last executing test programs:

9.077595907s ago: executing program 1 (id=995):
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
set_mempolicy(0x1, 0x0, 0x3)
mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000440)=""/4096, 0x1a, 0x1000, 0x0, 0x71f9, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000036c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x207, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
readv(r2, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x2, {0x0, 0x4, 0x1, 0xffffffff}})
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2)
chdir(&(0x7f0000000140)='./file1\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x81, 0x1, 0xa000200000a958, 0x2000000008, 0x7e07, 0x4, 0x48cd, 0x80000003, 0xd6f})
socket$inet6(0xa, 0x1, 0x0)

9.028869875s ago: executing program 1 (id=998):
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/error_log\x00', 0x24903, 0x4)
socket(0x46, 0xa, 0x2feb)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14')
io_submit(0x0, 0xfffffffffffffead, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
symlinkat(&(0x7f0000001040)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x4000, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000080)=0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xd, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x73c, 0x10001008, 0x2, 0x6, 0x1bf7, 0xc, 0x40, 0xa0d1ae, 0x8, 0x6b, 0x3, 0x0, 0x11001, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x9, 0x4, 0xa, 0xd, 0x1, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x10000002, 0x0, 0x6, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x2008, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x10000081, 0xb, 0x4, 0x9, 0xc50, 0xfffffffe, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x0, 0x5, 0x8, 0x100, 0x8, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xd0]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2)

8.775558685s ago: executing program 1 (id=1004):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x38ec1, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]})
r4 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$CDROMVOLCTRL(r4, 0x530a, &(0x7f00000000c0)={0x10, 0xa2, 0x1, 0x8})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x34, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20)
connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
write$tun(r6, 0x0, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000540000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900110200000001000000ffdbdf25"], 0x10}}, 0x0)
socket(0x10, 0x803, 0x0)

7.484051448s ago: executing program 1 (id=1007):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="020f00000a000000000000000000000005000500000000000a004e2000000000fe880000000000000000000000000101f7ffffff00000000000002010000ac1e0101000000000000000000000000000024d01d8b348649d221a0f2bd630e648fa56cb75704f9eae7ddc2f58223193406a92e3c38393c3e5e3ba2f6d011e152a0019cb837b856acc7a2a7f181ca0c3ae8ba0b1044e99c1c4d89bed4a4dc3c698a8135b699186eac349019ef2eb326e4508211388c65676c95e26b7443f7f1c8743d0179e06cf0f2c67acda1cd30a9a0470afda92637419a7585d3a1834eb0acdd2b8b13d8140f1cd3aa8cf6d091e12cc1a2f4be9cf0d679a9381e1ea61ee5952f51901d75065f4e41d5f7bc08fa1a0ce375b2a755460f4522059af323b3"], 0x50}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x48885)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7)
r4 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r4, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3)
write(r5, &(0x7f00000000c0)='1\x00', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r6, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8)
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x6}]})

7.435605051s ago: executing program 0 (id=1008):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
close(r2)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5'])
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e)
setns(0xc9, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x50)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=<r5=>0x0)
tkill(r5, 0x18)

5.95817722s ago: executing program 0 (id=1009):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x14, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x3e, <r5=>r3, 0x2})
mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r5, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x549903)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r8, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r9, &(0x7f0000000200), 0x20)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67)
mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

5.77777275s ago: executing program 3 (id=1010):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x3e, <r5=>r3, 0x2})
mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r5, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x549903)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r8, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r9, &(0x7f0000000200), 0x20)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67)
mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

4.418036688s ago: executing program 0 (id=1012):
syz_ublk_setup_io_uring(0x7878, &(0x7f0000000140)={0x0, 0x5d17, 0x0, 0x0, 0x26f}, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$vim2m(0x0, 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
getrusage(0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"})
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x100000000000000)

4.417566766s ago: executing program 3 (id=1013):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7, 0xffffffff, 0xfffffffffffffffe, 0x9}, 0x4}, 0x20, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
io_getevents(0x0, 0x8, 0x5, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000001c0)=""/137)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3, r1}, 0xc)
r4 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r5 = socket(0x8, 0x5, 0x7fff)
syz_usb_ep_read(r4, 0x1, 0x0, 0x0)
syz_usb_ep_write(r4, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r5, 0x4010618c, &(0x7f0000000000))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_ublk_setup_io_uring(0x4ab, &(0x7f0000000140)={0x0, 0xe7c2, 0x40, 0x0, 0x228}, &(0x7f0000000240), &(0x7f0000000200), &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(0x0, 0x991b, 0x1000001, 0x1010, r6, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@name={'name', 0x3d, '\\t\xd4\x04:NRe\xf8\x9f \x01/\xa3\x97\x8d\xa7\xd8\xa1\xc2\x7f\xd8\xe9\x06Q`\xc9\xfat\x95\x8b\x06\xf2\xeb\xe1=_\x89E\xa7:\x9c\xf8\xda\xde&B\t\x826#\xd3\x05\x18\xd7\xf4b\xfe\xe9\x17\xb5\xde?\x8e\x15Z\xd1\x06\x9c0?\xd5\x8d\"\xa8\xb47\xec8\x9c'}}]})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/dm-0\x00', 0x2, 0x0)
read(r7, &(0x7f0000000900)=""/512, 0x200)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000077000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff1ab80200000800000018230000", @ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0xb2, 0x0, 0x0, 0x40f00, 0x8cda22510ad6fb1d, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x2, 0x3, 0x5}, 0x10, 0x112de, 0xffffffffffffffff, 0x3, &(0x7f0000000580)=[r0, r0, r1, r7, r1], &(0x7f00000005c0)=[{0x4, 0x3, 0xf, 0x3}, {0x4, 0x5, 0xa, 0xa}, {0x4, 0x3, 0x2, 0x3}], 0x10, 0x1}, 0x94)

3.994923045s ago: executing program 0 (id=1015):
r0 = socket(0x15, 0x5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb000002000000000000000000000200000000000041b3265f003622479f315f1fde2fe8205be35ef91cfcd96a0817d771cb7911f59c2493407a93fe53cf0000000000000000000e00000000"], 0x0, 0x26}, 0x28)
pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x2, 0x4, 0xb, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffc}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @generic={0x7, 0x8, 0x2, 0x8, 0x5}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940)={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r3, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46)
getsockopt(r0, 0x200000000114, 0x2712, 0x0, &(0x7f0000000040))
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000480)=0x9)
openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000140)=ANY=[], 0xd)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x200002)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d1000014000010203"], 0x0)
write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d)
syz_io_uring_setup(0x37a3, &(0x7f0000000300)={0x0, 0x9b33, 0x400, 0x0, 0x131}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000480)=<r7=>0x0)
syz_io_uring_submit(0x0, 0x0, r7, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x14, 0x0, 0x0, 0xd, 0x0, 0x1, 0xc, 0x2})
syz_open_procfs(0x0, &(0x7f0000000800)='net/rpc\x00')
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0)

3.812147352s ago: executing program 1 (id=1016):
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x2, &(0x7f0000000240)=0x2)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000899000/0x2000)=nil, 0x2000, &(0x7f0000000040)='865')
madvise(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
r6 = dup(r5)
read$char_usb(r6, &(0x7f0000000340)=""/117, 0x75)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r0)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)

2.679185072s ago: executing program 2 (id=1019):
mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x22a02, 0x0)
pread64(r0, &(0x7f0000000180)=""/188, 0xbc, 0xc)
r1 = openat(r0, &(0x7f0000002000)='./dev/mapper/control\x00', 0x200002, 0x2)
ioctl(r1, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074")
ioctl(r1, 0xc138fd09, &(0x7f0000003000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400"], 0x18}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)

2.371728953s ago: executing program 3 (id=1020):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = syz_io_uring_setup(0x3d6, &(0x7f0000000400)={0x0, 0x5961, 0x40000, 0x3, 0x50}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
r5 = fsopen(&(0x7f0000000180)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @broadcast}, 0x10)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]})
syz_emit_ethernet(0x76, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @fragment={0x4, 0x0, 0xb9, 0x1, 0x0, 0x12, 0x65}]}}}}}}}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'tunl0\x00', <r11=>0x0})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x41}, @empty, 0x7, 0x7fff, 0x3d, 0x500, 0x5, 0x19c003f, r11})
close_range(r9, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r13 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(r13, 0xc00c6f3e, &(0x7f00000001c0)={0x800, 0x80000, r0})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
shutdown(r15, 0x1)
r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r14)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r16, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3f}}, {0x13, 0xb, 0x7}, {0x6, 0x11, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044090)
r17 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, '*'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')

2.345620304s ago: executing program 3 (id=1021):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x1ff)
recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0)
r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r2, 0x0, 0xee00)
keyctl$chown(0x4, r2, 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5})
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x4000800)
unshare(0x6a040000)

1.758339081s ago: executing program 2 (id=1022):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1)
getxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x1, 0x28100)
ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d030000000000000000000093e558ed0d6c13f1000e0000000000000b040000000000ae6e66bde8d8f37f49b772d65a6ca0e541711eb352b2931a440b5e36bab9379adfe366354fd1a7e25a5d44cbf8c6c3c7717ed9e109bb0821afd3350980a6bd083ec7b1eee6edf9032a990533639f12526386206792c64c0cadae40ca32ac98b303890792f42ca955fb306537c0c6baad1764af9375365c49a595580a8c45e67838f4ce038c59c449f542a8ad49a219cc107733069c5aea45dc7b45e2cf01f00d07c8d324"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r4, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
bind$x25(r4, &(0x7f0000000080), 0x12)
connect$x25(r4, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07000000000000000000050000005400038008000200090000004800038010000180050002000000000004000300340001800c09000000000000005d6a737520020028287b23235a2a0004000300120002003a2628282d245b7da228402b27000100a6d0c4f7a795245b44e40ba1b3b4b0a526e7244547e476aa81bfc1b6f91bf58e08ddd6826f30a79ce0187ebda0aa5456cdead85ed5"], 0x68}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6)

1.709655789s ago: executing program 2 (id=1023):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f905, 0x9, '\x00', @p_u32=&(0x7f00000003c0)=0xfffffffe}})
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xe4, 0x6}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r6, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x5070bd28, 0x7e, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x63, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x804)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000180)=r2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r9, 0xc138fd06, &(0x7f0000003000))
ioctl$CDROMVOLCTRL(r9, 0x530a, &(0x7f0000000140)={0x8, 0x6, 0x7, 0xd})
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1)
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
pwritev(r10, &(0x7f0000002440)=[{&(0x7f0000000440)="ddc2", 0x2}, {0x0}], 0x2, 0xc4, 0x807)
ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0105865, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r11=>0x0})
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={<r12=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r10, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xa883, @remote, 0x3}, r12}}, 0x30)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x6c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r11, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x34, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0xff}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)

1.338766586s ago: executing program 2 (id=1024):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e25, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8001}], 0x1, 0x40)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x9}, 0x8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_EXPRESSIONS={0x80, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x20050800)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/icmp\x00')
write$P9_RMKNOD(r4, &(0x7f0000000700)={0x14, 0x13, 0x2, {0x1, 0x1, 0x5}}, 0x14)
read$FUSE(r4, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000400), &(0x7f00000001c0)=0x4)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_setup(0x8, 0x0)
mprotect(&(0x7f0000886000/0x4000)=nil, 0x4000, 0x5)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0xc0044dff, &(0x7f0000004000))
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000140))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000105002, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)

1.299289736s ago: executing program 3 (id=1025):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x38ec1, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]})
r4 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$CDROMVOLCTRL(r4, 0x530a, &(0x7f00000000c0)={0x10, 0xa2, 0x1, 0x8})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x34, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20)
connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
write$tun(r6, 0x0, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000540000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900110200000001000000ffdbdf25"], 0x10}}, 0x0)
socket(0x10, 0x803, 0x0)

981.223976ms ago: executing program 2 (id=1026):
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0xc507c000)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
recvfrom$inet(r2, &(0x7f0000000380)=""/113, 0x71, 0x2, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
sched_rr_get_interval(r4, &(0x7f0000000000))
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x9fb, 0x0, 0x7}]})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r7, &(0x7f000000c3c0)={0x2020, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x8, 0xffffffff9080ed86, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x2, 0x2}}, 0x50)
r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x20000003, 0x8, 0x4, 0x8, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x0, r9, r10, 0x80, 0x8}}, {0xffffdfffffffffff, 0x401, 0x6, 0x8100008, '\x9e\xaf\x82\xa7\x13&'}}]}, 0x0, 0x0, 0x0})
getdents64(r11, 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="2f000000060000000000000000000000010000000000000003f1ff200000000006000000000000009eaf82a7132600"], 0x2f)
ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000040)="7f", 0x0, 0x0, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb})

974.807787ms ago: executing program 0 (id=1027):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x34d403)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
unshare(0x22020400)
r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r7 = dup(r5)
write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55})
epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000040))
r9 = epoll_create1(0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x10000001})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64)

229.224656ms ago: executing program 1 (id=1028):
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='gre0\x00', 0x10)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x300, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x0, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
r4 = gettid()
setns(0xc9, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/llc/core\x00')
pread64(r5, &(0x7f0000001340)=""/102378, 0x18fea, 0x97)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0xc0800)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
r7 = syz_open_procfs(0x0, 0x0)
preadv(r7, &(0x7f0000000700), 0x0, 0x47, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}, {&(0x7f0000003840)="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", 0x5a1}], 0x3}}], 0x1, 0x0)

77.418553ms ago: executing program 0 (id=1029):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7, 0xffffffff, 0xfffffffffffffffe, 0x9}, 0x4}, 0x20, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
io_getevents(0x0, 0x8, 0x5, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000001c0)=""/137)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3, r1}, 0xc)
r4 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r5 = socket(0x8, 0x5, 0x7fff)
syz_usb_ep_read(r4, 0x1, 0x0, 0x0)
syz_usb_ep_write(r4, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r5, 0x4010618c, &(0x7f0000000000))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_ublk_setup_io_uring(0x4ab, &(0x7f0000000140)={0x0, 0xe7c2, 0x40, 0x0, 0x228}, &(0x7f0000000240), &(0x7f0000000200), &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(0x0, 0x991b, 0x1000001, 0x1010, r6, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@name={'name', 0x3d, '\\t\xd4\x04:NRe\xf8\x9f \x01/\xa3\x97\x8d\xa7\xd8\xa1\xc2\x7f\xd8\xe9\x06Q`\xc9\xfat\x95\x8b\x06\xf2\xeb\xe1=_\x89E\xa7:\x9c\xf8\xda\xde&B\t\x826#\xd3\x05\x18\xd7\xf4b\xfe\xe9\x17\xb5\xde?\x8e\x15Z\xd1\x06\x9c0?\xd5\x8d\"\xa8\xb47\xec8\x9c'}}]})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/dm-0\x00', 0x2, 0x0)
read(r7, &(0x7f0000000900)=""/512, 0x200)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000077000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff1ab80200000800000018230000", @ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0xb2, 0x0, 0x0, 0x40f00, 0x8cda22510ad6fb1d, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x2, 0x3, 0x5}, 0x10, 0x112de, 0xffffffffffffffff, 0x3, &(0x7f0000000580)=[r0, r0, r1, r7, r1], &(0x7f00000005c0)=[{0x4, 0x3, 0xf, 0x3}, {0x4, 0x5, 0xa, 0xa}, {0x4, 0x3, 0x2, 0x3}], 0x10, 0x1}, 0x94)

