprof+0xad/0xf0
[   92.656240][ T7468]  ? __snd_dma_alloc_pages+0xd2/0x150
[   92.656252][ T7468]  ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10
[   92.656269][ T7468]  __snd_dma_alloc_pages+0xd2/0x150
[   92.656281][ T7468]  snd_dma_alloc_dir_pages+0x151/0x240
[   92.656295][ T7468]  do_alloc_pages+0xe5/0x1e0
[   92.656311][ T7468]  snd_pcm_lib_malloc_pages+0x4bd/0x9b0
[   92.656330][ T7468]  snd_pcm_hw_params+0x1738/0x1cd0
[   92.656348][ T7468]  ? do_raw_spin_lock+0x128/0x260
[   92.656363][ T7468]  ? __pfx_snd_pcm_hw_params+0x10/0x10
[   92.656377][ T7468]  ? find_held_lock+0x2b/0x80
[   92.656396][ T7468]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   92.656410][ T7468]  ? lockdep_hardirqs_on+0x7d/0x110
[   92.656425][ T7468]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   92.656441][ T7468]  snd_pcm_kernel_ioctl+0x104/0x280
[   92.656457][ T7468]  snd_pcm_oss_change_params_locked+0x1973/0x39f0
[   92.656476][ T7468]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[   92.656492][ T7468]  ? __pfx___mutex_lock+0x10/0x10
[   92.656509][ T7468]  ? find_held_lock+0x2b/0x80
[   92.656530][ T7468]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[   92.656544][ T7468]  snd_pcm_oss_read+0x3d4/0x730
[   92.656560][ T7468]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[   92.656574][ T7468]  vfs_read+0x1e4/0xb40
[   92.656588][ T7468]  ? lock_acquire+0x1d1/0x380
[   92.656600][ T7468]  ? __fget_files+0x34/0x3d0
[   92.656616][ T7468]  ? __pfx_vfs_read+0x10/0x10
[   92.656627][ T7468]  ? find_held_lock+0x2b/0x80
[   92.656643][ T7468]  ? __fget_files+0x215/0x3d0
[   92.656658][ T7468]  ? __fget_files+0x215/0x3d0
[   92.656675][ T7468]  ? __fget_files+0x21f/0x3d0
[   92.656695][ T7468]  ksys_read+0x12a/0x250
[   92.656707][ T7468]  ? __pfx_ksys_read+0x10/0x10
[   92.656726][ T7468]  do_syscall_64+0x123/0x790
[   92.656743][ T7468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.656754][ T7468] RIP: 0033:0x7f6647b9e559
[   92.656764][ T7468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.656774][ T7468] RSP: 002b:00007f6648ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   92.656784][ T7468] RAX: ffffffffffffffda RBX: 00007f6647e25fa0 RCX: 00007f6647b9e559
[   92.656791][ T7468] RDX: 0000000000001000 RSI: 0000200000000600 RDI: 0000000000000004
[   92.656798][ T7468] RBP: 00007f6647c358b0 R08: 0000000000000000 R09: 0000000000000000
[   92.656804][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.656810][ T7468] R13: 00007f6647e26038 R14: 00007f6647e25fa0 R15: 00007fffe6048be8
[   92.656824][ T7468]  </TASK>
[   92.656829][ T7468] Mem-Info:
[   92.656834][ T7468] active_anon:25291 inactive_anon:17974 isolated_anon:0
[   92.656834][ T7468]  active_file:706 inactive_file:62695 isolated_file:0
[   92.656834][ T7468]  unevictable:1000 dirty:260 writeback:0
[   92.656834][ T7468]  slab_reclaimable:9617 slab_unreclaimable:71557
[   92.656834][ T7468]  mapped:25166 shmem:34451 pagetables:1212
[   92.656834][ T7468]  sec_pagetables:298 bounce:0
[   92.656834][ T7468]  kernel_misc_reclaimable:0
[   92.656834][ T7468]  free:406254 free_pcp:11407 free_cma:0
[   92.656861][ T7468] Node 0 active_anon:54928kB inactive_anon:71860kB active_file:2824kB inactive_file:238212kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100664kB dirty:1028kB writeback:0kB shmem:90128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13408kB pagetables:4544kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   92.656888][ T7468] Node 1 active_anon:46236kB inactive_anon:36kB active_file:0kB inactive_file:12568kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:47676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   92.656917][ T7468] Node 0 DMA free:14516kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:16kB free_cma:0kB
[   92.656948][ T7468] lowmem_reserve[]: 0 1204 1204 1204 1204
[   92.656968][ T7468] Node 0 DMA32 free:76900kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:54928kB inactive_anon:71836kB active_file:2824kB inactive_file:238116kB unevictable:2000kB writepending:1028kB zspages:0kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:11624kB local_pcp:1428kB free_cma:0kB
[   92.657001][ T7468] lowmem_reserve[]: 0 0 0 0 0
[   92.657018][ T7468] Node 1 Normal free:1533600kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:46236kB inactive_anon:36kB active_file:0kB inactive_file:12568kB unevictable:2000kB writepending:12kB zspages:108kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:33848kB local_pcp:12224kB free_cma:0kB
[   92.657048][ T7468] lowmem_reserve[]: 0 0 0 0 0
[   92.657064][ T7468] Node 0 DMA: 16*4kB (UM) 14*8kB (UM) 11*16kB (UM) 11*32kB (UME) 6*64kB (UME) 5*128kB (UME) 6*256kB (ME) 4*512kB (ME) 5*1024kB (ME) 2*2048kB (ME) 0*4096kB = 14528kB
[   92.657143][ T7468] Node 0 DMA32: 20*4kB (UME) 94*8kB (UE) 42*16kB (UME) 95*32kB (ME) 79*64kB (UME) 81*128kB (UME) 46*256kB (UME) 16*512kB (UME) 18*1024kB (M) 7*2048kB (UM) 1*4096kB (M) = 76800kB
[   92.657231][ T7468] Node 1 Normal: 60*4kB (ME) 39*8kB (UM) 18*16kB (UME) 13*32kB (ME) 9*64kB (UM) 5*128kB (UM) 5*256kB (UM) 8*512kB (ME) 8*1024kB (UM) 3*2048kB (ME) 369*4096kB (UM) = 1533608kB
[   92.657319][ T7468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   92.657329][ T7468] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   92.657337][ T7468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   92.657346][ T7468] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   92.657354][ T7468] 97848 total pagecache pages
[   92.657358][ T7468] 0 pages in swap cache
[   92.657362][ T7468] Free swap  = 124996kB
[   92.657367][ T7468] Total swap = 124996kB
[   92.657371][ T7468] 1048443 pages RAM
[   92.657375][ T7468] 0 pages HighMem/MovableOnly
[   92.657379][ T7468] 290717 pages reserved
[   92.657382][ T7468] 0 pages cma reserved
[   92.755056][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.755181][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.755272][ T7442] bridge_slave_0: entered allmulticast mode
[   92.757048][ T7442] bridge_slave_0: entered promiscuous mode
[   92.759667][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.759783][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.759912][ T7442] bridge_slave_1: entered allmulticast mode
[   92.761082][ T7442] bridge_slave_1: entered promiscuous mode
[   92.775079][ T7442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.776461][ T7442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.790099][ T7442] team0: Port device team_slave_0 added
[   92.791515][ T7442] team0: Port device team_slave_1 added
[   92.808621][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.808631][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.808644][ T7442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.809384][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.809390][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.809403][ T7442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.831822][ T7442] hsr_slave_0: entered promiscuous mode
[   92.832244][ T7442] hsr_slave_1: entered promiscuous mode
[   92.832698][ T7442] debugfs: 'hsr0' already exists in 'hsr'
[   92.832710][ T7442] Cannot create hsr debugfs directory
[   93.013200][ T7442] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.032909][ T7442] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.035945][ T7442] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.055517][ T7442] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.057553][ T7442] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.068368][ T7442] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.069053][ T7442] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.096676][ T7442] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.151023][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.151101][ T7442] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.151280][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.151357][ T7442] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.195544][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.219538][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.223776][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.266676][ T7442] 8021q: adding VLAN 0 to HW filter on device team0
[   93.276616][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.276691][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.281896][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.281940][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.593316][ T7442] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.779179][ T7442] veth0_vlan: entered promiscuous mode
[   93.783985][ T7442] veth1_vlan: entered promiscuous mode
[   93.802101][ T5836] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[   93.810681][ T7442] veth0_macvtap: entered promiscuous mode
[   93.813554][ T7442] veth1_macvtap: entered promiscuous mode
[   93.823755][ T7442] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.828140][ T7442] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.836960][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.837038][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.837064][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.837081][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.911122][  T778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.911142][  T778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.926437][  T778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.926457][  T778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.952992][ T5836] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   93.954259][ T5836] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[   93.954284][ T5836] usb 6-1: config 0 has no interface number 0
[   93.954307][ T5836] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   93.954326][ T5836] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[   93.954355][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.955948][ T5836] usb 6-1: config 0 descriptor??
[   93.956476][ T7512] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   93.987535][ T5836] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   94.061894][   T63] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[   94.160391][ T7512] __nla_validate_parse: 9 callbacks suppressed
[   94.160417][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'.
[   94.177183][ T3375] usb 6-1: USB disconnect, device number 17
[   94.177277][    C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[   94.212449][   T63] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   94.213342][   T63] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   94.213361][   T63] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   94.213376][   T63] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   94.213414][   T63] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   94.213436][   T63] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   94.214784][   T63] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   94.214800][   T63] usb 8-1: Product: syz
[   94.214811][   T63] usb 8-1: Manufacturer: syz
[   94.220862][   T63] cdc_wdm 8-1:1.0: skipping garbage
[   94.220876][   T63] cdc_wdm 8-1:1.0: skipping garbage
[   94.258983][   T63] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   94.259002][   T63] cdc_wdm 8-1:1.0: Unknown control protocol
[   94.261799][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   94.401845][ T5729] Bluetooth: hci1: command tx timeout
[   94.422597][   T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   94.423542][   T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   94.423560][   T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   94.423575][   T10] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   94.425326][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   94.425339][   T10] usb 9-1: Product: syz
[   94.425346][   T10] usb 9-1: Manufacturer: syz
[   94.425353][   T10] usb 9-1: SerialNumber: syz
[   94.634880][   T10] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   94.836130][   T63] usb 9-1: USB disconnect, device number 2
[   94.847615][   T63] usblp1: removed
[   95.439081][ T7550] sctp: [Deprecated]: syz.4.485 (pid 7550) Use of int in max_burst socket option deprecated.
[   95.439081][ T7550] Use struct sctp_assoc_value instead
[   95.580754][ T7554] netlink: 196 bytes leftover after parsing attributes in process `syz.4.487'.
[   96.006699][ T7568] net_ratelimit: 7 callbacks suppressed
[   96.006713][ T7568] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   96.009720][ T7568] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   96.010112][ T7568] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   96.010360][ T7568] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   96.016477][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[   96.016539][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[   96.016549][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[   96.016558][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[   96.016567][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[   96.016576][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[   96.016585][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[   96.016593][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[   96.016603][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[   96.016612][ T7568] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[   96.016620][ T7568] jffs2: Further such events for this erase block will not be printed
[   96.017020][ T7568] FAULT_INJECTION: forcing a failure.
[   96.017020][ T7568] name failslab, interval 1, probability 0, space 0, times 0
[   96.017038][ T7568] CPU: 2 UID: 0 PID: 7568 Comm: syz.1.493 Not tainted syzkaller #0 PREEMPT(full) 
[   96.017051][ T7568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.017058][ T7568] Call Trace:
[   96.017063][ T7568]  <TASK>
[   96.017067][ T7568]  dump_stack_lvl+0x100/0x190
[   96.017088][ T7568]  should_fail_ex.cold+0x5/0xa
[   96.017104][ T7568]  should_failslab+0xc2/0x120
[   96.017136][ T7568]  kmem_cache_alloc_noprof+0x92/0x6a0
[   96.017150][ T7568]  ? __local_bh_enable_ip+0xa5/0x120
[   96.017162][ T7568]  ? jffs2_alloc_xattr_ref+0x1b/0x90
[   96.017178][ T7568]  jffs2_alloc_xattr_ref+0x1b/0x90
[   96.017195][ T7568]  jffs2_scan_medium+0x32f4/0x59c0
[   96.017217][ T7568]  ? __pfx_jffs2_scan_medium+0x10/0x10
[   96.017232][ T7568]  ? trace_kmalloc+0xeb/0x110
[   96.017249][ T7568]  ? __kasan_kmalloc+0xaa/0xb0
[   96.017265][ T7568]  ? __kmalloc_noprof+0x350/0x840
[   96.017279][ T7568]  ? jffs2_sum_init+0xc4/0x1b0
[   96.017298][ T7568]  jffs2_do_mount_fs+0x8a0/0x2300
[   96.017320][ T7568]  ? rcu_is_watching+0x13/0xc0
[   96.017336][ T7568]  ? trace_kmalloc+0xeb/0x110
[   96.017351][ T7568]  ? lockdep_init_map_type+0x5c/0x250
[   96.017365][ T7568]  ? __pfx_jffs2_do_mount_fs+0x10/0x10
[   96.017379][ T7568]  ? __raw_spin_lock_init+0x3a/0x110
[   96.017395][ T7568]  ? __init_rwsem+0x10e/0x180
[   96.017410][ T7568]  jffs2_do_fill_super+0x3d4/0xa50
[   96.017429][ T7568]  jffs2_fill_super+0x283/0x370
[   96.017444][ T7568]  ? __pfx_get_mtd_device+0x10/0x10
[   96.017461][ T7568]  ? __pfx_jffs2_fill_super+0x10/0x10
[   96.017477][ T7568]  mtd_get_sb+0x2f0/0x4c0
[   96.017488][ T7568]  ? __pfx_jffs2_fill_super+0x10/0x10
[   96.017504][ T7568]  get_tree_mtd+0x6f9/0x8a0
[   96.017515][ T7568]  ? __pfx_get_tree_mtd+0x10/0x10
[   96.017526][ T7568]  ? cap_capable+0x107/0x430
[   96.017540][ T7568]  ? bpf_lsm_capable+0x9/0x10
[   96.017551][ T7568]  ? security_capable+0x80/0x260
[   96.017565][ T7568]  vfs_get_tree+0x92/0x320
[   96.017577][ T7568]  path_mount+0x7d0/0x2850
[   96.017592][ T7568]  ? __pfx_path_mount+0x10/0x10
[   96.017602][ T7568]  ? lockdep_hardirqs_on+0x7d/0x110
[   96.017620][ T7568]  ? putname+0xb1/0x110
[   96.017628][ T7568]  ? kmem_cache_free+0x127/0x6c0
[   96.017645][ T7568]  ? __x64_sys_mount+0x293/0x310
[   96.017656][ T7568]  __x64_sys_mount+0x293/0x310
[   96.017668][ T7568]  ? __pfx___x64_sys_mount+0x10/0x10
[   96.017683][ T7568]  do_syscall_64+0x123/0x790
[   96.017700][ T7568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.017712][ T7568] RIP: 0033:0x7f28f0f9e559
[   96.017722][ T7568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.017733][ T7568] RSP: 002b:00007f28f1ea0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   96.017744][ T7568] RAX: ffffffffffffffda RBX: 00007f28f1225fa0 RCX: 00007f28f0f9e559
[   96.017751][ T7568] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940
[   96.017757][ T7568] RBP: 00007f28f10358b0 R08: 0000000000000000 R09: 0000000000000000
[   96.017764][ T7568] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000
[   96.017770][ T7568] R13: 00007f28f1226038 R14: 00007f28f1225fa0 R15: 00007ffedfe4cfb8
[   96.017785][ T7568]  </TASK>
[   96.128083][ T7571] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   96.128723][ T7571] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   96.132631][ T7571] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   96.133049][ T7571] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[   96.137454][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.495'.
