last executing test programs:

3m47.630107797s ago: executing program 3 (id=45):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x8000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r4, &(0x7f00000001c0)='off', 0x3)
write(r4, &(0x7f0000000180)='on', 0x2)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff84}, {0x8001, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

3m46.921731841s ago: executing program 3 (id=52):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r0 = gettid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

3m46.654446371s ago: executing program 3 (id=54):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000, 0x5})
getsockname(r0, &(0x7f0000000040)=@ax25={{0x3, @default}, [@default, @remote, @bcast, @null, @bcast, @rose, @netrom, @bcast]}, &(0x7f00000000c0)=0x80)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000000a00)='rd', 0x2)

3m46.536086166s ago: executing program 3 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00')
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r3], 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0xc, &(0x7f0000000080)={[{@subsystem='devices'}]})
sendfile(r5, r6, 0x0, 0x100000003)
ioctl$KVM_NMI(r2, 0xae9a)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc0001, 0x8)
fcntl$notify(r7, 0x402, 0x1a)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$OCFS2_IOC_UNRESVSP64(r8, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0x7ff, 0x3, 0x7, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m42.815607168s ago: executing program 3 (id=84):
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="a2c24566268477491b0ea12e45c0f5979522c3859b7e6ae48f4216426d8b79a05c01672c1854417293f26545688db4eb9aafba041a4da567", 0x38}, {&(0x7f0000000100)="51f4f7cebbee64d4933b257dc873", 0xe}], 0x2, &(0x7f00000002c0)=[{0xb4, 0x104, 0x0, "da7be19b643d4fa5f4826ddc15865cc092de059750291440a92831ac22c0143474abd76b13719f1c65ffd5038979d798cbd8bc5d1cd3b62aaedee670aefa539ad26c5343bc59f539eb7266f180f290894bd87b4788ee0e18338ed0b6640248f94189f01e97f52759f9e19bd80982bff67940d19d9ed7217d4cdc162b9e219725007b47341b6755a459636029ef55b08623ea45fd02de6b26da06b5548cae31a4d2092de1d8"}, {0x9c, 0x84, 0x6, "9ce0f35ed6bc67f130755f1984e50d0f386f7810fa6c0d7f53b07b1dedf59e4cb4ee3b100c2ac1f4f96141a88d1233768a3b81c29c3ac2bca192139ae8a77d44984c681f75a309072ca3103247846feec6b31974de2083c6666166a76b5b80a104e422431fcd28be4c26537559815d5d5672b18a2aa5f2469cb850a312d4249707352d6f70bcfab433f32b8ebb1d61"}], 0x150}, 0x200048e0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='1\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/sctp/auth_enable\x00', 0x0, 0x0)
read(r3, &(0x7f00000001c0)=""/16, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r4, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)

3m42.269100549s ago: executing program 3 (id=88):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010200000000000000000a0000000600074000000000802c000180140003002001000000000000000000000000000214000400fe8000aba4000000000000000000000000bb"], 0x58}}, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9)
read$FUSE(r0, &(0x7f00000066c0)={0x2020}, 0x203b)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={<r6=>0x0, @in6={{0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xfff}}, [0x2, 0x3, 0x0, 0xc78, 0xfffffffffffffffa, 0x400, 0x7, 0x6, 0xf, 0x4, 0x8000000000000001, 0x9, 0x9, 0x101, 0xfffffffffffffff8]}, &(0x7f0000000100)=0xfc)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r6, 0x6, 0x3, [0xfff, 0xb1, 0xffff]}, &(0x7f0000000180)=0xe)

3m40.277147114s ago: executing program 0 (id=104):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)="2828b10581ba22", 0x7)

3m40.177136872s ago: executing program 0 (id=105):
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) (async)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) (async)
acct(&(0x7f0000000040)='./file0\x00') (async)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x171)
acct(&(0x7f0000000180)='./bus\x00') (async)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) (async)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async)
sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) (async)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x5e, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000005000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) (async)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0x8, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x2, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945b, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x9, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x29b3, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
close_range(r3, r5, 0x0) (async)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)

3m40.076301208s ago: executing program 0 (id=106):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x40)
r1 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000402000000dd000e0400000000000000000000000000000d040000000000000000000002010000000400000000639b1b1b0000000000002646f2a2177e084f000839d60dba4c006100"], 0x0, 0x52}, 0x28)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[<r2=>0x0, 0x0], 0x0, 0x0, 0x0, 0xc5})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r5, 0x0, 0x0, 0x0, 0x40000000})
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1)
r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
r11 = eventfd2(0xe5c, 0x80000)
ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f00000001c0)={r11, 0x7, 0x2, r11})
ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000000)={r11, 0x7, 0x2, r11})
r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r13 = dup(r12)
write$binfmt_aout(r13, &(0x7f0000000040)=ANY=[@ANYBLOB="0300430004000000f2000000001000007b0000005a6ad76d5b97130010000000"], 0x20)
read$FUSE(r13, &(0x7f0000003940)={0x2020}, 0x2020)
r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0)
ioctl$TCSETS(r14, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0x17, "ff00f70000e5020052c4f21c7f000000002000"})
r15 = syz_open_pts(r14, 0x141601)
write(r15, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000000080))
close_range(r3, 0xffffffffffffffff, 0x0)

3m39.8657124s ago: executing program 0 (id=109):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x10, 0x803, 0x0)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4)
r2 = socket(0x10, 0x803, 0x0)
r3 = fsopen(&(0x7f00000000c0)='bdev\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0xffff, 0x4, 0xfffffff9]}, &(0x7f0000000200)=0x44)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00')
r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x4, r9, 0x0, 0x0, 0x0, 0x2142, 0x0, {0x3}})
io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r10, 0x100, 0x306c}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x60}}, 0xeb64d656001f6f32)
syz_emit_ethernet(0x88, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7a, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0xfb, 0x0, {0x17, 0x4, 0x2, 0x1, 0x2, 0x64, 0x8, 0xe8, 0x32, 0x2, @local, @empty, {[@generic={0x94, 0x8, "fa02292ebd7d"}, @end, @cipso={0x86, 0x2d, 0x2, [{0x6, 0x10, "27156016c155b84c4efb0fdea1ce"}, {0x7, 0xd, "ce1d1e0e027b2a5bfeaa60"}, {0x7, 0x6, "327e1e42"}, {0x1, 0x4, "cfa5"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xc5, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x7}]}]}}, "b260"}}}}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010103, @loopback}}}}}}, 0x0)
r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x25, 0x8000, 0x81, 0x8}})
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

3m39.626735964s ago: executing program 0 (id=110):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2dd}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x3c}}, 0x0)

3m39.246894744s ago: executing program 0 (id=111):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=0x77359400, @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0xd0000007})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2e5, 0xa077, 0x5a, 0x0, 0xfffffffffffffee3)
lseek(r5, 0x5, 0x1)
getdents64(r5, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x6, 0x0, 0x0)

3m39.137596851s ago: executing program 32 (id=111):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=0x77359400, @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0xd0000007})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2e5, 0xa077, 0x5a, 0x0, 0xfffffffffffffee3)
lseek(r5, 0x5, 0x1)
getdents64(r5, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x6, 0x0, 0x0)

3m26.111745655s ago: executing program 33 (id=88):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010200000000000000000a0000000600074000000000802c000180140003002001000000000000000000000000000214000400fe8000aba4000000000000000000000000bb"], 0x58}}, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9)
read$FUSE(r0, &(0x7f00000066c0)={0x2020}, 0x203b)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={<r6=>0x0, @in6={{0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xfff}}, [0x2, 0x3, 0x0, 0xc78, 0xfffffffffffffffa, 0x400, 0x7, 0x6, 0xf, 0x4, 0x8000000000000001, 0x9, 0x9, 0x101, 0xfffffffffffffff8]}, &(0x7f0000000100)=0xfc)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r6, 0x6, 0x3, [0xfff, 0xb1, 0xffff]}, &(0x7f0000000180)=0xe)

1m21.087445566s ago: executing program 5 (id=1178):
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
listen(0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmmsg(r0, &(0x7f0000001e80), 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$nl_netfilter(0x10, 0x3, 0xc)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c7", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0xffffffffffffffff, 0x0)
unshare(0x6a040000)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
pwrite64(r3, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2)

1m19.715645452s ago: executing program 5 (id=1188):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000b80)={&(0x7f0000000800)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000840)='s', 0x1}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000400000007000000ac1e01011000000084000000070000007f"], 0x20, 0x40084}, 0xc4)

1m19.656487868s ago: executing program 5 (id=1189):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x4000810}, 0x24040010)

1m19.575462256s ago: executing program 5 (id=1190):
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x80000001, 0x6ef, {<r0=>0x0}, {0xee00}, 0xb42, 0x5})
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000000c0)={{0x7, 0x5, 0x6f, 0x90c, '\x00', 0x4}, 0x5, 0x4, 0xfffffffb, r0, 0x4, 0x267de6e6, 'syz1\x00', &(0x7f0000000080)=[' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', ':{.\x00', '!\x00', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0x26})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x2, 0x3, 0xff)
bind$inet(r3, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x90, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000340)=0x8)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0}, &(0x7f0000000300)=0x14)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="4067ad63a440"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x841)

1m19.494906441s ago: executing program 5 (id=1192):
r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet6_mreq(r2, 0x29, 0x38, 0x0, &(0x7f0000004ec0))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e803000041030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0x19, 0x4)
listen(r4, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') (async)
listen(r1, 0xff)
accept4(r1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffff9c, &(0x7f0000000040), 0x280c83, 0x0)

1m18.583861302s ago: executing program 5 (id=1202):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r3, 0x0, r2, 0x0, 0x6, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r3])
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0)
r5 = dup(r4)
read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4080)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000100)={r8, 0x51}, &(0x7f0000000180)=0x8) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000100)={r8, 0x51}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040)={r8, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040)={r8, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x480e, 0x4) (async)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x480e, 0x4)
sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)='5', 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000002180)="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", 0x5ad}], 0x1}}], 0x2, 0x240000c4)

1m3.502848929s ago: executing program 34 (id=1202):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r3, 0x0, r2, 0x0, 0x6, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r3])
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0)
r5 = dup(r4)
read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4080)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000100)={r8, 0x51}, &(0x7f0000000180)=0x8) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000100)={r8, 0x51}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040)={r8, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000040)={r8, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x480e, 0x4) (async)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x480e, 0x4)
sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)='5', 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000002180)="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", 0x5ad}], 0x1}}], 0x2, 0x240000c4)

4.097111344s ago: executing program 6 (id=1675):
epoll_create1(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) (fail_nth: 3)

3.955848191s ago: executing program 6 (id=1679):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1)
fsmount(r1, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0)

3.824770325s ago: executing program 6 (id=1681):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000240)={0x12, 0x16, 0x2, 0x5, 0x3})

2.976993783s ago: executing program 2 (id=1689):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00'})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000240)='logfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]})
socket$igmp(0x2, 0x3, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xc7, &(0x7f00000006c0)=""/199, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x40, 0x10}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, r4, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x51)
getpid()
pipe2$watch_queue(&(0x7f0000000280), 0x80)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0xc587000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x101000)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000240)={0x0, 0x0, 0x3011, 0x1, 0x6, 0x8, 0xffffffff})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)

2.896690185s ago: executing program 2 (id=1691):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000fe000000002200ec040014"], 0x1b}}, 0x0)

2.824742473s ago: executing program 2 (id=1692):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x448800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0xe207, 0x1, 0x1, 'queue1\x00', 0x3})
syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0)

2.822888014s ago: executing program 2 (id=1695):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000", @ANYRES32, @ANYRES32], 0x48)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cc, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6)
r1 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x4a)
mkdir(&(0x7f0000001700)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0)
write(r2, &(0x7f0000001d00)='0 4 0 2', 0x7)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0x1}]})
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
writev(r5, &(0x7f0000000380)=[{&(0x7f0000000280)="c021", 0x2}, {&(0x7f00000000c0)="db3b000c1403669d7e22d88fcb0bf2f3f4d5ae7ae53abd6b9be83307476d94d8ea07ae55f2cbf36e6e30aedfad", 0x2d}, {&(0x7f00000002c0)="fffb358c350546ffabafefcb07ef675246dca0334ae419c6be20baef8e7ca581a8e0a8c11acae44781aff8cdbe1c7920ea0fd0e92ba8cdfb3a0bfa118803646ab44c2c7f15e43a928808c4dfbf45318fef987bd967557b29822aee24af8b9700c00ec35f583ddcb8e7cb3069c54f4ebb8025a1df8f3d47e5639aa4800c928eeda2", 0x5c}], 0x3)

2.784565078s ago: executing program 4 (id=1696):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x7f, 0x101040)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc25c4111, &(0x7f0000000200)={0x7, [[0x200, 0x80000000, 0x5, 0xb72, 0x5, 0x9b, 0xfffffd76, 0x4], [0x7, 0xfffff331, 0x6, 0xa, 0x81, 0x168, 0x8, 0xfffeffff], [0xef6c, 0x9, 0x2, 0xffff839a, 0x6, 0x9, 0x0, 0xa1c9]], '\x00', [{0x3ff, 0x1, 0x1, 0x1}, {0xfffffffb, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x6, 0x8000, 0x0, 0x1, 0x1}, {0x41f4d79b, 0x7, 0x1, 0x1, 0x1}, {0x9692, 0xffe00, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x1, 0x1, 0x0, 0x1}, {0xfffffffd, 0x6c, 0x1}, {0x4, 0x3, 0x1, 0x0, 0x1, 0x1}, {0xc, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xa34f, 0x1, 0x1}, {0x4, 0x7f, 0x1, 0x0, 0x0, 0x1}, {0xfff, 0x6, 0x1, 0x1, 0x1}], '\x00', 0x10001})
get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = syz_open_procfs(r2, &(0x7f0000019140)='net/dev\x00')
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
ptrace(0x10, 0x0)
setpgid(0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0xa0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c)
pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200200, @loopback, 0xffffffff}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c)
socket$inet_sctp(0x2, 0x5, 0x84)

2.413953218s ago: executing program 6 (id=1697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21)
r3 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000300)={0x30e, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x20)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6b, 0x6b, 0x8, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x6a, 0x0, 0x5c, 0x3}, @datasec={0x6, 0x4, 0x0, 0xf, 0x3, [{0x4, 0x1922d258, 0xb9e}, {0x3, 0x8, 0xe3e}, {0x3, 0x2, 0xfff}, {0x4, 0x80000000, 0x209}], "561d03"}, @float={0xc, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x2e, 0x61]}}, &(0x7f00000005c0)=""/184, 0x8c, 0xb8, 0x1, 0x6d71}, 0x28)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000300)=0x4)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x40}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, <r10=>0x0, 0x0}}, 0x10)
r11 = socket$inet(0x2, 0xa, 0x7)
setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000a80)={@broadcast, @multicast1, @local}, 0xc)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r10, 0x4)
r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r12, 0x40186f40, &(0x7f0000000440)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, 0xff}, [@ldst={0x0, 0x0, 0x3, 0x0, 0x8, 0xffffffffffffffc0, 0x5}, @func]}, &(0x7f0000000040)='syzkaller\x00', 0xffffff93, 0x83, &(0x7f0000000200)=""/131, 0x41000, 0x0, '\x00', r7, @netfilter=0x2d, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0xb, 0x0, 0x7fffffff}, 0x10, r10, r12, 0x3, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0xb, 0x3}, {0x3, 0x4, 0x6, 0x7}, {0x3, 0x1, 0x8}], 0x10, 0x2}, 0x94)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4038587a, &(0x7f0000000900)={{<r13=>r3, &(0x7f0000000740)='wlan1\x00', 0x400400, &(0x7f0000000780)={@align=0x9, {0x9, 0x8, 0xfffffff8, 0x4c2}}, 0x480, &(0x7f00000007c0), &(0x7f0000000800)=0xfffffeff}, {[0x3, 0x6, 0x2, 0x7]}, 0x40, 0xa6, &(0x7f0000000840)=""/166})
r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$binfmt_misc(r14, &(0x7f00000000c0)="2d50f5451f", 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x19, 0xe, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa671, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@llu}, @jmp={0x5, 0x1, 0x0, 0x7, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0x8, 0x3, 0xa, 0xc, 0x10}]}, &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, @cgroup_sockopt=0x16, r6, 0x8, &(0x7f00000006c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xf, 0x4c, 0x207}, 0x10, r10, r13, 0x3, &(0x7f0000000940)=[r14], &(0x7f0000000980)=[{0x4, 0x5, 0x7, 0x4}, {0x4, 0x4, 0x7, 0x8}, {0x0, 0x5, 0xe, 0x1a}], 0x10, 0x4}, 0x94)
write$vga_arbiter(r4, &(0x7f0000000080), 0xf)
syz_open_procfs$userns(0x0, 0x0)

2.389682453s ago: executing program 4 (id=1698):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000140))
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c00a09bd09a8117fca93ec7ee2565f131fbceababffd0250f9ad66d9b874fa721dbd49af1b6e383f2a0d83d565697ae8467927db1c24a400c09200b2875b2bc2ffe070d"])
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
memfd_secret(0x80000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x8, 0x0, 0x0}}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
close(0xffffffffffffffff)
r3 = open(0x0, 0x20002, 0x1a9)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1aef658c054e0eb5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xd8, 0xfffc, {0x20, 0x1}, {0x46, 0x2}, @ramp={0x3, 0x10, {0x6, 0x7fff, 0x1ff, 0xe4}}})
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4)
connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendmmsg(r4, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4ad00077c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840)
sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x5e, 0x0, 0x0)