77.136885ms ago: executing program 3 (id=1030):
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0xfffffff4}], 0x1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0x920, 0x12)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100), 0x5)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0x7, @loopback, 0x2000009}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, 0xffffffffffffffff, 0x80d}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4be, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf7ffffff}}}, 0x30)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={<r5=>0x0, 0x801}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r5, 0xffff}, 0x8)
preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x66, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

0s ago: executing program 2 (id=1031):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
syz_emit_vhci(&(0x7f0000002900)=ANY=[@ANYBLOB="043e0c04"], 0xf)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e"], 0x22)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
getitimer(0x1, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x4)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000001100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

47] Process accounting resumed
[  354.019602][ T9574] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  354.032861][ T5743] Bluetooth: hci1: SCO packet for unknown connection handle 201
[  354.245308][ T9577] netlink: 'syz.2.720': attribute type 1 has an invalid length.
[  354.245324][ T9577] netlink: 756 bytes leftover after parsing attributes in process `syz.2.720'.
[  354.313282][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout
[  354.313517][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout
[  354.313953][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  355.437057][ T5743] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19
[  355.437084][ T5743] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  355.543250][ T9591] profile_transition: unconfined exec no attachment
[  355.673339][   T43] kauditd_printk_skb: 417 callbacks suppressed
[  355.673356][   T43] audit: type=1326 audit(1790394251.184:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  355.676712][   T43] audit: type=1326 audit(1790394251.184:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  355.678033][   T43] audit: type=1326 audit(1790394251.184:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  355.679330][   T43] audit: type=1326 audit(1790394251.184:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  355.680632][   T43] audit: type=1326 audit(1790394251.184:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  355.681971][   T43] audit: type=1326 audit(1790394251.184:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  355.683390][   T43] audit: type=1326 audit(1790394251.194:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  355.684714][   T43] audit: type=1326 audit(1790394251.194:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  355.686063][   T43] audit: type=1326 audit(1790394251.194:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  355.687414][   T43] audit: type=1326 audit(1790394251.194:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9586 comm="syz.3.725" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71475ab code=0x7ffc0000
[  356.462864][ T9583] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  356.729406][ T9587] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  356.729786][ T9587] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  356.729984][ T9587] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  357.503699][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  358.755503][ T9627] profile_transition: unconfined exec no attachment
[  358.772289][  T988] Process accounting resumed
[  358.783074][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout
[  358.783807][ T5739] Bluetooth: hci2: command 0x0c1a tx timeout
[  358.885168][ T5097] Bluetooth: hci1: SCO packet for unknown connection handle 201
[  359.516828][ T9621] ªªªªªª: renamed from vlan0 (while UP)
[  359.778536][ T9628] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  360.863007][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout
[  360.889970][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'.
[  360.889992][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'.
[  360.890002][ T9621] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  360.890591][ T9621] loop5: detected capacity change from 0 to 231
[  360.924402][   T43] kauditd_printk_skb: 198 callbacks suppressed
[  360.925324][   T43] audit: type=1326 audit(1790394256.414:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  360.926253][   T43] audit: type=1326 audit(1790394256.424:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  360.926570][   T43] audit: type=1326 audit(1790394256.424:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  360.926924][   T43] audit: type=1326 audit(1790394256.424:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf709efec code=0x7ffc0000
[  360.928240][   T43] audit: type=1326 audit(1790394256.424:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  360.928803][   T43] audit: type=1326 audit(1790394256.424:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  360.929397][   T43] audit: type=1326 audit(1790394256.424:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  360.932190][   T43] audit: type=1326 audit(1790394256.434:6596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  360.936953][   T43] audit: type=1326 audit(1790394256.434:6597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  360.938516][   T43] audit: type=1326 audit(1790394256.434:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9640 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709efec code=0x7ffc0000
[  362.455645][ T9662] profile_transition: unconfined exec no attachment
[  362.474148][ T9641] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  362.474316][ T9641] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  362.474439][ T9641] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  362.607214][ T9665] profile_transition: unconfined exec no attachment
[  362.952323][ T5097] Bluetooth: hci1: command 0x0c1a tx timeout
[  363.431821][ T9671] [U] 
[  363.609864][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'.
[  364.414867][ T9687] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  364.414967][ T9687] CPU: 2 UID: 0 PID: 9687 Comm: syz.2.745 Not tainted syzkaller #0 PREEMPT(full) 
[  364.415005][ T9687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  364.415018][ T9687] Call Trace:
[  364.415025][ T9687]  <TASK>
[  364.415033][ T9687]  dump_stack_lvl+0x100/0x190
[  364.415066][ T9687]  sysfs_warn_dup.cold+0x1c/0x28
[  364.415093][ T9687]  sysfs_create_dir_ns+0x24b/0x2b0
[  364.415117][ T9687]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  364.415138][ T9687]  ? find_held_lock+0x2b/0x80
[  364.415160][ T9687]  ? kobject_add_internal+0x25f/0x930
[  364.415186][ T9687]  ? kobject_add_internal+0x25f/0x930
[  364.415214][ T9687]  ? class_dir_child_ns_type+0xd/0x60
[  364.415237][ T9687]  kobject_add_internal+0x2c8/0x930
[  364.415266][ T9687]  kobject_add+0x16a/0x1e0
[  364.415291][ T9687]  ? __pfx_kobject_add+0x10/0x10
[  364.415318][ T9687]  ? get_device_parent+0x1b3/0x4c0
[  364.415345][ T9687]  ? kobject_put+0xb9/0x640
[  364.415376][ T9687]  device_add+0x294/0x1970
[  364.415396][ T9687]  ? lockdep_init_map_type+0x5c/0x250
[  364.415423][ T9687]  ? __pfx_device_add+0x10/0x10
[  364.415439][ T9687]  ? lockdep_init_map_type+0x5c/0x250
[  364.415466][ T9687]  ? __init_waitqueue_head+0xca/0x150
[  364.415516][ T9687]  tty_register_device_attr+0x388/0x7f0
[  364.415548][ T9687]  ? lockdep_init_map_type+0x5c/0x250
[  364.415578][ T9687]  ? __pfx_tty_register_device_attr+0x10/0x10
[  364.415613][ T9687]  ? tty_port_init+0x156/0x1c0
[  364.415644][ T9687]  gsm_activate_mux+0x155/0x2a0
[  364.415673][ T9687]  gsmld_ioctl+0xbbc/0x15c0
[  364.415700][ T9687]  ? __pfx_gsmld_ioctl+0x10/0x10
[  364.415738][ T9687]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  364.415771][ T9687]  ? __pfx_gsmld_ioctl+0x10/0x10
[  364.415790][ T9687]  tty_compat_ioctl+0x396/0x420
[  364.415817][ T9687]  ? __pfx_tty_compat_ioctl+0x10/0x10
[  364.415846][ T9687]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  364.415869][ T9687]  __do_fast_syscall_32+0x13a/0x8b0
[  364.415927][ T9687]  do_fast_syscall_32+0x32/0x70
[  364.415952][ T9687]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  364.415990][ T9687] RIP: 0023:0xf709efec
[  364.416012][ T9687] Code: Unable to access opcode bytes at 0xf709efc2.
[  364.416021][ T9687] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  364.416041][ T9687] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701
[  364.416054][ T9687] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  364.416066][ T9687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  364.416078][ T9687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  364.416091][ T9687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  364.416117][ T9687]  </TASK>
[  364.416222][ T9687] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  364.542994][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout
[  364.543917][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout
[  365.642950][ T9702] profile_transition: unconfined exec no attachment
[  365.832145][  T988] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  366.033141][  T988] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  366.034718][  T988] usb 6-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config
[  366.034776][  T988] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  366.038288][  T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.038367][  T988] usb 6-1: Product: syz
[  366.042122][  T988] usb 6-1: Manufacturer: syz
[  366.042133][  T988] usb 6-1: SerialNumber: syz
[  366.044967][ T5097] Bluetooth: hci3: unexpected subevent 0x18 length: 30 > 19
[  366.045030][ T5097] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  366.050216][   T43] kauditd_printk_skb: 289 callbacks suppressed
[  366.050232][   T43] audit: type=1326 audit(1790394261.555:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.050866][   T43] audit: type=1326 audit(1790394261.555:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.051095][   T43] audit: type=1326 audit(1790394261.555:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.117755][   T43] audit: type=1326 audit(1790394261.625:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.117965][   T43] audit: type=1326 audit(1790394261.625:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.118166][   T43] audit: type=1326 audit(1790394261.625:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.118511][   T43] audit: type=1326 audit(1790394261.625:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.118846][   T43] audit: type=1326 audit(1790394261.625:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.173219][   T43] audit: type=1326 audit(1790394261.675:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.173267][   T43] audit: type=1326 audit(1790394261.685:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9709 comm="syz.0.752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  366.539333][  T988] usb 6-1: unit 4 not found!
[  366.637464][  T988] usb 6-1: USB disconnect, device number 10
[  366.658037][ T9715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.753'.
[  366.799087][ T7139] udevd[7139]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  367.476050][ T9710] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  367.512469][ T9710] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  367.570332][ T9710] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  367.844507][   T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  368.013618][   T25] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  368.016816][   T25] usb 8-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config
[  368.016832][   T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  368.019989][ T5097] Bluetooth: hci2: unexpected subevent 0x18 length: 30 > 19
[  368.020006][ T5097] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  368.024794][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.024965][   T25] usb 8-1: Product: syz
[  368.025002][   T25] usb 8-1: Manufacturer: syz
[  368.025010][   T25] usb 8-1: SerialNumber: syz
[  368.744533][ T9743] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  368.744557][ T9743] CPU: 0 UID: 0 PID: 9743 Comm: syz.3.761 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  368.744583][ T9743] Tainted: [L]=SOFTLOCKUP
[  368.744589][ T9743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  368.744601][ T9743] Call Trace:
[  368.744607][ T9743]  <TASK>
[  368.744621][ T9743]  dump_stack_lvl+0x100/0x190
[  368.744651][ T9743]  sysfs_warn_dup.cold+0x1c/0x28
[  368.744679][ T9743]  sysfs_create_dir_ns+0x24b/0x2b0
[  368.744701][ T9743]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  368.744720][ T9743]  ? find_held_lock+0x2b/0x80
[  368.744740][ T9743]  ? kobject_add_internal+0x25f/0x930
[  368.744765][ T9743]  ? kobject_add_internal+0x25f/0x930
[  368.744791][ T9743]  ? class_dir_child_ns_type+0xd/0x60
[  368.744813][ T9743]  kobject_add_internal+0x2c8/0x930
[  368.744840][ T9743]  kobject_add+0x16a/0x1e0
[  368.744865][ T9743]  ? __pfx_kobject_add+0x10/0x10
[  368.744892][ T9743]  ? get_device_parent+0x1b3/0x4c0
[  368.744918][ T9743]  ? kobject_put+0xb9/0x640
[  368.744946][ T9743]  device_add+0x294/0x1970
[  368.744965][ T9743]  ? lockdep_init_map_type+0x5c/0x250
[  368.744989][ T9743]  ? __pfx_device_add+0x10/0x10
[  368.745006][ T9743]  ? lockdep_init_map_type+0x5c/0x250
[  368.745030][ T9743]  ? __init_waitqueue_head+0xca/0x150
[  368.745062][ T9743]  tty_register_device_attr+0x388/0x7f0
[  368.745089][ T9743]  ? lockdep_init_map_type+0x5c/0x250
[  368.745113][ T9743]  ? __pfx_tty_register_device_attr+0x10/0x10
[  368.745143][ T9743]  ? tty_port_init+0x156/0x1c0
[  368.745171][ T9743]  gsm_activate_mux+0x155/0x2a0
[  368.745196][ T9743]  gsmld_ioctl+0xbbc/0x15c0
[  368.745238][ T9743]  ? __pfx_gsmld_ioctl+0x10/0x10
[  368.745278][ T9743]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  368.745309][ T9743]  ? __pfx_gsmld_ioctl+0x10/0x10
[  368.745326][ T9743]  tty_compat_ioctl+0x396/0x420
[  368.745351][ T9743]  ? __pfx_tty_compat_ioctl+0x10/0x10
[  368.745377][ T9743]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  368.745399][ T9743]  __do_fast_syscall_32+0x13a/0x8b0
[  368.745423][ T9743]  do_fast_syscall_32+0x32/0x70
[  368.745445][ T9743]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  368.745468][ T9743] RIP: 0023:0xf700efec
[  368.745488][ T9743] Code: Unable to access opcode bytes at 0xf700efc2.
[  368.745496][ T9743] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  368.745514][ T9743] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000404c4701
[  368.745526][ T9743] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  368.745537][ T9743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  368.745548][ T9743] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  368.745559][ T9743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  368.745583][ T9743]  </TASK>
[  368.745822][ T9743] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  368.981634][   T25] usb 8-1: unit 4 not found!
[  369.277236][   T25] usb 8-1: USB disconnect, device number 8
[  369.587453][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout
[  369.587488][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout
[  369.609632][ T7139] udevd[7139]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  369.888048][ T9734] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  369.890529][ T9734] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  370.062103][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  370.318276][ T9734] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  371.524644][ T9763] Console: switching to colour dummy device 80x25
[  371.911773][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout
[  372.126725][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'.
[  372.392331][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout
[  373.498620][ T9765] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  373.541195][ T9765] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  373.541300][ T9765] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  373.541475][ T9765] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  373.547125][ T9765] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  373.558914][ T9765] pci 0000:00:01.0: Adding to iommu group 1
[  373.569255][ T9765] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  373.569269][ T9765] pci 0000:00:01.0: vgaarb: bridge control possible
[  373.569277][ T9765] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  373.592398][ T9765] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  373.592508][ T9765] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  373.595862][ T9765] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  373.605335][ T9765] [drm] Found bochs VGA, ID 0xb0c5.
[  373.605346][ T9765] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  373.685194][ T9765] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  373.825811][ T9765] Console: switching to colour frame buffer device 160x50