[   96.151385][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[   96.151404][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[   96.151414][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[   96.151428][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[   96.151442][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[   96.151455][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[   96.151468][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[   96.151481][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[   96.151495][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[   96.151508][ T7571] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[   96.151516][ T7571] jffs2: Further such events for this erase block will not be printed
[   96.153613][ T7571] FAULT_INJECTION: forcing a failure.
[   96.153613][ T7571] name failslab, interval 1, probability 0, space 0, times 0
[   96.153639][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.2.494 Not tainted syzkaller #0 PREEMPT(full) 
[   96.153659][ T7571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   96.153667][ T7571] Call Trace:
[   96.153671][ T7571]  <TASK>
[   96.153679][ T7571]  dump_stack_lvl+0x100/0x190
[   96.153709][ T7571]  should_fail_ex.cold+0x5/0xa
[   96.153734][ T7571]  should_failslab+0xc2/0x120
[   96.153761][ T7571]  __kmalloc_flags_noprof+0x122/0x8e0
[   96.153776][ T7571]  ? find_held_lock+0x2b/0x80
[   96.153807][ T7571]  ? __pcs_replace_empty_main+0x132/0x650
[   96.153826][ T7571]  ? __pcs_replace_empty_main+0x3fa/0x650
[   96.153851][ T7571]  __pcs_replace_empty_main+0x3fa/0x650
[   96.153869][ T7571]  kmem_cache_alloc_noprof+0x4c4/0x6a0
[   96.153893][ T7571]  ? jffs2_alloc_xattr_datum+0x1c/0xe0
[   96.153919][ T7571]  jffs2_alloc_xattr_datum+0x1c/0xe0
[   96.153938][ T7571]  jffs2_setup_xattr_datum+0x56/0x2a0
[   96.153959][ T7571]  jffs2_scan_medium+0x3a08/0x59c0
[   96.153990][ T7571]  ? __pfx_jffs2_scan_medium+0x10/0x10
[   96.154013][ T7571]  ? trace_kmalloc+0xeb/0x110
[   96.154037][ T7571]  ? __kasan_kmalloc+0xaa/0xb0
[   96.154061][ T7571]  ? __kmalloc_noprof+0x350/0x840
[   96.154083][ T7571]  ? jffs2_sum_init+0xc4/0x1b0
[   96.154106][ T7571]  jffs2_do_mount_fs+0x8a0/0x2300
[   96.154133][ T7571]  ? rcu_is_watching+0x13/0xc0
[   96.154158][ T7571]  ? trace_kmalloc+0xeb/0x110
[   96.154205][ T7571]  ? lockdep_init_map_type+0x5c/0x250
[   96.154226][ T7571]  ? __pfx_jffs2_do_mount_fs+0x10/0x10
[   96.154247][ T7571]  ? __raw_spin_lock_init+0x3a/0x110
[   96.154272][ T7571]  ? __init_rwsem+0x10e/0x180
[   96.154295][ T7571]  jffs2_do_fill_super+0x3d4/0xa50
[   96.154319][ T7571]  jffs2_fill_super+0x283/0x370
[   96.154343][ T7571]  ? __pfx_get_mtd_device+0x10/0x10
[   96.154370][ T7571]  ? __pfx_jffs2_fill_super+0x10/0x10
[   96.154395][ T7571]  mtd_get_sb+0x2f0/0x4c0
[   96.154408][ T7571]  ? __pfx_jffs2_fill_super+0x10/0x10
[   96.154432][ T7571]  get_tree_mtd+0x6f9/0x8a0
[   96.154450][ T7571]  ? __pfx_get_tree_mtd+0x10/0x10
[   96.154482][ T7571]  ? cap_capable+0x107/0x430
[   96.154503][ T7571]  ? bpf_lsm_capable+0x9/0x10
[   96.154519][ T7571]  ? security_capable+0x80/0x260
[   96.154542][ T7571]  vfs_get_tree+0x92/0x320
[   96.154663][ T7571]  path_mount+0x7d0/0x2850
[   96.154686][ T7571]  ? __pfx_path_mount+0x10/0x10
[   96.154700][ T7571]  ? lockdep_hardirqs_on+0x7d/0x110
[   96.154727][ T7571]  ? putname+0xb1/0x110
[   96.154741][ T7571]  ? kmem_cache_free+0x127/0x6c0
[   96.154770][ T7571]  ? __x64_sys_mount+0x293/0x310
[   96.154791][ T7571]  __x64_sys_mount+0x293/0x310
[   96.154807][ T7571]  ? __pfx___x64_sys_mount+0x10/0x10
[   96.154834][ T7571]  do_syscall_64+0x123/0x790
[   96.154862][ T7571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.154882][ T7571] RIP: 0033:0x7facd999e559
[   96.154893][ T7571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.154908][ T7571] RSP: 002b:00007facda8c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   96.154925][ T7571] RAX: ffffffffffffffda RBX: 00007facd9c25fa0 RCX: 00007facd999e559
[   96.154936][ T7571] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940
[   96.154948][ T7571] RBP: 00007facd9a358b0 R08: 0000000000000000 R09: 0000000000000000
[   96.154958][ T7571] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000
[   96.154969][ T7571] R13: 00007facd9c26038 R14: 00007facd9c25fa0 R15: 00007ffe5d5b5b78
[   96.154990][ T7571]  </TASK>
[   96.156621][ T7571] jffs2: notice: (7571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   96.173400][ T7574] overlayfs: invalid origin (0000)
[   96.471853][ T5729] Bluetooth: hci1: command tx timeout
[   96.849152][   T25] usb 8-1: USB disconnect, device number 13
[   96.942797][ T7590] sctp: [Deprecated]: syz.4.499 (pid 7590) Use of int in max_burst socket option deprecated.
[   96.942797][ T7590] Use struct sctp_assoc_value instead
[   96.953073][ T7591] netlink: 'syz.2.501': attribute type 1 has an invalid length.
[   97.008955][ T7596] Bluetooth: MGMT ver 1.23
[   97.008987][ T7596] Bluetooth: hci0: unsupported parameter 255
[   97.008999][ T7596] Bluetooth: hci0: unsupported parameter 255
[   97.021873][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'.
[   97.146520][ T7607] netlink: 'syz.2.507': attribute type 10 has an invalid length.
[   97.260905][ T7617] sctp: [Deprecated]: syz.4.511 (pid 7617) Use of int in max_burst socket option deprecated.
[   97.260905][ T7617] Use struct sctp_assoc_value instead
[   97.278502][ T7618] fuse: Bad value for 'fd'
[   97.312532][   T43] kauditd_printk_skb: 18 callbacks suppressed
[   97.312550][   T43] audit: type=1400 audit(1792142968.823:646): avc:  denied  { read write } for  pid=7621 comm="syz.4.514" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   97.312972][   T43] audit: type=1400 audit(1792142968.823:647): avc:  denied  { open } for  pid=7621 comm="syz.4.514" path="/13/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   97.313497][   T43] audit: type=1400 audit(1792142968.823:648): avc:  denied  { ioctl } for  pid=7621 comm="syz.4.514" path="/13/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   97.476788][   T43] audit: type=1400 audit(1792142968.983:649): avc:  denied  { connect } for  pid=7626 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   97.478288][ T7620] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[   97.478467][ T7620] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[   97.543473][   T43] audit: type=1400 audit(1792142969.053:650): avc:  denied  { write } for  pid=7627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.595256][   T43] audit: type=1400 audit(1792142969.103:651): avc:  denied  { write } for  pid=7636 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.595833][ T7534] syz.1.484 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   97.595854][ T7534] CPU: 2 UID: 0 PID: 7534 Comm: syz.1.484 Not tainted syzkaller #0 PREEMPT(full) 
[   97.595867][ T7534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.595873][ T7534] Call Trace:
[   97.595877][ T7534]  <TASK>
[   97.595881][ T7534]  dump_stack_lvl+0x100/0x190
[   97.595902][ T7534]  dump_header+0xfb/0x606
[   97.595915][ T7534]  oom_kill_process.cold+0xd/0x380
[   97.595930][ T7534]  out_of_memory+0x340/0x14f0
[   97.595949][ T7534]  ? __pfx_out_of_memory+0x10/0x10
[   97.595970][ T7534]  mem_cgroup_out_of_memory+0xc6/0x130
[   97.595985][ T7534]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   97.595999][ T7534]  ? find_held_lock+0x2b/0x80
[   97.596018][ T7534]  ? do_raw_spin_unlock+0x145/0x1e0
[   97.596034][ T7534]  ? _raw_spin_unlock+0x28/0x50
[   97.596050][ T7534]  try_charge_memcg+0x783/0xf60
[   97.596064][ T7534]  ? __pfx_try_charge_memcg+0x10/0x10
[   97.596075][ T7534]  ? find_held_lock+0x2b/0x80
[   97.596091][ T7534]  ? rcu_read_unlock+0x17/0x60
[   97.596102][ T7534]  ? rcu_read_unlock+0x17/0x60
[   97.596114][ T7534]  ? find_held_lock+0x2b/0x80
[   97.596130][ T7534]  ? rcu_read_unlock+0x17/0x60
[   97.596145][ T7534]  charge_memcg+0x1ae/0x210
[   97.596157][ T7534]  __mem_cgroup_charge+0x2b/0x1c0
[   97.596170][ T7534]  shmem_alloc_and_add_folio+0x451/0xd40
[   97.596185][ T7534]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   97.596198][ T7534]  ? shmem_allowable_huge_orders+0x1d7/0x470
[   97.596213][ T7534]  shmem_get_folio_gfp+0x75b/0x1980
[   97.596227][ T7534]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   97.596241][ T7534]  ? filemap_map_pages+0x1155/0x2060
[   97.596260][ T7534]  shmem_fault+0x1fb/0xa30
[   97.596273][ T7534]  ? __pfx_shmem_fault+0x10/0x10
[   97.596286][ T7534]  ? __pfx_filemap_map_pages+0x10/0x10
[   97.596305][ T7534]  ? find_held_lock+0x2b/0x80
[   97.596322][ T7534]  ? __pfx_filemap_map_pages+0x10/0x10
[   97.596338][ T7534]  __do_fault+0x10b/0x440
[   97.596354][ T7534]  do_fault+0xb3f/0x1830
[   97.596372][ T7534]  ? __pfx_do_fault+0x10/0x10
[   97.596386][ T7534]  ? rcu_read_unlock+0x2d/0xb0
[   97.596397][ T7534]  ? rcu_read_unlock+0x2d/0xb0
[   97.596408][ T7534]  ? __pte_offset_map+0x179/0x310
[   97.596425][ T7534]  __handle_mm_fault+0x150b/0x2f60
[   97.596462][ T7534]  ? __pfx___handle_mm_fault+0x10/0x10
[   97.596473][ T7534]  ? pte_offset_map_lock+0x174/0x320
[   97.596488][ T7534]  ? find_held_lock+0x2b/0x80
[   97.596504][ T7534]  ? find_held_lock+0x2b/0x80
[   97.596520][ T7534]  ? follow_page_pte+0x536/0x1050
[   97.596543][ T7534]  handle_mm_fault+0x363/0xa20
[   97.596557][ T7534]  __get_user_pages+0x8ae/0x2c30
[   97.596576][ T7534]  ? lock_acquire+0x1d1/0x380
[   97.596589][ T7534]  ? __pfx___get_user_pages+0x10/0x10
[   97.596604][ T7534]  ? __pfx___might_resched+0x10/0x10
[   97.596623][ T7534]  get_dump_page+0x27e/0x3d0
[   97.596638][ T7534]  ? __pfx_get_dump_page+0x10/0x10
[   97.596654][ T7534]  ? dump_user_range+0x65e/0xad0
[   97.596672][ T7534]  dump_user_range+0x18d/0xad0
[   97.596689][ T7534]  ? __pfx_dump_user_range+0x10/0x10
[   97.596708][ T7534]  ? __pfx_writenote+0x10/0x10
[   97.596723][ T7534]  ? elf_core_dump+0x1f25/0x3d20
[   97.596740][ T7534]  elf_core_dump+0x2d68/0x3d20
[   97.596763][ T7534]  ? __pfx_elf_core_dump+0x10/0x10
[   97.596778][ T7534]  ? kasan_save_stack+0x3f/0x50
[   97.596796][ T7534]  ? kasan_save_stack+0x30/0x50
[   97.596810][ T7534]  ? kasan_save_track+0x14/0x30
[   97.596824][ T7534]  ? __kasan_kmalloc+0xaa/0xb0
[   97.596838][ T7534]  ? vfs_coredump+0x21f6/0x54a0
[   97.596851][ T7534]  ? get_signal+0x1f2a/0x21e0
[   97.596863][ T7534]  ? arch_do_signal_or_restart+0x91/0x7e0
[   97.596883][ T7534]  ? 0xffffffffff600000
[   97.596909][ T7534]  ? lock_acquire+0x1d1/0x380
[   97.596921][ T7534]  ? get_signal+0x1f2a/0x21e0
[   97.596938][ T7534]  ? vfs_coredump+0x281a/0x54a0
[   97.596951][ T7534]  vfs_coredump+0x281a/0x54a0
[   97.596970][ T7534]  ? __pfx_vfs_coredump+0x10/0x10
[   97.596984][ T7534]  ? __lock_acquire+0x5c0/0x1f40