2.169459802s ago: executing program 2 (id=1699):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x7, 0x1, 0x41, 0x10000000c3d, 0xfffffffffffffffd, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x5, 0x3, 0x79, 0x3, 0x1de4bd98], 0x3b384000, 0x14a82})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.08637778s ago: executing program 2 (id=1700):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200000008400"], 0x20, 0x4855}, 0x24000052)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1bf)
mount(0x0, &(0x7f0000000040)='./trace/set_event\x00', &(0x7f0000000100)='hfs\x00', 0x2020092, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002"], 0x48)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x9})
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
fadvise64(0xffffffffffffffff, 0xff, 0x0, 0x1)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r4, &(0x7f00000002c0)=@random={'trusted.', 'system.posix_acl_default\x00'})
r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./trace/set_event\x00', 0x2, 0x2)
write$FUSE_IOCTL(r5, 0x0, 0x0)

1.650172657s ago: executing program 6 (id=1706):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.567670203s ago: executing program 6 (id=1707):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setregid(0x0, 0xee01)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
r1 = socket(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x7)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={<r3=>0x0, 0x7}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)={r3, 0x1000, "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"}, &(0x7f0000001380)=0x1008)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r4, &(0x7f0000000000)=@known='system.posix_acl_default\x00')

1.44682772s ago: executing program 4 (id=1708):
r0 = socket(0x40000000002, 0x3, 0x2)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='0000:00:03.0', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='i801_smbus', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='0000:00:03.0', 0xc)
write(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:05.0/driver/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)='0000:00:05.0\x00', 0xd)
write(0xffffffffffffffff, &(0x7f00000005c0)='i801_smbus\x00', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0)
write(r4, &(0x7f0000000640)='0000:00:05.0', 0xc)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x1})
syz_usb_connect(0x7, 0x3d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0bbb34ded8811ea6ccb4e2a32bb395410e60c4a25e7ac314a4e6ea299b6df8d0cff18c6385b8bd407bb95750d8b1feaca9c61c1c5f9a981f4dc4ac69168ffaf2a416c8c704fbe38b0623588045de925b2cf96b758fa4759ac6d4a24051f8b0284852b278b60babf0d774bbabab37de863f8aee00766183c54028ae5eff5c6e34d40e01a3286d04a60dc2e78fecbb735347c5bb47dc1ae1845e74f5279e39ec1b3b079154ea9a6100"/235, @ANYRESOCT=r0, @ANYRESHEX, @ANYBLOB="2a85f938eb0ce96611d081c48d63fb161e73704b930fca719b717fbb2e0c6172df6db421ded21bb4b59911f3896df2aca768794c10389c7b5938af85d336158f97484a7d5bfb822dc25a5041d9e11db72e05f87bbbc5d494dfabcfef19c78c637e9210b8e09da70ecb1b4481363256b04c2ca92139c08d6557e0504bc32bcbd6a9922732ae2257196572f321f094075d0fe65290dde75c1a7eb3c9eaa8095e3cd4d00232f677efda402dc5a14add120875c0caf3a92f19456d07"], 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1)
ioctl$TCSETS(0xffffffffffffffff, 0x8926, &(0x7f0000000040)={0x7fff, 0x0, 0x0, 0x3ff, 0x1a, "5deef9ffff5829000200000f001400000100"})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

866.042692ms ago: executing program 1 (id=1712):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
accept4(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000002c0)=0x80, 0x80800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r5, r6, 0x0, 0x2000fb)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r7, 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

865.246169ms ago: executing program 1 (id=1713):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x144, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xe43, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfee5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x28c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x680}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xfffffffe, 0x5, 0x6, 0x4, 0x6, 0x10001]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x401}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x611}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6e3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ef}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x83ee}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000)

777.213328ms ago: executing program 4 (id=1714):
r0 = socket(0x10, 0x3, 0x0)
fstat(r0, &(0x7f00000006c0))
prlimit64(0x0, 0xa, &(0x7f0000000480)={0x3, 0x8a}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f00000010c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0xb, @private0, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000680)="e2", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000002c0)="d03ccf", 0x3}], 0x1}}], 0x2, 0x14)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f0000000200)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa7614a93ec085d1d3caf76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808fdd3b04603f0cd79529f6d4b86ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec33"}, &(0x7f0000000500)=0x90)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
pread64(r4, &(0x7f0000002840)=""/4096, 0x1000, 0x4)
sendmmsg(r1, &(0x7f0000005a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008055)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x100)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r5)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x620, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4)
setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
mq_unlink(&(0x7f0000000400)=')\x00')
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

775.015856ms ago: executing program 1 (id=1715):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)

637.3661ms ago: executing program 1 (id=1716):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038c08", 0x14, 0x6, 0xff, @local, @local, {[], {{0xfff5, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0)

547.10423ms ago: executing program 1 (id=1717):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000240)={0x12, 0x16, 0x2, 0x5, 0x3})

56.670138ms ago: executing program 4 (id=1718):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x8000, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000002640)={0x1, 0x1, 0x0, &(0x7f00000025c0)=[{0x0}], &(0x7f0000002600)=[0x1, 0x81]}, 0x20)

2.31061ms ago: executing program 4 (id=1719):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
syz_open_dev$amidi(&(0x7f0000000100), 0xfffffff8, 0x4002)
ioctl(r0, 0xc138fd09, &(0x7f0000000000))

0s ago: executing program 1 (id=1720):
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x535401, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
keyctl$clear(0x11, 0xfffffffffffffffd)
listen(r0, 0xa)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
listen(r0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="cdb8c21d0ecd86f42a9487e89e9a00f53d8c289145945a2cd47434f9ed536a0283443d1af025e57cb4484fa670635cdff760dfd297684fdf070000000000000000e540f454e07664dd093a62051e36fe534f707cb61eb7b3d16410b095043dad98084476ed2ab91e172202a895708bca7c3e401f5cb620123c3174d2a22f401a7251b3c9ca859a7a4a30f2714261a750df0eebd79e81c717202c21dc7c467bc1526303d4c2dd9cd84a72", 0xaa}, {0x0}, {&(0x7f00000003c0)="3a3ca89bbb79d0ce6acfcb328fcea740fd6346f46b62ab832b49b67fde0696765fc05438e39fc18c5799f7b8a11a276059718ba0d2ea3a223e30da76023f0e11bb43a7612453813ef6bc89985c084cf2db63d87b8b7173ca4584f0daf0b921955d65e7092f2701c45f0508ee4228c376669303bcdeb848d9af38edc46339be53fdf8c0", 0x83}, {&(0x7f0000000300)="bba38029332a1797cbbec5a5213a048208ccfbf81b0085b744edd8c566000dae57c3", 0x22}], 0x4)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r2, r2, 0x0, 0x200000)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x1002000ff)

kernel console output (not intermixed with test programs):