[  373.833070][ T9765] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  373.882322][   T43] kauditd_printk_skb: 696 callbacks suppressed
[  373.882340][   T43] audit: type=1326 audit(1790394269.395:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  373.882825][   T43] audit: type=1326 audit(1790394269.395:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  373.883002][   T43] audit: type=1326 audit(1790394269.395:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf709efec code=0x7ffc0000
[  373.883167][   T43] audit: type=1326 audit(1790394269.395:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  373.883329][   T43] audit: type=1326 audit(1790394269.395:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  373.886276][   T43] audit: type=1326 audit(1790394269.395:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  373.886441][   T43] audit: type=1326 audit(1790394269.395:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  373.886700][   T43] audit: type=1326 audit(1790394269.395:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  373.887957][   T43] audit: type=1326 audit(1790394269.395:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709efec code=0x7ffc0000
[  373.888608][   T43] audit: type=1326 audit(1790394269.395:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9787 comm="syz.2.773" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  375.555955][ T9788] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  375.556775][ T9788] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  375.556922][ T9788] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  375.901617][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  376.863667][ T9827] bond2: Removing last arp target with arp_interval on
[  376.877154][ T9827] bond2: entered promiscuous mode
[  376.877486][ T9827] 8021q: adding VLAN 0 to HW filter on device bond2
[  377.591535][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout
[  377.591561][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout
[  377.741821][   T35] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  378.032906][   T35] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  378.066842][   T35] usb 7-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config
[  378.066858][   T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  378.072371][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  378.252549][ T9846] profile_transition: unconfined exec no attachment
[  378.340608][ T9848] profile_transition: unconfined exec no attachment
[  378.411507][   T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.411532][   T35] usb 7-1: Product: syz
[  378.411545][   T35] usb 7-1: Manufacturer: syz
[  378.411558][   T35] usb 7-1: SerialNumber: syz
[  378.761005][ T9843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.776851][ T5743] Bluetooth: hci3: unexpected subevent 0x18 length: 30 > 19
[  378.776878][ T5743] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  378.892488][   T43] kauditd_printk_skb: 248 callbacks suppressed
[  378.892506][   T43] audit: type=1326 audit(1790394274.385:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  378.898020][   T43] audit: type=1326 audit(1790394274.405:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  378.898172][   T43] audit: type=1326 audit(1790394274.405:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705efec code=0x7ffc0000
[  378.898344][   T43] audit: type=1326 audit(1790394274.405:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000
[  378.898560][   T43] audit: type=1326 audit(1790394274.405:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf705efec code=0x7ffc0000
[  378.899636][   T43] audit: type=1326 audit(1790394274.405:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf705efec code=0x7ffc0000
[  378.899839][   T43] audit: type=1326 audit(1790394274.405:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf71ca910 code=0x7ffc0000
[  378.900642][   T43] audit: type=1326 audit(1790394274.405:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf705efec code=0x7ffc0000
[  378.900680][   T43] audit: type=1326 audit(1790394274.405:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf705efec code=0x7ffc0000
[  378.900714][   T43] audit: type=1326 audit(1790394274.405:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9850 comm="syz.0.787" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf705efec code=0x7ffc0000
[  379.474012][   T35] usb 7-1: unit 4 not found!
[  379.502061][   T35] usb 7-1: USB disconnect, device number 7
[  379.551759][ T7139] udevd[7139]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  379.731643][    C2] vcan0: j1939_tp_rxtimer: 0xffff888045f60000: rx timeout, send abort
[  379.731762][    C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888045f60000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  379.940338][ T9856] bond3: entered allmulticast mode
[  379.946027][ T9856] 8021q: adding VLAN 0 to HW filter on device bond3
[  380.061982][ T9851] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  380.062160][ T9851] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  380.062748][ T9851] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  380.864406][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  381.240799][ T9879] profile_transition: unconfined exec no attachment
[  381.452658][ T9882] profile_transition: unconfined exec no attachment
[  382.141552][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout
[  382.151182][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout
[  383.326755][ T9896] CacheFiles: No cache directory specified
[  383.416588][ T9897] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  384.089343][ T9899] ªªªªªª: renamed from vlan0
[  384.231060][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout
[  385.066740][ T9902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'.
[  385.066764][ T9902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'.
[  385.066779][ T9902] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  385.067869][ T9902] loop5: detected capacity change from 0 to 11447
[  385.097289][ T7139] Buffer I/O error on dev loop5, logical block 1430, async page read
[  385.203374][ T9907] binder: 9906:9907 ioctl c0306201 800003c0 returned -14
[  386.761574][ T9921] Console: switching to colour dummy device 80x25
[  387.198033][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'.
[  387.266410][ T5743] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  389.354227][ T9954] fuse: Unknown parameter '0x0000000000000006'
[  389.411167][ T9955] netlink: 'syz.1.813': attribute type 10 has an invalid length.
[  389.611625][  T988] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  389.627331][ T9955] team0 (unregistering): Port device team_slave_0 removed
[  389.675732][ T9955] team0 (unregistering): Port device team_slave_1 removed
[  389.764281][  T988] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  389.768509][  T988] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  389.769727][  T988] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  389.784767][  T988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  389.784782][  T988] usb 8-1: Product: syz
[  389.784789][  T988] usb 8-1: Manufacturer: syz
[  391.185044][  T988] iuu_phoenix 8-1:1.0: iuu_phoenix converter detected
[  391.310425][  T988] usb 8-1: iuu_phoenix converter now attached to ttyUSB0
[  391.385062][ T9971] profile_transition: name lookup ix on error
[  391.397470][ T9954] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  391.397486][ T9954] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  392.441446][  T988] usb 8-1: USB disconnect, device number 9
[  392.447614][  T988] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  392.463255][  T988] iuu_phoenix 8-1:1.0: device disconnected
[  392.794479][ T9984] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  392.794837][ T9984] CPU: 0 UID: 0 PID: 9984 Comm: syz.1.822 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  392.794869][ T9984] Tainted: [L]=SOFTLOCKUP
[  392.794876][ T9984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  392.794902][ T9984] Call Trace:
[  392.794909][ T9984]  <TASK>
[  392.794915][ T9984]  dump_stack_lvl+0x100/0x190
[  392.794945][ T9984]  sysfs_warn_dup.cold+0x1c/0x28
[  392.794970][ T9984]  sysfs_do_create_link_sd+0x113/0x140
[  392.795030][ T9984]  sysfs_create_link+0x61/0xc0
[  392.795048][ T9984]  device_add+0x675/0x1970
[  392.795068][ T9984]  ? __pfx_device_add+0x10/0x10
[  392.795088][ T9984]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  392.795113][ T9984]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  392.795139][ T9984]  wiphy_register+0x2151/0x3110
[  392.795185][ T9984]  ? __pfx_wiphy_register+0x10/0x10
[  392.795211][ T9984]  ? __asan_memset+0x23/0x50
[  392.795231][ T9984]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  392.795289][ T9984]  ieee80211_register_hw+0x3090/0x45c0
[  392.795326][ T9984]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  392.795349][ T9984]  ? __pfx___debug_object_init+0x10/0x10
[  392.795383][ T9984]  ? find_held_lock+0x2b/0x80
[  392.795406][ T9984]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  392.795434][ T9984]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  392.795460][ T9984]  ? __hrtimer_setup+0x208/0x330
[  392.795484][ T9984]  mac80211_hwsim_new_radio+0x2b08/0x6510
[  392.795522][ T9984]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  392.795545][ T9984]  ? __asan_memcpy+0x3c/0x60
[  392.795570][ T9984]  hwsim_new_radio_nl+0xc6b/0x13f0
[  392.795590][ T9984]  ? trace_kmalloc+0xeb/0x110
[  392.795618][ T9984]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  392.795646][ T9984]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  392.795677][ T9984]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  392.795714][ T9984]  genl_family_rcv_msg_doit+0x214/0x300
[  392.795747][ T9984]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  392.795802][ T9984]  ? genl_get_cmd+0x3e7/0x760
[  392.795845][ T9984]  ? bpf_lsm_capable+0x9/0x10
[  392.795862][ T9984]  ? security_capable+0x80/0x260
[  392.795892][ T9984]  ? ns_capable+0xd2/0xf0
[  392.795924][ T9984]  genl_rcv_msg+0x560/0x800
[  392.795958][ T9984]  ? __pfx_genl_rcv_msg+0x10/0x10
[  392.795988][ T9984]  ? __lock_acquire+0x5c0/0x1f40
[  392.796016][ T9984]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  392.796047][ T9984]  netlink_rcv_skb+0x159/0x420
[  392.796073][ T9984]  ? __pfx_genl_rcv_msg+0x10/0x10
[  392.796104][ T9984]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  392.796142][ T9984]  ? netlink_deliver_tap+0x1ae/0xcc0
[  392.796172][ T9984]  genl_rcv+0x28/0x40
[  392.796198][ T9984]  netlink_unicast+0x585/0x850
[  392.796227][ T9984]  ? __pfx_netlink_unicast+0x10/0x10
[  392.796261][ T9984]  netlink_sendmsg+0x8b0/0xda0
[  392.796291][ T9984]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.796320][ T9984]  ? apparmor_socket_sendmsg+0x165/0x280
[  392.796350][ T9984]  ____sys_sendmsg+0xa4d/0xbe0
[  392.796371][ T9984]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.796400][ T9984]  ? __pfx_____sys_sendmsg+0x10/0x10
[  392.796435][ T9984]  ___sys_sendmsg+0x190/0x1e0
[  392.796459][ T9984]  ? __pfx____sys_sendmsg+0x10/0x10
[  392.796482][ T9984]  ? futex_wait+0x11e/0x370
[  392.796512][ T9984]  ? find_held_lock+0x2b/0x80
[  392.796546][ T9984]  __sys_sendmsg+0x160/0x210
[  392.796572][ T9984]  ? __pfx___sys_sendmsg+0x10/0x10
[  392.796615][ T9984]  __do_fast_syscall_32+0x13a/0x8b0
[  392.796641][ T9984]  do_fast_syscall_32+0x32/0x70
[  392.796664][ T9984]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  392.796687][ T9984] RIP: 0023:0xf700efec
[  392.796708][ T9984] Code: Unable to access opcode bytes at 0xf700efc2.
[  392.796717][ T9984] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  392.796736][ T9984] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000100
[  392.796748][ T9984] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[  392.796759][ T9984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  392.796770][ T9984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  392.796782][ T9984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  392.796808][ T9984]  </TASK>
[  393.146658][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'.
[  393.410034][T10003] FAULT_INJECTION: forcing a failure.
[  393.410034][T10003] name failslab, interval 1, probability 0, space 0, times 1
[  393.410057][T10003] CPU: 3 UID: 0 PID: 10003 Comm: syz.3.827 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  393.410072][T10003] Tainted: [L]=SOFTLOCKUP
[  393.410076][T10003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  393.410082][T10003] Call Trace:
[  393.410086][T10003]  <TASK>
[  393.410090][T10003]  dump_stack_lvl+0x100/0x190
[  393.410109][T10003]  should_fail_ex.cold+0x5/0xa
[  393.410124][T10003]  should_failslab+0xc2/0x120
[  393.410141][T10003]  kmem_cache_alloc_noprof+0x92/0x6a0
[  393.410156][T10003]  ? security_file_alloc+0x34/0x2c0
[  393.410171][T10003]  security_file_alloc+0x34/0x2c0
[  393.410184][T10003]  init_file+0x95/0x480
[  393.410199][T10003]  alloc_empty_file+0x79/0x1c0
[  393.410216][T10003]  alloc_file_pseudo+0x183/0x290
[  393.410234][T10003]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  393.410248][T10003]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  393.410259][T10003]  ? __do_sys_memfd_secret+0x130/0x570
[  393.410278][T10003]  __do_sys_memfd_secret+0x266/0x570
[  393.410295][T10003]  __do_fast_syscall_32+0x13a/0x8b0
[  393.410308][T10003]  ? lockdep_hardirqs_on+0x7d/0x110
[  393.410321][T10003]  do_fast_syscall_32+0x32/0x70
[  393.410334][T10003]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  393.410348][T10003] RIP: 0023:0xf700efec
[  393.410361][T10003] Code: Unable to access opcode bytes at 0xf700efc2.
[  393.410366][T10003] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 00000000000001bf
[  393.410377][T10003] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  393.410383][T10003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  393.410389][T10003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  393.410396][T10003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.410416][T10003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  393.410430][T10003]  </TASK>
[  393.411848][T10000] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  393.430656][ T5889] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  393.434636][T10000] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  393.434774][T10000] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  393.435046][T10000] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  393.435545][T10000] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  393.493710][T10000] pci 0000:00:01.0: Adding to iommu group 1
[  393.509779][T10000] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  393.509791][T10000] pci 0000:00:01.0: vgaarb: bridge control possible
[  393.509799][T10000] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  393.516345][T10000] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
[  393.537256][T10000] pci 0000:00:03.0: BAR 0 [io  0xc0a0-0xc0bf]
[  393.537319][T10000] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff]
[  393.537494][T10000] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref]
[  393.580544][ T5889] usb 7-1: Using ep0 maxpacket: 32
[  393.581698][T10000] pci 0000:00:03.0: Adding to iommu group 3
[  393.582426][ T5889] usb 7-1: unable to get BOS descriptor or descriptor too short
[  393.582449][ T5889] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  393.586086][ T5889] usb 7-1: string descriptor 0 read error: -22
[  393.586144][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.594433][ T5889] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  393.594453][ T5889] dw2102: su3000_power_ctrl: 1, initialized 0
[  393.597987][T10000] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  393.598173][T10000] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  393.608111][ T5889] dvb-usb: bulk message failed: -22 (2/0)
[  393.608985][T10000] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  393.609156][T10000] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned
[  393.613983][T10000] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]: assigned
[  393.618540][T10000] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  393.654402][T10000] [drm] Found bochs VGA, ID 0xb0c5.
[  393.654413][T10000] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  393.657360][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  393.660764][ T5889] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  393.660790][ T5889] usb 7-1: media controller created
[  393.661057][ T5889] dvb-usb: bulk message failed: -22 (6/0)
[  393.661065][ T5889] dw2102: i2c transfer failed.
[  393.661082][ T5889] dvb-usb: bulk message failed: -22 (6/0)
[  393.661088][ T5889] dw2102: i2c transfer failed.
[  393.661093][ T5889] dvb-usb: bulk message failed: -22 (6/0)
[  393.661100][ T5889] dw2102: i2c transfer failed.
[  393.661105][ T5889] dvb-usb: bulk message failed: -22 (6/0)
[  393.661111][ T5889] dw2102: i2c transfer failed.
[  393.661116][ T5889] dvb-usb: bulk message failed: -22 (6/0)
[  393.661122][ T5889] dw2102: i2c transfer failed.
[  393.661127][ T5889] dvb-usb: bulk message failed: -22 (6/0)