[   97.597001][ T7534]  ? __lock_acquire+0x5c0/0x1f40
[   97.597015][ T7534]  ? lock_acquire+0x1d1/0x380
[   97.597027][ T7534]  ? unwind_next_frame+0xbd/0x2090
[   97.597046][ T7534]  ? lock_acquire+0x1d1/0x380
[   97.597062][ T7534]  ? bpf_ksym_find+0x128/0x1c0
[   97.597073][ T7534]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   97.597090][ T7534]  ? arch_stack_walk+0xa6/0xf0
[   97.597109][ T7534]  ? __sigqueue_free+0xbe/0x2a0
[   97.597124][ T7534]  ? stack_trace_save+0x8e/0xc0
[   97.597136][ T7534]  ? __pfx_stack_trace_save+0x10/0x10
[   97.597147][ T7534]  ? stack_depot_save_flags+0x27/0x9f0
[   97.597159][ T7534]  ? __lock_acquire+0x5c0/0x1f40
[   97.597196][ T7534]  ? proc_coredump_connector+0x2d3/0x4f0
[   97.597212][ T7534]  ? __pfx_proc_coredump_connector+0x10/0x10
[   97.597230][ T7534]  ? rcu_is_watching+0x13/0xc0
[   97.597248][ T7534]  get_signal+0x1f2a/0x21e0
[   97.597266][ T7534]  ? __pfx_get_signal+0x10/0x10
[   97.597282][ T7534]  arch_do_signal_or_restart+0x91/0x7e0
[   97.597300][ T7534]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   97.597328][ T7534]  irqentry_exit+0x402/0xa10
[   97.597345][ T7534]  asm_exc_page_fault+0x26/0x30
[   97.597357][ T7534] RIP: 0033:0x7f28f0f9e561
[   97.597366][ T7534] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   97.597377][ T7534] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[   97.597387][ T7534] RAX: 0000000000000000 RBX: 00007f28f1225fa0 RCX: 00007f28f0f9e559
[   97.597394][ T7534] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[   97.597400][ T7534] RBP: 00007f28f10358b0 R08: 0000000000000000 R09: 0000000000000000
[   97.597407][ T7534] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   97.597413][ T7534] R13: 00007f28f1226038 R14: 00007f28f1225fa0 R15: 00007ffedfe4cfb8
[   97.597428][ T7534]  </TASK>
[   97.597518][ T7534] memory: usage 307200kB, limit 307200kB, failcnt 19830
[   97.597527][ T7534] memory+swap: usage 431976kB, limit 9007199254740988kB, failcnt 0
[   97.597534][ T7534] kmem: usage 4560kB, limit 9007199254740988kB, failcnt 0
[   97.597540][ T7534] Memory cgroup stats for /syz1:
[   97.597772][ T7534] cache 309649408
[   97.597778][ T7534] rss 253952
[   97.597787][ T7534] rss_huge 0
[   97.597791][ T7534] shmem 309649408
[   97.597795][ T7534] mapped_file 124137472
[   97.597799][ T7534] dirty 0
[   97.597803][ T7534] writeback 0
[   97.597806][ T7534] workingset_refault_anon 0
[   97.597811][ T7534] workingset_refault_file 0
[   97.597815][ T7534] swap 127770624
[   97.597818][ T7534] swapcached 127770624
[   97.597822][ T7534] pgpgin 118868
[   97.597826][ T7534] pgpgout 43208
[   97.597830][ T7534] pgfault 55971
[   97.597834][ T7534] pgmajfault 9
[   97.597838][ T7534] inactive_anon 125140992
[   97.597842][ T7534] active_anon 184762368
[   97.597846][ T7534] inactive_file 0
[   97.597850][ T7534] active_file 0
[   97.597853][ T7534] unevictable 0
[   97.597857][ T7534] hierarchical_memory_limit 314572800
[   97.597862][ T7534] hierarchical_memsw_limit 9223372036854771712
[   97.597866][ T7534] total_cache 309649408
[   97.597870][ T7534] total_rss 253952
[   97.597874][ T7534] total_rss_huge 0
[   97.597878][ T7534] total_shmem 309649408
[   97.597882][ T7534] total_mapped_file 124137472
[   97.597886][ T7534] total_dirty 0
[   97.597889][ T7534] total_writeback 0
[   97.597893][ T7534] total_workingset_refault_anon 0
[   97.597898][ T7534] total_workingset_refault_file 0
[   97.597902][ T7534] total_swap 127770624
[   97.597906][ T7534] total_swapcached 127770624
[   97.597910][ T7534] total_pgpgin 118868
[   97.597914][ T7534] total_pgpgout 43208
[   97.597918][ T7534] total_pgfault 55971
[   97.597922][ T7534] total_pgmajfault 9
[   97.597926][ T7534] total_inactive_anon 125140992
[   97.597930][ T7534] total_active_anon 184762368
[   97.597934][ T7534] total_inactive_file 0
[   97.597938][ T7534] total_active_file 0
[   97.597942][ T7534] total_unevictable 0
[   97.597945][ T7534] anon_cost 0
[   97.597949][ T7534] file_cost 0
[   97.597953][ T7534] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.484,pid=7534,uid=0
[   97.599281][ T7534] Memory cgroup out of memory: Killed process 7534 (syz.1.484) total-vm:212860kB, anon-rss:1320kB, file-rss:20548kB, shmem-rss:120824kB, UID:0 pgtables:360kB oom_score_adj:1000
[   97.660647][ T7639] netlink: 'syz.4.516': attribute type 5 has an invalid length.
[   97.660667][ T7639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.516'.
[   97.724505][ T7541] syz.1.484 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   97.724527][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz.1.484 Not tainted syzkaller #0 PREEMPT(full) 
[   97.724540][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.724546][ T7541] Call Trace:
[   97.724550][ T7541]  <TASK>
[   97.724555][ T7541]  dump_stack_lvl+0x100/0x190
[   97.724575][ T7541]  dump_header+0xfb/0x606
[   97.724588][ T7541]  oom_kill_process.cold+0xd/0x380
[   97.724601][ T7541]  out_of_memory+0x340/0x14f0
[   97.724621][ T7541]  ? __pfx_out_of_memory+0x10/0x10
[   97.724641][ T7541]  mem_cgroup_out_of_memory+0xc6/0x130
[   97.724657][ T7541]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   97.724671][ T7541]  ? find_held_lock+0x2b/0x80
[   97.724690][ T7541]  ? do_raw_spin_unlock+0x145/0x1e0
[   97.724706][ T7541]  ? _raw_spin_unlock+0x28/0x50
[   97.724721][ T7541]  try_charge_memcg+0x783/0xf60
[   97.724736][ T7541]  ? __pfx_try_charge_memcg+0x10/0x10
[   97.724747][ T7541]  ? find_held_lock+0x2b/0x80
[   97.724762][ T7541]  ? rcu_read_unlock+0x17/0x60
[   97.724773][ T7541]  ? rcu_read_unlock+0x17/0x60
[   97.724785][ T7541]  ? find_held_lock+0x2b/0x80
[   97.724802][ T7541]  ? rcu_read_unlock+0x17/0x60
[   97.724816][ T7541]  charge_memcg+0x1ae/0x210
[   97.724828][ T7541]  __mem_cgroup_charge+0x2b/0x1c0
[   97.724842][ T7541]  shmem_alloc_and_add_folio+0x451/0xd40
[   97.724857][ T7541]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   97.724869][ T7541]  ? shmem_allowable_huge_orders+0x1d7/0x470
[   97.724884][ T7541]  shmem_get_folio_gfp+0x75b/0x1980
[   97.724899][ T7541]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[   97.724911][ T7541]  ? vm_normal_page+0x1d1/0x380
[   97.724925][ T7541]  ? __pfx_vm_normal_page+0x10/0x10
[   97.724942][ T7541]  shmem_write_begin+0x1a4/0x420
[   97.724956][ T7541]  ? __pfx_shmem_write_begin+0x10/0x10
[   97.724968][ T7541]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[   97.724983][ T7541]  generic_perform_write+0x292/0xa40
[   97.724999][ T7541]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   97.725016][ T7541]  ? __pfx_generic_perform_write+0x10/0x10
[   97.725033][ T7541]  ? file_update_time_flags+0x38c/0x520
[   97.725048][ T7541]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   97.725061][ T7541]  shmem_file_write_iter+0x10e/0x140
[   97.725075][ T7541]  __kernel_write_iter+0x2ac/0x930
[   97.725090][ T7541]  ? __pfx___kernel_write_iter+0x10/0x10
[   97.725104][ T7541]  ? __up_read+0x333/0x980
[   97.725121][ T7541]  ? dump_user_range+0x65e/0xad0
[   97.725138][ T7541]  dump_user_range+0x3f9/0xad0
[   97.725155][ T7541]  ? __pfx_dump_user_range+0x10/0x10
[   97.725174][ T7541]  ? __pfx_writenote+0x10/0x10
[   97.725189][ T7541]  ? elf_core_dump+0x1f25/0x3d20
[   97.725206][ T7541]  elf_core_dump+0x2d68/0x3d20
[   97.725229][ T7541]  ? __pfx_elf_core_dump+0x10/0x10
[   97.725243][ T7541]  ? kasan_save_stack+0x3f/0x50
[   97.725257][ T7541]  ? kasan_save_stack+0x30/0x50
[   97.725271][ T7541]  ? kasan_save_track+0x14/0x30
[   97.725285][ T7541]  ? __kasan_kmalloc+0xaa/0xb0
[   97.725302][ T7541]  ? vfs_coredump+0x21f6/0x54a0
[   97.725315][ T7541]  ? get_signal+0x1f2a/0x21e0
[   97.725327][ T7541]  ? arch_do_signal_or_restart+0x91/0x7e0
[   97.725346][ T7541]  ? 0xffffffffff600000
[   97.725372][ T7541]  ? lock_acquire+0x1d1/0x380
[   97.725384][ T7541]  ? get_signal+0x1f2a/0x21e0
[   97.725401][ T7541]  ? vfs_coredump+0x281a/0x54a0
[   97.725414][ T7541]  vfs_coredump+0x281a/0x54a0
[   97.725433][ T7541]  ? __pfx_vfs_coredump+0x10/0x10
[   97.725447][ T7541]  ? __lock_acquire+0x5c0/0x1f40
[   97.725463][ T7541]  ? __lock_acquire+0x5c0/0x1f40
[   97.725491][ T7541]  ? lock_acquire+0x1d1/0x380
[   97.725503][ T7541]  ? unwind_next_frame+0xbd/0x2090
[   97.725522][ T7541]  ? lock_acquire+0x1d1/0x380
[   97.725538][ T7541]  ? bpf_ksym_find+0x128/0x1c0
[   97.725549][ T7541]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   97.725566][ T7541]  ? arch_stack_walk+0xa6/0xf0
[   97.725585][ T7541]  ? __sigqueue_free+0xbe/0x2a0
[   97.725600][ T7541]  ? stack_trace_save+0x8e/0xc0
[   97.725611][ T7541]  ? __pfx_stack_trace_save+0x10/0x10
[   97.725623][ T7541]  ? stack_depot_save_flags+0x27/0x9f0
[   97.725634][ T7541]  ? __lock_acquire+0x5c0/0x1f40
[   97.725671][ T7541]  ? proc_coredump_connector+0x2d3/0x4f0
[   97.725687][ T7541]  ? __pfx_proc_coredump_connector+0x10/0x10
[   97.725704][ T7541]  ? rcu_is_watching+0x13/0xc0
[   97.725722][ T7541]  get_signal+0x1f2a/0x21e0
[   97.725740][ T7541]  ? __pfx_get_signal+0x10/0x10
[   97.725757][ T7541]  arch_do_signal_or_restart+0x91/0x7e0
[   97.725775][ T7541]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   97.725795][ T7541]  ? cond_local_irq_disable.part.0+0x38/0x40
[   97.725807][ T7541]  ? exc_general_protection+0x120/0x240
[   97.725822][ T7541]  irqentry_exit+0x402/0xa10
[   97.725839][ T7541]  asm_exc_general_protection+0x26/0x30
[   97.725851][ T7541] RIP: 0033:0x7f28f0f9e561
[   97.725861][ T7541] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[   97.725871][ T7541] RSP: 002b:0000200000000140 EFLAGS: 00010217
[   97.725881][ T7541] RAX: 0000000000000000 RBX: 00007f28f1225fa0 RCX: 00007f28f0f9e559
[   97.725888][ T7541] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000040000
[   97.725894][ T7541] RBP: 00007f28f10358b0 R08: 0000000000000000 R09: 0000000000000000
[   97.725901][ T7541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   97.725907][ T7541] R13: 00007f28f1226038 R14: 00007f28f1225fa0 R15: 00007ffedfe4cfb8
[   97.725922][ T7541]  </TASK>
[   97.738028][ T7541] memory: usage 307200kB, limit 307200kB, failcnt 20206
[   97.738041][ T7541] memory+swap: usage 431976kB, limit 9007199254740988kB, failcnt 0
[   97.738048][ T7541] kmem: usage 4552kB, limit 9007199254740988kB, failcnt 0
[   97.738054][ T7541] Memory cgroup stats for /syz1:
[   97.738488][ T7541] cache 309649408
[   97.738493][ T7541] rss 253952
[   97.738497][ T7541] rss_huge 0
[   97.738501][ T7541] shmem 309649408
[   97.738504][ T7541] mapped_file 124137472
[   97.738508][ T7541] dirty 0
[   97.738512][ T7541] writeback 0
[   97.738516][ T7541] workingset_refault_anon 0
[   97.738520][ T7541] workingset_refault_file 0
[   97.738524][ T7541] swap 127770624
[   97.738527][ T7541] swapcached 127770624
