last executing test programs:

17m55.89595374s ago: executing program 0 (id=505):
socket(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

17m52.092035983s ago: executing program 0 (id=508):
msgget$private(0x0, 0x230)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r1, 0x0, 0x0, 0x4004000, &(0x7f0000001700)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
io_setup(0x8, &(0x7f0000004200))
syz_open_procfs(0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000180)='./cifs\x00', &(0x7f0000000240)='cifs\x00', 0x0, &(0x7f0000000280)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs,witness\x00')

17m49.495642347s ago: executing program 0 (id=515):
setns(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141142)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
userfaultfd(0x801)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xdcc, 0x4)
setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)

17m34.32837313s ago: executing program 32 (id=515):
setns(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141142)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
userfaultfd(0x801)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xdcc, 0x4)
setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)

13m40.85239109s ago: executing program 33 (id=921):
msgget$private(0x0, 0x230)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r1, 0x0, 0x0, 0x4004000, &(0x7f0000001700)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x8, &(0x7f0000004200))
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(0xffffffffffffffff, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000180)='./cifs\x00', &(0x7f0000000240)='cifs\x00', 0x0, &(0x7f0000000280)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs,witness\x00')

8m5.468664485s ago: executing program 34 (id=1331):
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r1, 0x0, 0x0, 0x4004000, &(0x7f0000001700)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
io_setup(0x8, &(0x7f0000004200))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r5, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cifs\x00', 0x1ff)
mount(&(0x7f0000000140)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000180)='./cifs\x00', &(0x7f0000000240)='cifs\x00', 0x0, &(0x7f0000000280)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1,nodfs,witness\x00')
accept(r5, 0x0, 0x0)

7m0.018246705s ago: executing program 2 (id=1412):
r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
socket$pppoe(0x18, 0x1, 0x0)
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
setfsuid(0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4)

6m48.228078065s ago: executing program 2 (id=1425):
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYBLOB], 0xfc}}, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

6m45.059731052s ago: executing program 2 (id=1435):
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x8})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1, 0x1, 0x7, 0x5})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r1, 0x3, 0x80000})

6m43.720888656s ago: executing program 2 (id=1438):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

6m42.439288237s ago: executing program 2 (id=1442):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r1=>0x0)
prlimit64(r1, 0xe, &(0x7f0000000180)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x2, 0x7, 0x2)
r2 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x8880, 0x85)
lseek(r4, 0x101, 0x1)
write(0xffffffffffffffff, &(0x7f0000000480)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
syz_pidfd_open(0x0, 0xf0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000540)={0x0, 0x0, 0x7})

6m26.660160515s ago: executing program 35 (id=1442):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r1=>0x0)
prlimit64(r1, 0xe, &(0x7f0000000180)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x2, 0x7, 0x2)
r2 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x8880, 0x85)
lseek(r4, 0x101, 0x1)
write(0xffffffffffffffff, &(0x7f0000000480)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
syz_pidfd_open(0x0, 0xf0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000540)={0x0, 0x0, 0x7})

5m29.358378394s ago: executing program 6 (id=1507):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r4, &(0x7f00000077c0)=""/102392, 0x18ff8)
futex(0x0, 0x10b, 0x2, &(0x7f00000207c0)={0x77359400}, 0x0, 0x0)
sched_setaffinity(r3, 0x47, &(0x7f0000020800)=0x7)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000020840)={0x0, 0x0, &(0x7f0000020880)={&(0x7f00000208c0)=ANY=[@ANYBLOB="3000000041000f01fefeffff00000000017c0000040042801400018006000600800a00000800", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m27.619540796s ago: executing program 6 (id=1508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="010001000000000000001a0100000700210042420000300022802c00018008000100000000000800020000000000080003"], 0x4c}}, 0x0)

5m23.927887177s ago: executing program 6 (id=1513):
r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
capset(0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000340))
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11)
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
setresuid(0xee01, 0xee00, 0x0)
setfsuid(0x0)
r5 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00')
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x9, 0x0, 0xd}, 0x2f)
pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4)

5m19.838371428s ago: executing program 6 (id=1517):
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0)
write(r0, &(0x7f0000000540)='0', 0x1)
write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2)

5m17.688768411s ago: executing program 6 (id=1520):
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000b40)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000bc0)={0x42, 0x1, 0x2, 0xf5ff}, 0x10)
socketpair(0x28, 0x1, 0x7, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008094}, 0x48094)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r6, &(0x7f0000000c40)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x47, &(0x7f0000019c40)=0x7)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

5m13.808571866s ago: executing program 6 (id=1524):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)=[{&(0x7f0000019540)="aa", 0x1}], 0x1, 0x0, 0x18, 0x40000000}, 0xc800)
recvmmsg(r5, &(0x7f00000195c0), 0x700, 0x2, 0x0)

4m57.591846265s ago: executing program 36 (id=1524):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)=[{&(0x7f0000019540)="aa", 0x1}], 0x1, 0x0, 0x18, 0x40000000}, 0xc800)
recvmmsg(r5, &(0x7f00000195c0), 0x700, 0x2, 0x0)

4m48.930235648s ago: executing program 3 (id=1549):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000ac0)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b40)={0x8, 0x0, &(0x7f0000000b80)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000bc0)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000c00)={0x73622a85, 0x109, 0xfffffffffffffffd, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000cc0)={0x4c, 0x0, &(0x7f0000000d00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000d80)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3b}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000e00)=""/236, 0xec, 0x1, 0x21}, @fda={0x66646185, 0xc, 0x1, 0x4000000b4}}, &(0x7f0000000f00)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