[  393.661133][ T5889] dw2102: i2c transfer failed.
[  393.661137][ T5889] dvb-usb: MAC address: 02:02:02:02:02:02
[  393.709324][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  393.774976][ T5889] dvb-usb: bulk message failed: -22 (3/0)
[  393.774994][ T5889] dw2102: command 0x0e transfer failed.
[  393.775001][ T5889] dvb-usb: bulk message failed: -22 (3/0)
[  393.775011][ T5889] dw2102: command 0x0e transfer failed.
[  393.775256][T10000] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  393.921432][T10000] Console: switching to colour frame buffer device 160x50
[  393.952251][T10000] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  394.082810][ T5889] dvb-usb: bulk message failed: -22 (3/0)
[  394.082847][ T5889] dw2102: command 0x0e transfer failed.
[  394.082853][ T5889] dvb-usb: bulk message failed: -22 (3/0)
[  394.082861][ T5889] dw2102: command 0x0e transfer failed.
[  394.082866][ T5889] dvb-usb: bulk message failed: -22 (1/0)
[  394.082874][ T5889] dw2102: command 0x51 transfer failed.
[  394.085478][T10013] profile_transition: unconfined exec no attachment
[  394.087629][ T9993] dvb-usb: bulk message failed: -22 (4/0)
[  394.087648][ T9993] dw2102: i2c transfer failed.
[  394.123282][ T5889] DVB: Unable to find symbol ds3000_attach()
[  394.123293][ T5889] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  394.124636][T10018] profile_transition: unconfined exec no attachment
[  394.160640][ T5889] rc_core: IR keymap rc-su3000 not found
[  394.160654][ T5889] Registered IR keymap rc-empty
[  394.165538][ T5889] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[  394.166539][ T5889] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input19
[  394.193706][ T5889] dvb-usb: schedule remote query interval to 150 msecs.
[  394.193721][ T5889] dw2102: su3000_power_ctrl: 0, initialized 1
[  394.193727][ T5889] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  394.196596][ T5889] usb 7-1: USB disconnect, device number 8
[  394.277581][ T5889] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  395.272607][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'.
[  396.158428][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.172310][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.430466][ T5816] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.430519][ T5816] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.430548][ T5816] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.430577][ T5816] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.527826][ T5743] Bluetooth: hci3: unexpected event for opcode 0x0403
[  396.636767][T10046] netlink: 'syz.0.838': attribute type 1 has an invalid length.
[  396.763090][T10053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.840'.
[  396.815930][T10053] FAULT_INJECTION: forcing a failure.
[  396.815930][T10053] name failslab, interval 1, probability 0, space 0, times 0
[  396.816008][T10053] CPU: 1 UID: 0 PID: 10053 Comm: syz.2.840 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  396.816039][T10053] Tainted: [L]=SOFTLOCKUP
[  396.816048][T10053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  396.816060][T10053] Call Trace:
[  396.816067][T10053]  <TASK>
[  396.816075][T10053]  dump_stack_lvl+0x100/0x190
[  396.816173][T10053]  should_fail_ex.cold+0x5/0xa
[  396.816202][T10053]  should_failslab+0xc2/0x120
[  396.816250][T10053]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  396.816275][T10053]  ? alloc_vmap_area+0x640/0x2bb0
[  396.816302][T10053]  alloc_vmap_area+0x640/0x2bb0
[  396.816334][T10053]  ? kasan_save_track+0x14/0x30
[  396.816358][T10053]  ? __kasan_kmalloc+0xaa/0xb0
[  396.816381][T10053]  ? __pfx_alloc_vmap_area+0x10/0x10
[  396.816407][T10053]  ? __get_vm_area_node+0x124/0x350
[  396.816433][T10053]  __get_vm_area_node+0x1ed/0x350
[  396.816464][T10053]  __vmalloc_node_range_noprof+0x268/0x1420
[  396.816499][T10053]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  396.816528][T10053]  ? __pfx_stack_trace_save+0x10/0x10
[  396.816556][T10053]  ? stack_depot_save_flags+0x27/0x9f0
[  396.816585][T10053]  ? __pfx_sched_clock_cpu+0x10/0x10
[  396.816614][T10053]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  396.816640][T10053]  ? __kasan_kmalloc+0xaa/0xb0
[  396.816664][T10053]  ? __do_fast_syscall_32+0x13a/0x8b0
[  396.816729][T10053]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  396.816767][T10053]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  396.816794][T10053]  __vmalloc_node_noprof+0xad/0xf0
[  396.816824][T10053]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  396.816852][T10053]  __vmalloc_noprof+0xa3/0x120
[  396.816878][T10053]  ? __pfx___vmalloc_noprof+0x10/0x10
[  396.816912][T10053]  bpf_prog_alloc_no_stats+0x58/0x690
[  396.816941][T10053]  bpf_prog_alloc+0x3b/0x200
[  396.816968][T10053]  bpf_prog_create_from_user+0xb4/0x2e0
[  396.817017][T10053]  ? __pfx_seccomp_check_filter+0x10/0x10
[  396.817039][T10053]  do_seccomp+0x7f7/0x2730
[  396.817068][T10053]  ? __pfx_do_seccomp+0x10/0x10
[  396.817089][T10053]  ? xfd_validate_state+0x129/0x190
[  396.817129][T10053]  __do_fast_syscall_32+0x13a/0x8b0
[  396.817156][T10053]  do_fast_syscall_32+0x32/0x70
[  396.817179][T10053]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  396.817204][T10053] RIP: 0023:0xf709efec
[  396.817225][T10053] Code: Unable to access opcode bytes at 0xf709efc2.
[  396.817235][T10053] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162
[  396.817253][T10053] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000007
[  396.817263][T10053] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  396.817276][T10053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  396.817286][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.817299][T10053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  396.817324][T10053]  </TASK>
[  396.817449][T10053] warn_alloc: 1 callbacks suppressed
[  396.817515][T10053] syz.2.840: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  396.818003][T10053] CPU: 1 UID: 0 PID: 10053 Comm: syz.2.840 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  396.818046][T10053] Tainted: [L]=SOFTLOCKUP
[  396.818052][T10053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  396.818065][T10053] Call Trace:
[  396.818072][T10053]  <TASK>
[  396.818079][T10053]  dump_stack_lvl+0x100/0x190
[  396.818101][T10053]  warn_alloc.cold+0x9e/0xb2
[  396.818125][T10053]  ? __pfx_warn_alloc+0x10/0x10
[  396.818145][T10053]  ? lockdep_hardirqs_on+0x7d/0x110
[  396.818168][T10053]  ? __get_vm_area_node+0x2f0/0x350
[  396.818200][T10053]  ? __get_vm_area_node+0x22b/0x350
[  396.818230][T10053]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  396.818259][T10053]  ? __pfx_stack_trace_save+0x10/0x10
[  396.818287][T10053]  ? stack_depot_save_flags+0x27/0x9f0
[  396.818314][T10053]  ? __pfx_sched_clock_cpu+0x10/0x10
[  396.818342][T10053]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  396.818366][T10053]  ? __kasan_kmalloc+0xaa/0xb0
[  396.818391][T10053]  ? __do_fast_syscall_32+0x13a/0x8b0
[  396.818415][T10053]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  396.818452][T10053]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  396.818484][T10053]  __vmalloc_node_noprof+0xad/0xf0
[  396.818511][T10053]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  396.818541][T10053]  __vmalloc_noprof+0xa3/0x120
[  396.818570][T10053]  ? __pfx___vmalloc_noprof+0x10/0x10
[  396.818608][T10053]  bpf_prog_alloc_no_stats+0x58/0x690
[  396.818637][T10053]  bpf_prog_alloc+0x3b/0x200
[  396.818665][T10053]  bpf_prog_create_from_user+0xb4/0x2e0
[  396.818687][T10053]  ? __pfx_seccomp_check_filter+0x10/0x10
[  396.818709][T10053]  do_seccomp+0x7f7/0x2730
[  396.818736][T10053]  ? __pfx_do_seccomp+0x10/0x10
[  396.818757][T10053]  ? xfd_validate_state+0x129/0x190
[  396.818793][T10053]  __do_fast_syscall_32+0x13a/0x8b0
[  396.818818][T10053]  do_fast_syscall_32+0x32/0x70
[  396.818841][T10053]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  396.818882][T10053] RIP: 0023:0xf709efec
[  396.818901][T10053] Code: Unable to access opcode bytes at 0xf709efc2.
[  396.818910][T10053] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162
[  396.818929][T10053] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000007
[  396.818942][T10053] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  396.818954][T10053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  396.818964][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.818973][T10053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  396.818995][T10053]  </TASK>
[  396.819382][T10053] Mem-Info:
[  396.819413][T10053] active_anon:2917 inactive_anon:6549 isolated_anon:0
[  396.819413][T10053]  active_file:11778 inactive_file:11402 isolated_file:0
[  396.819413][T10053]  unevictable:1000 dirty:268 writeback:0
[  396.819413][T10053]  slab_reclaimable:6470 slab_unreclaimable:62185
[  396.819413][T10053]  mapped:25860 shmem:1479 pagetables:1431
[  396.819413][T10053]  sec_pagetables:320 bounce:0
[  396.819413][T10053]  kernel_misc_reclaimable:0
[  396.819413][T10053]  free:30533 free_pcp:9680 free_cma:0
[  396.819533][T10053] Node 0 active_anon:36kB inactive_anon:40kB active_file:36kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:8kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8768kB pagetables:1668kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  396.819782][T10053] Node 1 active_anon:11632kB inactive_anon:26156kB active_file:47076kB inactive_file:45500kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:103408kB dirty:1064kB writeback:0kB shmem:5912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5448kB pagetables:4056kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  396.819865][T10053] Node 0 DMA free:2020kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:8kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:32kB free_cma:0kB
[  396.820076][T10053] lowmem_reserve[]: 0 278 278 278 278
[  396.820561][T10053] Node 0 DMA32 free:15588kB boost:0kB min:12624kB low:15780kB high:18936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28kB inactive_anon:40kB active_file:36kB inactive_file:108kB unevictable:0kB writepending:8kB zspages:88kB present:1032196kB managed:284804kB mlocked:0kB bounce:0kB free_pcp:3928kB local_pcp:1312kB free_cma:0kB
[  396.820895][T10053] lowmem_reserve[]: 0 0 0 0 0
[  396.831103][T10053] Node 1 DMA32 free:104524kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11632kB inactive_anon:26156kB active_file:47076kB inactive_file:45500kB unevictable:4000kB writepending:1064kB zspages:3120kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:34744kB local_pcp:10188kB free_cma:0kB
[  396.831372][T10053] lowmem_reserve[]: 0 0 0 0 0
[  396.831487][T10053] Node 0 DMA: 15*4kB (UM) 5*8kB (UM) 2*16kB (UM) 5*32kB (UM) 1*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2020kB
[  396.831637][T10053] Node 0 DMA32: 3*4kB (ME) 55*8kB (ME) 30*16kB (UME) 80*32kB (UME) 41*64kB (UME) 24*128kB (UME) 13*256kB (UM) 4*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 15588kB
[  396.843749][T10053] Node 1 DMA32: 889*4kB (UME) 863*8kB (UME) 447*16kB (UME) 158*32kB (UME) 124*64kB (ME) 31*128kB (ME) 35*256kB (UME) 17*512kB (UM) 15*1024kB (UME) 4*2048kB (UM) 7*4096kB (UM) = 104460kB
[  396.843907][T10053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  396.843922][T10053] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  396.843935][T10053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  396.843945][T10053] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=1 hugepages_size=2048kB
[  396.843958][T10053] 25891 total pagecache pages
[  396.843965][T10053] 1233 pages in swap cache
[  396.843971][T10053] Free swap  = 113964kB
[  396.843977][T10053] Total swap = 124996kB
[  396.843984][T10053] 524155 pages RAM
[  396.843990][T10053] 0 pages HighMem/MovableOnly
[  396.843997][T10053] 212062 pages reserved
[  396.844003][T10053] 0 pages cma reserved
[  396.989125][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'.
[  397.633791][T10046] bond1: entered promiscuous mode
[  397.633959][T10046] 8021q: adding VLAN 0 to HW filter on device bond1
[  397.775840][T10041] debugfs: '!' already exists in 'ieee80211'
[  397.817561][T10044] bond1: (slave bridge0): making interface the new active one
[  397.817586][T10044] bridge0: entered promiscuous mode
[  397.823556][T10044] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  397.872681][    T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!!
[  399.106977][T10075] 9pnet_virtio: no channels available for device syz
[  399.981877][T10089] profile_transition: unconfined exec no attachment
[  400.341010][T10095] profile_transition: unconfined exec no attachment
[  401.249411][T10094] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  401.250325][T10107] profile_transition: unconfined exec no attachment
[  401.256846][T10110] profile_transition: unconfined exec no attachment
[  401.257119][T10109] profile_transition: unconfined exec no attachment
[  401.262517][T10112] profile_transition: unconfined exec no attachment
[  401.263852][T10113] profile_transition: unconfined exec no attachment
[  401.264132][T10111] profile_transition: unconfined exec no attachment
[  401.273257][T10094] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  401.273355][T10094] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  401.274261][T10106] profile_transition: unconfined exec no attachment
[  401.444770][T10118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'.
[  401.453143][T10119] profile_transition: unconfined exec no attachment
[  401.578419][T10121] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  401.578432][T10121] CPU: 2 UID: 0 PID: 10121 Comm: syz.2.851 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.578450][T10121] Tainted: [L]=SOFTLOCKUP
[  401.578454][T10121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  401.578461][T10121] Call Trace:
[  401.578465][T10121]  <TASK>
[  401.578470][T10121]  dump_stack_lvl+0x100/0x190
[  401.578489][T10121]  sysfs_warn_dup.cold+0x1c/0x28
[  401.578505][T10121]  sysfs_do_create_link_sd+0x113/0x140
[  401.578522][T10121]  sysfs_create_link+0x61/0xc0
[  401.578537][T10121]  device_add+0x675/0x1970
[  401.578551][T10121]  ? __pfx_device_add+0x10/0x10
[  401.578576][T10121]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  401.578596][T10121]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  401.578614][T10121]  wiphy_register+0x2151/0x3110
[  401.578636][T10121]  ? __pfx_wiphy_register+0x10/0x10
[  401.578653][T10121]  ? __asan_memset+0x23/0x50
[  401.578665][T10121]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  401.578684][T10121]  ieee80211_register_hw+0x3090/0x45c0
[  401.578706][T10121]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  401.578720][T10121]  ? __pfx___debug_object_init+0x10/0x10
[  401.578739][T10121]  ? find_held_lock+0x2b/0x80
[  401.578752][T10121]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  401.578768][T10121]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  401.578783][T10121]  ? __hrtimer_setup+0x208/0x330
[  401.578796][T10121]  mac80211_hwsim_new_radio+0x2b08/0x6510
[  401.578817][T10121]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  401.578830][T10121]  ? __asan_memcpy+0x3c/0x60
[  401.578843][T10121]  hwsim_new_radio_nl+0xc6b/0x13f0
[  401.578854][T10121]  ? trace_kmalloc+0xeb/0x110
[  401.578870][T10121]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  401.578885][T10121]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  401.578903][T10121]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  401.578923][T10121]  genl_family_rcv_msg_doit+0x214/0x300
[  401.578941][T10121]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  401.578964][T10121]  ? genl_get_cmd+0x3e7/0x760
[  401.578985][T10121]  ? bpf_lsm_capable+0x9/0x10
[  401.578996][T10121]  ? security_capable+0x80/0x260
[  401.579013][T10121]  ? ns_capable+0xd2/0xf0
[  401.579032][T10121]  genl_rcv_msg+0x560/0x800
[  401.579051][T10121]  ? __pfx_genl_rcv_msg+0x10/0x10
[  401.579069][T10121]  ? __lock_acquire+0x5c0/0x1f40
[  401.579084][T10121]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  401.579101][T10121]  netlink_rcv_skb+0x159/0x420
[  401.579116][T10121]  ? __pfx_genl_rcv_msg+0x10/0x10
[  401.579133][T10121]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  401.579154][T10121]  ? netlink_deliver_tap+0x1ae/0xcc0
[  401.579171][T10121]  genl_rcv+0x28/0x40
[  401.579186][T10121]  netlink_unicast+0x585/0x850
[  401.579203][T10121]  ? __pfx_netlink_unicast+0x10/0x10
[  401.579222][T10121]  netlink_sendmsg+0x8b0/0xda0
[  401.579239][T10121]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.579256][T10121]  ? apparmor_socket_sendmsg+0x165/0x280
[  401.579274][T10121]  ____sys_sendmsg+0xa4d/0xbe0
[  401.579287][T10121]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.579303][T10121]  ? __pfx_____sys_sendmsg+0x10/0x10
[  401.579322][T10121]  ___sys_sendmsg+0x190/0x1e0
[  401.579337][T10121]  ? __pfx____sys_sendmsg+0x10/0x10
[  401.579350][T10121]  ? futex_wait+0x11e/0x370
[  401.579369][T10121]  ? find_held_lock+0x2b/0x80
[  401.579390][T10121]  __sys_sendmsg+0x160/0x210
[  401.579407][T10121]  ? __pfx___sys_sendmsg+0x10/0x10
[  401.579431][T10121]  __do_fast_syscall_32+0x13a/0x8b0
[  401.579447][T10121]  do_fast_syscall_32+0x32/0x70