[   97.738531][ T7541] pgpgin 118868
[   97.738535][ T7541] pgpgout 43208
[   97.738539][ T7541] pgfault 55971
[   97.738542][ T7541] pgmajfault 9
[   97.738546][ T7541] inactive_anon 125140992
[   97.738550][ T7541] active_anon 184762368
[   97.738554][ T7541] inactive_file 0
[   97.738557][ T7541] active_file 0
[   97.738561][ T7541] unevictable 0
[   97.738565][ T7541] hierarchical_memory_limit 314572800
[   97.738570][ T7541] hierarchical_memsw_limit 9223372036854771712
[   97.738574][ T7541] total_cache 309649408
[   97.738578][ T7541] total_rss 253952
[   97.738582][ T7541] total_rss_huge 0
[   97.738586][ T7541] total_shmem 309649408
[   97.738590][ T7541] total_mapped_file 124137472
[   97.738594][ T7541] total_dirty 0
[   97.738597][ T7541] total_writeback 0
[   97.738601][ T7541] total_workingset_refault_anon 0
[   97.738605][ T7541] total_workingset_refault_file 0
[   97.738609][ T7541] total_swap 127770624
[   97.738613][ T7541] total_swapcached 127770624
[   97.738617][ T7541] total_pgpgin 118868
[   97.738621][ T7541] total_pgpgout 43208
[   97.738625][ T7541] total_pgfault 55971
[   97.738628][ T7541] total_pgmajfault 9
[   97.738632][ T7541] total_inactive_anon 125140992
[   97.738636][ T7541] total_active_anon 184762368
[   97.738640][ T7541] total_inactive_file 0
[   97.738644][ T7541] total_active_file 0
[   97.738648][ T7541] total_unevictable 0
[   97.738652][ T7541] anon_cost 0
[   97.738656][ T7541] file_cost 0
[   97.738660][ T7541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.484,pid=7541,uid=0
[   97.738781][ T7541] Memory cgroup out of memory: Killed process 7541 (syz.1.484) total-vm:212992kB, anon-rss:1312kB, file-rss:20548kB, shmem-rss:119552kB, UID:0 pgtables:356kB oom_score_adj:1000
[   97.764049][ T7605] syz.1.505 invoked oom-killer: gfp_mask=0x2dc0(GFP_KERNEL|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   97.764074][ T7605] CPU: 3 UID: 0 PID: 7605 Comm: syz.1.505 Not tainted syzkaller #0 PREEMPT(full) 
[   97.764086][ T7605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.764093][ T7605] Call Trace:
[   97.764097][ T7605]  <TASK>
[   97.764102][ T7605]  dump_stack_lvl+0x100/0x190
[   97.764123][ T7605]  dump_header+0xfb/0x606
[   97.764136][ T7605]  oom_kill_process.cold+0xd/0x380
[   97.764150][ T7605]  out_of_memory+0x340/0x14f0
[   97.764170][ T7605]  ? __pfx_out_of_memory+0x10/0x10
[   97.764195][ T7605]  mem_cgroup_out_of_memory+0xc6/0x130
[   97.764211][ T7605]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   97.764224][ T7605]  ? find_held_lock+0x2b/0x80
[   97.764244][ T7605]  ? do_raw_spin_unlock+0x145/0x1e0
[   97.764260][ T7605]  ? _raw_spin_unlock+0x28/0x50
[   97.764275][ T7605]  try_charge_memcg+0x783/0xf60
[   97.764290][ T7605]  ? __pfx_try_charge_memcg+0x10/0x10
[   97.764302][ T7605]  ? find_held_lock+0x2b/0x80
[   97.764318][ T7605]  ? rcu_read_unlock+0x17/0x60
[   97.764330][ T7605]  ? rcu_read_unlock+0x17/0x60
[   97.764345][ T7605]  obj_cgroup_charge_pages+0x2b/0x1f0
[   97.764359][ T7605]  __memcg_slab_post_alloc_hook+0x47f/0x10c0
[   97.764375][ T7605]  ? kasan_save_track+0x14/0x30
[   97.764392][ T7605]  kmem_cache_alloc_bulk_noprof+0x5e4/0x890
[   97.764409][ T7605]  ? kmem_cache_alloc_bulk_noprof+0x9d/0x890
[   97.764427][ T7605]  __io_alloc_req_refill+0x9e/0x330
[   97.764440][ T7605]  ? __pfx___io_alloc_req_refill+0x10/0x10
[   97.764459][ T7605]  io_submit_sqes.cold+0xf6/0x301
[   97.764490][ T7605]  __do_sys_io_uring_enter+0xa88/0x1b10
[   97.764510][ T7605]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   97.764528][ T7605]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[   97.764547][ T7605]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[   97.764562][ T7605]  ? xfd_validate_state+0x129/0x190
[   97.764574][ T7605]  ? exit_to_user_mode_loop+0x166/0x700
[   97.764594][ T7605]  do_syscall_64+0x123/0x790
[   97.764611][ T7605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.764623][ T7605] RIP: 0033:0x7f28f0f9e559
[   97.764633][ T7605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.764644][ T7605] RSP: 002b:00007f28f1e9ff38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   97.764655][ T7605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f28f0f9e559
[   97.764662][ T7605] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005
[   97.764668][ T7605] RBP: 00000000000002af R08: 0000000000000000 R09: 0000000000000008
[   97.764675][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000780
[   97.764681][ T7605] R13: 0000200000000788 R14: 000000000000048f R15: 0000000000000000
[   97.764696][ T7605]  </TASK>
[   97.765496][ T7605] memory: usage 307200kB, limit 307200kB, failcnt 20262
[   97.765507][ T7605] memory+swap: usage 431976kB, limit 9007199254740988kB, failcnt 0
[   97.765514][ T7605] kmem: usage 4552kB, limit 9007199254740988kB, failcnt 0
[   97.765521][ T7605] Memory cgroup stats for /syz1:
[   97.765615][ T7605] cache 309649408
[   97.765620][ T7605] rss 253952
[   97.765624][ T7605] rss_huge 0
[   97.765627][ T7605] shmem 309649408
[   97.765631][ T7605] mapped_file 121200640
[   97.765635][ T7605] dirty 0
[   97.765639][ T7605] writeback 0
[   97.765643][ T7605] workingset_refault_anon 0
[   97.765647][ T7605] workingset_refault_file 0
[   97.765651][ T7605] swap 127770624
[   97.765655][ T7605] swapcached 127770624
[   97.765659][ T7605] pgpgin 118868
[   97.765662][ T7605] pgpgout 43208
[   97.765666][ T7605] pgfault 55972
[   97.765670][ T7605] pgmajfault 9
[   97.765674][ T7605] inactive_anon 125140992
[   97.765678][ T7605] active_anon 184762368
[   97.765682][ T7605] inactive_file 0
[   97.765686][ T7605] active_file 0
[   97.765689][ T7605] unevictable 0
[   97.765693][ T7605] hierarchical_memory_limit 314572800
[   97.765697][ T7605] hierarchical_memsw_limit 9223372036854771712
[   97.765702][ T7605] total_cache 309649408
[   97.765706][ T7605] total_rss 253952
[   97.765710][ T7605] total_rss_huge 0
[   97.765714][ T7605] total_shmem 309649408
[   97.765718][ T7605] total_mapped_file 121200640
[   97.765722][ T7605] total_dirty 0
[   97.765726][ T7605] total_writeback 0
[   97.765730][ T7605] total_workingset_refault_anon 0
[   97.765734][ T7605] total_workingset_refault_file 0
[   97.765739][ T7605] total_swap 127770624
[   97.765742][ T7605] total_swapcached 127770624
[   97.765747][ T7605] total_pgpgin 118868
[   97.765750][ T7605] total_pgpgout 43208
[   97.765754][ T7605] total_pgfault 55972
[   97.765758][ T7605] total_pgmajfault 9
[   97.765762][ T7605] total_inactive_anon 125140992
[   97.765766][ T7605] total_active_anon 184762368
[   97.765770][ T7605] total_inactive_file 0
[   97.765774][ T7605] total_active_file 0
[   97.765778][ T7605] total_unevictable 0
[   97.765782][ T7605] anon_cost 0
[   97.765786][ T7605] file_cost 0
[   97.765790][ T7605] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.505,pid=7600,uid=0
[   97.768087][ T7605] Memory cgroup out of memory: Killed process 7600 (syz.1.505) total-vm:213284kB, anon-rss:1448kB, file-rss:22100kB, shmem-rss:8kB, UID:0 pgtables:144kB oom_score_adj:1000
[   97.821779][   T43] audit: type=1400 audit(1792142969.323:652): avc:  denied  { write } for  pid=7646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.909645][   T43] audit: type=1400 audit(1792142969.413:653): avc:  denied  { write } for  pid=7654 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.945604][ T7652] smbdirect: ib_dev[rxe0] renamed to [syz0]
[   97.957748][ T7652] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   98.004529][ T7666] sctp: [Deprecated]: syz.3.522 (pid 7666) Use of int in max_burst socket option deprecated.
[   98.004529][ T7666] Use struct sctp_assoc_value instead
[   98.043918][   T43] audit: type=1400 audit(1792142969.553:654): avc:  denied  { write } for  pid=7667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   98.086833][ T7671] binder: 7669:7671 ioctl c0d05605 200000000940 returned -22
[   98.094843][   T43] audit: type=1400 audit(1792142969.603:655): avc:  denied  { write } for  pid=7669 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   98.125738][ T7676] trusted_key: encrypted_key: insufficient parameters specified
[   98.131936][ T7676] trusted_key: encrypted_key: insufficient parameters specified
[   98.219830][ T7673] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[   98.219854][ T7673] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[   98.337246][ T7694] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   98.343472][ T7696] sctp: [Deprecated]: syz.1.532 (pid 7696) Use of int in max_burst socket option deprecated.
[   98.343472][ T7696] Use struct sctp_assoc_value instead
[   98.374569][ T7699] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[   98.508466][ T7534] syz.1.484 (7534) used greatest stack depth: 17280 bytes left
[   98.520277][ T7709] tipc: Started in network mode
[   98.520299][ T7709] tipc: Node identity 320627863847, cluster identity 4711
[   98.525450][ T7709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.563388][ T5729] Bluetooth: hci1: command tx timeout
[   98.578405][ T7713] rxe_eth0 speed is unknown, defaulting to 1000
[   98.603955][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'.
[   98.938794][ T7732] sctp: [Deprecated]: syz.4.543 (pid 7732) Use of int in max_burst socket option deprecated.
[   98.938794][ T7732] Use struct sctp_assoc_value instead
[   99.160523][ T7737] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.175308][ T7736] netlink: 48 bytes leftover after parsing attributes in process `syz.3.544'.
[   99.248021][ T7737] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.329763][ T7737] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.381281][ T7737] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.485843][ T7762] sctp: [Deprecated]: syz.4.554 (pid 7762) Use of int in max_burst socket option deprecated.
[   99.485843][ T7762] Use struct sctp_assoc_value instead
[   99.515312][ T1690] tipc: Node number set to 172042118
[   99.619581][ T7786] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in;
[   99.619581][ T7786]    program syz.3.564 not setting count and/or reply_len properly
[   99.622377][ T7787] netlink: 'syz.3.564': attribute type 2 has an invalid length.
[   99.622392][ T7787] netlink: 180 bytes leftover after parsing attributes in process `syz.3.564'.
[   99.645303][ T7789] sctp: [Deprecated]: syz.3.565 (pid 7789) Use of int in max_burst socket option deprecated.
[   99.645303][ T7789] Use struct sctp_assoc_value instead
[   99.647650][ T7785] fuse: Bad value for 'fd'
[   99.678258][ T7792] binder: 7790:7792 ioctl d000943d 200000000c40 returned -22
[   99.678466][ T7792] binder: 7790:7792 ioctl d0009412 0 returned -22
[   99.723294][ T7796] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   99.724347][ T7799] FAULT_INJECTION: forcing a failure.