T10258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  216.803917][T10258]  </TASK>
[  217.047600][T10266] batadv_slave_1: entered promiscuous mode
[  217.050932][T10266] batadv_slave_1: left promiscuous mode
[  217.092127][ T6745] usb 10-1: USB disconnect, device number 19
[  217.118418][ T6745] Unregistered device nBox DVB-T Dongle
[  217.163915][ T6745] as10x_usb: device has been disconnected
[  217.182838][T10269] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1171'.
[  217.430891][T10279] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  217.430891][T10279] 
[  217.440575][T10279] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  217.449802][T10279] CIFS: Attempting to mount //127.0.0.1/share
[  217.455572][T10279] CIFS: VFS: Error connecting to socket. Aborting operation.
[  217.461939][T10279] CIFS: VFS: cifs_mount failed w/return code = -22
[  217.478658][T10281] nvmet: failed to open file ./fine0: (-2)
[  217.585232][T10286] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  217.585232][T10286] 
[  217.595777][T10286] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  217.608602][T10286] CIFS: Attempting to mount //127.0.0.1/share
[  217.613375][T10286] CIFS: VFS: Error connecting to socket. Aborting operation.
[  217.616752][T10286] CIFS: VFS: cifs_mount failed w/return code = -22
[  218.116725][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'.
[  218.133429][T10303] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.245410][T10295] lo speed is unknown, defaulting to 1000
[  218.586138][T10316] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  218.586138][T10316] 
[  218.615346][T10316] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  218.632442][T10316] CIFS: Attempting to mount //127.0.0.1/share
[  218.645248][T10316] CIFS: VFS: Error connecting to socket. Aborting operation.
[  218.648796][T10316] CIFS: VFS: cifs_mount failed w/return code = -22
[  219.311026][T10336] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  219.311026][T10336] 
[  219.316513][T10336] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  219.324710][T10336] CIFS: Attempting to mount //127.0.0.1/share
[  219.376349][T10336] CIFS: VFS: cifs_mount failed w/return code = -112
[  219.437572][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'.
[  219.441678][T10345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1195'.
[  219.452498][T10345] geneve2: entered promiscuous mode
[  219.454816][T10345] geneve2: entered allmulticast mode
[  219.493982][T10348] lo speed is unknown, defaulting to 1000
[  219.518448][ T6745] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  219.677457][ T6745] usb 9-1: Using ep0 maxpacket: 32
[  219.685443][ T6745] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  219.694454][ T6745] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.708036][ T6745] usb 9-1: config 0 descriptor??
[  219.721278][ T6745] as10x_usb: device has been detected
[  219.724384][ T6745] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  219.746220][ T6745] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  219.798587][ T6745] as10x_usb: error during firmware upload part1
[  219.801806][ T6745] Registered device nBox DVB-T Dongle
[  220.011806][ T6745] usb 9-1: USB disconnect, device number 24
[  220.058566][   T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.104824][ T6745] Unregistered device nBox DVB-T Dongle
[  220.123714][ T6745] as10x_usb: device has been disconnected
[  220.509204][T10394] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size.
[  220.725067][T10402] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  220.725067][T10402] 
[  220.736920][T10402] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  220.747938][T10402] CIFS: Attempting to mount //127.0.0.1/share
[  220.794436][T10402] CIFS: VFS: cifs_mount failed w/return code = -112
[  220.821163][T10396] fuse: fd is not a fuse device
[  221.645851][T10414] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  221.645851][T10414] 
[  221.653376][T10414] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  221.660802][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'.
[  221.663862][T10414] CIFS: Attempting to mount //127.0.0.1/share
[  221.666567][T10411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.672895][T10414] CIFS: VFS: Error connecting to socket. Aborting operation.
[  221.675507][T10414] CIFS: VFS: cifs_mount failed w/return code = -22
[  222.497227][T10425] syz_tun: left allmulticast mode
[  222.576441][T10427] cgroup: Unknown subsys name 'euid'
[  222.588578][T10429] nvmet: failed to open file ./fine0: (-2)
[  222.758658][T10434] zram: Cannot change disksize for initialized device
[  222.762832][T10435] zram: Cannot change disksize for initialized device
[  222.928931][ T5839] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  223.079709][ T5839] usb 7-1: Using ep0 maxpacket: 32
[  223.082973][ T5839] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  223.086107][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.096772][ T5839] usb 7-1: config 0 descriptor??
[  223.107366][ T5839] as10x_usb: device has been detected
[  223.120157][ T5839] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  223.128273][ T5839] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  223.145197][ T5839] as10x_usb: error during firmware upload part1
[  223.147787][ T5839] Registered device nBox DVB-T Dongle
[  223.208354][T10446] i801_smbus 0000:00:03.0: SMBus using polling
[  223.237790][T10446] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  223.250750][T10446] i801_smbus 0000:00:05.0: SMBus using polling
[  223.280932][T10446] i2c i2c-3: Memory type 0x07 not supported yet, not instantiating SPD
[  223.328540][ T5881] usb 7-1: USB disconnect, device number 32
[  223.362509][ T5881] Unregistered device nBox DVB-T Dongle
[  223.365081][ T5881] as10x_usb: device has been disconnected
[  223.887399][T10458] nvmet: failed to open file ./fine0: (-2)
[  224.006619][T10464] FAULT_INJECTION: forcing a failure.
[  224.006619][T10464] name failslab, interval 1, probability 0, space 0, times 0
[  224.028164][T10464] CPU: 0 UID: 0 PID: 10464 Comm: syz.2.1228 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  224.028186][T10464] Tainted: [L]=SOFTLOCKUP
[  224.028190][T10464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  224.028197][T10464] Call Trace:
[  224.028202][T10464]  <TASK>
[  224.028207][T10464]  dump_stack_lvl+0x100/0x190
[  224.028224][T10464]  should_fail_ex.cold+0x5/0xa
[  224.028239][T10464]  should_failslab+0xc2/0x120
[  224.028255][T10464]  __kmalloc_cache_noprof+0x91/0x6c0
[  224.028268][T10464]  ? binder_thread_write+0x2351/0x4db0
[  224.028309][T10464]  binder_thread_write+0x2351/0x4db0
[  224.028333][T10464]  ? __pfx_binder_thread_write+0x10/0x10
[  224.028352][T10464]  ? binder_debug+0xe0/0x190
[  224.028367][T10464]  ? __pfx_binder_debug+0x10/0x10
[  224.028382][T10464]  ? binder_debug+0xe0/0x190
[  224.028396][T10464]  ? __pfx_binder_debug+0x10/0x10
[  224.028416][T10464]  ? __might_fault+0xc5/0x140
[  224.028433][T10464]  ? __pfx_binder_ioctl+0x10/0x10
[  224.028450][T10464]  binder_ioctl+0x28ca/0x74a0
[  224.028469][T10464]  ? tomoyo_path_number_perm+0x28f/0x580
[  224.028484][T10464]  ? tomoyo_path_number_perm+0x28f/0x580
[  224.028500][T10464]  ? tomoyo_path_number_perm+0x188/0x580
[  224.028516][T10464]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  224.028530][T10464]  ? __pfx_binder_ioctl+0x10/0x10
[  224.028551][T10464]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  224.028569][T10464]  ? do_vfs_ioctl+0x226/0x13e0
[  224.028586][T10464]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  224.028605][T10464]  ? find_held_lock+0x2b/0x80
[  224.028619][T10464]  ? __fget_files+0x215/0x3d0
[  224.028629][T10464]  ? hook_file_ioctl_common+0x140/0x440
[  224.028646][T10464]  ? __fget_files+0x21f/0x3d0
[  224.028658][T10464]  ? __pfx_binder_ioctl+0x10/0x10
[  224.028675][T10464]  compat_ptr_ioctl+0x6e/0xa0
[  224.028690][T10464]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  224.028705][T10464]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  224.028724][T10464]  __do_fast_syscall_32+0xe7/0x970
[  224.028741][T10464]  ? lockdep_hardirqs_on+0x78/0x100
[  224.028757][T10464]  do_fast_syscall_32+0x32/0x70
[  224.028774][T10464]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  224.028788][T10464] RIP: 0023:0xf6feefec
[  224.028802][T10464] Code: Unable to access opcode bytes at 0xf6feefc2.
[  224.028808][T10464] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  224.028820][T10464] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201
[  224.028827][T10464] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000
[  224.028833][T10464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  224.028839][T10464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.028845][T10464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  224.028859][T10464]  </TASK>
[  224.028879][T10464] binder: 10461:10464 ioctl c0306201 80000480 returned -14
[  224.034298][T10467] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  224.034298][T10467] 
[  224.150246][T10467] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  224.154107][T10467] CIFS: Attempting to mount //127.0.0.1/share
[  224.157168][T10467] CIFS: VFS: Error connecting to socket. Aborting operation.
[  224.160260][T10467] CIFS: VFS: cifs_mount failed w/return code = -111
[  224.214853][T10475] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1232'.
[  224.846738][T10482] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  224.846738][T10482] 
[  224.855903][T10482] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  224.861674][T10482] CIFS mount error: No usable UNC path provided in device string!
[  224.861674][T10482] 
[  224.867282][T10482] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  224.970495][T10486] FAULT_INJECTION: forcing a failure.
[  224.970495][T10486] name failslab, interval 1, probability 0, space 0, times 0
[  224.975759][T10486] CPU: 0 UID: 0 PID: 10486 Comm: syz.4.1236 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  224.975790][T10486] Tainted: [L]=SOFTLOCKUP
[  224.975797][T10486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  224.975808][T10486] Call Trace:
[  224.975816][T10486]  <TASK>
[  224.975823][T10486]  dump_stack_lvl+0x100/0x190
[  224.975854][T10486]  should_fail_ex.cold+0x5/0xa
[  224.975876][T10486]  should_failslab+0xc2/0x120
[  224.975902][T10486]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  224.975926][T10486]  ? start_dirop+0x79/0xb0
[  224.975943][T10486]  ? alloc_inode+0x68/0x250
[  224.975967][T10486]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  224.975993][T10486]  alloc_inode+0x68/0x250
[  224.976016][T10486]  new_inode+0x22/0x1c0
[  224.976042][T10486]  __debugfs_create_file+0x105/0x4f0
[  224.976070][T10486]  debugfs_create_file_full+0x41/0x60
[  224.976097][T10486]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  224.976133][T10486]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  224.976186][T10486]  ? lockdep_init_map_type+0x5c/0x250
[  224.976209][T10486]  ? __pfx_hsr_dev_setup+0x10/0x10
[  224.976244][T10486]  alloc_netdev_mqs+0x314/0x15c0
[  224.976277][T10486]  rtnl_create_link+0xc13/0xf80
[  224.976317][T10486]  rtnl_newlink+0x13bd/0x2380
[  224.976354][T10486]  ? __pfx_rtnl_newlink+0x10/0x10
[  224.976380][T10486]  ? rcu_is_watching+0x12/0xc0
[  224.976402][T10486]  ? kasan_quarantine_put+0x104/0x240
[  224.976428][T10486]  ? kfree_skbmem+0x19a/0x210
[  224.976446][T10486]  ? kmem_cache_free+0x127/0x6b0
[  224.976479][T10486]  ? find_held_lock+0x2b/0x80
[  224.976510][T10486]  ? find_held_lock+0x2b/0x80
[  224.976531][T10486]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  224.976557][T10486]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  224.976585][T10486]  ? __pfx_rtnl_newlink+0x10/0x10
[  224.976611][T10486]  rtnetlink_rcv_msg+0x95e/0xe90
[  224.976640][T10486]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  224.976675][T10486]  ? ref_tracker_free+0x37e/0x6c0
[  224.976695][T10486]  netlink_rcv_skb+0x159/0x420
[  224.976716][T10486]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  224.976744][T10486]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  224.976774][T10486]  ? netlink_deliver_tap+0x1ae/0xcc0
[  224.976798][T10486]  netlink_unicast+0x585/0x850
[  224.976823][T10486]  ? __pfx_netlink_unicast+0x10/0x10
[  224.976851][T10486]  netlink_sendmsg+0x8b0/0xda0
[  224.976876][T10486]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.976901][T10486]  ? apparmor_socket_sendmsg+0x15b/0x270
[  224.976926][T10486]  ____sys_sendmsg+0xa4d/0xbe0
[  224.976944][T10486]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.976966][T10486]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.976999][T10486]  ___sys_sendmsg+0x190/0x1e0
[  224.977022][T10486]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.977056][T10486]  ? find_held_lock+0x2b/0x80
[  224.977096][T10486]  __sys_sendmsg+0x160/0x210
[  224.977127][T10486]  ? __pfx___sys_sendmsg+0x10/0x10
[  224.977180][T10486]  ? __pfx_ksys_write+0x10/0x10
[  224.977205][T10486]  __do_fast_syscall_32+0xe7/0x970
[  224.977231][T10486]  ? lockdep_hardirqs_on+0x78/0x100
[  224.977259][T10486]  do_fast_syscall_32+0x32/0x70
[  224.977286][T10486]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  224.977309][T10486] RIP: 0023:0xf7f02fec
[  224.977331][T10486] Code: Unable to access opcode bytes at 0xf7f02fc2.
[  224.977339][T10486] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  224.977358][T10486] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280
[  224.977370][T10486] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  224.977380][T10486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  224.977391][T10486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.977401][T10486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  224.977427][T10486]  </TASK>
[  224.977581][T10486] debugfs: out of free dentries, can not create file 'netdev@ffff88805b784700'
[  225.141827][T10486] dummy0: entered promiscuous mode
[  225.175421][T10486] dummy0: left promiscuous mode
[  225.378163][ T6744] kernel write not supported for file /sg0 (pid: 6744 comm: kworker/0:6)
[  225.625536][T10503] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xbd69 instead
[  225.630064][T10503] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  225.633916][T10503] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  226.086715][T10507] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1244'.
[  226.232233][T10510] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  226.232233][T10510] 
[  226.252846][T10510] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  226.274604][T10510] CIFS: Attempting to mount //127.0.0.1/share
[  226.287371][T10510] CIFS: VFS: Error connecting to socket. Aborting operation.
[  226.295771][T10510] CIFS: VFS: cifs_mount failed w/return code = -22
[  226.630346][T10517] i801_smbus 0000:00:03.0: SMBus using polling
[  226.652835][T10517] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
qemu-system-x86_64: vtd_iova_to_slpte: detected slpte permission error (iova=0xff300000, level=0x1, slpte=0x5b9c8002, write=0, pasid=0xffffffff)
qemu-system-x86_64: vtd_iommu_translate: detected translation failure (dev=00:1f:02, iova=0xff300000)
qemu-system-x86_64: New fault is not recorded due to compression of faults
[  227.055356][    C2] DMAR: DRHD: handling fault status reg 2
[  227.065754][    C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xff300000 [fault reason 0x06] PTE Read access is not set
[  227.365352][T10533] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  227.380676][T10533] block device autoloading is deprecated and will be removed.
[  227.459999][T10543] raw_sendmsg: syz.4.1256 forgot to set AF_INET. Fix it!
[  227.822007][ T6744] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  227.977053][ T6744] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  227.995172][ T6744] usb 9-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61
[  228.006683][ T6744] usb 9-1: config 0 interface 0 has no altsetting 0
[  228.015346][ T6744] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  228.026510][ T6744] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  228.037957][ T6744] usb 9-1: Product: syz
[  228.042821][ T6744] usb 9-1: Manufacturer: syz
[  228.046186][ T6744] usb 9-1: SerialNumber: syz
[  228.054679][ T6744] usb 9-1: config 0 descriptor??
[  228.058939][T10546] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  228.070147][ T6744] usb 9-1: selecting invalid altsetting 0
[  228.084503][T10551] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  228.084503][T10551] 
[  228.089338][T10551] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  228.096298][T10551] CIFS: Attempting to mount //127.0.0.1/share
[  228.184185][T10551] CIFS: VFS: Error connecting to socket. Aborting operation.
[  228.186646][T10551] CIFS: VFS: cifs_mount failed w/return code = -4
[  228.279660][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.282875][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.285568][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.288277][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.291076][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.293789][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.296491][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.299378][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.301956][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.304681][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.307345][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.310246][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.312992][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.315572][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.318113][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.321079][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.323880][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.326808][T10546] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  228.776105][T10561] i801_smbus 0000:00:03.0: SMBus using polling
[  228.812928][T10561] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  229.642567][ T5826] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  229.812779][ T5826] usb 7-1: Using ep0 maxpacket: 32
[  229.824564][ T5826] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  229.829559][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.844559][ T5826] usb 7-1: config 0 descriptor??
[  229.854580][ T5826] as10x_usb: device has been detected
[  229.857436][ T5826] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  229.874077][ T5826] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  229.879576][ T5826] as10x_usb: error during firmware upload part1
[  229.884942][ T5826] Registered device nBox DVB-T Dongle
[  229.997784][T10545] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[  230.008561][T10599] cgroup: Name too long
[  230.089024][ T6745] usb 7-1: USB disconnect, device number 33
[  230.117177][ T6745] Unregistered device nBox DVB-T Dongle
[  230.121870][ T6745] as10x_usb: device has been disconnected
[  230.671046][T10611] syzkaller0: entered promiscuous mode
[  230.673985][T10611] syzkaller0: entered allmulticast mode
[  230.995911][T10615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1276'.
[  231.019033][ T6744] usb 9-1: USB disconnect, device number 25
[  231.506438][ T6744] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  231.620213][T10631] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  231.620213][T10631] 
[  231.626776][T10631] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  231.631813][T10631] CIFS: Attempting to mount //127.0.0.1/share
[  231.654842][ T6744] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  231.657752][ T6744] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  231.660977][ T6744] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  231.664801][ T6744] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  231.668382][ T6744] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  231.673982][ T6744] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  231.679142][ T6744] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  231.681753][ T6744] usb 9-1: Product: syz
[  231.683935][ T6744] usb 9-1: Manufacturer: syz
[  231.688939][ T6744] cdc_wdm 9-1:1.0: skipping garbage
[  231.695668][ T6744] cdc_wdm 9-1:1.0: skipping garbage
[  231.701683][ T6744] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  231.704270][ T6744] cdc_wdm 9-1:1.0: Unknown control protocol