[  401.579460][T10121]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  401.579474][T10121] RIP: 0023:0xf709efec
[  401.579489][T10121] Code: Unable to access opcode bytes at 0xf709efc2.
[  401.579494][T10121] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  401.579505][T10121] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000100
[  401.579511][T10121] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[  401.579518][T10121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  401.579524][T10121] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  401.579530][T10121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  401.579544][T10121]  </TASK>
[  402.861317][ T5097] Bluetooth: hci1: command 0x0c1a tx timeout
[  402.864021][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.864287][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.903392][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.918282][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.924468][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.925186][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.925848][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.926634][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.927351][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.928146][T10147] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  403.344193][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout
[  403.344225][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout
[  403.630723][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'.
[  403.630737][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'.
[  403.630744][T10148] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  403.636490][T10148] loop5: detected capacity change from 0 to 5855
[  403.664737][ T7139] Buffer I/O error on dev loop5, logical block 731, async page read
[  404.208269][T10156] No such timeout policy "syz1"
[  404.288733][T10159] netlink: 'syz.2.868': attribute type 2 has an invalid length.
[  404.288751][T10159] netlink: 'syz.2.868': attribute type 2 has an invalid length.
[  405.337656][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'.
[  406.463947][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout
[  408.169911][T10202] ªªªªªª: renamed from vlan0
[  408.907574][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.869'.
[  408.907595][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.869'.
[  408.907607][T10205] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  408.908607][T10205] loop5: detected capacity change from 0 to 23303
[  408.990310][ T7139] Buffer I/O error on dev loop5, logical block 2912, async page read
[  409.463304][T10218] xt_connbytes: Forcing CT accounting to be enabled
[  409.464834][T10218] xt_TPROXY: Can be used only with -p tcp or -p udp
[  409.662047][T10218] ceph: No mds server is up or the cluster is laggy
[  409.662493][ T6603] libceph: connect (1)[c::]:6789 error -101
[  409.662693][ T6603] libceph: mon0 (1)[c::]:6789 connect error
[  409.922472][ T6603] libceph: connect (1)[c::]:6789 error -101
[  409.923383][ T6603] libceph: mon0 (1)[c::]:6789 connect error
[  410.440536][ T6603] libceph: connect (1)[c::]:6789 error -101
[  410.440671][ T6603] libceph: mon0 (1)[c::]:6789 connect error
[  410.466813][T10225] jffs2: notice: (10225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  411.173667][T10235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.877'.
[  411.186147][ T5825] libceph: connect (1)[c::]:6789 error -101
[  411.186229][ T5825] libceph: mon0 (1)[c::]:6789 connect error
[  411.194300][T10240] sctp_transport_update_pmtu: 45 callbacks suppressed
[  411.194312][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.194845][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.195061][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.196707][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.197086][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.197385][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.197953][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.198390][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.198778][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.199165][T10240] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  411.264234][T10236] ceph: No mds server is up or the cluster is laggy
[  413.655562][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.883'.
[  414.029753][T10271] [U] 
[  414.034815][T10255] bond2: entered allmulticast mode
[  414.035031][T10255] 8021q: adding VLAN 0 to HW filter on device bond2
[  414.159092][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'.
[  414.395312][T10277] profile_transition: name lookup ix on error
[  416.023507][T10286] profile_transition: unconfined exec no attachment
[  416.055065][T10287] profile_transition: unconfined exec no attachment
[  416.385599][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.890'.
[  417.437847][T10302] CacheFiles: No cache directory specified
[  417.645368][T10307] xt_connbytes: Forcing CT accounting to be enabled
[  417.645477][T10307] xt_TPROXY: Can be used only with -p tcp or -p udp
[  417.684810][  T988] libceph: connect (1)[c::]:6789 error -101
[  417.687615][  T988] libceph: mon0 (1)[c::]:6789 connect error
[  417.733373][T10307] ceph: No mds server is up or the cluster is laggy
[  417.999269][T10309] netlink: 'syz.0.894': attribute type 10 has an invalid length.
[  418.016460][T10309] team0 (unregistering): Port device team_slave_0 removed
[  418.018881][T10309] team0 (unregistering): Port device team_slave_1 removed
[  418.431469][T10325] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  418.486312][T10325] evm: overlay not supported
[  419.349528][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'.
[  419.392414][T10320] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  419.609091][    T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  419.714669][T10320] bond2: entered allmulticast mode
[  419.715326][T10320] 8021q: adding VLAN 0 to HW filter on device bond2
[  419.769055][    T9] usb 8-1: Using ep0 maxpacket: 8
[  419.769539][    T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  419.770773][    T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  419.770798][    T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  419.770809][    T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  419.770826][    T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  419.770838][    T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  419.770857][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.974551][    T9] usb 8-1: usb_control_msg returned -32
[  419.974576][    T9] usbtmc 8-1:16.0: can't read capabilities
[  420.046788][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  420.183604][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'.
[  420.329077][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  420.500112][    T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  420.501025][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  420.501070][    T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  420.501090][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  420.502647][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  420.502665][    T9] usb 7-1: Product: syz
[  420.502678][    T9] usb 7-1: Manufacturer: syz
[  420.505790][T10345] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  420.512361][    T9] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected
[  420.518434][    T9] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  421.546564][T10345] uhci_hcd 0000:00:1d.0: remove, state 4
[  421.546586][T10345] usb usb1: USB disconnect, device number 1
[  421.611204][T10345] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered
[  422.081951][T10331] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  422.120324][    T9] usb 8-1: USB disconnect, device number 10
[  422.910640][T10359] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint
[  422.927495][T10359] pci 0000:00:1d.0: BAR 4 [io  0x2000-0x201f]
[  422.967392][T10359] pci 0000:00:1d.0: Adding to iommu group 7
[  422.973178][T10359] pci 0000:00:1d.0: BAR 4 [io  0x2000-0x201f]: assigned
[  423.071667][T10359] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 95699 usecs
[  423.132105][T10359] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[  423.145729][T10359] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1
[  423.145910][T10359] uhci_hcd 0000:00:1d.0: detected 2 ports
[  423.152782][T10359] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000
[  423.155572][T10359] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03
[  423.158494][T10359] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  423.158515][T10359] usb usb1: Product: UHCI Host Controller
[  423.158528][T10359] usb usb1: Manufacturer: Linux syzkaller uhci_hcd
[  423.158543][T10359] usb usb1: SerialNumber: 0000:00:1d.0
[  423.175264][T10359] hub 1-0:1.0: USB hub found
[  423.182670][T10359] hub 1-0:1.0: 2 ports detected
[  423.329844][   T64] usb 7-1: USB disconnect, device number 9
[  423.337576][   T64] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  423.338087][   T64] garmin_gps 7-1:1.0: device disconnected
[  423.994686][T10375] profile_transition: name lookup ix on error
[  425.267224][T10393] profile_transition: unconfined exec no attachment
[  425.468072][T10400] profile_transition: unconfined exec no attachment
[  425.472749][T10401] profile_transition: unconfined exec no attachment
[  425.963880][   T43] kauditd_printk_skb: 496 callbacks suppressed
[  425.963900][   T43] audit: type=1326 audit(1790394321.468:8358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  425.964097][   T43] audit: type=1326 audit(1790394321.468:8359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  425.965206][   T43] audit: type=1326 audit(1790394321.468:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf709efec code=0x7ffc0000
[  425.967173][   T43] audit: type=1326 audit(1790394321.468:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  425.967215][   T43] audit: type=1326 audit(1790394321.468:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  425.967826][   T43] audit: type=1326 audit(1790394321.468:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf709efec code=0x7ffc0000
[  425.968146][   T43] audit: type=1326 audit(1790394321.468:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  425.970163][   T43] audit: type=1326 audit(1790394321.468:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  425.993409][   T43] audit: type=1326 audit(1790394321.498:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709efec code=0x7ffc0000
[  425.993453][   T43] audit: type=1326 audit(1790394321.498:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10404 comm="syz.2.916" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  426.638882][   T35] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  426.988077][T10420] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
[  426.996122][T10420] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]
[  426.996181][T10420] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]
[  426.996359][T10420] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]
[  427.019367][T10420] pci 0000:00:03.0: Adding to iommu group 3
[  427.034155][T10420] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  427.036012][T10420] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned
[  427.036122][T10420] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]: assigned
[  427.050491][   T35] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  427.053025][T10421] FAULT_INJECTION: forcing a failure.
[  427.053025][T10421] name failslab, interval 1, probability 0, space 0, times 0
[  427.053057][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.2.922 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  427.053081][T10421] Tainted: [L]=SOFTLOCKUP
[  427.053088][T10421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  427.053099][T10421] Call Trace:
[  427.053107][T10421]  <TASK>
[  427.053115][T10421]  dump_stack_lvl+0x100/0x190
[  427.053142][T10421]  should_fail_ex.cold+0x5/0xa
[  427.053168][T10421]  should_failslab+0xc2/0x120
[  427.053196][T10421]  kmem_cache_alloc_noprof+0x92/0x6a0
[  427.053221][T10421]  ? d_instantiate+0x8a/0xb0
[  427.053246][T10421]  ? alloc_empty_file+0x5b/0x1c0
[  427.053278][T10421]  alloc_empty_file+0x5b/0x1c0
[  427.053306][T10421]  alloc_file_pseudo+0x183/0x290
[  427.053337][T10421]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  427.053364][T10421]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  427.053382][T10421]  ? __do_sys_memfd_secret+0x130/0x570
[  427.053414][T10421]  __do_sys_memfd_secret+0x266/0x570
[  427.053444][T10421]  __do_fast_syscall_32+0x13a/0x8b0
[  427.053466][T10421]  ? lockdep_hardirqs_on+0x7d/0x110
[  427.053489][T10421]  do_fast_syscall_32+0x32/0x70
[  427.053512][T10421]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.053537][T10421] RIP: 0023:0xf709efec
[  427.053558][T10421] Code: Unable to access opcode bytes at 0xf709efc2.
[  427.053566][T10421] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 00000000000001bf
[  427.053585][T10421] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  427.053597][T10421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  427.053608][T10421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  427.053619][T10421] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  427.053630][T10421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  427.053656][T10421]  </TASK>
[  427.103909][   T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  427.103937][   T35] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  427.103949][   T35] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  427.188757][   T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  427.188774][   T35] usb 6-1: Product: syz
[  427.188781][   T35] usb 6-1: Manufacturer: syz
[  427.191409][T10411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  427.193513][   T35] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[  427.197603][   T35] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  427.225260][T10426] input: syz1 as /devices/virtual/input/input20
[  427.417373][T10411] uhci_hcd 0000:00:1d.0: remove, state 4
[  427.417405][T10411] usb usb1: USB disconnect, device number 1
[  427.438450][T10411] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered
[  427.594425][T10435] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint
[  427.603126][T10435] pci 0000:00:1d.0: BAR 4 [io  0x2000-0x201f]
[  427.621710][T10435] pci 0000:00:1d.0: Adding to iommu group 7
[  427.629287][T10435] pci 0000:00:1d.0: BAR 4 [io  0x2000-0x201f]: assigned
[  427.701886][T10435] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 70489 usecs
[  427.743893][T10435] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[  427.748833][T10435] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1
[  427.749040][T10435] uhci_hcd 0000:00:1d.0: detected 2 ports
[  427.749904][T10435] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000
[  427.752952][T10435] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03
[  427.755881][T10435] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  427.755945][T10435] usb usb1: Product: UHCI Host Controller
[  427.755997][T10435] usb usb1: Manufacturer: Linux syzkaller uhci_hcd
[  427.756007][T10435] usb usb1: SerialNumber: 0000:00:1d.0
[  427.773074][T10435] hub 1-0:1.0: USB hub found
[  427.773387][T10435] hub 1-0:1.0: 2 ports detected
[  428.782030][T10432] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  428.782372][T10432] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  428.782511][T10432] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  428.796187][ T5825] usb 6-1: USB disconnect, device number 11
[  428.805270][ T5825] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  428.805543][ T5825] garmin_gps 6-1:1.0: device disconnected
[  429.045797][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'.
[  429.340808][T10452] profile_transition: unconfined exec no attachment
[  429.578708][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  429.943916][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.981842][T10458] profile_transition: unconfined exec no attachment
[  430.488300][T10450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.493637][T10450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.608602][ T5832] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.608663][ T5832] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.608692][ T5832] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.608728][ T5832] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.769816][T10464] 9p: Bad value for 'rfdno'
[  430.868554][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout
[  430.868581][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout
[  431.831286][T10476] profile_transition: unconfined exec no attachment
[  431.855334][T10477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.932'.
[  431.891707][T10477] FAULT_INJECTION: forcing a failure.
[  431.891707][T10477] name failslab, interval 1, probability 0, space 0, times 0
[  431.891763][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.3.932 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  431.891781][T10477] Tainted: [L]=SOFTLOCKUP