[   99.724347][ T7799] name failslab, interval 1, probability 0, space 0, times 0
[   99.724366][ T7799] CPU: 3 UID: 0 PID: 7799 Comm: syz.4.569 Not tainted syzkaller #0 PREEMPT(full) 
[   99.724379][ T7799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   99.724385][ T7799] Call Trace:
[   99.724390][ T7799]  <TASK>
[   99.724394][ T7799]  dump_stack_lvl+0x100/0x190
[   99.724424][ T7799]  should_fail_ex.cold+0x5/0xa
[   99.724441][ T7799]  should_failslab+0xc2/0x120
[   99.724459][ T7799]  __kvmalloc_node_noprof+0x113/0x9b0
[   99.724474][ T7799]  ? __pfx___mutex_lock+0x10/0x10
[   99.724490][ T7799]  ? nf_hook_entries_grow+0x6b9/0x870
[   99.724509][ T7799]  nf_hook_entries_grow+0x6b9/0x870
[   99.724526][ T7799]  ? __kasan_kmalloc+0xaa/0xb0
[   99.724545][ T7799]  __nf_register_net_hook+0x112/0x780
[   99.724565][ T7799]  nf_register_net_hook+0xdb/0x170
[   99.724582][ T7799]  nf_register_net_hooks+0x5d/0xd0
[   99.724600][ T7799]  xt_register_table+0x48f/0x9a0
[   99.724619][ T7799]  ? __pfx_xt_register_table+0x10/0x10
[   99.724634][ T7799]  ? xt_alloc_table_info+0x44/0xa0
[   99.724648][ T7799]  ? __asan_memset+0x23/0x50
[   99.724663][ T7799]  ipt_register_table+0x137/0x2b0
[   99.724686][ T7799]  ? __pfx_ipt_register_table+0x10/0x10
[   99.724701][ T7799]  ? __kmalloc_noprof+0x350/0x840
[   99.724719][ T7799]  ? ipt_alloc_initial_table+0x5b8/0x700
[   99.724737][ T7799]  iptable_filter_table_init+0x75/0xa0
[   99.724754][ T7799]  xt_find_table_lock+0x2db/0x520
[   99.724771][ T7799]  do_ipt_get_ctl+0x586/0xbf0
[   99.724788][ T7799]  ? __mutex_unlock_slowpath+0x35d/0x930
[   99.724806][ T7799]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[   99.724822][ T7799]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   99.724844][ T7799]  ? nf_sockopt_find.isra.0+0x222/0x290
[   99.724858][ T7799]  nf_getsockopt+0x7c/0xe0
[   99.724871][ T7799]  ip_getsockopt+0x192/0x1e0
[   99.724888][ T7799]  ? __pfx_ip_getsockopt+0x10/0x10
[   99.724902][ T7799]  ? lock_acquire+0x1d1/0x380
[   99.724915][ T7799]  ? __might_fault+0xc5/0x140
[   99.724926][ T7799]  ? find_held_lock+0x2b/0x80
[   99.724945][ T7799]  udp_getsockopt+0xc0/0x240
[   99.724959][ T7799]  ? __pfx_udp_getsockopt+0x10/0x10
[   99.724975][ T7799]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[   99.724993][ T7799]  ? __pfx_sock_common_getsockopt+0x10/0x10
[   99.725007][ T7799]  do_sock_getsockopt+0x50a/0x6e0
[   99.725024][ T7799]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   99.725041][ T7799]  ? __fget_files+0x34/0x3d0
[   99.725057][ T7799]  ? find_held_lock+0x2b/0x80
[   99.725077][ T7799]  ? __fget_files+0x21f/0x3d0
[   99.725095][ T7799]  __sys_getsockopt+0x148/0x260
[   99.725109][ T7799]  ? __x64_sys_getsockopt+0xbd/0x160
[   99.725120][ T7799]  __x64_sys_getsockopt+0xbd/0x160
[   99.725129][ T7799]  ? do_syscall_64+0xae/0x790
[   99.725144][ T7799]  ? lockdep_hardirqs_on+0x7d/0x110
[   99.725159][ T7799]  do_syscall_64+0x123/0x790
[   99.725176][ T7799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.725187][ T7799] RIP: 0033:0x7f9b4159e559
[   99.725197][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.725207][ T7799] RSP: 002b:00007f9b424cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   99.725219][ T7799] RAX: ffffffffffffffda RBX: 00007f9b41825fa0 RCX: 00007f9b4159e559
[   99.725226][ T7799] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000004
[   99.725232][ T7799] RBP: 00007f9b416358b0 R08: 00002000000001c0 R09: 0000000000000000
[   99.725239][ T7799] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[   99.725245][ T7799] R13: 00007f9b41826038 R14: 00007f9b41825fa0 R15: 00007ffedcef4e18
[   99.725260][ T7799]  </TASK>
[   99.729270][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'.
[   99.730735][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'.
[   99.847158][ T7813] sctp: [Deprecated]: syz.2.575 (pid 7813) Use of int in max_burst socket option deprecated.
[   99.847158][ T7813] Use struct sctp_assoc_value instead
[   99.913185][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'.
[   99.913220][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'.
[  100.141493][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  100.141517][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  100.141532][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  100.141546][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  100.141561][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  100.141575][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  100.141591][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  100.141605][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  100.141620][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  100.142210][ T7839] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  100.142229][ T7839] jffs2: Further such events for this erase block will not be printed
[  100.142777][ T7839] jffs2: notice: (7839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  100.142817][ T7839] FAULT_INJECTION: forcing a failure.
[  100.142817][ T7839] name failslab, interval 1, probability 0, space 0, times 0
[  100.142840][ T7839] CPU: 3 UID: 0 PID: 7839 Comm: syz.4.586 Not tainted syzkaller #0 PREEMPT(full) 
[  100.142860][ T7839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.142871][ T7839] Call Trace:
[  100.142877][ T7839]  <TASK>
[  100.142885][ T7839]  dump_stack_lvl+0x100/0x190
[  100.142919][ T7839]  should_fail_ex.cold+0x5/0xa
[  100.142946][ T7839]  should_failslab+0xc2/0x120
[  100.142977][ T7839]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  100.143001][ T7839]  ? jffs2_alloc_inode+0x25/0x50
[  100.143030][ T7839]  ? __pfx_jffs2_alloc_inode+0x10/0x10
[  100.143058][ T7839]  jffs2_alloc_inode+0x25/0x50
[  100.143085][ T7839]  alloc_inode+0x68/0x250
[  100.143108][ T7839]  iget_locked+0x1d9/0x6d0
[  100.143131][ T7839]  ? __pfx_iget_locked+0x10/0x10
[  100.143155][ T7839]  ? rotate_list+0x250/0x300
[  100.143184][ T7839]  jffs2_iget+0xb5/0xe30
[  100.143213][ T7839]  ? jffs2_do_mount_fs+0x7e9/0x2300
[  100.143240][ T7839]  ? __pfx_jffs2_iget+0x10/0x10
[  100.143271][ T7839]  ? __raw_spin_lock_init+0x3a/0x110
[  100.143299][ T7839]  ? __init_rwsem+0x10e/0x180
[  100.143342][ T7839]  jffs2_do_fill_super+0x44b/0xa50
[  100.143375][ T7839]  jffs2_fill_super+0x283/0x370
[  100.143401][ T7839]  ? __pfx_get_mtd_device+0x10/0x10
[  100.143432][ T7839]  ? __pfx_jffs2_fill_super+0x10/0x10
[  100.143460][ T7839]  mtd_get_sb+0x2f0/0x4c0
[  100.143481][ T7839]  ? __pfx_jffs2_fill_super+0x10/0x10
[  100.143508][ T7839]  get_tree_mtd+0x6f9/0x8a0
[  100.143529][ T7839]  ? __pfx_get_tree_mtd+0x10/0x10
[  100.143549][ T7839]  ? cap_capable+0x107/0x430
[  100.143574][ T7839]  ? bpf_lsm_capable+0x9/0x10
[  100.143591][ T7839]  ? security_capable+0x80/0x260
[  100.143616][ T7839]  vfs_get_tree+0x92/0x320
[  100.143635][ T7839]  path_mount+0x7d0/0x2850
[  100.143659][ T7839]  ? __pfx_path_mount+0x10/0x10
[  100.143677][ T7839]  ? lockdep_hardirqs_on+0x7d/0x110
[  100.143706][ T7839]  ? putname+0xb1/0x110
[  100.143721][ T7839]  ? kmem_cache_free+0x127/0x6c0
[  100.143750][ T7839]  ? __x64_sys_mount+0x293/0x310
[  100.143768][ T7839]  __x64_sys_mount+0x293/0x310
[  100.143788][ T7839]  ? __pfx___x64_sys_mount+0x10/0x10
[  100.143816][ T7839]  do_syscall_64+0x123/0x790
[  100.143845][ T7839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.143864][ T7839] RIP: 0033:0x7f9b4159e559
[  100.143880][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.143897][ T7839] RSP: 002b:00007f9b424cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  100.143915][ T7839] RAX: ffffffffffffffda RBX: 00007f9b41825fa0 RCX: 00007f9b4159e559
[  100.143927][ T7839] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940
[  100.143938][ T7839] RBP: 00007f9b416358b0 R08: 0000000000000000 R09: 0000000000000000
[  100.143949][ T7839] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000
[  100.143960][ T7839] R13: 00007f9b41826038 R14: 00007f9b41825fa0 R15: 00007ffedcef4e18
[  100.143986][ T7839]  </TASK>
[  100.157657][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  100.157672][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  100.157681][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  100.157699][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  100.157707][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  100.157716][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  100.157724][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  100.157732][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  100.157741][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  100.157749][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  100.157757][ T7841] jffs2: Further such events for this erase block will not be printed
[  100.158025][ T7841] FAULT_INJECTION: forcing a failure.
[  100.158025][ T7841] name failslab, interval 1, probability 0, space 0, times 0
[  100.158040][ T7841] CPU: 2 UID: 0 PID: 7841 Comm: syz.1.587 Not tainted syzkaller #0 PREEMPT(full) 
[  100.158054][ T7841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.158062][ T7841] Call Trace:
[  100.158066][ T7841]  <TASK>
[  100.158071][ T7841]  dump_stack_lvl+0x100/0x190
[  100.158092][ T7841]  should_fail_ex.cold+0x5/0xa
[  100.158109][ T7841]  should_failslab+0xc2/0x120
[  100.158126][ T7841]  kmem_cache_alloc_noprof+0x92/0x6a0
[  100.158141][ T7841]  ? jffs2_prealloc_raw_node_refs+0x1db/0x370
[  100.158184][ T7841]  jffs2_prealloc_raw_node_refs+0x1db/0x370
[  100.158200][ T7841]  jffs2_scan_medium+0x5e4/0x59c0
[  100.158223][ T7841]  ? __pfx_jffs2_scan_medium+0x10/0x10
[  100.158238][ T7841]  ? trace_kmalloc+0xeb/0x110
[  100.158254][ T7841]  ? __kasan_kmalloc+0xaa/0xb0
[  100.158270][ T7841]  ? __kmalloc_noprof+0x350/0x840
[  100.158285][ T7841]  ? jffs2_sum_init+0xc4/0x1b0
[  100.158303][ T7841]  jffs2_do_mount_fs+0x8a0/0x2300
[  100.158321][ T7841]  ? rcu_is_watching+0x13/0xc0
[  100.158342][ T7841]  ? trace_kmalloc+0xeb/0x110
[  100.158358][ T7841]  ? lockdep_init_map_type+0x5c/0x250
[  100.158373][ T7841]  ? __pfx_jffs2_do_mount_fs+0x10/0x10
[  100.158388][ T7841]  ? __raw_spin_lock_init+0x3a/0x110
[  100.158405][ T7841]  ? __init_rwsem+0x10e/0x180
[  100.158422][ T7841]  jffs2_do_fill_super+0x3d4/0xa50
[  100.158441][ T7841]  jffs2_fill_super+0x283/0x370
[  100.158457][ T7841]  ? __pfx_get_mtd_device+0x10/0x10
[  100.158474][ T7841]  ? __pfx_jffs2_fill_super+0x10/0x10
[  100.158490][ T7841]  mtd_get_sb+0x2f0/0x4c0
[  100.158515][ T7841]  ? __pfx_jffs2_fill_super+0x10/0x10
[  100.158532][ T7841]  get_tree_mtd+0x6f9/0x8a0
[  100.158543][ T7841]  ? __pfx_get_tree_mtd+0x10/0x10
[  100.158554][ T7841]  ? cap_capable+0x107/0x430
[  100.158569][ T7841]  ? bpf_lsm_capable+0x9/0x10
[  100.158579][ T7841]  ? security_capable+0x80/0x260
[  100.158593][ T7841]  vfs_get_tree+0x92/0x320
[  100.158605][ T7841]  path_mount+0x7d0/0x2850
[  100.158620][ T7841]  ? __pfx_path_mount+0x10/0x10
[  100.158630][ T7841]  ? lockdep_hardirqs_on+0x7d/0x110
[  100.158648][ T7841]  ? putname+0xb1/0x110
[  100.158657][ T7841]  ? kmem_cache_free+0x127/0x6c0
[  100.158673][ T7841]  ? __x64_sys_mount+0x293/0x310
[  100.158684][ T7841]  __x64_sys_mount+0x293/0x310
[  100.158696][ T7841]  ? __pfx___x64_sys_mount+0x10/0x10
[  100.158712][ T7841]  do_syscall_64+0x123/0x790
[  100.158728][ T7841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.158740][ T7841] RIP: 0033:0x7f28f0f9e559
[  100.158750][ T7841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.158760][ T7841] RSP: 002b:00007f28f1ea0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  100.158771][ T7841] RAX: ffffffffffffffda RBX: 00007f28f1225fa0 RCX: 00007f28f0f9e559
[  100.158778][ T7841] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940
[  100.158785][ T7841] RBP: 00007f28f10358b0 R08: 0000000000000000 R09: 0000000000000000
[  100.158791][ T7841] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000
[  100.158798][ T7841] R13: 00007f28f1226038 R14: 00007f28f1225fa0 R15: 00007ffedfe4cfb8
[  100.158812][ T7841]  </TASK>
[  100.249359][ T7849] overlayfs: failed to resolve './bus/file0': -2
[  100.327778][ T7844] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  100.327883][ T7844] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  100.349347][ T7844] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  100.360064][ T7844] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  100.360155][ T7844] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  100.368312][ T7844] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  100.374897][ T7844] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  100.374975][ T7844] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  100.382264][ T7844] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  100.390710][ T7844] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  100.390764][ T7844] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  100.397923][ T7844] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  100.522040][ T7865] netlink: 'syz.3.595': attribute type 8 has an invalid length.
[  100.781750][   T63] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  100.806719][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  100.806749][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  100.806764][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  100.806779][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  100.806792][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  100.806807][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  100.806821][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  100.806835][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  100.806849][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  100.806863][ T7867] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  100.806878][ T7867] jffs2: Further such events for this erase block will not be printed
[  100.807222][ T7867] FAULT_INJECTION: forcing a failure.