[  231.715642][T10631] CIFS: VFS: Error connecting to socket. Aborting operation.
[  231.721279][T10631] CIFS: VFS: cifs_mount failed w/return code = -4
[  231.954899][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  231.955013][ T6960] usb 9-1: USB disconnect, device number 26
[  231.957745][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  231.957765][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  232.343665][ T6744] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  232.486040][T10641] fuse: fd is not a fuse device
[  232.493944][ T6744] usb 7-1: Using ep0 maxpacket: 32
[  232.498647][ T6744] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  232.502831][ T6744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.509587][ T6744] usb 7-1: config 0 descriptor??
[  232.522898][ T6744] as10x_usb: device has been detected
[  232.527024][ T6744] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  232.538985][ T6744] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  232.548609][ T6744] as10x_usb: error during firmware upload part1
[  232.551929][ T6744] Registered device nBox DVB-T Dongle
[  232.718395][ T6744] usb 7-1: USB disconnect, device number 34
[  232.736975][ T6744] Unregistered device nBox DVB-T Dongle
[  232.738224][ T6744] as10x_usb: device has been disconnected
[  232.927573][T10649] 9pnet: Found fid 0 not clunked
[  233.176184][T10653] nvmet: failed to open file ./fine0: (-2)
[  233.413461][T10659] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0)
[  234.914339][T10698] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long
[  235.140389][T10704] lo speed is unknown, defaulting to 1000
[  235.165239][ T5881] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  235.292110][ T6745] libceph: mon0 (1)127.0.0.1:12345 socket error on write
[  235.315768][ T5881] usb 7-1: Using ep0 maxpacket: 32
[  235.320675][ T6745] libceph: mon0 (1)127.0.0.1:12345 socket error on write
[  235.323344][ T5881] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  235.327330][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.333449][ T5881] usb 7-1: config 0 descriptor??
[  235.346200][ T5881] as10x_usb: device has been detected
[  235.348756][ T5881] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  235.355535][ T5881] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  235.363123][ T5881] as10x_usb: error during firmware upload part1
[  235.366375][ T5881] Registered device nBox DVB-T Dongle
[  235.411544][ T5737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.420677][ T5737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.424764][ T5737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.428196][ T5737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.431095][ T5737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  235.462518][ T5747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.471627][ T5747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.473281][T10716] ceph: No mds server is up or the cluster is laggy
[  235.475843][ T5747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.479499][ T5747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.483233][ T5747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  235.543525][ T5881] usb 7-1: USB disconnect, device number 35
[  235.604090][ T5881] Unregistered device nBox DVB-T Dongle
[  235.611105][ T5881] as10x_usb: device has been disconnected
[  235.624195][ T6745] libceph: mon0 (1)127.0.0.1:12345 socket error on write
[  235.728234][T10721] lo speed is unknown, defaulting to 1000
[  235.889575][T10737] mmap: syz.1.1310 (10737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  235.937530][T10740] 9p: Bad value for 'rfdno'
[  235.975954][T10742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1312'.
[  235.999038][T10742] team0: Port device xfrm0 added
[  236.025998][T10721] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.028404][T10721] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.030904][T10721] bridge_slave_0: entered allmulticast mode
[  236.033865][T10721] bridge_slave_0: entered promiscuous mode
[  236.037576][T10721] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.039916][T10721] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.042421][T10721] bridge_slave_1: entered allmulticast mode
[  236.045087][T10721] bridge_slave_1: entered promiscuous mode
[  236.055045][T10723] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1308'.
[  236.058029][T10723] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  236.065774][T10742] tipc: Enabled bearer <eth:team0>, priority 0
[  236.159661][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.171533][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.214508][T10721] team0: Port device team_slave_0 added
[  236.231967][T10721] team0: Port device team_slave_1 added
[  236.245976][T10721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.248256][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.256766][T10721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.261288][T10721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.263522][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.271792][T10721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.482236][T10752] ceph: No mds server is up or the cluster is laggy
[  236.526971][ T5881] libceph: connect (1)[c::]:6789 error -101
[  236.530882][ T5881] libceph: mon0 (1)[c::]:6789 connect error
[  236.573733][T10721] hsr_slave_0: entered promiscuous mode
[  236.586546][T10721] hsr_slave_1: entered promiscuous mode
[  236.589169][T10721] debugfs: 'hsr0' already exists in 'hsr'
[  236.591122][T10721] Cannot create hsr debugfs directory
[  236.647986][T10749] lo speed is unknown, defaulting to 1000
[  236.930765][T10721] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  236.938238][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  236.944744][T10721] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  236.957085][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  236.960637][T10721] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  236.985709][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  237.044693][T10769] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  237.068273][T10769] CIFS: Attempting to mount //127.0.0.1/share
[  237.110459][T10721] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  237.115527][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  237.268469][T10721] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.291772][T10721] 8021q: adding VLAN 0 to HW filter on device team0
[  237.303578][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.306687][ T8111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.323304][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.326333][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.516634][ T5737] Bluetooth: hci4: command tx timeout
[  237.686360][ T5839] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  237.752266][T10721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.837108][ T5839] usb 7-1: Using ep0 maxpacket: 32
[  237.841339][ T5839] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  237.845263][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.851799][ T5839] usb 7-1: config 0 descriptor??
[  237.860202][ T5839] as10x_usb: device has been detected
[  237.863117][ T5839] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  237.869134][T10769] CIFS: VFS: cifs_mount failed w/return code = -112
[  237.883295][ T5839] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  237.922859][ T5839] as10x_usb: error during firmware upload part1
[  237.928714][ T5839] Registered device nBox DVB-T Dongle
[  238.078119][ T6745] usb 7-1: USB disconnect, device number 36
[  238.098076][T10721] veth0_vlan: entered promiscuous mode
[  238.131603][T10721] veth1_vlan: entered promiscuous mode
[  238.152566][ T6745] Unregistered device nBox DVB-T Dongle
[  238.167984][ T6745] as10x_usb: device has been disconnected
[  238.188426][T10721] veth0_macvtap: entered promiscuous mode
[  238.194941][T10721] veth1_macvtap: entered promiscuous mode
[  238.209001][T10721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.219387][T10721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.266993][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.278174][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.297639][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.343960][T10810] can0: slcan on ttyS3.
[  238.375911][ T8111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.382692][ T8111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.425961][ T8111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.434890][ T8111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.470038][T10756] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.526547][T10813] overlayfs: failed to resolve './cgroup': -2
[  238.607790][T10817] nvmet: failed to open file ./fine0: (-2)
[  238.996062][T10833] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console
[  239.001581][T10833] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  239.649870][T10807] can0 (unregistered): slcan off ttyS3.
[  239.771984][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1330'.
[  239.776156][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1331'.
[  240.050526][T10862] lo speed is unknown, defaulting to 1000
[  240.119735][T10864] nvmet: failed to open file ./fine0: (-2)
[  240.167604][   T41] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  240.184523][T10866] i801_smbus 0000:00:03.0: SMBus using polling
[  240.198649][T10866] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  240.317681][   T41] usb 9-1: Using ep0 maxpacket: 32
[  240.322216][   T41] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  240.326192][   T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.331792][   T41] usb 9-1: config 0 descriptor??
[  240.340330][   T41] as10x_usb: device has been detected
[  240.343281][   T41] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  240.356189][   T41] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  240.364103][   T41] as10x_usb: error during firmware upload part1
[  240.367323][   T41] Registered device nBox DVB-T Dongle
[  240.579206][   T24] usb 9-1: USB disconnect, device number 27
[  240.626084][   T24] Unregistered device nBox DVB-T Dongle
[  240.627017][   T24] as10x_usb: device has been disconnected
[  240.762315][   T42] audit: type=1326 audit(1786132298.493:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[  240.782136][   T42] audit: type=1326 audit(1786132298.493:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feefec code=0x7ffc0000
[  240.800345][   T42] audit: type=1326 audit(1786132298.493:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[  240.810235][   T42] audit: type=1326 audit(1786132298.493:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6feefec code=0x7ffc0000
[  240.821355][   T42] audit: type=1326 audit(1786132298.493:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[  240.838178][   T42] audit: type=1326 audit(1786132298.493:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feefec code=0x7ffc0000
[  240.851989][   T42] audit: type=1326 audit(1786132298.493:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[  240.861667][   T42] audit: type=1326 audit(1786132298.493:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6feefec code=0x7ffc0000
[  240.870537][   T42] audit: type=1326 audit(1786132298.503:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[  240.870586][   T42] audit: type=1326 audit(1786132298.503:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.2.1337" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6feefec code=0x7ffc0000
[  241.118205][ T5737] Bluetooth: hci4: command tx timeout
[  241.190173][T10885] lo speed is unknown, defaulting to 1000
[  241.196848][ T5811] libceph: connect (1)[c::]:6789 error -101
[  241.201904][ T5811] libceph: mon0 (1)[c::]:6789 connect error
[  241.235282][T10887] ceph: No mds server is up or the cluster is laggy
[  241.459465][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1346'.
[  241.463788][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1346'.
[  241.688382][ T6745] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  241.828650][ T6745] usb 9-1: device descriptor read/64, error -71
[  242.068620][ T6745] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  242.198686][ T6745] usb 9-1: device descriptor read/64, error -71
[  242.314105][ T6745] usb usb9-port1: attempt power cycle
[  242.699140][ T6745] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  243.160849][ T6745] usb 9-1: device descriptor read/8, error -71
[  243.199160][ T5737] Bluetooth: hci4: command tx timeout
[  243.374159][T10928] nvmet: failed to open file ./fine0: (-2)
[  243.406526][T10933] netlink: 'syz.6.1358': attribute type 2 has an invalid length.
[  243.499200][ T6745] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  243.520925][ T6745] usb 9-1: device descriptor read/8, error -71
[  243.531648][   T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  243.597421][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'.
[  243.603003][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'.
[  243.629476][ T6745] usb usb9-port1: unable to enumerate USB device
[  243.631219][T10938] tipc: Resetting bearer <eth:team0>
[  243.633520][T10938] tipc: Resetting bearer <eth:team0>
[  243.638121][T10938] tipc: Resetting bearer <ib:wg2>
[  243.641150][T10938] tipc: Resetting bearer <ib:wg2>
[  243.656158][ T8116] tipc: Resetting bearer <eth:team0>
[  243.695468][   T24] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  243.700385][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  243.703565][   T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  243.707755][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  243.711158][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  243.714353][   T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  243.717959][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  243.722209][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  243.725188][   T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  243.728819][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  243.735006][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  243.737988][   T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  243.741837][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  243.744775][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  243.748286][   T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  243.753727][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  243.756784][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  243.760675][   T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  243.764586][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  243.777193][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  243.780204][   T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  243.783700][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  243.786903][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  243.790167][   T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  243.793646][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  243.798167][   T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  243.802609][   T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  243.805392][   T24] usb 7-1: Product: syz
[  243.807321][   T24] usb 7-1: Manufacturer: syz
[  243.808899][   T24] usb 7-1: SerialNumber: syz
[  243.816471][   T24] usb 7-1: config 0 descriptor??
[  243.824181][   T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  244.029966][ T6745] usb 7-1: USB disconnect, device number 37
[  244.040215][ T6745] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  244.064845][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1363'.
[  244.198594][T10962] nvmet: failed to open file ./fine0: (-2)
[  244.278785][T10964] syzkaller0: entered promiscuous mode
[  244.280781][T10964] syzkaller0: entered allmulticast mode
[  246.469657][T10993] file system registered
[  246.477373][T10993] read descriptors
[  246.491172][    C0] e1000e 0000:00:02.0 eth1: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  246.547285][ T5881] e1000e 0000:00:02.0 eth1: Reset adapter unexpectedly
[  246.574329][ T5881] e1000e 0000:00:02.0: Interrupt Throttle Rate off
[  246.694211][T11005] nvmet: failed to open file ./fine0: (-2)
[  247.559351][T11028] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  247.564437][T11028] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  247.569421][T11028] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  250.110482][ T5881] e1000e 0000:00:02.0 eth1: Hardware Error
[  250.300488][ T5881] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[  250.335223][T10999] netlink: 'syz.2.1372': attribute type 4 has an invalid length.
[  250.349666][T11022] batadv_slave_1: entered promiscuous mode
[  250.355834][T11023] batadv_slave_1: left promiscuous mode
[  250.384323][ T6671] ffs_data_put(): freeing
[  250.488911][T11035] nvmet: failed to open file ./fine0: (-2)
[  250.571239][T11044] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  250.581672][T11042] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  250.587072][T11039] option changes via remount are deprecated (pid=11038 comm=syz.2.1385)
[  250.662032][T11052] FAULT_INJECTION: forcing a failure.
[  250.662032][T11052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.689286][T11052] CPU: 0 UID: 0 PID: 11052 Comm: syz.6.1388 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  250.689309][T11052] Tainted: [L]=SOFTLOCKUP
[  250.689313][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  250.689319][T11052] Call Trace:
[  250.689324][T11052]  <TASK>
[  250.689329][T11052]  dump_stack_lvl+0x100/0x190
[  250.689348][T11052]  should_fail_ex.cold+0x5/0xa
[  250.689361][T11052]  _copy_from_user+0x2e/0xd0
[  250.689381][T11052]  move_addr_to_kernel+0x65/0x170
[  250.689395][T11052]  __sys_sendto+0x1b8/0x4e0
[  250.689410][T11052]  ? __pfx___sys_sendto+0x10/0x10
[  250.689434][T11052]  ? fput+0x79/0x100
[  250.689448][T11052]  ? ksys_write+0x1ac/0x250
[  250.689460][T11052]  __ia32_sys_sendto+0xdd/0x1b0
[  250.689474][T11052]  ? __do_fast_syscall_32+0x98/0x970
[  250.689492][T11052]  ? lockdep_hardirqs_on+0x78/0x100
[  250.689508][T11052]  __do_fast_syscall_32+0xe7/0x970
[  250.689533][T11052]  ? lockdep_hardirqs_on+0x78/0x100
[  250.689549][T11052]  do_fast_syscall_32+0x32/0x70
[  250.689567][T11052]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  250.689581][T11052] RIP: 0023:0xf703efec
[  250.689595][T11052] Code: Unable to access opcode bytes at 0xf703efc2.
[  250.689601][T11052] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171
[  250.689613][T11052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  250.689620][T11052] RDX: 0000000000000004 RSI: 0000000000000050 RDI: 0000000080000080
[  250.689627][T11052] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000
[  250.689634][T11052] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  250.689641][T11052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  250.689654][T11052]  </TASK>
[  250.921911][T11069] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1393'.
[  251.119405][T11082] nvmet: failed to open file ./fine0: (-2)
[  251.239764][T11087] batadv_slave_1: entered promiscuous mode
[  251.247265][T11087] batadv_slave_1: left promiscuous mode
[  251.821629][T11104] netlink: 'syz.6.1398': attribute type 2 has an invalid length.
[  251.839315][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'.
[  251.854709][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'.
[  252.313016][T11119] fuse: fd is not a fuse device
[  252.366474][T11123] lo speed is unknown, defaulting to 1000
[  252.648828][T11133] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1403'.
[  252.701210][T11135] nvmet: failed to open file ./fine0: (-2)
[  252.819702][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1405'.
[  252.945419][T11139] usb 1-1: USB disconnect, device number 2
[  253.345768][T11141] hub 1-0:1.0: USB hub found
[  253.352349][T11141] hub 1-0:1.0: 2 ports detected
[  253.417411][T11153] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1407'.
[  253.534248][ T5553] usb 1-1: new full-speed USB device number 3 using uhci_hcd
[  253.669651][T11172] 9pnet_virtio: no channels available for device syz
[  253.673409][T11172] overlayfs: overlapping lowerdir path
[  253.766658][ T5553] usb 1-1: not running at top speed; connect to a high speed hub
[  253.832334][ T5553] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00