[  431.891785][T10477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  431.891792][T10477] Call Trace:
[  431.891796][T10477]  <TASK>
[  431.891801][T10477]  dump_stack_lvl+0x100/0x190
[  431.891820][T10477]  should_fail_ex.cold+0x5/0xa
[  431.891835][T10477]  should_failslab+0xc2/0x120
[  431.891852][T10477]  __kmalloc_cache_node_noprof+0x94/0x720
[  431.891879][T10477]  ? kernel_text_address+0x8d/0x100
[  431.891902][T10477]  ? __get_vm_area_node+0x124/0x350
[  431.891931][T10477]  __get_vm_area_node+0x124/0x350
[  431.891958][T10477]  __vmalloc_node_range_noprof+0x268/0x1420
[  431.891981][T10477]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  431.892002][T10477]  ? __pfx_stack_trace_save+0x10/0x10
[  431.892023][T10477]  ? stack_depot_save_flags+0x27/0x9f0
[  431.892046][T10477]  ? preempt_schedule_thunk+0x16/0x40
[  431.892066][T10477]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  431.892086][T10477]  ? __kasan_kmalloc+0xaa/0xb0
[  431.892104][T10477]  ? __do_fast_syscall_32+0x13a/0x8b0
[  431.892124][T10477]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  431.892162][T10477]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  431.892186][T10477]  __vmalloc_node_noprof+0xad/0xf0
[  431.892226][T10477]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  431.892256][T10477]  __vmalloc_noprof+0xa3/0x120
[  431.892282][T10477]  ? __pfx___vmalloc_noprof+0x10/0x10
[  431.892316][T10477]  bpf_prog_alloc_no_stats+0x58/0x690
[  431.892344][T10477]  bpf_prog_alloc+0x3b/0x200
[  431.892370][T10477]  bpf_prog_create_from_user+0xb4/0x2e0
[  431.892392][T10477]  ? __pfx_seccomp_check_filter+0x10/0x10
[  431.892413][T10477]  do_seccomp+0x7f7/0x2730
[  431.892440][T10477]  ? __pfx_do_seccomp+0x10/0x10
[  431.892461][T10477]  ? xfd_validate_state+0x129/0x190
[  431.892499][T10477]  __do_fast_syscall_32+0x13a/0x8b0
[  431.892524][T10477]  do_fast_syscall_32+0x32/0x70
[  431.892546][T10477]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  431.892570][T10477] RIP: 0023:0xf700efec
[  431.892589][T10477] Code: Unable to access opcode bytes at 0xf700efc2.
[  431.892597][T10477] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162
[  431.892615][T10477] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000007
[  431.892628][T10477] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  431.892638][T10477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  431.892647][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.892657][T10477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  431.892678][T10477]  </TASK>
[  431.892810][T10477] syz.3.932: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  431.893135][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.3.932 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  431.893163][T10477] Tainted: [L]=SOFTLOCKUP
[  431.893170][T10477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  431.893179][T10477] Call Trace:
[  431.893185][T10477]  <TASK>
[  431.893192][T10477]  dump_stack_lvl+0x100/0x190
[  431.893215][T10477]  warn_alloc.cold+0x9e/0xb2
[  431.893234][T10477]  ? __pfx_warn_alloc+0x10/0x10
[  431.893252][T10477]  ? __kasan_kmalloc+0x8a/0xb0
[  431.893282][T10477]  ? __get_vm_area_node+0x22b/0x350
[  431.893304][T10477]  __vmalloc_node_range_noprof+0xfa2/0x1420
[  431.893320][T10477]  ? __pfx_stack_trace_save+0x10/0x10
[  431.893335][T10477]  ? stack_depot_save_flags+0x27/0x9f0
[  431.893352][T10477]  ? preempt_schedule_thunk+0x16/0x40
[  431.893366][T10477]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  431.893381][T10477]  ? __kasan_kmalloc+0xaa/0xb0
[  431.893393][T10477]  ? __do_fast_syscall_32+0x13a/0x8b0
[  431.893407][T10477]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  431.893428][T10477]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  431.893443][T10477]  __vmalloc_node_noprof+0xad/0xf0
[  431.893460][T10477]  ? bpf_prog_alloc_no_stats+0x58/0x690
[  431.893476][T10477]  __vmalloc_noprof+0xa3/0x120
[  431.893490][T10477]  ? __pfx___vmalloc_noprof+0x10/0x10
[  431.893510][T10477]  bpf_prog_alloc_no_stats+0x58/0x690
[  431.893526][T10477]  bpf_prog_alloc+0x3b/0x200
[  431.893542][T10477]  bpf_prog_create_from_user+0xb4/0x2e0
[  431.893556][T10477]  ? __pfx_seccomp_check_filter+0x10/0x10
[  431.893568][T10477]  do_seccomp+0x7f7/0x2730
[  431.893583][T10477]  ? __pfx_do_seccomp+0x10/0x10
[  431.893594][T10477]  ? xfd_validate_state+0x129/0x190
[  431.893616][T10477]  __do_fast_syscall_32+0x13a/0x8b0
[  431.893630][T10477]  do_fast_syscall_32+0x32/0x70
[  431.893644][T10477]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  431.893658][T10477] RIP: 0023:0xf700efec
[  431.893684][T10477] Code: Unable to access opcode bytes at 0xf700efc2.
[  431.893691][T10477] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162
[  431.893701][T10477] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000007
[  431.893709][T10477] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  431.893715][T10477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  431.893722][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.893728][T10477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  431.893744][T10477]  </TASK>
[  431.893849][T10477] Mem-Info:
[  431.893856][T10477] active_anon:3691 inactive_anon:4468 isolated_anon:0
[  431.893856][T10477]  active_file:14544 inactive_file:7656 isolated_file:0
[  431.893856][T10477]  unevictable:1000 dirty:572 writeback:0
[  431.893856][T10477]  slab_reclaimable:6485 slab_unreclaimable:60817
[  431.893856][T10477]  mapped:24634 shmem:1016 pagetables:1484
[  431.893856][T10477]  sec_pagetables:322 bounce:0
[  431.893856][T10477]  kernel_misc_reclaimable:0
[  431.893856][T10477]  free:27618 free_pcp:12464 free_cma:0
[  431.894008][T10477] Node 0 active_anon:0kB inactive_anon:28kB active_file:36kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8576kB pagetables:1632kB sec_pagetables:1160kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  431.894064][T10477] Node 1 active_anon:14764kB inactive_anon:17844kB active_file:58140kB inactive_file:30516kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:98504kB dirty:2280kB writeback:0kB shmem:4064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5676kB pagetables:4304kB sec_pagetables:128kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  431.894256][T10477] Node 0 DMA free:1644kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:8kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:420kB local_pcp:32kB free_cma:0kB
[  431.894314][T10477] lowmem_reserve[]: 0 278 278 278 278
[  431.894417][T10477] Node 0 DMA32 free:14256kB boost:2048kB min:14672kB low:17828kB high:20984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:28kB active_file:36kB inactive_file:108kB unevictable:0kB writepending:8kB zspages:92kB present:1032196kB managed:284804kB mlocked:0kB bounce:0kB free_pcp:10952kB local_pcp:1540kB free_cma:0kB
[  431.894498][T10477] lowmem_reserve[]: 0 0 0 0 0
[  431.894519][T10477] Node 1 DMA32 free:94572kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:14764kB inactive_anon:17844kB active_file:58140kB inactive_file:30516kB unevictable:4000kB writepending:2280kB zspages:3836kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:38448kB local_pcp:2864kB free_cma:0kB
[  431.894575][T10477] lowmem_reserve[]: 0 0 0 0 0
[  431.894595][T10477] Node 0 DMA: 15*4kB (UM) 4*8kB (U) 1*16kB (U) 4*32kB (UM) 2*64kB (M) 2*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1644kB
[  431.895361][T10477] Node 0 DMA32: 46*4kB (UME) 73*8kB (UME) 17*16kB (UME) 69*32kB (UME) 52*64kB (UME) 18*128kB (UME) 13*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 14256kB
[  431.895974][T10477] Node 1 DMA32: 423*4kB (ME) 389*8kB (UME) 357*16kB (UME) 184*32kB (UME) 161*64kB (UME) 50*128kB (UME) 48*256kB (UME) 34*512kB (UM) 19*1024kB (ME) 4*2048kB (UM) 1*4096kB (M) = 94548kB
[  431.896883][T10477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  431.896917][T10477] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  431.896949][T10477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  431.897067][T10477] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=1 hugepages_size=2048kB
[  431.897152][T10477] 24284 total pagecache pages
[  431.897158][T10477] 1068 pages in swap cache
[  431.897316][T10477] Free swap  = 109320kB
[  431.897321][T10477] Total swap = 124996kB
[  431.897398][T10477] 524155 pages RAM
[  431.897403][T10477] 0 pages HighMem/MovableOnly
[  431.897496][T10477] 212062 pages reserved
[  431.897500][T10477] 0 pages cma reserved
[  431.954119][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'.
[  432.303787][T10483] profile_transition: unconfined exec no attachment
[  432.445221][T10470] null_blk: rnullb0: using native zone append
[  432.484322][T10479] FAULT_INJECTION: forcing a failure.
[  432.484322][T10479] name failslab, interval 1, probability 0, space 0, times 0
[  432.484356][T10479] CPU: 1 UID: 0 PID: 10479 Comm: syz.0.941 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  432.484375][T10479] Tainted: [L]=SOFTLOCKUP
[  432.484380][T10479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  432.484387][T10479] Call Trace:
[  432.484391][T10479]  <TASK>
[  432.484396][T10479]  dump_stack_lvl+0x100/0x190
[  432.484415][T10479]  should_fail_ex.cold+0x5/0xa
[  432.484431][T10479]  should_failslab+0xc2/0x120
[  432.484447][T10479]  kmem_cache_alloc_noprof+0x92/0x6a0
[  432.484462][T10479]  ? d_instantiate+0x8a/0xb0
[  432.484477][T10479]  ? alloc_empty_file+0x5b/0x1c0
[  432.484494][T10479]  alloc_empty_file+0x5b/0x1c0
[  432.484511][T10479]  alloc_file_pseudo+0x183/0x290
[  432.484527][T10479]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  432.484542][T10479]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  432.484553][T10479]  ? __do_sys_memfd_secret+0x130/0x570
[  432.484574][T10479]  __do_sys_memfd_secret+0x266/0x570
[  432.484592][T10479]  __do_fast_syscall_32+0x13a/0x8b0
[  432.484606][T10479]  ? lockdep_hardirqs_on+0x7d/0x110
[  432.484619][T10479]  do_fast_syscall_32+0x32/0x70
[  432.484631][T10479]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  432.484646][T10479] RIP: 0023:0xf705efec
[  432.484659][T10479] Code: Unable to access opcode bytes at 0xf705efc2.
[  432.484664][T10479] RSP: 002b:00000000f540b50c EFLAGS: 00000292 ORIG_RAX: 00000000000001bf
[  432.484676][T10479] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  432.484684][T10479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  432.484690][T10479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  432.484697][T10479] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  432.484704][T10479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  432.484717][T10479]  </TASK>
[  433.041076][T10470] null_blk: disk rnullb0 created
[  434.447194][T10474] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
[  434.457541][T10474] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]
[  434.457635][T10474] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]
[  434.457866][T10474] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]
[  434.472925][T10474] pci 0000:00:03.0: Adding to iommu group 3
[  434.482329][T10474] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  434.484614][T10474] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned
[  434.484726][T10474] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]: assigned
[  434.733268][T10491] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  434.733376][T10491] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  434.733448][T10491] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  434.994343][T10498] Console: switching to colour dummy device 80x25
[  435.095209][T10506] lo: entered allmulticast mode
[  435.097824][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'.
[  435.102813][T10506] net_ratelimit: 9 callbacks suppressed
[  435.102826][T10506] IPv4: Oversized IP packet from 172.20.20.24
[  435.104036][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  435.268357][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  435.295461][T10513] xt_connbytes: Forcing CT accounting to be enabled
[  435.295759][T10513] xt_TPROXY: Can be used only with -p tcp or -p udp
[  435.481059][T10513] ceph: No mds server is up or the cluster is laggy
[  435.570380][   T62] libceph: connect (1)[c::]:6789 error -101
[  435.576984][   T62] libceph: mon0 (1)[c::]:6789 connect error
[  435.884431][T10518] overlayfs: failed to resolve './file7/file0': -2
[  435.996314][T10518] blktrace: Concurrent blktraces are not allowed on sg0
[  436.141978][T10529] devpts: Invalid uid '0x00000000ffffffff'
[  436.331147][T10525] futex_wake_op: syz.1.944 tries to shift op by 144; fix this program
[  436.331332][T10525] futex_wake_op: syz.1.944 tries to shift op by 144; fix this program
[  436.668178][   T10] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  436.778228][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout
[  436.778260][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout
[  436.818871][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  436.819863][   T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF
[  436.819888][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  436.821756][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.821776][   T10] usb 7-1: Product: syz
[  436.821788][   T10] usb 7-1: Manufacturer: syz
[  436.821799][   T10] usb 7-1: SerialNumber: syz
[  436.827212][   T10] usb 7-1: config 0 descriptor??
[  437.011871][T10497] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  437.022604][T10497] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  437.022744][T10497] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  437.022982][T10497] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  437.024723][T10497] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  437.040153][T10497] pci 0000:00:01.0: Adding to iommu group 1
[  437.050581][T10497] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  437.050599][T10497] pci 0000:00:01.0: vgaarb: bridge control possible
[  437.050611][T10497] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  437.063663][T10497] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  437.066289][T10497] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  437.067790][T10497] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  437.078468][T10497] [drm] Found bochs VGA, ID 0xb0c5.
[  437.078483][T10497] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  437.117082][T10497] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  437.139414][T10538] jffs2: notice: (10538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  437.279141][T10497] Console: switching to colour frame buffer device 160x50
[  437.323492][T10497] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  437.485038][T10534] 9p: Bad value for 'wfdno'
[  437.626939][   T10] usb 7-1: USB disconnect, device number 10
[  437.854024][ T7138] udevd[7138]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  438.066894][T10547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'.
[  438.222076][   T25] libceph: connect (1)[c::]:6789 error -101
[  438.222395][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  438.296051][T10549] ceph: No mds server is up or the cluster is laggy
[  438.479618][ T1347] libceph: connect (1)[c::]:6789 error -101
[  438.480453][ T1347] libceph: mon0 (1)[c::]:6789 connect error
[  438.989183][   T25] libceph: connect (1)[c::]:6789 error -101
[  438.989716][   T25] libceph: mon0 (1)[c::]:6789 connect error
[  439.128166][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'.
[  439.499784][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  439.627011][T10565] profile_transition: unconfined exec no attachment
[  440.870698][T10579] netlink: 36 bytes leftover after parsing attributes in process `syz.0.962'.
[  440.870714][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'.
[  440.870722][T10579] netlink: 36 bytes leftover after parsing attributes in process `syz.0.962'.
[  440.919321][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  441.088668][T10583] profile_transition: unconfined exec no attachment
[  441.205234][T10586] xt_connbytes: Forcing CT accounting to be enabled
[  441.205598][T10586] xt_TPROXY: Can be used only with -p tcp or -p udp
[  441.606749][T10586] ceph: No mds server is up or the cluster is laggy
[  441.607229][  T988] libceph: connect (1)[c::]:6789 error -101
[  441.607477][  T988] libceph: mon0 (1)[c::]:6789 connect error
[  441.653006][T10594] profile_transition: unconfined exec no attachment
[  441.811853][T10595] profile_transition: unconfined exec no attachment
[  441.864740][T10596] profile_transition: unconfined exec no attachment
[  442.025230][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.028150][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.124076][T10059] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.125470][T10059] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.140159][T10059] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.140198][T10059] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.212233][T10599] profile_transition: unconfined exec no attachment
[  442.362352][T10606] FAULT_INJECTION: forcing a failure.
[  442.362352][T10606] name failslab, interval 1, probability 0, space 0, times 0
[  442.362385][T10606] CPU: 2 UID: 0 PID: 10606 Comm: syz.1.956 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  442.362412][T10606] Tainted: [L]=SOFTLOCKUP