[  100.807222][ T7867] name failslab, interval 1, probability 0, space 0, times 0
[  100.807239][ T7867] CPU: 2 UID: 0 PID: 7867 Comm: syz.2.596 Not tainted syzkaller #0 PREEMPT(full) 
[  100.807253][ T7867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.807260][ T7867] Call Trace:
[  100.807264][ T7867]  <TASK>
[  100.807270][ T7867]  dump_stack_lvl+0x100/0x190
[  100.807289][ T7867]  should_fail_ex.cold+0x5/0xa
[  100.807305][ T7867]  should_failslab+0xc2/0x120
[  100.807323][ T7867]  __kmalloc_cache_noprof+0x91/0x6d0
[  100.807336][ T7867]  ? jffs2_build_xattr_subsystem+0x105/0x16d0
[  100.807354][ T7867]  jffs2_build_xattr_subsystem+0x105/0x16d0
[  100.807372][ T7867]  ? __pfx_jffs2_build_xattr_subsystem+0x10/0x10
[  100.807389][ T7867]  ? __pfx___might_resched+0x10/0x10
[  100.807400][ T7867]  ? kfree+0x22b/0x6d0
[  100.807413][ T7867]  jffs2_do_mount_fs+0x16b7/0x2300
[  100.807432][ T7867]  ? lockdep_init_map_type+0x5c/0x250
[  100.807446][ T7867]  ? __pfx_jffs2_do_mount_fs+0x10/0x10
[  100.807459][ T7867]  ? __raw_spin_lock_init+0x3a/0x110
[  100.807475][ T7867]  ? __init_rwsem+0x10e/0x180
[  100.807491][ T7867]  jffs2_do_fill_super+0x3d4/0xa50
[  100.807509][ T7867]  jffs2_fill_super+0x283/0x370
[  100.807524][ T7867]  ? __pfx_get_mtd_device+0x10/0x10
[  100.807540][ T7867]  ? __pfx_jffs2_fill_super+0x10/0x10
[  100.807556][ T7867]  mtd_get_sb+0x2f0/0x4c0
[  100.807567][ T7867]  ? __pfx_jffs2_fill_super+0x10/0x10
[  100.807582][ T7867]  get_tree_mtd+0x6f9/0x8a0
[  100.807594][ T7867]  ? __pfx_get_tree_mtd+0x10/0x10
[  100.807605][ T7867]  ? cap_capable+0x107/0x430
[  100.807619][ T7867]  ? bpf_lsm_capable+0x9/0x10
[  100.807630][ T7867]  ? security_capable+0x80/0x260
[  100.807645][ T7867]  vfs_get_tree+0x92/0x320
[  100.807657][ T7867]  path_mount+0x7d0/0x2850
[  100.807671][ T7867]  ? __pfx_path_mount+0x10/0x10
[  100.807681][ T7867]  ? lockdep_hardirqs_on+0x7d/0x110
[  100.807698][ T7867]  ? putname+0xb1/0x110
[  100.807707][ T7867]  ? kmem_cache_free+0x127/0x6c0
[  100.807723][ T7867]  ? __x64_sys_mount+0x293/0x310
[  100.807755][ T7867]  __x64_sys_mount+0x293/0x310
[  100.807768][ T7867]  ? __pfx___x64_sys_mount+0x10/0x10
[  100.807785][ T7867]  do_syscall_64+0x123/0x790
[  100.807803][ T7867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.807816][ T7867] RIP: 0033:0x7facd999e559
[  100.807827][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.807837][ T7867] RSP: 002b:00007facda8c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  100.807848][ T7867] RAX: ffffffffffffffda RBX: 00007facd9c25fa0 RCX: 00007facd999e559
[  100.807855][ T7867] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940
[  100.807862][ T7867] RBP: 00007facd9a358b0 R08: 0000000000000000 R09: 0000000000000000
[  100.807868][ T7867] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000
[  100.807875][ T7867] R13: 00007facd9c26038 R14: 00007facd9c25fa0 R15: 00007ffe5d5b5b78
[  100.807890][ T7867]  </TASK>
[  100.850100][ T7869] binder: Binderfs stats mode cannot be changed during a remount
[  100.977972][   T63] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  100.993726][   T63] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10
[  100.993754][   T63] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64
[  100.993775][   T63] usb 8-1: config 0 interface 0 has no altsetting 0
[  100.995599][   T63] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  100.995617][   T63] usb 8-1: Product: syz
[  100.995629][   T63] usb 8-1: Manufacturer: syz
[  100.995640][   T63] usb 8-1: SerialNumber: syz
[  101.002289][   T63] usb 8-1: config 0 descriptor??
[  101.003063][ T7865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  101.008274][   T63] usb 8-1: selecting invalid altsetting 0
[  101.207604][ T7865] misc userio: No port type given on /dev/userio
[  101.216471][ T5880] usb 8-1: USB disconnect, device number 14
[  101.411827][ T1690] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  101.581765][ T5775] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  101.581871][ T1690] usb 9-1: Using ep0 maxpacket: 8
[  101.582656][ T1690] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  101.583433][ T1690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.589620][ T1690] pvrusb2: Hardware description: Terratec Grabster AV400
[  101.589630][ T1690] pvrusb2: **********
[  101.589633][ T1690] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  101.589639][ T1690] pvrusb2: Important functionality might not be entirely working.
[  101.589642][ T1690] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  101.589647][ T1690] pvrusb2: **********
[  101.742409][ T5775] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  101.743397][ T5775] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  101.743421][ T5775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.789794][ T2505] pvrusb2: Invalid write control endpoint
[  101.820449][ T2505] pvrusb2: Invalid write control endpoint
[  101.820459][ T2505] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  101.820463][ T2505] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  101.820467][ T2505] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  101.820472][ T2505] pvrusb2: Device being rendered inoperable
[  101.821854][ T2505] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  101.821879][ T2505] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  101.822285][ T2505] pvrusb2: Attached sub-driver cx25840
[  101.822291][ T2505] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  101.822296][ T2505] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  101.879343][ T7894] net_ratelimit: 15 callbacks suppressed
[  101.879356][ T7894] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  101.879673][ T7894] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  101.879947][ T7894] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  101.880152][ T7894] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  101.883295][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  101.883311][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  101.883320][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  101.883334][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  101.883346][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  101.883359][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  101.883371][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  101.883384][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  101.883397][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  101.883409][ T7894] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  101.883418][ T7894] jffs2: Further such events for this erase block will not be printed
[  101.883740][ T7894] jffs2: notice: (7894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  101.989550][ T7883] pvrusb2: Attempted to execute control transfer when device not ok
[  101.989870][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'.
[  101.990625][ T1690] usb 9-1: USB disconnect, device number 3
[  102.234803][ T7904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7904 comm=syz.2.609
[  102.311848][ T5729] Bluetooth: hci2: command 0x0c1a tx timeout
[  102.391905][ T5729] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.392292][ T5729] Bluetooth: hci0: command 0x0c1a tx timeout
[  102.393472][ T5729] Bluetooth: hci3: command 0x0c1a tx timeout
[  102.647277][   T43] kauditd_printk_skb: 17 callbacks suppressed
[  102.647294][   T43] audit: type=1400 audit(1792142974.153:673): avc:  denied  { accept } for  pid=7917 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  102.726754][ T7923] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  102.727161][ T7923] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  102.727533][ T7923] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  102.727816][ T7923] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  102.731505][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  102.731526][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  102.731540][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  102.731553][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  102.731568][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  102.731581][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  102.731595][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  102.731607][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  102.731620][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  102.731925][ T7923] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  102.731941][ T7923] jffs2: Further such events for this erase block will not be printed
[  102.732456][ T7923] jffs2: notice: (7923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  102.732579][ T7923] FAULT_INJECTION: forcing a failure.
[  102.732579][ T7923] name failslab, interval 1, probability 0, space 0, times 0
[  102.732602][ T7923] CPU: 2 UID: 0 PID: 7923 Comm: syz.3.615 Not tainted syzkaller #0 PREEMPT(full) 
[  102.732624][ T7923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  102.732635][ T7923] Call Trace:
[  102.732643][ T7923]  <TASK>
[  102.732649][ T7923]  dump_stack_lvl+0x100/0x190
[  102.732682][ T7923]  should_fail_ex.cold+0x5/0xa
[  102.732709][ T7923]  should_failslab+0xc2/0x120
[  102.732737][ T7923]  __kmalloc_noprof+0xfc/0x840
[  102.732760][ T7923]  ? lockdep_hardirqs_on+0x7d/0x110
[  102.732785][ T7923]  ? jffs2_do_read_inode_internal+0xe97/0x4ac0
[  102.732815][ T7923]  jffs2_do_read_inode_internal+0xe97/0x4ac0
[  102.732849][ T7923]  ? look_up_lock_class+0x64/0x120
[  102.732877][ T7923]  ? __lock_acquire+0x5c0/0x1f40
[  102.732903][ T7923]  ? __pfx_jffs2_do_read_inode_internal+0x10/0x10
[  102.732926][ T7923]  ? jffs2_iget+0x2f3/0xe30
[  102.732955][ T7923]  ? lock_acquire+0x1d1/0x380
[  102.732981][ T7923]  ? jffs2_do_read_inode+0x173/0x520
[  102.733008][ T7923]  jffs2_do_read_inode+0x1b3/0x520
[  102.733034][ T7923]  ? __pfx_jffs2_do_read_inode+0x10/0x10
[  102.733058][ T7923]  ? __pfx_iget_locked+0x10/0x10
[  102.733081][ T7923]  ? rotate_list+0x250/0x300
[  102.733107][ T7923]  jffs2_iget+0x32b/0xe30
[  102.733129][ T7923]  ? jffs2_do_mount_fs+0x7e9/0x2300
[  102.733154][ T7923]  ? __pfx_jffs2_iget+0x10/0x10
[  102.733183][ T7923]  ? __raw_spin_lock_init+0x3a/0x110
[  102.733209][ T7923]  ? __init_rwsem+0x10e/0x180
[  102.733236][ T7923]  jffs2_do_fill_super+0x44b/0xa50
[  102.733265][ T7923]  jffs2_fill_super+0x283/0x370
[  102.733289][ T7923]  ? __pfx_get_mtd_device+0x10/0x10
[  102.733316][ T7923]  ? __pfx_jffs2_fill_super+0x10/0x10
[  102.733341][ T7923]  mtd_get_sb+0x2f0/0x4c0
[  102.733362][ T7923]  ? __pfx_jffs2_fill_super+0x10/0x10
[  102.733389][ T7923]  get_tree_mtd+0x6f9/0x8a0
[  102.733409][ T7923]  ? __pfx_get_tree_mtd+0x10/0x10
[  102.733429][ T7923]  ? cap_capable+0x107/0x430
[  102.733454][ T7923]  ? bpf_lsm_capable+0x9/0x10
[  102.733470][ T7923]  ? security_capable+0x80/0x260
[  102.733494][ T7923]  vfs_get_tree+0x92/0x320
[  102.733514][ T7923]  path_mount+0x7d0/0x2850
[  102.733538][ T7923]  ? __pfx_path_mount+0x10/0x10
[  102.733554][ T7923]  ? lockdep_hardirqs_on+0x7d/0x110
[  102.733581][ T7923]  ? putname+0xb1/0x110
[  102.733596][ T7923]  ? kmem_cache_free+0x127/0x6c0
[  102.733624][ T7923]  ? __x64_sys_mount+0x293/0x310
[  102.733643][ T7923]  __x64_sys_mount+0x293/0x310
[  102.733661][ T7923]  ? __pfx___x64_sys_mount+0x10/0x10
[  102.733688][ T7923]  do_syscall_64+0x123/0x790
[  102.733715][ T7923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.733735][ T7923] RIP: 0033:0x7f6647b9e559
[  102.733751][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  102.733767][ T7923] RSP: 002b:00007f6648ae8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  102.733786][ T7923] RAX: ffffffffffffffda RBX: 00007f6647e25fa0 RCX: 00007f6647b9e559
[  102.733799][ T7923] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940
[  102.733811][ T7923] RBP: 00007f6647c358b0 R08: 0000000000000000 R09: 0000000000000000
[  102.733827][ T7923] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000
[  102.733839][ T7923] R13: 00007f6647e26038 R14: 00007f6647e25fa0 R15: 00007fffe6048be8
[  102.733864][ T7923]  </TASK>
[  102.733885][ T7923] jffs2: error: (7923) jffs2_do_read_inode_internal: cannot read nodes for ino 1, returned error is -12
[  102.935487][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'.
[  102.936135][ T7934] netlink: 'syz.2.619': attribute type 10 has an invalid length.
[  102.953767][ T7934] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  102.960494][ T7934] team0: Port device wlan0 added
[  102.963628][ T7933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.021875][   T63] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  103.172483][   T63] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  103.175673][   T63] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  103.175698][   T63] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  103.175730][   T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.388528][   T63] usb 8-1: usb_control_msg returned -32
[  103.388562][   T63] usbtmc 8-1:16.0: can't read capabilities
[  103.602411][   T43] audit: type=1400 audit(1792142975.113:674): avc:  denied  { write } for  pid=7941 comm="syz.4.623" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  103.603062][   T43] audit: type=1400 audit(1792142975.113:675): avc:  denied  { ioctl } for  pid=7941 comm="syz.4.623" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  103.735014][ T7946] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  103.735431][ T7946] openvswitch: netlink: Missing key (keys=d0, expected=40280)
[  103.739870][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  103.739890][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  103.739906][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  103.739919][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  103.739935][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  103.739948][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  103.739964][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  103.739977][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  103.739992][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  103.740005][ T7946] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  103.740020][ T7946] jffs2: Further such events for this erase block will not be printed
[  103.740750][ T7946] jffs2: notice: (7946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  103.740919][ T7946] FAULT_INJECTION: forcing a failure.