[  253.840723][ T5553] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10
[  253.843936][ T5553] usb 1-1: Product: QEMU USB Tablet
[  253.848948][ T5553] usb 1-1: Manufacturer: QEMU
[  253.850821][ T5553] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1
[  253.893314][ T5553] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0005/input/input18
[  253.895195][ T5826] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  253.981363][ T5553] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0
[  254.072064][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.093112][ T5826] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  254.108914][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.141610][ T5826] usb 9-1: config 0 descriptor??
[  254.157426][T11191] batadv_slave_1: entered promiscuous mode
[  254.167714][T11191] batadv_slave_1: left promiscuous mode
[  254.384858][ T5826] usbhid 9-1:0.0: can't add hid device: -71
[  254.390468][ T5826] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  254.450918][ T5826] usb 9-1: USB disconnect, device number 32
[  254.605638][T11199] nvme_tcp: malformed address passed: 127.0.0.1:44.0
[  254.865669][ T5826] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  255.032768][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.048114][ T5826] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  255.061252][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.149076][ T5826] usb 9-1: config 0 descriptor??
[  255.209145][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'.
[  255.288242][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  255.703319][T11238] batadv_slave_1: entered promiscuous mode
[  255.705866][T11238] batadv_slave_1: left promiscuous mode
[  255.768412][T11241] i801_smbus 0000:00:03.0: SMBus using polling
[  255.796654][T11241] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  255.858528][T11241] i801_smbus 0000:00:05.0: SMBus using polling
[  255.955190][T11241] i2c i2c-3: Memory type 0x07 not supported yet, not instantiating SPD
[  255.956896][T11252] FAULT_INJECTION: forcing a failure.
[  255.956896][T11252] name failslab, interval 1, probability 0, space 0, times 0
[  255.964607][T11252] CPU: 0 UID: 0 PID: 11252 Comm: syz.2.1429 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  255.964627][T11252] Tainted: [L]=SOFTLOCKUP
[  255.964632][T11252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  255.964639][T11252] Call Trace:
[  255.964644][T11252]  <TASK>
[  255.964650][T11252]  dump_stack_lvl+0x100/0x190
[  255.964670][T11252]  should_fail_ex.cold+0x5/0xa
[  255.964684][T11252]  should_failslab+0xc2/0x120
[  255.964701][T11252]  kmem_cache_alloc_noprof+0x91/0x6a0
[  255.964717][T11252]  ? mas_preallocate+0x1105/0x14a0
[  255.964757][T11252]  mas_preallocate+0x1105/0x14a0
[  255.964772][T11252]  ? __pfx_mas_preallocate+0x10/0x10
[  255.964789][T11252]  ? anon_vma_name+0x5a/0x250
[  255.964810][T11252]  __split_vma+0x33d/0xda0
[  255.964824][T11252]  ? __pfx___split_vma+0x10/0x10
[  255.964840][T11252]  ? vma_merge_new_range+0x468/0xc00
[  255.964856][T11252]  vms_gather_munmap_vmas+0x1d2/0x1720
[  255.964872][T11252]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  255.964885][T11252]  ? alloc_new_pud+0x217/0x320
[  255.964898][T11252]  ? get_old_pud+0xd8/0x360
[  255.964910][T11252]  ? move_page_tables+0x11c/0x4610
[  255.964924][T11252]  ? __pfx_copy_vma+0x10/0x10
[  255.964942][T11252]  do_vmi_align_munmap+0x287/0x5f0
[  255.964957][T11252]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  255.964990][T11252]  do_vmi_munmap+0x1f8/0x3e0
[  255.965005][T11252]  move_vma+0xe5b/0x1920
[  255.965020][T11252]  ? __pfx_move_vma+0x10/0x10
[  255.965034][T11252]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  255.965056][T11252]  ? vrm_set_new_addr+0x204/0x290
[  255.965071][T11252]  mremap_to+0x234/0x4c0
[  255.965084][T11252]  ? __pfx_mremap_to+0x10/0x10
[  255.965096][T11252]  ? check_prep_vma+0x912/0xe60
[  255.965111][T11252]  __do_sys_mremap+0xb3e/0x1850
[  255.965129][T11252]  ? __pfx___do_sys_mremap+0x10/0x10
[  255.965142][T11252]  ? find_held_lock+0x2b/0x80
[  255.965157][T11252]  ? ksys_write+0x190/0x250
[  255.965168][T11252]  ? ksys_write+0x190/0x250
[  255.965181][T11252]  ? __mutex_unlock_slowpath+0x35d/0x930
[  255.965201][T11252]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  255.965219][T11252]  ? __fget_files+0x21f/0x3d0
[  255.965235][T11252]  ? __pfx_ksys_write+0x10/0x10
[  255.965249][T11252]  __do_fast_syscall_32+0xe7/0x970
[  255.965266][T11252]  ? lockdep_hardirqs_on+0x78/0x100
[  255.965297][T11252]  do_fast_syscall_32+0x32/0x70
[  255.965320][T11252]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  255.965335][T11252] RIP: 0023:0xf6feefec
[  255.965350][T11252] Code: Unable to access opcode bytes at 0xf6feefc2.
[  255.965355][T11252] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000a3
[  255.965368][T11252] RAX: ffffffffffffffda RBX: 0000000080a96000 RCX: 0000000000001000
[  255.965375][T11252] RDX: 0000000000800000 RSI: 0000000000000003 RDI: 0000000080130000
[  255.965381][T11252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  255.965388][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.965394][T11252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  255.965408][T11252]  </TASK>
[  256.164040][T11257] i801_smbus 0000:00:05.0: SMBus using polling
[  256.178811][T11257] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  256.660465][ T5826] usbhid 9-1:0.0: can't add hid device: -71
[  256.663481][ T5826] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  256.674802][T11268] netlink: 'syz.6.1435': attribute type 1 has an invalid length.
[  256.678692][T11268] netlink: 'syz.6.1435': attribute type 1 has an invalid length.
[  256.684822][T11268] CUSE: DEVNAME unspecified
[  256.689266][ T5826] usb 9-1: USB disconnect, device number 33
[  256.912389][T11285] 9p: Bad value for 'wfdno'
[  256.955876][T11287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1437'.
[  257.580600][T11304] CIFS: Attempting to mount //127.0.0.1/share
[  257.781803][T11306] i801_smbus 0000:00:05.0: SMBus using polling
[  257.850380][T11306] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  257.857785][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'.
[  257.865843][T11308] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  257.865843][T11308] 
[  257.874758][T11308] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  258.019545][T11315] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  258.019545][T11315] 
[  258.024638][T11315] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  258.412542][T11304] CIFS: VFS: Error connecting to socket. Aborting operation.
[  258.424457][T11304] CIFS: VFS: cifs_mount failed w/return code = -4
[  258.433833][T11308] CIFS: Attempting to mount //127.0.0.1/share
[  258.438058][T11318] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1450'.
[  258.444685][T11318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.508964][T11322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.514014][T11322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.608989][T11308] CIFS: VFS: cifs_mount failed w/return code = -112
[  258.620380][T11315] CIFS: Attempting to mount //127.0.0.1/share
[  258.626550][T11315] CIFS: VFS: Error connecting to socket. Aborting operation.
[  258.632747][T11315] CIFS: VFS: cifs_mount failed w/return code = -4
[  260.321466][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'.
[  260.677184][T11381] batadv_slave_1: entered promiscuous mode
[  260.679991][T11381] batadv_slave_1: left promiscuous mode
[  260.764508][T11385] netlink: 'syz.6.1471': attribute type 5 has an invalid length.
[  260.847905][ T5881] usb 9-1: new low-speed USB device number 34 using dummy_hcd
[  260.977957][ T5881] usb 9-1: device descriptor read/64, error -71
[  261.069992][   T41] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  261.077766][T11397] 8021q: adding VLAN 0 to HW filter on device bond4
[  261.103585][T11397] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xbd69 instead
[  261.107809][T11397] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  261.120224][T11397] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  261.229783][   T41] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.233177][   T41] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  261.238294][ T5881] usb 9-1: new low-speed USB device number 35 using dummy_hcd
[  261.241206][   T41] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  261.245984][   T41] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.265906][   T41] usb 11-1: config 0 descriptor??
[  261.268092][   T41] usbhid 11-1:0.0: couldn't find an input interrupt endpoint
[  261.304557][T11405] Config c/1 of g1 needs at least one function.
[  261.309130][T11405] udc dummy_udc.0: failed to start g1: -22
[  261.311154][T11405] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  261.322925][T11405] UDC core: g1: couldn't find an available UDC or it's busy
[  261.370710][ T5881] usb 9-1: device descriptor read/64, error -71
[  261.471193][   T41] usb 11-1: USB disconnect, device number 2
[  261.478851][ T5881] usb usb9-port1: attempt power cycle
[  261.814753][T11413] batadv_slave_1: entered promiscuous mode
[  261.817235][T11413] batadv_slave_1: left promiscuous mode
[  261.819745][ T5881] usb 9-1: new low-speed USB device number 36 using dummy_hcd
[  261.838873][ T5881] usb 9-1: device descriptor read/8, error -71
[  261.928896][ T5553] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  262.020656][T11419] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1482'.
[  262.090920][ T5881] usb 9-1: new low-speed USB device number 37 using dummy_hcd
[  262.104264][ T5553] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.117588][ T5553] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  262.133276][ T5881] usb 9-1: device descriptor read/8, error -71
[  262.144892][ T5553] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  262.155924][ T5553] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.170425][ T5553] usb 11-1: Product: syz
[  262.181516][ T5553] usb 11-1: Manufacturer: syz
[  262.188265][ T5553] usb 11-1: SerialNumber: syz
[  262.197687][T11428] 9pnet_virtio: no channels available for device syz
[  262.233427][ T5553] usbhid 11-1:1.0: couldn't find an input interrupt endpoint
[  262.253049][ T5881] usb usb9-port1: unable to enumerate USB device
[  262.433174][ T5553] usb 11-1: USB disconnect, device number 3
[  263.014144][T11437] batadv_slave_1: entered promiscuous mode
[  263.017063][T11437] batadv_slave_1: left promiscuous mode
[  263.148608][T11440] i801_smbus 0000:00:03.0: SMBus using polling
[  263.177145][T11440] i2c i2c-3: Memory type 0x07 not supported yet, not instantiating SPD
[  263.213172][T11440] i801_smbus 0000:00:05.0: SMBus using polling
[  263.246568][T11440] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  263.263301][T11447] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  264.074497][T11465] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1496'.
[  264.128347][T11465] bond5: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms
[  264.145494][T11467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1496'.
[  264.157096][T11467] bond5: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms
[  264.531209][ T6744] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  264.707919][ T6744] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  264.722392][ T6744] usb 7-1: config 0 has no interface number 0
[  264.731570][ T6744] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  264.747610][ T6744] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  264.755292][ T6744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.764640][ T6744] usb 7-1: Product: syz
[  264.766042][ T6744] usb 7-1: Manufacturer: syz
[  264.771821][ T6744] usb 7-1: SerialNumber: syz
[  264.777198][T11473] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1498'.
[  264.783737][ T6744] usb 7-1: config 0 descriptor??
[  264.811724][ T6744] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[  265.033159][ T5881] usb 7-1: USB disconnect, device number 38
[  265.037214][ T5881] yurex 7-1:0.50: USB YUREX #0 now disconnected
[  265.246688][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'.
[  265.406569][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1492'.
[  265.562203][T11497] i801_smbus 0000:00:03.0: SMBus using polling
[  265.598633][T11497] i2c i2c-3: Memory type 0x07 not supported yet, not instantiating SPD
[  265.614076][T11497] i801_smbus 0000:00:05.0: SMBus using polling
[  265.631370][T11497] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  266.121495][ T5826] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  266.190060][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'.
[  266.282896][ T5826] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  266.285938][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.288741][ T5826] usb 7-1: Product: syz
[  266.290261][ T5826] usb 7-1: Manufacturer: syz
[  266.292407][ T5826] usb 7-1: SerialNumber: syz
[  266.297520][ T5826] usb 7-1: config 0 descriptor??
[  266.524899][ T5826] usb 7-1: USB disconnect, device number 39
[  266.539164][T11513] batadv_slave_1: entered promiscuous mode
[  266.560123][T11513] batadv_slave_1: left promiscuous mode
[  267.160662][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  268.388330][T11552] batadv_slave_1: entered promiscuous mode
[  268.391147][T11552] batadv_slave_1: left promiscuous mode
[  268.435129][T11549] batadv0: entered promiscuous mode
[  268.466799][T11549] 8021q: adding VLAN 0 to HW filter on device hsr1
[  268.508985][T11557] FAULT_INJECTION: forcing a failure.
[  268.508985][T11557] name failslab, interval 1, probability 0, space 0, times 0
[  268.527769][T11557] CPU: 0 UID: 0 PID: 11557 Comm: syz.6.1519 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  268.527791][T11557] Tainted: [L]=SOFTLOCKUP
[  268.527795][T11557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  268.527802][T11557] Call Trace:
[  268.527807][T11557]  <TASK>
[  268.527811][T11557]  dump_stack_lvl+0x100/0x190
[  268.527829][T11557]  should_fail_ex.cold+0x5/0xa
[  268.527842][T11557]  should_failslab+0xc2/0x120
[  268.527860][T11557]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  268.527875][T11557]  ? __alloc_skb+0x5b7/0x710
[  268.527891][T11557]  ? __alloc_skb+0x140/0x710
[  268.527907][T11557]  __alloc_skb+0x140/0x710
[  268.527922][T11557]  ? __alloc_skb+0x5b7/0x710
[  268.527936][T11557]  ? __pfx___alloc_skb+0x10/0x10
[  268.527954][T11557]  netlink_alloc_large_skb+0x69/0x150
[  268.527969][T11557]  netlink_sendmsg+0x680/0xda0
[  268.527984][T11557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.527998][T11557]  ? apparmor_socket_sendmsg+0x15b/0x270
[  268.528012][T11557]  ____sys_sendmsg+0xa4d/0xbe0
[  268.528024][T11557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.528037][T11557]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.528055][T11557]  ___sys_sendmsg+0x190/0x1e0
[  268.528068][T11557]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.528086][T11557]  ? find_held_lock+0x2b/0x80
[  268.528108][T11557]  __sys_sendmsg+0x160/0x210
[  268.528125][T11557]  ? __pfx___sys_sendmsg+0x10/0x10
[  268.528144][T11557]  ? __pfx_ksys_write+0x10/0x10
[  268.528158][T11557]  __do_fast_syscall_32+0xe7/0x970
[  268.528175][T11557]  ? lockdep_hardirqs_on+0x78/0x100
[  268.528192][T11557]  do_fast_syscall_32+0x32/0x70
[  268.528209][T11557]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  268.528224][T11557] RIP: 0023:0xf703efec
[  268.528237][T11557] Code: Unable to access opcode bytes at 0xf703efc2.
[  268.528243][T11557] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  268.528259][T11557] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001ac0
[  268.528266][T11557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  268.528273][T11557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  268.528279][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.528286][T11557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  268.528300][T11557]  </TASK>
[  268.603367][T11549] batadv0: left promiscuous mode
[  269.398616][T11575] sctp: [Deprecated]: syz.1.1523 (pid 11575) Use of int in max_burst socket option.
[  269.398616][T11575] Use struct sctp_assoc_value instead
[  269.947972][T11582] cgroup: Unknown subsys name 'rlimit'
[  270.004873][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1528'.
[  270.008648][T11587] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  271.302822][T11604] read descriptors
[  271.339605][ T5732] ffs_data_put(): freeing
[  271.456865][T11608] i801_smbus 0000:00:03.0: SMBus using polling
[  271.491056][T11608] i2c i2c-3: Memory type 0x07 not supported yet, not instantiating SPD
[  271.538247][T11608] i801_smbus 0000:00:05.0: SMBus using polling
[  271.561025][T11608] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  271.633286][ T5826] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  271.785499][ T5826] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.789503][ T5826] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  271.798134][ T5826] usb 11-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  271.801180][ T5826] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.805657][ T5826] usb 11-1: Product: syz
[  271.808569][ T5826] usb 11-1: Manufacturer: syz
[  271.811576][ T5826] usb 11-1: SerialNumber: syz
[  271.817631][ T5826] usb 11-1: config 0 descriptor??
[  271.826878][ T5826] ums-isd200 11-1:0.0: USB Mass Storage device detected
[  272.024152][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1534'.
[  272.028450][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1534'.
[  272.276236][T11619] batadv_slave_1: entered promiscuous mode
[  272.281171][T11619] batadv_slave_1: left promiscuous mode
[  272.333330][T11621] Invalid ELF header magic: != ELF
[  272.556529][   T24] usb 11-1: USB disconnect, device number 4
[  272.704552][ T5826] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  272.834850][ T5826] usb 7-1: device descriptor read/64, error -71
[  273.073942][ T5826] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  273.206312][ T5826] usb 7-1: device descriptor read/64, error -71
[  273.256030][T11645] FAULT_INJECTION: forcing a failure.
[  273.256030][T11645] name failslab, interval 1, probability 0, space 0, times 0
[  273.284114][T11645] CPU: 0 UID: 0 PID: 11645 Comm: syz.6.1542 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  273.284136][T11645] Tainted: [L]=SOFTLOCKUP
[  273.284141][T11645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  273.284148][T11645] Call Trace:
[  273.284153][T11645]  <TASK>
[  273.284158][T11645]  dump_stack_lvl+0x100/0x190
[  273.284176][T11645]  should_fail_ex.cold+0x5/0xa
[  273.284191][T11645]  should_failslab+0xc2/0x120
[  273.284208][T11645]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  273.284224][T11645]  ? __alloc_skb+0x140/0x710
[  273.284242][T11645]  __alloc_skb+0x140/0x710
[  273.284255][T11645]  ? __alloc_skb+0x5b7/0x710
[  273.284269][T11645]  ? __pfx___alloc_skb+0x10/0x10
[  273.284284][T11645]  ? trace_contention_end+0x126/0x160
[  273.284296][T11645]  ? __mutex_lock+0x26d/0x1bd0
[  273.284314][T11645]  netlink_dump+0x194/0xd00
[  273.284328][T11645]  ? __pfx_netlink_dump+0x10/0x10
[  273.284338][T11645]  ? __netlink_lookup+0x65c/0x900
[  273.284358][T11645]  __netlink_dump_start+0x6d6/0x990
[  273.284372][T11645]  ? __pfx_rtnl_dump_all+0x10/0x10
[  273.284392][T11645]  rtnetlink_rcv_msg+0xb3e/0xe90
[  273.284409][T11645]  ? __pfx_rtnl_dump_all+0x10/0x10
[  273.284423][T11645]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  273.284440][T11645]  ? __lock_acquire+0x49f/0x1a40
[  273.284457][T11645]  ? __pfx_rtnl_dumpit+0x10/0x10
[  273.284469][T11645]  ? __pfx_rtnl_dump_all+0x10/0x10
[  273.284487][T11645]  netlink_rcv_skb+0x159/0x420
[  273.284500][T11645]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  273.284518][T11645]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  273.284535][T11645]  ? rcu_is_watching+0x12/0xc0
[  273.284552][T11645]  netlink_unicast+0x585/0x850
[  273.284567][T11645]  ? __pfx_netlink_unicast+0x10/0x10
[  273.284583][T11645]  netlink_sendmsg+0x8b0/0xda0
[  273.284598][T11645]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.284612][T11645]  ? apparmor_socket_sendmsg+0x15b/0x270
[  273.284628][T11645]  sock_write_iter+0x53a/0x5b0
[  273.284639][T11645]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.284652][T11645]  ? __pfx_sock_write_iter+0x10/0x10
[  273.284666][T11645]  ? bpf_lsm_file_permission+0x9/0x10
[  273.284677][T11645]  ? security_file_permission+0x76/0x210