[  442.362419][T10606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  442.362428][T10606] Call Trace:
[  442.362434][T10606]  <TASK>
[  442.362441][T10606]  dump_stack_lvl+0x100/0x190
[  442.362532][T10606]  should_fail_ex.cold+0x5/0xa
[  442.362563][T10606]  should_failslab+0xc2/0x120
[  442.362616][T10606]  kmem_cache_alloc_noprof+0x92/0x6a0
[  442.362644][T10606]  ? d_instantiate+0x8a/0xb0
[  442.362669][T10606]  ? alloc_empty_file+0x5b/0x1c0
[  442.362701][T10606]  alloc_empty_file+0x5b/0x1c0
[  442.362728][T10606]  alloc_file_pseudo+0x183/0x290
[  442.362756][T10606]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  442.362782][T10606]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  442.362802][T10606]  ? __do_sys_memfd_secret+0x130/0x570
[  442.362835][T10606]  __do_sys_memfd_secret+0x266/0x570
[  442.362859][T10606]  __do_fast_syscall_32+0x13a/0x8b0
[  442.362907][T10606]  ? lockdep_hardirqs_on+0x7d/0x110
[  442.362932][T10606]  do_fast_syscall_32+0x32/0x70
[  442.362958][T10606]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  442.362983][T10606] RIP: 0023:0xf700efec
[  442.363005][T10606] Code: Unable to access opcode bytes at 0xf700efc2.
[  442.363013][T10606] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 00000000000001bf
[  442.363034][T10606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  442.363059][T10606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  442.363070][T10606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  442.363081][T10606] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  442.363091][T10606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  442.363116][T10606]  </TASK>
[  442.378546][T10605] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
[  442.383143][T10605] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]
[  442.383223][T10605] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]
[  442.383399][T10605] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]
[  442.391309][T10605] pci 0000:00:03.0: Adding to iommu group 3
[  442.402548][T10605] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  442.404506][T10605] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned
[  442.404614][T10605] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]: assigned
[  442.433735][T10608] profile_transition: unconfined exec no attachment
[  442.541186][T10612] profile_transition: unconfined exec no attachment
[  442.841167][T10617] profile_transition: unconfined exec no attachment
[  442.867552][T10618] profile_transition: unconfined exec no attachment
[  443.891822][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'.
[  444.105956][T10655] jffs2: notice: (10655) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  446.457186][T10673] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
[  446.471956][T10673] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]
[  446.472018][T10673] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]
[  446.472197][T10673] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]
[  446.487578][T10673] pci 0000:00:03.0: Adding to iommu group 3
[  446.496993][T10673] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  446.507216][T10673] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned
[  446.507330][T10673] pci 0000:00:03.0: BAR 0 [io  0x2020-0x203f]: assigned
[  446.547719][T10669] FAULT_INJECTION: forcing a failure.
[  446.547719][T10669] name failslab, interval 1, probability 0, space 0, times 0
[  446.547742][T10669] CPU: 2 UID: 0 PID: 10669 Comm: syz.0.970 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  446.547757][T10669] Tainted: [L]=SOFTLOCKUP
[  446.547761][T10669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  446.547767][T10669] Call Trace:
[  446.547771][T10669]  <TASK>
[  446.547776][T10669]  dump_stack_lvl+0x100/0x190
[  446.547796][T10669]  should_fail_ex.cold+0x5/0xa
[  446.547812][T10669]  should_failslab+0xc2/0x120
[  446.547829][T10669]  kmem_cache_alloc_noprof+0x92/0x6a0
[  446.547843][T10669]  ? d_instantiate+0x8a/0xb0
[  446.547859][T10669]  ? alloc_empty_file+0x5b/0x1c0
[  446.547878][T10669]  alloc_empty_file+0x5b/0x1c0
[  446.547893][T10669]  alloc_file_pseudo+0x183/0x290
[  446.547909][T10669]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  446.547924][T10669]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  446.547936][T10669]  ? __do_sys_memfd_secret+0x130/0x570
[  446.547955][T10669]  __do_sys_memfd_secret+0x266/0x570
[  446.547973][T10669]  __do_fast_syscall_32+0x13a/0x8b0
[  446.547986][T10669]  ? lockdep_hardirqs_on+0x7d/0x110
[  446.547998][T10669]  do_fast_syscall_32+0x32/0x70
[  446.548011][T10669]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  446.548025][T10669] RIP: 0023:0xf705efec
[  446.548037][T10669] Code: Unable to access opcode bytes at 0xf705efc2.
[  446.548042][T10669] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001bf
[  446.548053][T10669] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  446.548060][T10669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  446.548067][T10669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  446.548073][T10669] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  446.548080][T10669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  446.548093][T10669]  </TASK>
[  446.828019][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'.
[  447.490169][T10690] xt_TPROXY: Can be used only with -p tcp or -p udp
[  447.683761][T10690] ceph: No mds server is up or the cluster is laggy
[  447.710859][   T62] libceph: connect (1)[c::]:6789 error -101
[  447.712577][   T62] libceph: mon0 (1)[c::]:6789 connect error
[  448.298501][T10698] profile_transition: 16 callbacks suppressed
[  448.298548][T10698] profile_transition: unconfined exec no attachment
[  448.501430][T10701] profile_transition: unconfined exec no attachment
[  448.645438][ T5097] Bluetooth: hci2: unexpected subevent 0x18 length: 30 > 19
[  448.645467][ T5097] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  448.689958][   T43] kauditd_printk_skb: 2 callbacks suppressed
[  448.689970][   T43] audit: type=1326 audit(1790394344.199:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  448.689994][   T43] audit: type=1326 audit(1790394344.199:8371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  448.692906][   T43] audit: type=1326 audit(1790394344.199:8372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  448.692935][   T43] audit: type=1326 audit(1790394344.199:8373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf700efec code=0x7ffc0000
[  448.692954][   T43] audit: type=1326 audit(1790394344.199:8374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  448.692972][   T43] audit: type=1326 audit(1790394344.199:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  448.692992][   T43] audit: type=1326 audit(1790394344.199:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  448.693011][   T43] audit: type=1326 audit(1790394344.199:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  448.693030][   T43] audit: type=1326 audit(1790394344.199:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  448.695530][   T43] audit: type=1326 audit(1790394344.199:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10702 comm="syz.1.976" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf700efec code=0x7ffc0000
[  449.056418][T10709] netlink: 'syz.3.977': attribute type 5 has an invalid length.
[  449.056585][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'.
[  449.909022][T10718] FAULT_INJECTION: forcing a failure.
[  449.909022][T10718] name failslab, interval 1, probability 0, space 0, times 0
[  449.909157][T10718] CPU: 1 UID: 0 PID: 10718 Comm: syz.0.980 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  449.909186][T10718] Tainted: [L]=SOFTLOCKUP
[  449.909190][T10718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  449.909197][T10718] Call Trace:
[  449.909202][T10718]  <TASK>
[  449.909207][T10718]  dump_stack_lvl+0x100/0x190
[  449.909225][T10718]  should_fail_ex.cold+0x5/0xa
[  449.909242][T10718]  should_failslab+0xc2/0x120
[  449.909259][T10718]  __kmalloc_noprof+0xfc/0x840
[  449.909273][T10718]  ? dma_fence_chain_walk+0x2ff/0x3c0
[  449.909287][T10718]  ? __dma_fence_unwrap_merge+0x410/0x960
[  449.909304][T10718]  __dma_fence_unwrap_merge+0x410/0x960
[  449.909323][T10718]  sync_file_merge.constprop.0+0x109/0x270
[  449.909340][T10718]  ? __pfx_sync_file_merge.constprop.0+0x10/0x10
[  449.909356][T10718]  ? find_held_lock+0x2b/0x80
[  449.909382][T10718]  ? __fget_files+0x215/0x3d0
[  449.909399][T10718]  ? __fget_files+0x21f/0x3d0
[  449.909413][T10718]  sync_file_ioctl+0xbd6/0xea0
[  449.909432][T10718]  ? __pfx_sync_file_ioctl+0x10/0x10
[  449.909448][T10718]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  449.909465][T10718]  ? do_vfs_ioctl+0x226/0x13e0
[  449.909477][T10718]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  449.909493][T10718]  ? find_held_lock+0x2b/0x80
[  449.909505][T10718]  ? __fget_files+0x215/0x3d0
[  449.909517][T10718]  ? hook_file_ioctl_common+0x140/0x440
[  449.909536][T10718]  ? __fget_files+0x21f/0x3d0
[  449.909551][T10718]  ? __pfx_sync_file_ioctl+0x10/0x10
[  449.909569][T10718]  compat_ptr_ioctl+0x6e/0xa0
[  449.909581][T10718]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[  449.909592][T10718]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  449.909607][T10718]  __do_fast_syscall_32+0x13a/0x8b0
[  449.909621][T10718]  ? lockdep_hardirqs_on+0x7d/0x110
[  449.909635][T10718]  do_fast_syscall_32+0x32/0x70
[  449.909648][T10718]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  449.909662][T10718] RIP: 0023:0xf705efec
[  449.909676][T10718] Code: Unable to access opcode bytes at 0xf705efc2.
[  449.909681][T10718] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  449.909692][T10718] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0303e03
[  449.909698][T10718] RDX: 0000000080000780 RSI: 0000000000000000 RDI: 0000000000000000
[  449.909705][T10718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  449.909710][T10718] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  449.909717][T10718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  449.909730][T10718]  </TASK>
[  450.376250][T10703] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  450.377490][T10703] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  450.377563][T10703] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  450.697417][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  450.846056][T10729] hpfs: hpfs_map_sector(): read error
[  450.856354][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'.
[  450.859082][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'.
[  452.354809][T10742] profile_transition: name lookup ix on error
[  452.537449][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout
[  452.537505][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout
[  453.142931][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'.
[  453.189118][T10756] profile_transition: unconfined exec no attachment
[  453.197811][ T1347] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  453.237374][T10758] profile_transition: unconfined exec no attachment
[  453.261861][T10759] profile_transition: unconfined exec no attachment
[  453.322090][T10760] profile_transition: unconfined exec no attachment
[  453.506460][T10754] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[  453.536466][T10761] profile_transition: unconfined exec no attachment
[  453.599715][T10763] profile_transition: unconfined exec no attachment
[  453.664163][T10764] profile_transition: unconfined exec no attachment
[  453.694961][T10766] profile_transition: unconfined exec no attachment
[  453.736611][T10770] profile_transition: unconfined exec no attachment
[  453.766745][T10773] profile_transition: unconfined exec no attachment
[  453.789385][T10776] profile_transition: unconfined exec no attachment
[  453.811771][T10777] profile_transition: unconfined exec no attachment
[  453.834275][ T5743] Bluetooth: hci2: unexpected subevent 0x18 length: 30 > 19
[  453.834294][ T5743] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  453.839448][   T43] kauditd_printk_skb: 96 callbacks suppressed
[  453.839459][   T43] audit: type=1326 audit(1790394349.350:8476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.839820][T10780] profile_transition: unconfined exec no attachment
[  453.847328][   T43] audit: type=1326 audit(1790394349.360:8477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.848347][   T43] audit: type=1326 audit(1790394349.360:8478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.850635][   T43] audit: type=1326 audit(1790394349.360:8479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.850746][   T43] audit: type=1326 audit(1790394349.360:8480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.850841][   T43] audit: type=1326 audit(1790394349.360:8481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.850933][   T43] audit: type=1326 audit(1790394349.360:8482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.851083][   T43] audit: type=1326 audit(1790394349.360:8483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.851194][   T43] audit: type=1326 audit(1790394349.360:8484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.851288][   T43] audit: type=1326 audit(1790394349.360:8485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10774 comm="syz.1.991" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf700efec code=0x7ffc0000
[  453.871441][   T62] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
[  455.299019][T10775] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  455.299278][T10775] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  455.301029][T10775] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  455.537257][   T10] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  455.687527][   T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  455.688425][   T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF
[  455.688441][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  455.690181][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.690192][   T10] usb 8-1: Product: syz
[  455.690200][   T10] usb 8-1: Manufacturer: syz
[  455.690206][   T10] usb 8-1: SerialNumber: syz
[  455.692836][   T10] usb 8-1: config 0 descriptor??
[  456.229479][T10800] 9p: Bad value for 'wfdno'
[  456.232823][   T10] usb 8-1: USB disconnect, device number 11
[  456.476683][ T7138] udevd[7138]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  456.547609][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout
[  457.247149][T10819] input: syz1 as /devices/virtual/input/input21
[  457.337237][ T5097] Bluetooth: hci3: command 0x0c1a tx timeout
[  457.337271][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout
[  461.127297][T10827] profile_transition: 17 callbacks suppressed
[  461.127310][T10827] profile_transition: unconfined exec no attachment
[  461.156643][T10829] profile_transition: unconfined exec no attachment
[  461.178506][T10830] profile_transition: unconfined exec no attachment
[  461.198835][T10831] profile_transition: unconfined exec no attachment
[  465.200630][T10833] profile_transition: unconfined exec no attachment
[  465.238302][T10835] profile_transition: unconfined exec no attachment
[  465.271734][T10836] profile_transition: unconfined exec no attachment
[  465.298521][T10837] profile_transition: unconfined exec no attachment
[  470.276277][T10849] tunl0: entered allmulticast mode
[  470.276902][T10849] gre0: entered allmulticast mode
[  470.278462][T10849] gretap0: entered allmulticast mode
[  470.279305][T10849] erspan0: entered allmulticast mode
[  470.280371][T10849] ip_vti0: entered allmulticast mode
[  470.280919][T10849] ip6_vti0: entered allmulticast mode
[  470.281613][T10849] sit0: entered allmulticast mode
[  470.284116][T10849] ip6tnl0: entered allmulticast mode
[  470.284796][T10849] ip6gre0: entered allmulticast mode
[  470.285441][T10849] ip6gretap0: entered allmulticast mode
[  470.286437][T10849] vcan0: entered allmulticast mode
[  470.287145][T10849] team0: entered allmulticast mode
[  470.287160][T10849] team_slave_0: entered allmulticast mode
[  470.287174][T10849] team_slave_1: entered allmulticast mode
[  470.287834][T10849] 8021q: adding VLAN 0 to HW filter on device team0
[  470.292790][T10849] nlmon0: entered allmulticast mode
[  470.293486][T10849] batadv0: entered allmulticast mode
[  470.294578][T10849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.295078][T10849] vxcan0: entered allmulticast mode
[  470.295863][T10849] vxcan1: entered allmulticast mode
[  470.298339][T10849] veth0: entered allmulticast mode
[  470.299694][T10849] veth1: entered allmulticast mode
[  470.304878][T10849] wg0: entered allmulticast mode
[  470.308628][T10849] wg1: entered allmulticast mode
[  470.310313][T10849] wg2: entered allmulticast mode
[  470.310920][T10849] veth0_to_bridge: entered allmulticast mode
[  470.311440][T10849] bridge_slave_0: entered allmulticast mode
[  470.313215][T10849] veth1_to_bridge: entered allmulticast mode
[  470.313735][T10849] bridge_slave_1: entered allmulticast mode
[  470.314019][T10849] veth0_to_bond: entered allmulticast mode
[  470.314553][T10849] bond_slave_0: entered allmulticast mode
[  470.314842][T10849] veth1_to_bond: entered allmulticast mode