[  103.740919][ T7946] name failslab, interval 1, probability 0, space 0, times 0
[  103.740943][ T7946] CPU: 2 UID: 0 PID: 7946 Comm: syz.4.624 Not tainted syzkaller #0 PREEMPT(full) 
[  103.740966][ T7946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  103.740977][ T7946] Call Trace:
[  103.740991][ T7946]  <TASK>
[  103.740998][ T7946]  dump_stack_lvl+0x100/0x190
[  103.741042][ T7946]  should_fail_ex.cold+0x5/0xa
[  103.741068][ T7946]  should_failslab+0xc2/0x120
[  103.741101][ T7946]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  103.741126][ T7946]  ? __d_alloc+0x35/0xa50
[  103.741149][ T7946]  __d_alloc+0x35/0xa50
[  103.741171][ T7946]  d_make_root+0x3e/0x90
[  103.741189][ T7946]  jffs2_do_fill_super+0x477/0xa50
[  103.741219][ T7946]  jffs2_fill_super+0x283/0x370
[  103.741244][ T7946]  ? __pfx_get_mtd_device+0x10/0x10
[  103.741276][ T7946]  ? __pfx_jffs2_fill_super+0x10/0x10
[  103.741308][ T7946]  mtd_get_sb+0x2f0/0x4c0
[  103.741329][ T7946]  ? __pfx_jffs2_fill_super+0x10/0x10
[  103.741371][ T7946]  get_tree_mtd+0x6f9/0x8a0
[  103.741392][ T7946]  ? __pfx_get_tree_mtd+0x10/0x10
[  103.741412][ T7946]  ? cap_capable+0x107/0x430
[  103.741434][ T7946]  ? bpf_lsm_capable+0x9/0x10
[  103.741454][ T7946]  ? security_capable+0x80/0x260
[  103.741479][ T7946]  vfs_get_tree+0x92/0x320
[  103.741500][ T7946]  path_mount+0x7d0/0x2850
[  103.741523][ T7946]  ? __pfx_path_mount+0x10/0x10
[  103.741540][ T7946]  ? lockdep_hardirqs_on+0x7d/0x110
[  103.741575][ T7946]  ? putname+0xb1/0x110
[  103.741604][ T7946]  ? kmem_cache_free+0x127/0x6c0
[  103.741636][ T7946]  ? __x64_sys_mount+0x293/0x310
[  103.741654][ T7946]  __x64_sys_mount+0x293/0x310
[  103.741675][ T7946]  ? __pfx___x64_sys_mount+0x10/0x10
[  103.741701][ T7946]  do_syscall_64+0x123/0x790
[  103.741727][ T7946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.741761][ T7946] RIP: 0033:0x7f9b4159e559
[  103.741777][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.741793][ T7946] RSP: 002b:00007f9b424cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  103.741817][ T7946] RAX: ffffffffffffffda RBX: 00007f9b41825fa0 RCX: 00007f9b4159e559
[  103.741827][ T7946] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940
[  103.741840][ T7946] RBP: 00007f9b416358b0 R08: 0000000000000000 R09: 0000000000000000
[  103.741849][ T7946] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000
[  103.741859][ T7946] R13: 00007f9b41826038 R14: 00007f9b41825fa0 R15: 00007ffedcef4e18
[  103.741883][ T7946]  </TASK>
[  103.744440][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'.
[  103.819180][ T7949] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.625'.
[  104.111986][   T63] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  104.145712][ T7957] bridge0: port 3(syz_tun) entered blocking state
[  104.145854][ T7957] bridge0: port 3(syz_tun) entered disabled state
[  104.145990][ T7957] syz_tun: entered allmulticast mode
[  104.147570][ T7957] syz_tun: entered promiscuous mode
[  104.148197][ T7957] bridge0: port 3(syz_tun) entered blocking state
[  104.148283][ T7957] bridge0: port 3(syz_tun) entered forwarding state
[  104.168001][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.173383][ T7957] bridge_slave_0 (unregistering): left allmulticast mode
[  104.173397][ T7957] bridge_slave_0 (unregistering): left promiscuous mode
[  104.173436][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.282554][   T63] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  104.283747][   T63] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  104.283774][   T63] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64
[  104.283794][   T63] usb 9-1: config 0 interface 0 has no altsetting 0
[  104.285457][   T63] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  104.285470][   T63] usb 9-1: Product: syz
[  104.285477][   T63] usb 9-1: Manufacturer: syz
[  104.285484][   T63] usb 9-1: SerialNumber: syz
[  104.290000][   T63] usb 9-1: config 0 descriptor??
[  104.291039][ T7951] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  104.296648][   T63] usb 9-1: selecting invalid altsetting 0
[  104.299392][ T7961] fuse: Bad value for 'fd'
[  104.345789][   T10] usb 6-1: USB disconnect, device number 18
[  104.392156][ T5729] Bluetooth: hci2: command 0x0c1a tx timeout
[  104.405292][   T43] audit: type=1400 audit(1792142975.913:676): avc:  denied  { ioctl } for  pid=7965 comm="syz.1.632" path="socket:[22987]" dev="sockfs" ino=22987 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  104.439858][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  104.439881][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  104.439893][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  104.439906][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  104.439919][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  104.439931][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  104.439944][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  104.439956][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  104.439969][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  104.439980][ T7968] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  104.439992][ T7968] jffs2: Further such events for this erase block will not be printed
[  104.440526][ T7968] jffs2: notice: (7968) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  104.472954][ T5729] Bluetooth: hci1: command 0x0c1a tx timeout
[  104.472985][ T5729] Bluetooth: hci0: command 0x0c1a tx timeout
[  104.476794][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout
[  104.512311][ T7950] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  104.513463][ T5881] usb 9-1: USB disconnect, device number 4
[  104.606778][   T43] audit: type=1400 audit(1792142976.113:677): avc:  denied  { write } for  pid=7974 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  104.606947][   T43] audit: type=1400 audit(1792142976.113:678): avc:  denied  { read } for  pid=7974 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  104.823339][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.638'.
[  105.093770][ T7994] loop5: detected capacity change from 0 to 7
[  105.108939][ T7994] Dev loop5: unable to read RDB block 7
[  105.108956][ T7994]  loop5: AHDI p1 p2 p3
[  105.108966][ T7994] loop5: partition table partially beyond EOD, truncated
[  105.111027][ T7994] loop5: p1 start 1601398130 is beyond EOD, truncated
[  105.111040][ T7994] loop5: p2 start 1702059890 is beyond EOD, truncated
[  105.178279][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  105.178296][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  105.178305][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  105.178313][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  105.178321][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  105.178329][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  105.178338][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  105.178346][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  105.178354][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  105.178363][ T7997] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  105.178371][ T7997] jffs2: Further such events for this erase block will not be printed
[  105.178651][ T7997] jffs2: notice: (7997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  105.237700][ T8002] binder: 8001:8002 ioctl c0306201 200000000a00 returned -14
[  105.238892][ T8002] binder: 8001:8002 ioctl c0306201 200000000b00 returned -14
[  105.275349][   T43] audit: type=1400 audit(1792142976.783:679): avc:  denied  { ioctl } for  pid=8003 comm="syz.4.645" path="/dev/binderfs/binder_logs/failed_transaction_log" dev="binder" ino=1048677 ioctlcmd=0x5521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  105.491424][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'.
[  105.495900][ T8018] gretap0: entered promiscuous mode
[  105.495973][ T8018] macvlan2: entered allmulticast mode
[  105.495982][ T8018] gretap0: entered allmulticast mode
[  105.528072][ T8022] kAFS: No cell specified
[  105.529576][ T8021] overlayfs: missing 'lowerdir'
[  105.560313][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  105.560337][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  105.560353][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  105.560368][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  105.560383][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  105.560398][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  105.560414][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  105.560429][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  105.560444][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  105.560462][ T8028] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  105.560477][ T8028] jffs2: Further such events for this erase block will not be printed
[  105.561134][ T8028] jffs2: notice: (8028) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  105.699745][ T8042] kvm [8040]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  105.755158][ T8049] fuse: Bad value for 'fd'
[  105.780478][ T5880] usb 8-1: USB disconnect, device number 15
[  105.936721][ T8061] netlink: 112 bytes leftover after parsing attributes in process `syz.1.663'.
[  105.962747][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'.
[  105.968129][ T8064] Bluetooth: MGMT ver 1.23
[  105.990483][   T43] audit: type=1400 audit(1792142977.493:680): avc:  denied  { create } for  pid=8062 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  105.992357][   T43] audit: type=1400 audit(1792142977.503:681): avc:  denied  { setopt } for  pid=8062 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  105.994090][   T43] audit: type=1400 audit(1792142977.503:682): avc:  denied  { write } for  pid=8062 comm="syz.2.664" path="socket:[21422]" dev="sockfs" ino=21422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  106.011982][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead
[  106.012007][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead
[  106.012023][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead
[  106.012038][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead
[  106.012053][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead
[  106.012068][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead
[  106.012083][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead
[  106.012098][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead
[  106.012113][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead
[  106.012127][ T8066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead
[  106.012141][ T8066] jffs2: Further such events for this erase block will not be printed
[  106.012649][ T8066] jffs2: notice: (8066) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  106.069309][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.667'.
[  106.174166][ T8075] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  106.346630][ T8086] device-mapper: table: 248:0: multipath: invalid number of paths (-EINVAL)
[  106.346644][ T8086] device-mapper: ioctl: error adding target to table
[  106.433638][ T8091] ------------[ cut here ]------------
[  106.433645][ T8091] raw_local_irq_restore() called with IRQs enabled
[  106.433661][ T8091] WARNING: kernel/locking/irqflag-debug.c:10 at warn_bogus_irq_restore+0xc/0x20, CPU#0: syz.1.674/8091
[  106.442639][ T8091] Modules linked in:
[  106.444787][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.1.674 Not tainted syzkaller #0 PREEMPT(full) 
[  106.447723][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  106.451324][ T8091] RIP: 0010:warn_bogus_irq_restore+0xc/0x20
[  106.453743][ T8091] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d c4 3f 74 06 <67> 48 0f b9 3a 90 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90
[  106.460031][ T8093] FAULT_INJECTION: forcing a failure.
[  106.460031][ T8093] name failslab, interval 1, probability 0, space 0, times 0
[  106.460062][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.3.675 Not tainted syzkaller #0 PREEMPT(full) 
[  106.460084][ T8093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  106.460095][ T8093] Call Trace:
[  106.460100][ T8093]  <TASK>
[  106.460108][ T8093]  dump_stack_lvl+0x100/0x190
[  106.460143][ T8093]  should_fail_ex.cold+0x5/0xa
[  106.460172][ T8093]  should_failslab+0xc2/0x120
[  106.460212][ T8093]  __kmalloc_cache_node_noprof+0x94/0x720
[  106.460241][ T8093]  ? __get_vm_area_node+0x124/0x350
[  106.460295][ T8093]  __get_vm_area_node+0x124/0x350
[  106.460323][ T8093]  __vmalloc_node_range_noprof+0x268/0x1420
[  106.460352][ T8093]  ? xt_counters_alloc+0x4c/0x70
[  106.460382][ T8093]  ? find_check_entry.isra.0+0x51c/0x990
[  106.460414][ T8093]  ? xt_counters_alloc+0x4c/0x70
[  106.460437][ T8093]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  106.460475][ T8093]  ? xt_counters_alloc+0x4c/0x70
[  106.460495][ T8093]  __vmalloc_node_noprof+0xad/0xf0
[  106.460524][ T8093]  ? xt_counters_alloc+0x4c/0x70
[  106.460549][ T8093]  xt_counters_alloc+0x4c/0x70
[  106.460572][ T8093]  __do_replace+0x97/0x980
[  106.460621][ T8093]  ? __pfx___do_replace+0x10/0x10
[  106.460655][ T8093]  do_ipt_set_ctl+0xa53/0xcf0
[  106.460683][ T8093]  ? nf_sockopt_find.isra.0+0x222/0x290
[  106.460705][ T8093]  ? nf_sockopt_find.isra.0+0x222/0x290
[  106.460729][ T8093]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  106.460753][ T8093]  ? __mutex_unlock_slowpath+0x35d/0x930
[  106.460781][ T8093]  ? sockopt_release_sock+0x5c/0x70
[  106.460809][ T8093]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  106.460848][ T8093]  ? nf_sockopt_find.isra.0+0x222/0x290
[  106.460873][ T8093]  nf_setsockopt+0x8d/0xf0
[  106.460897][ T8093]  ip_setsockopt+0xcb/0xf0
[  106.460928][ T8093]  raw_setsockopt+0x60/0x1b0
[  106.460954][ T8093]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  106.460979][ T8093]  do_sock_setsockopt+0xf3/0x1d0
[  106.461004][ T8093]  __sys_setsockopt+0x195/0x220
[  106.461028][ T8093]  __x64_sys_setsockopt+0xbd/0x160
[  106.461045][ T8093]  ? do_syscall_64+0xae/0x790
[  106.461072][ T8093]  ? lockdep_hardirqs_on+0x7d/0x110