[  273.284694][T11645]  ? rw_verify_area+0xce/0x6d0
[  273.284712][T11645]  vfs_write+0x6ac/0x1050
[  273.284723][T11645]  ? __pfx_sock_write_iter+0x10/0x10
[  273.284735][T11645]  ? __pfx_vfs_write+0x10/0x10
[  273.284745][T11645]  ? find_held_lock+0x2b/0x80
[  273.284767][T11645]  ksys_write+0x1f8/0x250
[  273.284778][T11645]  ? __pfx_ksys_write+0x10/0x10
[  273.284787][T11645]  ? ksys_write+0x1ac/0x250
[  273.284797][T11645]  ? __pfx_ksys_write+0x10/0x10
[  273.284811][T11645]  __do_fast_syscall_32+0xe7/0x970
[  273.284828][T11645]  ? lockdep_hardirqs_on+0x78/0x100
[  273.284845][T11645]  do_fast_syscall_32+0x32/0x70
[  273.284862][T11645]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  273.284876][T11645] RIP: 0023:0xf703efec
[  273.284891][T11645] Code: Unable to access opcode bytes at 0xf703efc2.
[  273.284896][T11645] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  273.284908][T11645] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  273.284916][T11645] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000
[  273.284922][T11645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  273.284928][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.284935][T11645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  273.284948][T11645]  </TASK>
[  273.314486][ T5826] usb usb7-port1: attempt power cycle
[  273.844356][   T24] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  273.864495][ T5826] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  273.885075][ T5826] usb 7-1: device descriptor read/8, error -71
[  274.004531][   T24] usb 11-1: too many configurations: 9, using maximum allowed: 8
[  274.008677][   T24] usb 11-1: invalid descriptor for config index 0: type = 0x2, length = 223
[  274.011646][   T24] usb 11-1: can't read configurations, error -22
[  274.125253][ T5826] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  274.144579][   T24] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  274.147766][ T5826] usb 7-1: device descriptor read/8, error -71
[  274.254806][ T5826] usb usb7-port1: unable to enumerate USB device
[  274.295091][   T24] usb 11-1: too many configurations: 9, using maximum allowed: 8
[  274.298708][   T24] usb 11-1: invalid descriptor for config index 0: type = 0x2, length = 223
[  274.302963][   T24] usb 11-1: can't read configurations, error -22
[  274.308033][   T24] usb usb11-port1: attempt power cycle
[  274.444711][   T41] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  274.594770][   T41] usb 9-1: Using ep0 maxpacket: 32
[  274.598517][   T41] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  274.601478][   T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.605951][   T41] usb 9-1: config 0 descriptor??
[  274.611069][   T41] as10x_usb: device has been detected
[  274.613142][   T41] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  274.619784][   T41] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  274.632772][   T41] as10x_usb: error during firmware upload part1
[  274.635362][   T41] Registered device nBox DVB-T Dongle
[  274.645049][   T24] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  274.666005][   T24] usb 11-1: too many configurations: 9, using maximum allowed: 8
[  274.669504][   T24] usb 11-1: invalid descriptor for config index 0: type = 0x2, length = 223
[  274.672404][   T24] usb 11-1: can't read configurations, error -22
[  274.804839][   T24] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  274.811331][ T5881] usb 9-1: USB disconnect, device number 38
[  274.827059][   T24] usb 11-1: too many configurations: 9, using maximum allowed: 8
[  274.831940][   T24] usb 11-1: invalid descriptor for config index 0: type = 0x2, length = 223
[  274.836214][   T24] usb 11-1: can't read configurations, error -22
[  274.837812][ T5881] Unregistered device nBox DVB-T Dongle
[  274.839332][   T24] usb usb11-port1: unable to enumerate USB device
[  274.841908][ T5881] as10x_usb: device has been disconnected
[  275.524775][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1553'.
[  275.530178][T11686] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1553'.
[  275.596367][   T41] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  275.725362][   T41] usb 9-1: device descriptor read/64, error -71
[  275.933323][T11693] 9pnet_virtio: no channels available for device syz
[  275.965466][   T41] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  276.098103][   T41] usb 9-1: device descriptor read/64, error -71
[  276.206797][   T41] usb usb9-port1: attempt power cycle
[  276.452274][T11696] batadv_slave_1: entered promiscuous mode
[  276.454919][T11696] batadv_slave_1: left promiscuous mode
[  276.545775][   T41] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  276.569971][   T41] usb 9-1: device descriptor read/8, error -71
[  276.815843][   T41] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  276.836547][   T41] usb 9-1: device descriptor read/8, error -71
[  276.878020][   T42] kauditd_printk_skb: 30 callbacks suppressed
[  276.878035][   T42] audit: type=1804 audit(1786132334.594:170): pid=11713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1559" name="bus" dev="ramfs" ino=42171 res=1 errno=0
[  276.897277][   T42] audit: type=1804 audit(1786132334.594:171): pid=11713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1559" name="bus" dev="ramfs" ino=42171 res=1 errno=0
[  276.946440][   T41] usb usb9-port1: unable to enumerate USB device
[  278.379284][T11741] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  278.379284][T11741] 
[  278.388806][T11741] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  278.395830][T11741] CIFS: Attempting to mount //127.0.0.1/share
[  278.412210][T11744] syz_tun: entered allmulticast mode
[  278.419152][T11743] syz_tun: left allmulticast mode
[  278.477777][T11741] CIFS: VFS: Error connecting to socket. Aborting operation.
[  278.482692][T11741] CIFS: VFS: cifs_mount failed w/return code = -4
[  279.182555][T11765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1577'.
[  279.242606][T11764] comedi comedi3: pcmmio: I/O base address not correctly aligned
[  279.463226][T11773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  279.492808][T11781] FAULT_INJECTION: forcing a failure.
[  279.492808][T11781] name failslab, interval 1, probability 0, space 0, times 0
[  279.497689][T11781] CPU: 2 UID: 0 PID: 11781 Comm: syz.6.1585 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  279.497709][T11781] Tainted: [L]=SOFTLOCKUP
[  279.497713][T11781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  279.497720][T11781] Call Trace:
[  279.497724][T11781]  <TASK>
[  279.497729][T11781]  dump_stack_lvl+0x100/0x190
[  279.497749][T11781]  should_fail_ex.cold+0x5/0xa
[  279.497763][T11781]  should_failslab+0xc2/0x120
[  279.497780][T11781]  kmem_cache_alloc_noprof+0x91/0x6a0
[  279.497796][T11781]  ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  279.497811][T11781]  __kvm_mmu_topup_memory_cache+0x18f/0x5f0
[  279.497828][T11781]  mmu_topup_memory_caches+0x25/0x170
[  279.497852][T11781]  kvm_mmu_load+0xe2/0x2570
[  279.497866][T11781]  ? kvm_apic_has_interrupt+0xfe/0x1f0
[  279.497885][T11781]  ? __pfx_kvm_apic_has_interrupt+0x10/0x10
[  279.497903][T11781]  ? vmx_get_rflags+0x104/0x440
[  279.497920][T11781]  ? kvm_apic_accept_pic_intr+0xdf/0x1b0
[  279.497937][T11781]  ? __pfx_kvm_mmu_load+0x10/0x10
[  279.497951][T11781]  ? kvm_cpu_has_injectable_intr+0x9c/0x1a0
[  279.497964][T11781]  ? kvm_check_and_inject_events+0x873/0x12a0
[  279.497979][T11781]  ? record_steal_time+0x3e0/0xbb0
[  279.497999][T11781]  vcpu_run+0x3aaa/0x5de0
[  279.498014][T11781]  ? vmx_vcpu_load_vmcs+0x21d/0x760
[  279.498036][T11781]  ? __pfx_vcpu_run+0x10/0x10
[  279.498056][T11781]  ? rcu_is_watching+0x12/0xc0
[  279.498073][T11781]  ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  279.498089][T11781]  kvm_arch_vcpu_ioctl_run+0x103d/0x1960
[  279.498108][T11781]  kvm_vcpu_ioctl+0x730/0x1700
[  279.498120][T11781]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  279.498132][T11781]  ? tomoyo_path_number_perm+0x188/0x580
[  279.498148][T11781]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  279.498162][T11781]  ? get_pid_task+0x106/0x250
[  279.498180][T11781]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  279.498198][T11781]  ? do_vfs_ioctl+0x226/0x13e0
[  279.498215][T11781]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  279.498238][T11781]  kvm_vcpu_compat_ioctl+0x20f/0x3c0
[  279.498250][T11781]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  279.498261][T11781]  ? __fget_files+0x21f/0x3d0
[  279.498275][T11781]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  279.498287][T11781]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  279.498325][T11781]  __do_fast_syscall_32+0xe7/0x970
[  279.498343][T11781]  ? lockdep_hardirqs_on+0x78/0x100
[  279.498360][T11781]  do_fast_syscall_32+0x32/0x70
[  279.498377][T11781]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  279.498392][T11781] RIP: 0023:0xf703efec
[  279.498406][T11781] Code: Unable to access opcode bytes at 0xf703efc2.
[  279.498411][T11781] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  279.498423][T11781] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80
[  279.498430][T11781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  279.498437][T11781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  279.498444][T11781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.498450][T11781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  279.498464][T11781]  </TASK>
[  279.765309][T11795] netlink: 'syz.1.1588': attribute type 1 has an invalid length.
[  279.859553][T11791] gretap1: entered promiscuous mode
[  280.204073][T11814] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  280.204073][T11814] 
[  280.213404][T11814] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  280.222369][T11814] CIFS: Attempting to mount //127.0.0.1/share
[  280.267137][T11814] CIFS: VFS: cifs_mount failed w/return code = -112
[  280.368208][T11819] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  280.368208][T11819] 
[  280.373121][T11819] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  280.377338][T11819] CIFS: Attempting to mount //127.0.0.1/share
[  280.461773][T11819] CIFS: VFS: Error connecting to socket. Aborting operation.
[  280.464562][T11819] CIFS: VFS: cifs_mount failed w/return code = -4
[  280.843029][T11823] syz.6.1599 (11823): drop_caches: 2
[  281.050107][T11830] wlan0 speed is unknown, defaulting to 1000
[  281.057462][T11830] wlan0 speed is unknown, defaulting to 1000
[  281.068235][T11830] wlan0 speed is unknown, defaulting to 1000
[  281.076252][T11830] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  281.096788][T11830] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  281.123404][T11830] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  281.145062][T11830] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  281.190417][T11830] wlan0 speed is unknown, defaulting to 1000
[  281.215145][T11830] wlan0 speed is unknown, defaulting to 1000
[  281.225572][T11830] wlan0 speed is unknown, defaulting to 1000
[  281.235735][T11830] wlan0 speed is unknown, defaulting to 1000
[  281.247611][T11830] wlan0 speed is unknown, defaulting to 1000
[  281.441754][T11840] fuse: Bad value for 'fd'
[  281.542052][T11845] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  281.542052][T11845] 
[  281.562846][T11845] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  281.577974][T11845] CIFS: Attempting to mount //127.0.0.1/share
[  281.872388][T11845] CIFS: VFS: Error connecting to socket. Aborting operation.
[  281.889979][T11845] CIFS: VFS: cifs_mount failed w/return code = -4
[  282.208057][T11879] veth1_macvtap: left promiscuous mode
[  282.267543][T11879] veth1_macvtap: entered promiscuous mode
[  282.551601][T11896] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1617'.
[  282.576029][T11896] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  282.869379][ T5881] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  283.019035][ T5881] usb 7-1: Using ep0 maxpacket: 16
[  283.025246][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  283.034019][ T5881] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  283.039879][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.046363][ T5881] usb 7-1: Product: syz
[  283.051364][ T5881] usb 7-1: Manufacturer: syz
[  283.054737][ T5881] usb 7-1: SerialNumber: syz
[  283.064027][ T5881] usb 7-1: config 0 descriptor??
[  283.075362][ T5881] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  283.084359][ T5881] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  283.128565][T11917] lo speed is unknown, defaulting to 1000
[  283.154240][T11917] wlan0 speed is unknown, defaulting to 1000
[  283.520404][ T6744] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  283.559798][ T6744] hid-generic 0000:0000:0000.0006: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  283.714248][ T5881] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  283.786992][T11933] FAULT_INJECTION: forcing a failure.
[  283.786992][T11933] name failslab, interval 1, probability 0, space 0, times 0
[  283.804428][ T5881] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  283.809206][T11933] CPU: 0 UID: 0 PID: 11933 Comm: syz.2.1625 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  283.809228][T11933] Tainted: [L]=SOFTLOCKUP
[  283.809233][T11933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  283.809240][T11933] Call Trace:
[  283.809244][T11933]  <TASK>
[  283.809250][T11933]  dump_stack_lvl+0x100/0x190
[  283.809268][T11933]  should_fail_ex.cold+0x5/0xa
[  283.809281][T11933]  should_failslab+0xc2/0x120
[  283.809297][T11933]  __kmalloc_cache_node_noprof+0x94/0x6c0
[  283.809315][T11933]  ? __get_vm_area_node+0x101/0x330
[  283.809333][T11933]  __get_vm_area_node+0x101/0x330
[  283.809352][T11933]  __vmalloc_node_range_noprof+0x228/0x1630
[  283.809370][T11933]  ? bpf_check+0x1cc/0xb7d0
[  283.809388][T11933]  ? rcu_is_watching+0x12/0xc0
[  283.809404][T11933]  ? bpf_check+0x1cc/0xb7d0
[  283.809420][T11933]  ? rcu_read_unlock+0x17/0x60
[  283.809437][T11933]  ? rcu_read_unlock+0x17/0x60
[  283.809456][T11933]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  283.809473][T11933]  ? rcu_is_watching+0x12/0xc0
[  283.809487][T11933]  ? rcu_is_watching+0x12/0xc0
[  283.809501][T11933]  ? __kmalloc_large_node_noprof+0x5d/0x70
[  283.809517][T11933]  ? find_held_lock+0x2b/0x80
[  283.809533][T11933]  ? bpf_check+0x1cc/0xb7d0
[  283.809548][T11933]  __vmalloc_node_noprof+0xad/0xf0
[  283.809565][T11933]  ? bpf_check+0x1cc/0xb7d0
[  283.809582][T11933]  bpf_check+0x1cc/0xb7d0
[  283.809597][T11933]  ? trace_contention_end+0x126/0x160
[  283.809611][T11933]  ? __css_rstat_updated+0x1ce/0x5a0
[  283.809630][T11933]  ? __pfx___css_rstat_updated+0x10/0x10
[  283.809651][T11933]  ? __lock_acquire+0x49f/0x1a40
[  283.809669][T11933]  ? __mod_memcg_state+0x12b/0x500
[  283.809682][T11933]  ? __pfx_bpf_check+0x10/0x10
[  283.809702][T11933]  ? find_held_lock+0x2b/0x80
[  283.809715][T11933]  ? bpf_prog_load+0x1933/0x2fa0
[  283.809729][T11933]  ? __asan_memset+0x23/0x50
[  283.809740][T11933]  ? lsm_blob_alloc+0x2b/0x90
[  283.809760][T11933]  ? bpf_prog_load+0x244d/0x2fa0
[  283.809770][T11933]  bpf_prog_load+0x244d/0x2fa0
[  283.809786][T11933]  ? __pfx_bpf_prog_load+0x10/0x10
[  283.809798][T11933]  ? __lock_acquire+0x49f/0x1a40
[  283.809832][T11933]  __sys_bpf+0x18dc/0x4e80
[  283.809848][T11933]  ? __pfx___sys_bpf+0x10/0x10
[  283.809861][T11933]  ? find_held_lock+0x2b/0x80
[  283.809874][T11933]  ? get_pid_task+0xfc/0x250
[  283.809888][T11933]  ? get_pid_task+0xfc/0x250
[  283.809906][T11933]  ? proc_fail_nth_write+0x9f/0x220
[  283.809934][T11933]  ? find_held_lock+0x2b/0x80
[  283.809950][T11933]  ? rcu_read_lock_any_held+0x6a/0xa0
[  283.809965][T11933]  ? find_held_lock+0x2b/0x80
[  283.809979][T11933]  ? ksys_write+0x190/0x250
[  283.809989][T11933]  ? ksys_write+0x190/0x250
[  283.810009][T11933]  ? fput+0x79/0x100
[  283.810024][T11933]  ? __ia32_sys_bpf+0xcc/0x170
[  283.810036][T11933]  __ia32_sys_bpf+0xcc/0x170
[  283.810048][T11933]  ? __do_fast_syscall_32+0x98/0x970
[  283.810067][T11933]  __do_fast_syscall_32+0xe7/0x970
[  283.810083][T11933]  ? lockdep_hardirqs_on+0x78/0x100
[  283.810099][T11933]  do_fast_syscall_32+0x32/0x70
[  283.810116][T11933]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  283.810131][T11933] RIP: 0023:0xf6feefec
[  283.810145][T11933] Code: Unable to access opcode bytes at 0xf6feefc2.
[  283.810150][T11933] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  283.810163][T11933] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880
[  283.810169][T11933] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  283.810176][T11933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  283.810182][T11933] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  283.810188][T11933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  283.810202][T11933]  </TASK>
[  283.884667][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'.
[  283.893043][ T5881] em28xx 7-1:0.0: board has no eeprom
[  283.956826][T11929] fido_id[11929]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  283.980961][T11933] syz.2.1625: vmalloc error: size 544, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  283.987543][T11933] CPU: 0 UID: 0 PID: 11933 Comm: syz.2.1625 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  283.987569][T11933] Tainted: [L]=SOFTLOCKUP
[  283.987575][T11933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  283.987584][T11933] Call Trace:
[  283.987590][T11933]  <TASK>
[  283.987597][T11933]  dump_stack_lvl+0x100/0x190
[  283.987621][T11933]  warn_alloc.cold+0x94/0xa8
[  283.987639][T11933]  ? __pfx_warn_alloc+0x10/0x10
[  283.987654][T11933]  ? __kasan_kmalloc+0x8a/0xb0
[  283.987681][T11933]  ? __get_vm_area_node+0x208/0x330
[  283.987706][T11933]  __vmalloc_node_range_noprof+0xccd/0x1630
[  283.987731][T11933]  ? rcu_is_watching+0x12/0xc0
[  283.987752][T11933]  ? bpf_check+0x1cc/0xb7d0
[  283.987774][T11933]  ? rcu_read_unlock+0x17/0x60
[  283.987797][T11933]  ? rcu_read_unlock+0x17/0x60
[  283.987825][T11933]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  283.987848][T11933]  ? rcu_is_watching+0x12/0xc0
[  283.987867][T11933]  ? rcu_is_watching+0x12/0xc0
[  283.987885][T11933]  ? __kmalloc_large_node_noprof+0x5d/0x70
[  283.987906][T11933]  ? find_held_lock+0x2b/0x80
[  283.987927][T11933]  ? bpf_check+0x1cc/0xb7d0
[  283.987947][T11933]  __vmalloc_node_noprof+0xad/0xf0
[  283.987970][T11933]  ? bpf_check+0x1cc/0xb7d0
[  283.987992][T11933]  bpf_check+0x1cc/0xb7d0
[  283.988011][T11933]  ? trace_contention_end+0x126/0x160
[  283.988029][T11933]  ? __css_rstat_updated+0x1ce/0x5a0
[  283.988053][T11933]  ? __pfx___css_rstat_updated+0x10/0x10
[  283.988081][T11933]  ? __lock_acquire+0x49f/0x1a40
[  283.988103][T11933]  ? __mod_memcg_state+0x12b/0x500
[  283.988120][T11933]  ? __pfx_bpf_check+0x10/0x10
[  283.988146][T11933]  ? find_held_lock+0x2b/0x80
[  283.988163][T11933]  ? bpf_prog_load+0x1933/0x2fa0
[  283.988182][T11933]  ? __asan_memset+0x23/0x50
[  283.988197][T11933]  ? lsm_blob_alloc+0x2b/0x90
[  283.988223][T11933]  ? bpf_prog_load+0x244d/0x2fa0
[  283.988237][T11933]  bpf_prog_load+0x244d/0x2fa0
[  283.988258][T11933]  ? __pfx_bpf_prog_load+0x10/0x10
[  283.988274][T11933]  ? __lock_acquire+0x49f/0x1a40
[  283.988315][T11933]  __sys_bpf+0x18dc/0x4e80
[  283.988338][T11933]  ? __pfx___sys_bpf+0x10/0x10
[  283.988354][T11933]  ? find_held_lock+0x2b/0x80
[  283.988371][T11933]  ? get_pid_task+0xfc/0x250
[  283.988391][T11933]  ? get_pid_task+0xfc/0x250
[  283.988414][T11933]  ? proc_fail_nth_write+0x9f/0x220
[  283.988436][T11933]  ? find_held_lock+0x2b/0x80
[  283.988458][T11933]  ? rcu_read_lock_any_held+0x6a/0xa0
[  283.988477][T11933]  ? find_held_lock+0x2b/0x80
[  283.988494][T11933]  ? ksys_write+0x190/0x250
[  283.988506][T11933]  ? ksys_write+0x190/0x250
[  283.988533][T11933]  ? fput+0x79/0x100
[  283.988552][T11933]  ? __ia32_sys_bpf+0xcc/0x170
[  283.988567][T11933]  __ia32_sys_bpf+0xcc/0x170
[  283.988584][T11933]  ? __do_fast_syscall_32+0x98/0x970
[  283.988609][T11933]  __do_fast_syscall_32+0xe7/0x970
[  283.988628][T11933]  ? lockdep_hardirqs_on+0x78/0x100
[  283.988651][T11933]  do_fast_syscall_32+0x32/0x70
[  283.988671][T11933]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  283.988691][T11933] RIP: 0023:0xf6feefec
[  283.988710][T11933] Code: Unable to access opcode bytes at 0xf6feefc2.
[  283.988717][T11933] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  283.988734][T11933] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880