[  470.315410][T10849] bond_slave_1: entered allmulticast mode
[  470.315714][T10849] veth0_to_team: entered allmulticast mode
[  470.323136][T10849] team0: Port device team_slave_0 removed
[  470.323434][T10849] veth1_to_team: entered allmulticast mode
[  470.331299][T10849] team0: Port device team_slave_1 removed
[  470.332463][T10849] veth0_to_batadv: entered allmulticast mode
[  470.332997][T10849] batadv_slave_0: entered allmulticast mode
[  470.333373][T10849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.333416][T10849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.333423][T10849] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.337089][T10849] veth1_to_batadv: entered allmulticast mode
[  470.337727][T10849] batadv_slave_1: entered allmulticast mode
[  470.338309][T10849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.338362][T10849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.338370][T10849] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.340961][T10849] xfrm0: entered allmulticast mode
[  470.341778][T10849] veth0_to_hsr: entered allmulticast mode
[  470.342322][T10849] hsr_slave_0: entered allmulticast mode
[  470.342607][T10849] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  470.403430][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'.
[  470.447385][T10853] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  470.486911][T10848] profile_transition: unconfined exec no attachment
[  471.598365][T10875] overlayfs: upper fs does not support tmpfile.
[  471.603782][T10875] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  471.603797][T10875] overlayfs: failed to set xattr on upper
[  471.603801][T10875] overlayfs: ...falling back to redirect_dir=nofollow.
[  471.603806][T10875] overlayfs: ...falling back to index=off.
[  471.603809][T10875] overlayfs: ...falling back to uuid=null.
[  471.603813][T10875] overlayfs: upper fs missing required features.
[  471.685331][T10877] profile_transition: unconfined exec no attachment
[  471.718972][T10878] profile_transition: unconfined exec no attachment
[  472.022691][T10883] Console: switching to colour dummy device 80x25
[  472.140985][T10884] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  472.222585][T10884] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  472.233324][T10884] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  472.241614][T10884] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  472.253238][T10884] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  473.567118][T10884] pci 0000:00:01.0: Adding to iommu group 1
[  473.902331][T10884] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  473.902346][T10884] pci 0000:00:01.0: vgaarb: bridge control possible
[  473.902354][T10884] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  473.940033][T10884] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  473.940441][T10884] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  473.970775][T10884] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  474.041112][T10884] [drm] Found bochs VGA, ID 0xb0c5.
[  474.041131][T10884] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  474.093020][T10884] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  474.382113][   T43] kauditd_printk_skb: 389 callbacks suppressed
[  474.382128][   T43] audit: type=1326 audit(1790394369.891:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.397890][   T43] audit: type=1326 audit(1790394369.911:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.413167][   T43] audit: type=1326 audit(1790394369.921:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.413286][   T43] audit: type=1326 audit(1790394369.921:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.423102][   T43] audit: type=1326 audit(1790394369.921:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.423259][   T43] audit: type=1326 audit(1790394369.931:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.423390][   T43] audit: type=1326 audit(1790394369.931:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.438674][   T43] audit: type=1326 audit(1790394369.951:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.438867][   T43] audit: type=1326 audit(1790394369.951:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.439065][   T43] audit: type=1326 audit(1790394369.951:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10899 comm="syz.2.1011" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000
[  474.482580][T10884] Console: switching to colour frame buffer device 160x50
[  474.509960][T10884] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  475.206127][ T3378] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  475.367629][ T3378] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  475.387643][ T3378] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  475.387668][ T3378] usb 8-1: Product: syz
[  475.387677][ T3378] usb 8-1: Manufacturer: syz
[  475.387689][ T3378] usb 8-1: SerialNumber: syz
[  475.396859][ T3378] usb 8-1: config 0 descriptor??
[  475.645383][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.645578][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.664681][T10918] profile_transition: unconfined exec no attachment
[  475.855569][T10921] profile_transition: unconfined exec no attachment
[  476.116052][  T988] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  476.245996][  T988] usb 6-1: device descriptor read/64, error -71
[  476.329682][T10904] cgroup: Invalid name
[  476.356299][   T35] usb 8-1: USB disconnect, device number 12
[  476.486014][  T988] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  476.618039][  T988] usb 6-1: device descriptor read/64, error -71
[  476.744668][  T988] usb usb6-port1: attempt power cycle
[  476.954996][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1020'.
[  477.070930][T10936] gfs2: error -5 reading superblock
[  477.086169][  T988] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  477.107353][T10936] netlink: 'syz.3.1021': attribute type 21 has an invalid length.
[  477.107422][T10936] IPv6: NLM_F_CREATE should be specified when creating new route
[  477.107641][  T988] usb 6-1: device descriptor read/8, error -71
[  477.345928][  T988] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  477.366489][  T988] usb 6-1: device descriptor read/8, error -71
[  477.476216][  T988] usb usb6-port1: unable to enumerate USB device
[  477.711620][T10942] profile_transition: unconfined exec no attachment
[  478.011290][T10944] profile_transition: name lookup ix on error
[  478.479594][T10955] profile_transition: name lookup ix on error
[  478.518810][T10956] fuse: Bad value for 'fd'
[  479.342372][T10964] 
[  479.343458][T10964] ======================================================
[  479.346289][T10964] WARNING: possible circular locking dependency detected
[  479.349180][T10964] syzkaller #0 Tainted: G             L     
[  479.352018][T10964] ------------------------------------------------------
[  479.354917][T10964] syz.3.1030/10964 is trying to acquire lock:
[  479.357361][T10964] ffff88801d7c8540 ((wq_completion)md_misc){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0
[  479.361616][T10964] 
[  479.361616][T10964] but task is already holding lock:
[  479.364380][T10964] ffffffff8f9be780 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0
[  479.367368][T10964] 
[  479.367368][T10964] which lock already depends on the new lock.
[  479.367368][T10964] 
[  479.370646][T10964] 
[  479.370646][T10964] the existing dependency chain (in reverse order) is:
[  479.373477][T10964] 
[  479.373477][T10964] -> #3 (major_names_lock){+.+.}-{4:4}:
[  479.375886][T10964]        lock_acquire+0x1d1/0x380
[  479.377469][T10964]        __mutex_lock+0x1a4/0x1bd0
[  479.379132][T10964]        blk_probe_dev+0x28/0x1e0
[  479.380967][T10964]        blk_request_module+0x16/0xc0
[  479.382840][T10964]        blkdev_get_no_open+0x9b/0xf0
[  479.384556][T10964]        bdev_file_open_by_dev+0x70/0x210
[  479.386337][T10964]        md_import_device+0x120/0x360
[  479.388174][T10964]        md_add_new_disk+0xdbf/0x1820
[  479.390162][T10964]        md_ioctl+0x2bec/0x36d0
[  479.391977][T10964]        compat_blkdev_ioctl+0x682/0x7b0
[  479.393744][T10964]        __ia32_compat_sys_ioctl+0x2cf/0x360
[  479.395632][T10964]        __do_fast_syscall_32+0x13a/0x8b0
[  479.397494][T10964]        do_fast_syscall_32+0x32/0x70
[  479.399178][T10964]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  479.401321][T10964] 
[  479.401321][T10964] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}:
[  479.403911][T10964]        lock_acquire+0x1d1/0x380
[  479.405495][T10964]        __mutex_lock+0x1a4/0x1bd0
[  479.407102][T10964]        md_start_sync+0xc4/0xea0
[  479.408703][T10964]        process_one_work+0xac7/0x1b10
[  479.410404][T10964]        worker_thread+0x5ef/0xe50
[  479.412057][T10964]        kthread+0x373/0x450
[  479.413512][T10964]        ret_from_fork+0x730/0xd60
[  479.415115][T10964]        ret_from_fork_asm+0x1a/0x30
[  479.416787][T10964] 
[  479.416787][T10964] -> #1 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}:
[  479.419710][T10964]        lock_acquire+0x1d1/0x380
[  479.421295][T10964]        process_one_work+0xa32/0x1b10
[  479.423032][T10964]        worker_thread+0x5ef/0xe50
[  479.424666][T10964]        kthread+0x373/0x450
[  479.426135][T10964]        ret_from_fork+0x730/0xd60
[  479.427762][T10964]        ret_from_fork_asm+0x1a/0x30
[  479.429427][T10964] 
[  479.429427][T10964] -> #0 ((wq_completion)md_misc){+.+.}-{0:0}:
[  479.432011][T10964]        check_prev_add+0xeb/0xe60
[  479.433624][T10964]        __lock_acquire+0x1528/0x1f40
[  479.435317][T10964]        lock_acquire+0x1d1/0x380
[  479.436926][T10964]        touch_wq_lockdep_map+0xad/0x1c0
[  479.438678][T10964]        __flush_workqueue+0x131/0x1200
[  479.440426][T10964]        md_alloc+0x30/0x10a0
[  479.441919][T10964]        md_probe+0x73/0xf0
[  479.443392][T10964]        blk_probe_dev+0x149/0x1e0
[  479.445013][T10964]        blk_request_module+0x16/0xc0
[  479.446692][T10964]        blkdev_get_no_open+0x9b/0xf0
[  479.448390][T10964]        bdev_file_open_by_dev+0x70/0x210
[  479.450164][T10964]        swsusp_check+0x72/0x470
[  479.451758][T10964]        software_resume+0x6f/0x330
[  479.453389][T10964]        resume_store+0x248/0x460
[  479.454961][T10964]        kobj_attr_store+0x58/0x80
[  479.456562][T10964]        sysfs_kf_write+0xf2/0x150
[  479.457591][   T43] kauditd_printk_skb: 265 callbacks suppressed
[  479.457601][   T43] audit: type=1326 audit(1790394374.971:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10965 comm="syz.2.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d75ab code=0x7ffc0000
[  479.466691][T10964]        kernfs_fop_write_iter+0x3e0/0x5f0
[  479.468434][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'.
[  479.468445][T10959] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1028'.
[  479.468456][T10959] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1028'.
[  479.476831][T10964]        vfs_write+0x6af/0x1050
[  479.478381][T10964]        ksys_write+0x12a/0x250
[  479.479930][T10964]        __do_fast_syscall_32+0x13a/0x8b0
[  479.481735][T10964]        do_fast_syscall_32+0x32/0x70
[  479.483447][T10964]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  479.485578][T10964] 
[  479.485578][T10964] other info that might help us debug this:
[  479.485578][T10964] 
[  479.488733][T10964] Chain exists of:
[  479.488733][T10964]   (wq_completion)md_misc --> &mddev->reconfig_mutex --> major_names_lock
[  479.488733][T10964] 
[  479.493201][T10964]  Possible unsafe locking scenario:
[  479.493201][T10964] 
[  479.495522][T10964]        CPU0                    CPU1
[  479.497193][T10964]        ----                    ----
[  479.498873][T10964]   lock(major_names_lock);
[  479.500322][T10964]                                lock(&mddev->reconfig_mutex);
[  479.502693][T10964]                                lock(major_names_lock);
[  479.504885][T10964]   lock((wq_completion)md_misc);
[  479.506468][T10964] 
[  479.506468][T10964]  *** DEADLOCK ***
[  479.506468][T10964] 
[  479.508973][T10964] locks held by syz.3.1030/10964: 6, last CPU#3:
[  479.510928][T10964]  #0: ffff8880240c4630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  479.513813][T10964]  #1: ffff8880258f6460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  479.516624][T10964]  #2: ffff88805e54fc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  479.519658][T10964]  #3: ffff88801d77e5a8 (kn->active#101){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  479.522887][T10964]  #4: ffffffff8eca2700 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330
[  479.526100][T10964]  #5: ffffffff8f9be780 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0
[  479.529050][T10964] 
[  479.529050][T10964] stack backtrace:
[  479.530887][T10964] CPU: 3 UID: 0 PID: 10964 Comm: syz.3.1030 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  479.534349][T10964] Tainted: [L]=SOFTLOCKUP
[  479.535723][T10964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  479.538831][T10964] Call Trace:
[  479.539908][T10964]  <TASK>
[  479.540821][T10964]  dump_stack_lvl+0x100/0x190
[  479.542321][T10964]  print_circular_bug.cold+0x178/0x1be
[  479.544055][T10964]  check_noncircular+0x146/0x160
[  479.545616][T10964]  check_prev_add+0xeb/0xe60
[  479.547080][T10964]  __lock_acquire+0x1528/0x1f40
[  479.548488][T10964]  ? check_prev_add+0x354/0xe60
[  479.549841][T10964]  lock_acquire+0x1d1/0x380
[  479.551243][T10964]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  479.552990][T10964]  ? lockdep_init_map_type+0x5c/0x250
[  479.554678][T10964]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  479.556346][T10964]  touch_wq_lockdep_map+0xad/0x1c0
[  479.557918][T10964]  ? touch_wq_lockdep_map+0x9c/0x1c0
[  479.558117][   T43] audit: type=1326 audit(1790394375.071:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10965 comm="syz.2.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d75ab code=0x7ffc0000
[  479.566199][T10964]  __flush_workqueue+0x131/0x1200
[  479.567803][T10964]  ? rcu_is_watching+0x13/0xc0
[  479.569288][T10964]  ? trace_contention_end+0x126/0x160
[  479.570961][T10964]  ? __mutex_lock+0x26c/0x1bd0
[  479.572509][T10964]  ? __pfx___flush_workqueue+0x10/0x10
[  479.574210][T10964]  ? lock_acquire+0x1d1/0x380
[  479.575710][T10964]  ? find_inode_fast+0x1fa/0xa30
[  479.577272][T10964]  md_alloc+0x30/0x10a0
[  479.578611][T10964]  md_probe+0x73/0xf0
[  479.579906][T10964]  ? __pfx_md_probe+0x10/0x10
[  479.581392][T10964]  blk_probe_dev+0x149/0x1e0
[  479.582917][T10964]  blk_request_module+0x16/0xc0
[  479.584492][T10964]  blkdev_get_no_open+0x9b/0xf0
[  479.586032][T10964]  bdev_file_open_by_dev+0x70/0x210
[  479.587683][T10964]  swsusp_check+0x72/0x470
[  479.589099][T10964]  software_resume+0x6f/0x330
[  479.590582][T10964]  resume_store+0x248/0x460
[  479.591987][T10964]  ? __pfx_resume_store+0x10/0x10
[  479.593564][T10964]  ? find_held_lock+0x2b/0x80
[  479.595039][T10964]  ? sysfs_file_kobj+0xe4/0x290
[  479.596575][T10964]  ? sysfs_file_kobj+0xe4/0x290
[  479.598098][T10964]  ? __pfx_resume_store+0x10/0x10
[  479.599691][T10964]  kobj_attr_store+0x58/0x80
[  479.601148][T10964]  ? __pfx_kobj_attr_store+0x10/0x10
[  479.602828][T10964]  sysfs_kf_write+0xf2/0x150
[  479.604332][T10964]  kernfs_fop_write_iter+0x3e0/0x5f0
[  479.605991][T10964]  ? __pfx_sysfs_kf_write+0x10/0x10
[  479.607633][T10964]  vfs_write+0x6af/0x1050
[  479.608992][T10964]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  479.610819][T10964]  ? __pfx_vfs_write+0x10/0x10
[  479.612376][T10964]  ? find_held_lock+0x2b/0x80
[  479.613882][T10964]  ksys_write+0x12a/0x250
[  479.615340][T10964]  ? __pfx_ksys_write+0x10/0x10
[  479.616928][T10964]  __do_fast_syscall_32+0x13a/0x8b0
[  479.618597][T10964]  ? lockdep_hardirqs_on+0x7d/0x110
[  479.620251][T10964]  do_fast_syscall_32+0x32/0x70
[  479.621789][T10964]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  479.623828][T10964] RIP: 0023:0xf700efec
[  479.625117][T10964] Code: Unable to access opcode bytes at 0xf700efc2.
[  479.627170][T10964] RSP: 002b:00000000f53dc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  479.629766][T10964] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040
[  479.632369][T10964] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[  479.634829][T10964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  479.637310][T10964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.639775][T10964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  479.642272][T10964]  </TASK>
[  479.648929][T10964] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  479.648941][T10964] block device autoloading is deprecated and will be removed.
[  479.649000][T10964] PM: Image not found (code -5)
[  479.658379][   T43] audit: type=1326 audit(1790394375.171:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10965 comm="syz.2.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d75ab code=0x7ffc0000
[  479.758882][   T43] audit: type=1326 audit(1790394375.271:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10965 comm="syz.2.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d75ab code=0x7ffc0000
[  479.859081][   T43] audit: type=1326 audit(1790394375.371:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10965 comm="syz.2.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x7ffc0000