[  106.461098][ T8093]  do_syscall_64+0x123/0x790
[  106.461127][ T8093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.461148][ T8093] RIP: 0033:0x7f6647b9e559
[  106.461166][ T8093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.461184][ T8093] RSP: 002b:00007f6648ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  106.461204][ T8093] RAX: ffffffffffffffda RBX: 00007f6647e25fa0 RCX: 00007f6647b9e559
[  106.461218][ T8093] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004
[  106.461228][ T8093] RBP: 00007f6647c358b0 R08: 0000000000000230 R09: 0000000000000000
[  106.461240][ T8093] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000000
[  106.461251][ T8093] R13: 00007f6647e26038 R14: 00007f6647e25fa0 R15: 00007fffe6048be8
[  106.461276][ T8093]  </TASK>
[  106.461382][ T8093] syz.3.675: vmalloc error: size 48, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  106.461443][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.3.675 Not tainted syzkaller #0 PREEMPT(full) 
[  106.461465][ T8093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  106.461476][ T8093] Call Trace:
[  106.461482][ T8093]  <TASK>
[  106.461490][ T8093]  dump_stack_lvl+0x100/0x190
[  106.461536][ T8093]  warn_alloc.cold+0x9e/0xb2
[  106.461557][ T8093]  ? __pfx_warn_alloc+0x10/0x10
[  106.461577][ T8093]  ? __kasan_kmalloc+0x8a/0xb0
[  106.461611][ T8093]  ? __get_vm_area_node+0x22b/0x350
[  106.461643][ T8093]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  106.461673][ T8093]  ? find_check_entry.isra.0+0x51c/0x990
[  106.461707][ T8093]  ? xt_counters_alloc+0x4c/0x70
[  106.461735][ T8093]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  106.461773][ T8093]  ? xt_counters_alloc+0x4c/0x70
[  106.461793][ T8093]  __vmalloc_node_noprof+0xad/0xf0
[  106.461829][ T8093]  ? xt_counters_alloc+0x4c/0x70
[  106.461853][ T8093]  xt_counters_alloc+0x4c/0x70
[  106.461875][ T8093]  __do_replace+0x97/0x980
[  106.461908][ T8093]  ? __pfx___do_replace+0x10/0x10
[  106.461942][ T8093]  do_ipt_set_ctl+0xa53/0xcf0
[  106.461969][ T8093]  ? nf_sockopt_find.isra.0+0x222/0x290
[  106.461990][ T8093]  ? nf_sockopt_find.isra.0+0x222/0x290
[  106.462012][ T8093]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  106.462035][ T8093]  ? __mutex_unlock_slowpath+0x35d/0x930
[  106.462062][ T8093]  ? sockopt_release_sock+0x5c/0x70
[  106.462080][ T8093]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  106.462135][ T8093]  ? nf_sockopt_find.isra.0+0x222/0x290
[  106.462162][ T8093]  nf_setsockopt+0x8d/0xf0
[  106.462184][ T8093]  ip_setsockopt+0xcb/0xf0
[  106.462214][ T8093]  raw_setsockopt+0x60/0x1b0
[  106.462241][ T8093]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  106.462267][ T8093]  do_sock_setsockopt+0xf3/0x1d0
[  106.462292][ T8093]  __sys_setsockopt+0x195/0x220
[  106.462315][ T8093]  __x64_sys_setsockopt+0xbd/0x160
[  106.462333][ T8093]  ? do_syscall_64+0xae/0x790
[  106.462359][ T8093]  ? lockdep_hardirqs_on+0x7d/0x110
[  106.462385][ T8093]  do_syscall_64+0x123/0x790
[  106.462413][ T8093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.462434][ T8093] RIP: 0033:0x7f6647b9e559
[  106.462450][ T8093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.462468][ T8093] RSP: 002b:00007f6648ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  106.462485][ T8093] RAX: ffffffffffffffda RBX: 00007f6647e25fa0 RCX: 00007f6647b9e559
[  106.462499][ T8093] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004
[  106.462511][ T8093] RBP: 00007f6647c358b0 R08: 0000000000000230 R09: 0000000000000000
[  106.462523][ T8093] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000000
[  106.462534][ T8093] R13: 00007f6647e26038 R14: 00007f6647e25fa0 R15: 00007fffe6048be8
[  106.462559][ T8093]  </TASK>
[  106.462673][ T8093] Mem-Info:
[  106.462684][ T8093] active_anon:30581 inactive_anon:16441 isolated_anon:0
[  106.462684][ T8093]  active_file:704 inactive_file:60009 isolated_file:31
[  106.462684][ T8093]  unevictable:1000 dirty:178 writeback:0
[  106.462684][ T8093]  slab_reclaimable:9725 slab_unreclaimable:77310
[  106.462684][ T8093]  mapped:25171 shmem:38016 pagetables:1298
[  106.462684][ T8093]  sec_pagetables:298 bounce:0
[  106.462684][ T8093]  kernel_misc_reclaimable:0
[  106.462684][ T8093]  free:396260 free_pcp:15708 free_cma:0
[  106.462735][ T8093] Node 0 active_anon:94332kB inactive_anon:65748kB active_file:2816kB inactive_file:219740kB unevictable:2000kB isolated(anon):0kB isolated(file):124kB mapped:100232kB dirty:468kB writeback:0kB shmem:122676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13952kB pagetables:4516kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  106.462785][ T8093] Node 1 active_anon:27992kB inactive_anon:16kB active_file:0kB inactive_file:20296kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:452kB dirty:244kB writeback:0kB shmem:29388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  106.462838][ T8093] Node 0 DMA free:5256kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8576kB inactive_anon:0kB active_file:0kB inactive_file:480kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:276kB local_pcp:52kB free_cma:0kB
[  106.462892][ T8093] lowmem_reserve[]: 0 1204 1204 1204 1204
[  106.462923][ T8093] Node 0 DMA32 free:48596kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:85756kB inactive_anon:65748kB active_file:2816kB inactive_file:219260kB unevictable:2000kB writepending:468kB zspages:632kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:25512kB local_pcp:2848kB free_cma:0kB
[  106.462975][ T8093] lowmem_reserve[]: 0 0 0 0 0
[  106.463003][ T8093] Node 1 Normal free:1531188kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27992kB inactive_anon:16kB active_file:0kB inactive_file:20296kB unevictable:2000kB writepending:244kB zspages:1944kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:37044kB local_pcp:9980kB free_cma:0kB
[  106.463056][ T8093] lowmem_reserve[]: 0 0 0 0 0
[  106.463085][ T8093] Node 0 DMA: 4*4kB (UM) 2*8kB (UM) 3*16kB (UM) 1*32kB (E) 2*64kB (UE) 3*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (U) 0*4096kB = 5232kB
[  106.463214][ T8093] Node 0 DMA32: 753*4kB (UME) 528*8kB (UME) 227*16kB (UME) 251*32kB (UME) 78*64kB (UME) 40*128kB (UME) 16*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 0*4096kB = 48468kB
[  106.463349][ T8093] Node 1 Normal: 3*4kB (UE) 5*8kB (UE) 28*16kB (UE) 10*32kB (E) 7*64kB (UE) 11*128kB (UME) 32*256kB (UME) 47*512kB (UM) 23*1024kB (UME) 27*2048kB (UME) 346*4096kB (ME) = 1530996kB
[  106.463494][ T8093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  106.463508][ T8093] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  106.463523][ T8093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  106.463537][ T8093] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  106.463550][ T8093] 98756 total pagecache pages
[  106.463557][ T8093] 0 pages in swap cache
[  106.463563][ T8093] Free swap  = 73324kB
[  106.463569][ T8093] Total swap = 124996kB
[  106.463576][ T8093] 1048443 pages RAM
[  106.463582][ T8093] 0 pages HighMem/MovableOnly
[  106.463588][ T8093] 290717 pages reserved
[  106.463594][ T8093] 0 pages cma reserved
[  106.483250][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout
[  106.554568][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout
[  106.561891][ T5729] Bluetooth: hci1: command 0x0c1a tx timeout
[  106.561960][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout
[  106.803938][ T8091] RSP: 0018:ffffc90003fef788 EFLAGS: 00010202
[  106.806204][ T8091] RAX: 0000000000000202 RBX: ffffffff92055a00 RCX: ffffffff81e7dde3
[  106.809114][ T8091] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9248aba0
[  106.812237][ T8091] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff240ab40
[  106.815201][ T8091] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[  106.818092][ T8091] R13: 0000000000000000 R14: ffff88803842f800 R15: ffffffff9205d620
[  106.820998][ T8091] FS:  00007f28f1e7f6c0(0000) GS:ffff8880d4946000(0000) knlGS:0000000000000000
[  106.823895][ T8091] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  106.825995][ T8091] CR2: 00007f6647e27dac CR3: 00000000384d7000 CR4: 0000000000352ef0
[  106.828553][ T8091] Call Trace:
[  106.829859][ T8091]  <TASK>
[  106.830873][ T8091]  _raw_spin_unlock_irqrestore+0x74/0x80
[  106.832858][ T8091]  __rds_conn_create+0x18f8/0x2650
[  106.834501][ T8091]  ? __pfx___rds_conn_create+0x10/0x10
[  106.836232][ T8091]  ? trace_kmalloc+0xeb/0x110
[  106.837746][ T8091]  ? __kasan_kmalloc+0xaa/0xb0
[  106.839336][ T8091]  ? lockdep_init_map_type+0x5c/0x250
[  106.841109][ T8091]  rds_conn_create_outgoing+0x44/0x60
[  106.843112][ T8091]  rds_sendmsg+0x10da/0x34d0
[  106.844770][ T8091]  ? __pfx_rds_sendmsg+0x10/0x10
[  106.846361][ T8091]  ? selinux_socket_sendmsg+0x198/0x2f0
[  106.848158][ T8091]  ? ____sys_sendmsg+0xa4d/0xbe0
[  106.849769][ T8091]  ____sys_sendmsg+0xa4d/0xbe0
[  106.851407][ T8091]  ? __pfx_rds_sendmsg+0x10/0x10
[  106.853148][ T8091]  ? __pfx_____sys_sendmsg+0x10/0x10
[  106.854853][ T8091]  ___sys_sendmsg+0x190/0x1e0
[  106.856335][ T8091]  ? __pfx____sys_sendmsg+0x10/0x10
[  106.858022][ T8091]  ? futex_wait+0x11e/0x370
[  106.859469][ T8091]  ? find_held_lock+0x2b/0x80
[  106.860972][ T8091]  __sys_sendmsg+0x160/0x210
[  106.862587][ T8091]  ? __pfx___sys_sendmsg+0x10/0x10
[  106.864207][ T8091]  do_syscall_64+0x123/0x790
[  106.865679][ T8091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.867565][ T8091] RIP: 0033:0x7f28f0f9e559
[  106.869045][ T8091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.875353][ T8091] RSP: 002b:00007f28f1e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  106.878810][ T8091] RAX: ffffffffffffffda RBX: 00007f28f1226090 RCX: 00007f28f0f9e559
[  106.882226][ T8091] RDX: 0000000004000000 RSI: 0000200000000640 RDI: 0000000000000005
[  106.885389][ T8091] RBP: 00007f28f10358b0 R08: 0000000000000000 R09: 0000000000000000
[  106.888555][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.891930][ T8091] R13: 00007f28f1226128 R14: 00007f28f1226090 R15: 00007ffedfe4cfb8
[  106.895117][ T8091]  </TASK>
[  106.896415][ T8091] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  106.899291][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.1.674 Not tainted syzkaller #0 PREEMPT(full) 
[  106.902928][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  106.906940][ T8091] Call Trace:
[  106.908266][ T8091]  <TASK>
[  106.909466][ T8091]  dump_stack_lvl+0x100/0x190
[  106.911433][ T8091]  vpanic+0x553/0x970
[  106.913065][ T8091]  ? __pfx_vpanic+0x10/0x10
[  106.914931][ T8091]  panic+0xd1/0xe0
[  106.916463][ T8091]  ? __pfx_panic+0x10/0x10
[  106.918295][ T8091]  check_panic_on_warn.cold+0x19/0x34
[  106.920453][ T8091]  ? warn_bogus_irq_restore+0xc/0x20
[  106.922620][ T8091]  __warn.cold+0x191/0x318
[  106.924432][ T8091]  __report_bug+0x30f/0x440
[  106.926276][ T8091]  ? warn_bogus_irq_restore+0xc/0x20
[  106.928424][ T8091]  ? __pfx___report_bug+0x10/0x10
[  106.930496][ T8091]  ? lockdep_hardirqs_on+0x7d/0x110
[  106.932561][ T8091]  ? do_raw_spin_unlock+0x53/0x1e0
[  106.934624][ T8091]  ? warn_bogus_irq_restore+0xc/0x20
[  106.936723][ T8091]  report_bug_entry+0xe2/0x290
[  106.938721][ T8091]  ? warn_bogus_irq_restore+0xc/0x20
[  106.940782][ T8091]  handle_bug+0x1cd/0x2a0
[  106.942574][ T8091]  exc_invalid_op+0x17/0x50
[  106.944363][ T8091]  asm_exc_invalid_op+0x1a/0x20
[  106.946341][ T8091] RIP: 0010:warn_bogus_irq_restore+0xc/0x20
[  106.948499][ T8091] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 48 8d 3d c4 3f 74 06 <67> 48 0f b9 3a 90 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90
[  106.954428][ T8091] RSP: 0018:ffffc90003fef788 EFLAGS: 00010202
[  106.956279][ T8091] RAX: 0000000000000202 RBX: ffffffff92055a00 RCX: ffffffff81e7dde3
[  106.958889][ T8091] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9248aba0
[  106.961306][ T8091] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff240ab40
[  106.963702][ T8091] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[  106.966134][ T8091] R13: 0000000000000000 R14: ffff88803842f800 R15: ffffffff9205d620
[  106.968585][ T8091]  ? do_raw_spin_unlock+0x53/0x1e0
[  106.970225][ T8091]  _raw_spin_unlock_irqrestore+0x74/0x80
[  106.972003][ T8091]  __rds_conn_create+0x18f8/0x2650
[  106.973602][ T8091]  ? __pfx___rds_conn_create+0x10/0x10
[  106.975302][ T8091]  ? trace_kmalloc+0xeb/0x110
[  106.976842][ T8091]  ? __kasan_kmalloc+0xaa/0xb0
[  106.978497][ T8091]  ? lockdep_init_map_type+0x5c/0x250
[  106.980212][ T8091]  rds_conn_create_outgoing+0x44/0x60
[  106.981965][ T8091]  rds_sendmsg+0x10da/0x34d0
[  106.983443][ T8091]  ? __pfx_rds_sendmsg+0x10/0x10
[  106.984968][ T8091]  ? selinux_socket_sendmsg+0x198/0x2f0
[  106.986769][ T8091]  ? ____sys_sendmsg+0xa4d/0xbe0
[  106.988342][ T8091]  ____sys_sendmsg+0xa4d/0xbe0
[  106.989911][ T8091]  ? __pfx_rds_sendmsg+0x10/0x10
[  106.991460][ T8091]  ? __pfx_____sys_sendmsg+0x10/0x10
[  106.993124][ T8091]  ___sys_sendmsg+0x190/0x1e0
[  106.994607][ T8091]  ? __pfx____sys_sendmsg+0x10/0x10
[  106.996225][ T8091]  ? futex_wait+0x11e/0x370
[  106.997722][ T8091]  ? find_held_lock+0x2b/0x80
[  106.999222][ T8091]  __sys_sendmsg+0x160/0x210
[  107.000645][ T8091]  ? __pfx___sys_sendmsg+0x10/0x10
[  107.002225][ T8091]  do_syscall_64+0x123/0x790
[  107.003685][ T8091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.005501][ T8091] RIP: 0033:0x7f28f0f9e559
[  107.007059][ T8091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.014575][ T8091] RSP: 002b:00007f28f1e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.017838][ T8091] RAX: ffffffffffffffda RBX: 00007f28f1226090 RCX: 00007f28f0f9e559
[  107.020978][ T8091] RDX: 0000000004000000 RSI: 0000200000000640 RDI: 0000000000000005
[  107.024097][ T8091] RBP: 00007f28f10358b0 R08: 0000000000000000 R09: 0000000000000000
[  107.027262][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.030410][ T8091] R13: 00007f28f1226128 R14: 00007f28f1226090 R15: 00007ffedfe4cfb8
[  107.033533][ T8091]  </TASK>
[  107.035523][ T8091] Kernel Offset: disabled
[  107.037273][ T8091] Rebooting in 86400 seconds..