[  283.988743][T11933] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  283.988752][T11933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  283.988761][T11933] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  283.988769][T11933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  283.988789][T11933]  </TASK>
[  283.988795][T11933] Mem-Info:
[  284.133293][ T5881] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  284.137975][ T5881] em28xx 7-1:0.0: dvb set to bulk mode.
[  284.139579][T11933] active_anon:7201 inactive_anon:7928 isolated_anon:0
[  284.139579][T11933]  active_file:3095 inactive_file:21242 isolated_file:0
[  284.139579][T11933]  unevictable:1214 dirty:280 writeback:0
[  284.139579][T11933]  slab_reclaimable:6426 slab_unreclaimable:60365
[  284.139579][T11933]  mapped:30569 shmem:8373 pagetables:1585
[  284.139579][T11933]  sec_pagetables:296 bounce:0
[  284.139579][T11933]  kernel_misc_reclaimable:0
[  284.139579][T11933]  free:32610 free_pcp:15402 free_cma:0
[  284.141954][ T6744] em28xx 7-1:0.0: Binding DVB extension
[  284.162073][ T5881] usb 7-1: USB disconnect, device number 44
[  284.164931][ T5881] em28xx 7-1:0.0: Disconnecting em28xx
[  284.200096][T11933] Node 0 active_anon:640kB inactive_anon:936kB active_file:572kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:528kB dirty:4kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9280kB pagetables:1644kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  284.205272][ T6744] em28xx 7-1:0.0: Registering input extension
[  284.216386][ T5881] em28xx 7-1:0.0: Closing input extension
[  284.233898][T11933] Node 1 active_anon:27348kB inactive_anon:30776kB active_file:11808kB inactive_file:84828kB unevictable:4856kB isolated(anon):0kB isolated(file):0kB mapped:121748kB dirty:1116kB writeback:0kB shmem:32668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6276kB pagetables:4628kB sec_pagetables:72kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  284.307896][ T5881] em28xx 7-1:0.0: Freeing device
[  284.352651][T11933] Node 0 DMA free:2692kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB
[  284.382445][T11933] lowmem_reserve[]: 0 280 280 280 280
[  284.384982][T11933] Node 0 DMA32 free:26156kB boost:12288kB min:25064kB low:28256kB high:31448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:640kB inactive_anon:932kB active_file:516kB inactive_file:140kB unevictable:0kB writepending:4kB zspages:260kB present:1032196kB managed:287080kB mlocked:0kB bounce:0kB free_pcp:11084kB local_pcp:7284kB free_cma:0kB
[  284.400726][T11933] lowmem_reserve[]: 0 0 0 0 0
[  284.403033][T11933] Node 1 DMA32 free:116112kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30612kB inactive_anon:30776kB active_file:11808kB inactive_file:84760kB unevictable:4856kB writepending:1116kB zspages:3120kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:37512kB local_pcp:22660kB free_cma:0kB
[  284.426334][T11933] lowmem_reserve[]: 0 0 0 0 0
[  284.430367][T11933] Node 0 DMA: 91*4kB (UM) 15*8kB (U) 8*16kB (UM) 11*32kB (U) 1*64kB (U) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2692kB
[  284.441688][T11933] Node 0 DMA32: 703*4kB (UME) 228*8kB (UME) 37*16kB (UME) 96*32kB (UME) 49*64kB (UE) 33*128kB (UME) 21*256kB (UME) 6*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 26156kB
[  284.453895][T11933] Node 1 DMA32: 363*4kB (UME) 151*8kB (UM) 6*16kB (UME) 67*32kB (UME) 124*64kB (UME) 59*128kB (UME) 48*256kB (UME) 51*512kB (UME) 24*1024kB (UM) 6*2048kB (M) 5*4096kB (UM) = 116132kB
[  284.467615][T11933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  284.475793][T11933] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  284.484686][T11933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  284.492781][T11933] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=1 hugepages_size=2048kB
[  284.500505][T11933] 36153 total pagecache pages
[  284.504831][T11933] 417 pages in swap cache
[  284.507197][T11933] Free swap  = 82080kB
[  284.512326][T11933] Total swap = 124996kB
[  284.516404][T11933] 524155 pages RAM
[  284.519988][T11933] 0 pages HighMem/MovableOnly
[  284.524435][T11933] 211492 pages reserved
[  284.527864][T11933] 0 pages cma reserved
[  284.618617][T11950] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  284.618617][T11950] 
[  284.625276][T11950] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  284.630563][T11950] CIFS: Attempting to mount //127.0.0.1/share
[  284.659059][T11953] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1628'.
[  284.666777][T11953] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1628'.
[  284.673008][T11953] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1628'.
[  284.679966][T11953] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1628'.
[  284.683104][T11950] CIFS: VFS: cifs_mount failed w/return code = -112
[  284.829845][ T5881] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  284.970015][ T5881] usb 7-1: device descriptor read/64, error -71
[  285.222953][ T5881] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  285.370242][ T5881] usb 7-1: device descriptor read/64, error -71
[  285.480515][ T5881] usb usb7-port1: attempt power cycle
[  285.825615][T11977] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  285.830309][ T5881] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  285.850681][T11977] overlayfs: failed to set xattr on upper
[  285.860841][ T5881] usb 7-1: device descriptor read/8, error -71
[  285.862786][T11977] overlayfs: ...falling back to redirect_dir=nofollow.
[  285.878971][T11977] overlayfs: ...falling back to index=off.
[  285.899547][T11977] overlayfs: conflicting lowerdir path
[  286.430791][ T5881] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  286.457589][ T5881] usb 7-1: device descriptor read/8, error -71
[  286.562946][ T5881] usb usb7-port1: unable to enumerate USB device
[  287.785049][T12004] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  287.785049][T12004] 
[  287.808205][T12004] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  287.826648][T12004] CIFS: Attempting to mount //127.0.0.1/share
[  287.833827][T12004] CIFS: VFS: Error connecting to socket. Aborting operation.
[  287.876864][T12004] CIFS: VFS: cifs_mount failed w/return code = -22
[  288.020678][T12008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1643'.
[  288.155448][T12010] i801_smbus 0000:00:05.0: SMBus using polling
[  288.201270][T12010] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  288.274828][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1647'.
[  288.467438][T12024] syzkaller0: entered promiscuous mode
[  288.469752][T12024] syzkaller0: entered allmulticast mode
[  288.479730][T12024] tipc: Started in network mode
[  288.482546][T12024] tipc: Node identity 1a0e34c90e21, cluster identity 4711
[  288.485523][T12024] FAULT_INJECTION: forcing a failure.
[  288.485523][T12024] name failslab, interval 1, probability 0, space 0, times 0
[  288.490537][T12024] CPU: 0 UID: 0 PID: 12024 Comm: syz.6.1648 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.490567][T12024] Tainted: [L]=SOFTLOCKUP
[  288.490573][T12024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  288.490584][T12024] Call Trace:
[  288.490591][T12024]  <TASK>
[  288.490599][T12024]  dump_stack_lvl+0x100/0x190
[  288.490629][T12024]  should_fail_ex.cold+0x5/0xa
[  288.490651][T12024]  should_failslab+0xc2/0x120
[  288.490676][T12024]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  288.490700][T12024]  ? __alloc_skb+0x140/0x710
[  288.490728][T12024]  __alloc_skb+0x140/0x710
[  288.490753][T12024]  ? __pfx___alloc_skb+0x10/0x10
[  288.490776][T12024]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  288.490798][T12024]  ? tipc_disc_create+0x9d/0x630
[  288.490837][T12024]  tipc_buf_acquire+0x26/0xe0
[  288.490857][T12024]  tipc_disc_create+0xc1/0x630
[  288.490880][T12024]  tipc_enable_bearer+0xacd/0xe60
[  288.490927][T12024]  ? __pfx_tipc_enable_bearer+0x10/0x10
[  288.490944][T12024]  ? lock_acquire+0x1b9/0x370
[  288.490965][T12024]  ? __nla_parse+0x40/0x60
[  288.490982][T12024]  __tipc_nl_bearer_enable+0x332/0x420
[  288.491006][T12024]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[  288.491035][T12024]  ? tipc_nl_compat_bearer_enable+0x58b/0x6e0
[  288.491065][T12024]  ? __nla_parse+0x40/0x60
[  288.491087][T12024]  __tipc_nl_compat_doit+0x330/0x3d0
[  288.491104][T12024]  ? kmem_cache_free+0x127/0x6b0
[  288.491118][T12024]  ? kfree_skbmem+0x19a/0x210
[  288.491133][T12024]  ? __pfx___tipc_nl_compat_doit+0x10/0x10
[  288.491154][T12024]  ? __dev_queue_xmit+0x1bbf/0x4970
[  288.491171][T12024]  ? netlink_deliver_tap+0xa4d/0xcc0
[  288.491187][T12024]  ? netlink_unicast+0x62b/0x850
[  288.491211][T12024]  ? bpf_lsm_capable+0x9/0x10
[  288.491229][T12024]  ? security_capable+0x80/0x260
[  288.491250][T12024]  tipc_nl_compat_doit+0x11e/0x290
[  288.491273][T12024]  tipc_nl_compat_recv+0x908/0xc40
[  288.491292][T12024]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[  288.491309][T12024]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[  288.491333][T12024]  ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10
[  288.491358][T12024]  ? trace_contention_end+0x126/0x160
[  288.491375][T12024]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  288.491402][T12024]  genl_family_rcv_msg_doit+0x214/0x300
[  288.491424][T12024]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  288.491443][T12024]  ? genl_get_cmd+0x3e7/0x760
[  288.491468][T12024]  ? __dev_queue_xmit+0xa33/0x4970
[  288.491484][T12024]  ? __radix_tree_lookup+0x217/0x2b0
[  288.491509][T12024]  genl_rcv_msg+0x560/0x800
[  288.491530][T12024]  ? __pfx_genl_rcv_msg+0x10/0x10
[  288.491568][T12024]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[  288.491597][T12024]  netlink_rcv_skb+0x159/0x420
[  288.491615][T12024]  ? __pfx_genl_rcv_msg+0x10/0x10
[  288.491636][T12024]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  288.491666][T12024]  ? netlink_deliver_tap+0x1ae/0xcc0
[  288.491689][T12024]  genl_rcv+0x28/0x40
[  288.491709][T12024]  netlink_unicast+0x585/0x850
[  288.491732][T12024]  ? __pfx_netlink_unicast+0x10/0x10
[  288.491762][T12024]  netlink_sendmsg+0x8b0/0xda0
[  288.491787][T12024]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.491814][T12024]  ? apparmor_socket_sendmsg+0x15b/0x270
[  288.491837][T12024]  ____sys_sendmsg+0xa4d/0xbe0
[  288.491855][T12024]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.491879][T12024]  ? __pfx_____sys_sendmsg+0x10/0x10
[  288.491908][T12024]  ___sys_sendmsg+0x190/0x1e0
[  288.491930][T12024]  ? __pfx____sys_sendmsg+0x10/0x10
[  288.491959][T12024]  ? find_held_lock+0x2b/0x80
[  288.491996][T12024]  __sys_sendmsg+0x160/0x210
[  288.492020][T12024]  ? __pfx___sys_sendmsg+0x10/0x10
[  288.492048][T12024]  ? __pfx_ksys_write+0x10/0x10
[  288.492069][T12024]  __do_fast_syscall_32+0xe7/0x970
[  288.492094][T12024]  ? lockdep_hardirqs_on+0x78/0x100
[  288.492118][T12024]  do_fast_syscall_32+0x32/0x70
[  288.492141][T12024]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  288.492162][T12024] RIP: 0023:0xf703efec
[  288.492184][T12024] Code: Unable to access opcode bytes at 0xf703efc2.
[  288.492192][T12024] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  288.492210][T12024] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0
[  288.492220][T12024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  288.492229][T12024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  288.492239][T12024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.492249][T12024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  288.492279][T12024]  </TASK>
[  288.698761][T12026] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  288.722139][T12024] tipc: Disabling bearer <eth:syzkaller0>
[  288.730836][T12024] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to create discoverer
[  288.884876][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'.
[  288.967428][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'.
[  288.971501][T12039] netlink: 'syz.4.1654': attribute type 3 has an invalid length.
[  289.113517][ T5553] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  289.126227][T12047] overlayfs: missing 'lowerdir'
[  289.172115][ T5881] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  289.221584][T12046] device-mapper: table: 248:2: 1:0 1:1 1:2 128 0 smq 0: unknown target type
[  289.233667][T12046] device-mapper: ioctl: error adding target to table
[  289.262135][ T5553] usb 7-1: Using ep0 maxpacket: 8
[  289.268099][ T5553] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  289.276064][ T5553] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  289.280784][ T5553] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  289.285566][ T5553] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  289.289779][ T5553] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  289.310809][ T5553] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  289.317994][ T5553] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  289.323746][ T5881] usb 11-1: Using ep0 maxpacket: 32
[  289.332216][ T5553] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.337482][ T5881] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  289.348909][ T5881] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  289.358834][ T5881] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  289.367491][ T5553] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22
[  289.372884][ T5881] usb 11-1: Product: syz
[  289.376398][ T5881] usb 11-1: Manufacturer: syz
[  289.383027][ T5881] usb 11-1: SerialNumber: syz
[  289.395316][ T5881] usb 11-1: config 0 descriptor??
[  289.401608][T12037] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  289.406432][ T5881] hub 11-1:0.0: bad descriptor, ignoring hub
[  289.408477][ T5881] hub 11-1:0.0: probe with driver hub failed with error -5
[  289.863326][ T5881] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  290.014741][ T5881] usb 9-1: Using ep0 maxpacket: 32
[  290.018574][ T5881] usb 9-1: config 0 has no interfaces?
[  290.023574][ T5881] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  290.034795][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  290.044502][ T5881] usb 9-1: Product: syz
[  290.050118][ T5881] usb 9-1: Manufacturer: syz
[  290.058443][ T5881] usb 9-1: SerialNumber: syz
[  290.064844][ T5881] usb 9-1: config 0 descriptor??
[  290.140707][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.145274][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.360913][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.371388][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.399274][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.407005][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.668790][ T5881] usb 9-1: USB disconnect, device number 43
[  290.742095][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1661'.
[  290.853726][ T8116] raw-gadget.1 gadget.6: failed to queue suspend event
[  290.923836][T12037] raw-gadget.1 gadget.6: failed to queue resume event
[  290.944436][ T8109] raw-gadget.1 gadget.6: failed to queue suspend event
[  291.017902][T12084] raw-gadget.1 gadget.6: failed to queue disconnect event
[  291.398018][T12114] netlink: 'syz.4.1663': attribute type 6 has an invalid length.
[  291.594523][T12125] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  292.773543][   T42] audit: type=1400 audit(1786132350.477:172): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12132 comm="syz.1.1667"
[  292.778967][T12134] 9p: Bad value for 'rfdno'
[  293.073943][ T6744] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[  293.221278][T12141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.254821][ T6744] usb 9-1: Using ep0 maxpacket: 8
[  293.258545][ T6744] usb 9-1: config 0 has an invalid interface number: 186 but max is 0
[  293.261737][ T6744] usb 9-1: config 0 has no interface number 0
[  293.264513][ T6744] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  293.268816][ T6744] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  293.272706][ T6744] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  293.277591][ T6744] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  293.281464][ T6744] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  293.289729][ T6744] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  293.293402][ T6744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.296750][ T6744] usb 9-1: Product: syz
[  293.298475][ T6744] usb 9-1: Manufacturer: syz
[  293.300340][ T6744] usb 9-1: SerialNumber: syz
[  293.306020][ T6744] usb 9-1: config 0 descriptor??
[  293.541682][T12138] lo speed is unknown, defaulting to 1000
[  293.546629][T12138] wlan0 speed is unknown, defaulting to 1000
[  294.243463][ T6744] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1
[  294.252804][ T6744] usb 9-1: USB disconnect, device number 44
[  294.591305][ T5881] usb 11-1: USB disconnect, device number 9
[  294.619849][ T6744] usb 7-1: USB disconnect, device number 49
[  294.724798][T12179] batadv_slave_0: entered promiscuous mode
[  294.740525][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'.
[  294.753145][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.808941][T12179] batadv_slave_0 (unregistering): left promiscuous mode
[  294.832467][T12179] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.839461][T12192] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  294.839461][T12192] 
[  294.855138][T12192] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  294.863165][T12192] CIFS: Attempting to mount //127.0.0.1/share
[  294.938138][T12192] CIFS: VFS: Error connecting to socket. Aborting operation.
[  294.953571][T12192] CIFS: VFS: cifs_mount failed w/return code = -4
[  294.994491][T12202] i801_smbus 0000:00:05.0: SMBus using polling
[  295.016119][T12202] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  295.215357][ T5826] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  295.375119][ T5826] usb 11-1: Using ep0 maxpacket: 8
[  295.379379][ T5826] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  295.383019][ T5826] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  295.396488][ T5826] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  295.403201][ T5826] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  295.412394][ T5826] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  295.421470][ T5826] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  295.425851][T12220] FAULT_INJECTION: forcing a failure.
[  295.425851][T12220] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  295.431560][ T5826] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.435573][T12220] CPU: 2 UID: 0 PID: 12220 Comm: syz.4.1686 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.435592][T12220] Tainted: [L]=SOFTLOCKUP
[  295.435596][T12220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  295.435603][T12220] Call Trace:
[  295.435607][T12220]  <TASK>
[  295.435612][T12220]  dump_stack_lvl+0x100/0x190
[  295.435633][T12220]  should_fail_ex.cold+0x5/0xa
[  295.435644][T12220]  ? prepare_alloc_pages+0x16d/0x5f0
[  295.435663][T12220]  should_fail_alloc_page+0xeb/0x140
[  295.435681][T12220]  prepare_alloc_pages+0x1f0/0x5f0
[  295.435699][T12220]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  295.435715][T12220]  ? rcu_is_watching+0x12/0xc0
[  295.435730][T12220]  ? trace_mm_page_alloc+0x164/0x1c0
[  295.435746][T12220]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[  295.435761][T12220]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  295.435776][T12220]  ? is_bpf_text_address+0x8a/0x1a0
[  295.435793][T12220]  ? bpf_ksym_find+0x124/0x1c0
[  295.435805][T12220]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  295.435823][T12220]  ? is_bpf_text_address+0x94/0x1a0
[  295.435839][T12220]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  295.435852][T12220]  ? __kernel_text_address+0xd/0x30
[  295.435880][T12220]  alloc_pages_bulk_noprof+0x5de/0x13c0
[  295.435896][T12220]  ? policy_nodemask+0xed/0x4f0
[  295.435914][T12220]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  295.435928][T12220]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  295.435948][T12220]  __kasan_populate_vmalloc+0xf0/0x210
[  295.435965][T12220]  alloc_vmap_area+0x95d/0x2bb0
[  295.435985][T12220]  ? kasan_save_track+0x14/0x30
[  295.436000][T12220]  ? __kasan_kmalloc+0xaa/0xb0
[  295.436014][T12220]  ? __pfx_alloc_vmap_area+0x10/0x10
[  295.436030][T12220]  ? __get_vm_area_node+0x101/0x330
[  295.436048][T12220]  __get_vm_area_node+0x1ca/0x330
[  295.436068][T12220]  __vmalloc_node_range_noprof+0x228/0x1630
[  295.436086][T12220]  ? ip_set_sockfn_get+0x18e/0xd20
[  295.436121][T12220]  ? lock_acquire+0x1b9/0x370
[  295.436141][T12220]  ? ip_set_sockfn_get+0x18e/0xd20
[  295.436159][T12220]  ? __lock_acquire+0x49f/0x1a40
[  295.436179][T12220]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  295.436197][T12220]  ? nf_sockopt_find.isra.0+0x2a/0x290
[  295.436216][T12220]  ? rcu_is_watching+0x12/0xc0
[  295.436231][T12220]  ? ip_set_sockfn_get+0x18e/0xd20
[  295.436248][T12220]  __vmalloc_node_noprof+0xad/0xf0
[  295.436265][T12220]  ? ip_set_sockfn_get+0x18e/0xd20
[  295.436288][T12220]  ip_set_sockfn_get+0x18e/0xd20
[  295.436307][T12220]  ? __pfx_ip_set_sockfn_get+0x10/0x10
[  295.436326][T12220]  ? nf_sockopt_find.isra.0+0x222/0x290
[  295.436356][T12220]  nf_getsockopt+0x7c/0xe0
[  295.436372][T12220]  ip_getsockopt+0x192/0x1e0
[  295.436392][T12220]  ? __pfx_ip_getsockopt+0x10/0x10
[  295.436413][T12220]  raw_getsockopt+0x4d/0x1f0
[  295.436431][T12220]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  295.436452][T12220]  do_sock_getsockopt+0x50a/0x6e0
[  295.436463][T12220]  ? __lock_acquire+0x49f/0x1a40
[  295.436482][T12220]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  295.436498][T12220]  ? find_held_lock+0x2b/0x80
[  295.436516][T12220]  ? __fget_files+0x21f/0x3d0
[  295.436531][T12220]  __sys_getsockopt+0x133/0x1d0
[  295.436550][T12220]  ? __ia32_sys_getsockopt+0xbc/0x160
[  295.436566][T12220]  __ia32_sys_getsockopt+0xbc/0x160
[  295.436581][T12220]  ? __do_fast_syscall_32+0x98/0x970
[  295.436599][T12220]  ? lockdep_hardirqs_on+0x78/0x100
[  295.436614][T12220]  __do_fast_syscall_32+0xe7/0x970
[  295.436631][T12220]  ? lockdep_hardirqs_on+0x78/0x100
[  295.436648][T12220]  do_fast_syscall_32+0x32/0x70
[  295.436669][T12220]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  295.436684][T12220] RIP: 0023:0xf7f02fec
[  295.436698][T12220] Code: Unable to access opcode bytes at 0xf7f02fc2.
[  295.436704][T12220] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d
[  295.436716][T12220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  295.436724][T12220] RDX: 0000000000000053 RSI: 0000000080000000 RDI: 0000000080000080
[  295.436731][T12220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  295.436738][T12220] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  295.436745][T12220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  295.436759][T12220]  </TASK>
[  295.437532][T12220] syz.4.1686: vmalloc error: size 12, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  295.600860][T12220] CPU: 2 UID: 0 PID: 12220 Comm: syz.4.1686 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.600894][T12220] Tainted: [L]=SOFTLOCKUP
[  295.600901][T12220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  295.600911][T12220] Call Trace:
[  295.600916][T12220]  <TASK>
[  295.600921][T12220]  dump_stack_lvl+0x100/0x190
[  295.600941][T12220]  warn_alloc.cold+0x94/0xa8
[  295.600975][T12220]  ? __pfx_warn_alloc+0x10/0x10
[  295.600996][T12220]  ? lockdep_hardirqs_on+0x78/0x100
[  295.601024][T12220]  ? __get_vm_area_node+0x2cd/0x330
[  295.601058][T12220]  ? __get_vm_area_node+0x208/0x330
[  295.601087][T12220]  __vmalloc_node_range_noprof+0xccd/0x1630
[  295.601114][T12220]  ? lock_acquire+0x1b9/0x370
[  295.601133][T12220]  ? ip_set_sockfn_get+0x18e/0xd20
[  295.601152][T12220]  ? __lock_acquire+0x49f/0x1a40
[  295.601171][T12220]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  295.601190][T12220]  ? nf_sockopt_find.isra.0+0x2a/0x290
[  295.601208][T12220]  ? rcu_is_watching+0x12/0xc0
[  295.601223][T12220]  ? ip_set_sockfn_get+0x18e/0xd20
[  295.601240][T12220]  __vmalloc_node_noprof+0xad/0xf0
[  295.601257][T12220]  ? ip_set_sockfn_get+0x18e/0xd20
[  295.601281][T12220]  ip_set_sockfn_get+0x18e/0xd20
[  295.601300][T12220]  ? __pfx_ip_set_sockfn_get+0x10/0x10
[  295.601322][T12220]  ? nf_sockopt_find.isra.0+0x222/0x290
[  295.601347][T12220]  nf_getsockopt+0x7c/0xe0
[  295.601370][T12220]  ip_getsockopt+0x192/0x1e0
[  295.601400][T12220]  ? __pfx_ip_getsockopt+0x10/0x10
[  295.601434][T12220]  raw_getsockopt+0x4d/0x1f0
[  295.601470][T12220]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  295.601493][T12220]  do_sock_getsockopt+0x50a/0x6e0
[  295.601505][T12220]  ? __lock_acquire+0x49f/0x1a40
[  295.601524][T12220]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  295.601540][T12220]  ? find_held_lock+0x2b/0x80
[  295.601558][T12220]  ? __fget_files+0x21f/0x3d0
[  295.601572][T12220]  __sys_getsockopt+0x133/0x1d0
[  295.601592][T12220]  ? __ia32_sys_getsockopt+0xbc/0x160
[  295.601608][T12220]  __ia32_sys_getsockopt+0xbc/0x160
[  295.601623][T12220]  ? __do_fast_syscall_32+0x98/0x970
[  295.601641][T12220]  ? lockdep_hardirqs_on+0x78/0x100
[  295.601657][T12220]  __do_fast_syscall_32+0xe7/0x970
[  295.601673][T12220]  ? lockdep_hardirqs_on+0x78/0x100
[  295.601690][T12220]  do_fast_syscall_32+0x32/0x70
[  295.601707][T12220]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  295.601722][T12220] RIP: 0023:0xf7f02fec
[  295.601742][T12220] Code: Unable to access opcode bytes at 0xf7f02fc2.
[  295.601749][T12220] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d
[  295.601767][T12220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  295.601777][T12220] RDX: 0000000000000053 RSI: 0000000080000000 RDI: 0000000080000080
[  295.601788][T12220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  295.601798][T12220] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  295.601808][T12220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  295.601829][T12220]  </TASK>
[  295.601917][T12220] Mem-Info:
[  295.700642][T12220] active_anon:9950 inactive_anon:7930 isolated_anon:0
[  295.700642][T12220]  active_file:3106 inactive_file:21223 isolated_file:0
[  295.700642][T12220]  unevictable:1214 dirty:406 writeback:0
[  295.700642][T12220]  slab_reclaimable:6442 slab_unreclaimable:60653
[  295.700642][T12220]  mapped:29378 shmem:11049 pagetables:1631
[  295.700642][T12220]  sec_pagetables:296 bounce:0
[  295.700642][T12220]  kernel_misc_reclaimable:0
[  295.700642][T12220]  free:33719 free_pcp:14157 free_cma:0
[  295.715415][T12220] Node 0 active_anon:712kB inactive_anon:940kB active_file:572kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:528kB dirty:4kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9312kB pagetables:1852kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  295.727183][T12220] Node 1 active_anon:39020kB inactive_anon:30780kB active_file:11852kB inactive_file:84744kB unevictable:4856kB isolated(anon):0kB isolated(file):0kB mapped:116320kB dirty:1620kB writeback:0kB shmem:44188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6272kB pagetables:4724kB sec_pagetables:72kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  295.738700][T12220] Node 0 DMA free:2692kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB
[  295.748895][T12220] lowmem_reserve[]: 0 280 280 280 280
[  295.750702][T12220] Node 0 DMA32 free:29584kB boost:12288kB min:25064kB low:28256kB high:31448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:712kB inactive_anon:936kB active_file:516kB inactive_file:148kB unevictable:0kB writepending:4kB zspages:260kB present:1032196kB managed:287080kB mlocked:0kB bounce:0kB free_pcp:13372kB local_pcp:6796kB free_cma:0kB
[  295.787316][ T5826] usb 11-1: usb_control_msg returned -32
[  295.792222][ T5826] usbtmc 11-1:16.0: can't read capabilities
[  295.803863][ T5826] usb 11-1: USB disconnect, device number 10
[  295.818068][T12220] lowmem_reserve[]: 0 0 0 0 0
[  295.828132][T12220] Node 1 DMA32 free:102600kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39020kB inactive_anon:30780kB active_file:11852kB inactive_file:84744kB unevictable:4856kB writepending:1620kB zspages:3120kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:44848kB local_pcp:23136kB free_cma:0kB
[  295.830347][T12232] overlayfs: failed to clone upperpath
[  295.843191][T12220] lowmem_reserve[]: 0 0 0 0 0
[  295.844907][T12220] Node 0 DMA: 91*4kB (UM) 15*8kB (U) 8*16kB (UM) 11*32kB (U) 1*64kB (U) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2692kB
[  295.851847][T12220] Node 0 DMA32: 664*4kB (UE) 198*8kB (UE) 12*16kB (ME) 75*32kB (UME) 52*64kB (UE) 29*128kB (UME) 23*256kB (UME) 7*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 0*4096kB = 29488kB
[  295.858853][T12220] Node 1 DMA32: 2*4kB (ME) 2*8kB (UM) 1*16kB (E) 149*32kB (UE) 44*64kB (UME) 58*128kB (UME) 42*256kB (UME) 50*512kB (UME) 24*1024kB (UM) 5*2048kB (UM) 4*4096kB (UM) = 102600kB
[  295.864856][T12220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  295.870780][T12220] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  295.874114][T12220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  295.886298][T12220] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=1 hugepages_size=2048kB
[  295.889290][T12220] 37010 total pagecache pages
[  295.891445][T12220] 421 pages in swap cache
[  295.892944][T12220] Free swap  = 82080kB
[  295.894919][T12220] Total swap = 124996kB
[  295.896799][T12220] 524155 pages RAM
[  295.898098][T12220] 0 pages HighMem/MovableOnly
[  295.899684][T12220] 211492 pages reserved
[  295.901052][T12220] 0 pages cma reserved
[  296.104077][T12246] bridge0: port 3(vlan2) entered disabled state
[  296.106332][T12246] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.256974][ T5881] lo speed is unknown, defaulting to 1000
[  296.260074][ T5881] syz2: Port: 1 Link DOWN
[  296.275829][ T5783] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.278997][ T5783] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  296.282280][ T5783] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.286575][ T5783] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  296.298259][ T5783] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.309756][ T5783] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  296.320492][ T5783] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.332943][ T5783] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  296.404842][T12253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.414721][T12253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.427931][T12253] ubi16: attaching mtd0
[  296.435361][T12253] ubi16: scanning is finished
[  296.437490][T12253] ubi16 error: ubi_read_volume_table: the layout volume was not found
[  296.560835][T12253] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  297.337319][T12279] i801_smbus 0000:00:05.0: SMBus using polling
[  297.362933][T12279] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD
[  297.661604][T12283] could not allocate digest TFM handle cmac-aes-ce
[  297.726961][T12288] xt_HMARK: proto mask must be zero with L3 mode
[  297.733872][   T42] audit: type=1800 audit(1786132355.434:173): pid=12288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1710" name="nullb0" dev="tmpfs" ino=2433 res=0 errno=0
[  297.806804][T12290] netlink: 'syz.1.1711': attribute type 2 has an invalid length.
[  297.813838][T12290] netlink: 'syz.1.1711': attribute type 2 has an invalid length.
[  298.831667][T12308] 
[  298.832455][T12308] ======================================================
[  298.834471][T12308] WARNING: possible circular locking dependency detected
[  298.836963][T12308] syzkaller #0 Tainted: G             L     
[  298.838981][T12308] ------------------------------------------------------
[  298.841183][T12308] syz.1.1720/12308 is trying to acquire lock:
[  298.842994][T12308] ffff888020f98168 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_truncate+0xe6/0x190
[  298.846357][T12308] 
[  298.846357][T12308] but task is already holding lock:
[  298.848660][T12308] ffff88806d28a450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0x2929/0x4280
[  298.851145][T12308] 
[  298.851145][T12308] which lock already depends on the new lock.
[  298.851145][T12308] 
[  298.854131][T12308] 
[  298.854131][T12308] the existing dependency chain (in reverse order) is:
[  298.857038][T12308] 
[  298.857038][T12308] -> #4 (sb_writers#5){.+.+}-{0:0}:
[  298.859265][T12308]        lock_acquire+0x1b9/0x370
[  298.860806][T12308]        mnt_want_write+0x6f/0x410
[  298.862331][T12308]        path_openat+0xad9/0x4280
[  298.863845][T12308]        do_file_open+0x20e/0x430
[  298.865378][T12308]        file_open_name+0x1c3/0x3e0
[  298.866958][T12308]        filp_open+0x2e/0x50
[  298.868410][T12308]        nvmet_file_ns_enable+0x95/0x420
[  298.870103][T12308]        nvmet_ns_enable+0x35f/0x5d0
[  298.871669][T12308]        nvmet_ns_enable_store+0x11e/0x160
[  298.873436][T12308]        configfs_write_iter+0x302/0x4e0
[  298.875119][T12308]        vfs_write+0x6ac/0x1050
[  298.876958][T12308]        ksys_write+0x12a/0x250
[  298.878842][T12308]        __do_fast_syscall_32+0xe7/0x970
[  298.880550][T12308]        do_fast_syscall_32+0x32/0x70
[  298.882160][T12308]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  298.884162][T12308] 
[  298.884162][T12308] -> #3 (&subsys->lock){+.+.}-{4:4}:
[  298.886432][T12308]        lock_acquire+0x1b9/0x370
[  298.887990][T12308]        __mutex_lock+0x1a4/0x1bd0
[  298.889541][T12308]        nvmet_ns_device_path_store+0x57/0x1c0
[  298.891422][T12308]        configfs_write_iter+0x302/0x4e0
[  298.893078][T12308]        vfs_write+0x6ac/0x1050
[  298.894544][T12308]        ksys_write+0x12a/0x250
[  298.896258][T12308]        __do_fast_syscall_32+0xe7/0x970
[  298.897952][T12308]        do_fast_syscall_32+0x32/0x70
[  298.899695][T12308]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  298.901666][T12308] 
[  298.901666][T12308] -> #2 (&p->frag_sem){.+.+}-{4:4}:
[  298.903809][T12308]        lock_acquire+0x1b9/0x370
[  298.905365][T12308]        down_read+0x99/0x4c0
[  298.906782][T12308]        configfs_read_iter+0x346/0x6f0
[  298.908483][T12308]        __kernel_read+0x397/0xad0
[  298.910221][T12308]        integrity_kernel_read+0x7e/0xb0
[  298.912218][T12308]        ima_calc_file_hash_tfm+0x25e/0x350
[  298.914358][T12308]        ima_calc_file_hash+0x1e3/0x380
[  298.916374][T12308]        ima_collect_measurement+0x94f/0xb30
[  298.918608][T12308]        process_measurement+0xdfe/0x2350
[  298.920478][T12308]        ima_file_check+0xcc/0x120
[  298.922002][T12308]        security_file_post_open+0xc4/0x210
[  298.923719][T12308]        path_openat+0x985/0x4280
[  298.925201][T12308]        do_file_open+0x20e/0x430
[  298.926699][T12308]        do_sys_openat2+0x10f/0x1e0
[  298.928120][T12308]        __ia32_compat_sys_openat+0x12d/0x210
[  298.929874][T12308]        __do_fast_syscall_32+0xe7/0x970
[  298.931426][T12308]        do_fast_syscall_32+0x32/0x70
[  298.932969][T12308]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  298.934917][T12308] 
[  298.934917][T12308] -> #1 (&buffer->mutex){+.+.}-{4:4}:
[  298.937188][T12308]        lock_acquire+0x1b9/0x370
[  298.938710][T12308]        __mutex_lock+0x1a4/0x1bd0
[  298.940251][T12308]        configfs_read_iter+0x79/0x6f0
[  298.941823][T12308]        __kernel_read+0x397/0xad0
[  298.943343][T12308]        integrity_kernel_read+0x7e/0xb0
[  298.944953][T12308]        ima_calc_file_hash_tfm+0x25e/0x350
[  298.946713][T12308]        ima_calc_file_hash+0x1e3/0x380
[  298.948309][T12308]        ima_collect_measurement+0x94f/0xb30
[  298.950076][T12308]        process_measurement+0xdfe/0x2350
[  298.951734][T12308]        ima_file_check+0xcc/0x120
[  298.953205][T12308]        security_file_post_open+0xc4/0x210
[  298.954913][T12308]        path_openat+0x985/0x4280
[  298.956412][T12308]        do_file_open+0x20e/0x430
[  298.958111][T12308]        do_sys_openat2+0x10f/0x1e0
[  298.959621][T12308]        __ia32_compat_sys_openat+0x12d/0x210
[  298.961459][T12308]        __do_fast_syscall_32+0xe7/0x970
[  298.963130][T12308]        do_fast_syscall_32+0x32/0x70
[  298.964687][T12308]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  298.966648][T12308] 
[  298.966648][T12308] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  298.969107][T12308]        check_prev_add+0xeb/0xe60
[  298.970678][T12308]        __lock_acquire+0x136c/0x1a40
[  298.972297][T12308]        lock_acquire+0x1b9/0x370
[  298.973829][T12308]        __mutex_lock+0x1a4/0x1bd0
[  298.975376][T12308]        ima_file_truncate+0xe6/0x190
[  298.976946][T12308]        security_file_truncate+0x11e/0x1e0
[  298.978656][T12308]        path_openat+0x3584/0x4280
[  298.980107][T12308]        do_file_open+0x20e/0x430
[  298.981658][T12308]        do_sys_openat2+0x10f/0x1e0
[  298.983201][T12308]        __ia32_compat_sys_openat+0x12d/0x210
[  298.985030][T12308]        __do_fast_syscall_32+0xe7/0x970
[  298.986707][T12308]        do_fast_syscall_32+0x32/0x70
[  298.988321][T12308]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  298.990332][T12308] 
[  298.990332][T12308] other info that might help us debug this:
[  298.990332][T12308] 
[  298.993392][T12308] Chain exists of:
[  298.993392][T12308]   &ima_iint_mutex_key[depth] --> &subsys->lock --> sb_writers#5
[  298.993392][T12308] 
[  298.997376][T12308]  Possible unsafe locking scenario:
[  298.997376][T12308] 
[  298.999564][T12308]        CPU0                    CPU1
[  299.001178][T12308]        ----                    ----
[  299.002758][T12308]   rlock(sb_writers#5);
[  299.004055][T12308]                                lock(&subsys->lock);
[  299.006076][T12308]                                lock(sb_writers#5);
[  299.008062][T12308]   lock(&ima_iint_mutex_key[depth]);
[  299.009623][T12308] 
[  299.009623][T12308]  *** DEADLOCK ***
[  299.009623][T12308] 
[  299.012035][T12308] 1 lock held by syz.1.1720/12308:
[  299.013589][T12308]  #0: ffff88806d28a450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0x2929/0x4280
[  299.016336][T12308] 
[  299.016336][T12308] stack backtrace:
[  299.018110][T12308] CPU: 2 UID: 0 PID: 12308 Comm: syz.1.1720 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  299.018129][T12308] Tainted: [L]=SOFTLOCKUP
[  299.018134][T12308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  299.018141][T12308] Call Trace:
[  299.018147][T12308]  <TASK>
[  299.018153][T12308]  dump_stack_lvl+0x100/0x190
[  299.018170][T12308]  print_circular_bug.cold+0x178/0x1c7
[  299.018191][T12308]  check_noncircular+0x146/0x160
[  299.018211][T12308]  check_prev_add+0xeb/0xe60
[  299.018230][T12308]  __lock_acquire+0x136c/0x1a40
[  299.018249][T12308]  ? tomoyo_path_perm+0x2db/0x460
[  299.018263][T12308]  lock_acquire+0x1b9/0x370
[  299.018286][T12308]  ? ima_file_truncate+0xe6/0x190
[  299.018298][T12308]  ? __pfx___might_resched+0x10/0x10
[  299.018316][T12308]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  299.018332][T12308]  __mutex_lock+0x1a4/0x1bd0
[  299.018349][T12308]  ? ima_file_truncate+0xe6/0x190
[  299.018361][T12308]  ? ima_file_truncate+0xe6/0x190
[  299.018374][T12308]  ? __pfx___mutex_lock+0x10/0x10
[  299.018389][T12308]  ? make_vfsuid+0xec/0x140
[  299.018405][T12308]  ? __pfx_make_vfsuid+0x10/0x10
[  299.018420][T12308]  ? common_perm+0x10f/0x500
[  299.018434][T12308]  ? apparmor_file_truncate+0x261/0x320
[  299.018448][T12308]  ? __pfx_apparmor_file_truncate+0x10/0x10
[  299.018462][T12308]  ? ima_file_truncate+0xe6/0x190
[  299.018474][T12308]  ima_file_truncate+0xe6/0x190
[  299.018486][T12308]  security_file_truncate+0x11e/0x1e0
[  299.018502][T12308]  path_openat+0x3584/0x4280
[  299.018515][T12308]  ? __pfx_path_openat+0x10/0x10
[  299.018528][T12308]  do_file_open+0x20e/0x430
[  299.018538][T12308]  ? __lock_acquire+0x49f/0x1a40
[  299.018555][T12308]  ? __pfx_do_file_open+0x10/0x10
[  299.018569][T12308]  ? _raw_spin_unlock+0x28/0x50
[  299.018582][T12308]  ? alloc_fd+0x471/0x7a0
[  299.018594][T12308]  do_sys_openat2+0x10f/0x1e0
[  299.018609][T12308]  ? __pfx_do_sys_openat2+0x10/0x10
[  299.018625][T12308]  __ia32_compat_sys_openat+0x12d/0x210
[  299.018642][T12308]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[  299.018661][T12308]  __do_fast_syscall_32+0xe7/0x970
[  299.018677][T12308]  ? lockdep_hardirqs_on+0x78/0x100
[  299.018691][T12308]  do_fast_syscall_32+0x32/0x70
[  299.018707][T12308]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  299.018721][T12308] RIP: 0023:0xf6fdefec
[  299.018736][T12308] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  299.018742][T12308] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[  299.018754][T12308] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000
[  299.018760][T12308] RDX: 00000000000a4242 RSI: 0000000000000000 RDI: 0000000000000000
[  299.018767][T12308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  299.018776][T12308] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  299.018784][T12308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  299.018795][T12308]  </TASK>
[  299.134164][T12312] device-mapper: ioctl: populate_table: no targets specified