4m46.288835973s ago: executing program 3 (id=1552):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a)
write$binfmt_script(r0, 0x0, 0x0)

4m45.943345131s ago: executing program 3 (id=1553):
r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000001c0)='coredump_filter\x00')
pread64(r2, 0x0, 0x0, 0x4)

4m45.625115889s ago: executing program 7 (id=1554):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000000d000)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000"], 0x24}}, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0xfffffffd, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0xfffbffff], [0x39aa, 0xffffffff, 0xffffffff, 0xffffffc3, 0x8, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0x3, 0x1, 0xfffffffd, 0xffffffff, 0x0, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac46, 0x2, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x6, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)

4m45.15407225s ago: executing program 3 (id=1555):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b031120"], 0x7)

4m44.174348955s ago: executing program 7 (id=1556):
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffec, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0)
socketpair(0x2a, 0x2, 0x1, &(0x7f0000000340))
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d0003000000008000000000000000000000070000000000000008000000000040000500"], 0x78)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)
r1 = gettid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3ff, 0x0, 0x9, 0x1cf, 0x1, r1})
r2 = gettid()
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000280))
timer_create(0x1, &(0x7f0000000800)={0x0, 0x16, 0x4, @thr={&(0x7f00000002c0)="e56bca1892532abbe85aa1e51dab16ccabd874b1d38f1e209189148902841d34949da5783aef3256079edfad55c96fbffce3a71a084d81a7960ff39815a15c31896ad996557fd89848e8c087e06bbbd8c3c659f1cc9e67123699f212de793e", 0xfffffffffffffffe}}, &(0x7f0000000000))
r3 = socket$kcm(0x10, 0x2, 0x4)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000380))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
request_key(0x0, 0x0, &(0x7f00000003c0)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102)
writev(r4, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xb, &(0x7f0000000900)=@framed={{}, [@map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000a40)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040)

4m38.604261571s ago: executing program 7 (id=1558):
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000b40)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000bc0)={0x42, 0x1, 0x2, 0xf5ff}, 0x10)
socketpair(0x28, 0x1, 0x7, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008094}, 0x48094)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r6, &(0x7f0000000c40)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x47, &(0x7f0000019c40)=0x7)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

4m38.439480576s ago: executing program 3 (id=1560):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r4, &(0x7f0000000340)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000019340)=0x80000000000003)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000019380), 0x88b02, 0x0)
write$P9_RSTATu(r5, &(0x7f00000193c0)=ANY=[], 0x230)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019400), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019440), 0x2982, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x3}, 0xa)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7)

4m33.76405489s ago: executing program 3 (id=1562):
r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000001c0)='coredump_filter\x00')
pread64(r2, 0x0, 0x0, 0x4)

4m33.535895586s ago: executing program 7 (id=1563):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000000d000)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000"], 0x24}}, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0xfffffffd, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0xfffbffff], [0x39aa, 0xffffffff, 0xffffffff, 0xffffffc3, 0x8, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0x3, 0x1, 0xfffffffd, 0xffffffff, 0x0, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac46, 0x2, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x6, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)

4m31.383136899s ago: executing program 7 (id=1565):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x80000000000003)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000196c0)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000019700), 0x88b02, 0x0)
write$P9_RSTATu(r5, &(0x7f0000019740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x230)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={0x0}}, 0x0)
mq_open(0x0, 0x8c2, 0x30, 0x0)

4m27.893566755s ago: executing program 7 (id=1567):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141142)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002)
ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000180))
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000600)={0x7, &(0x7f0000000440)=[{0x25, '\x00', @buffer={"382e5803ed92f7e3a82382b3f29b773f0d7a000000a8a725cd14ccf5807ab2b2", 0x20}, 0xfffffff4}, {0x0, '\x00', @buffer={"ca0e0de0e3bfde98906058e2a46554208d5237cf85e96d768a2fdaa93f9cfff4", 0x20}, 0x2f79}, {0x3c, '\x00', @data=0x4, 0x6}, {0x1d, '\x00', @buffer={"38a2058284dfb9fb24c7faa71014ff248caba650e88ca0c7a9a3a051dd85912b", 0x20}, 0x9}]})

4m18.641104223s ago: executing program 37 (id=1562):
r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000001c0)='coredump_filter\x00')
pread64(r2, 0x0, 0x0, 0x4)

4m12.517097963s ago: executing program 38 (id=1567):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141142)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002)
ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000180))
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000600)={0x7, &(0x7f0000000440)=[{0x25, '\x00', @buffer={"382e5803ed92f7e3a82382b3f29b773f0d7a000000a8a725cd14ccf5807ab2b2", 0x20}, 0xfffffff4}, {0x0, '\x00', @buffer={"ca0e0de0e3bfde98906058e2a46554208d5237cf85e96d768a2fdaa93f9cfff4", 0x20}, 0x2f79}, {0x3c, '\x00', @data=0x4, 0x6}, {0x1d, '\x00', @buffer={"38a2058284dfb9fb24c7faa71014ff248caba650e88ca0c7a9a3a051dd85912b", 0x20}, 0x9}]})

3m24.033972305s ago: executing program 0 (id=1573):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000000d000)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000"], 0x24}}, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0xfffffffd, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0xfffbffff], [0x39aa, 0xffffffff, 0xffffffff, 0xffffffc3, 0x8, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0x3, 0x1, 0xfffffffd, 0xffffffff, 0x0, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac46, 0x2, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x6, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)

3m22.754061146s ago: executing program 0 (id=1603):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000ac0)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b40)={0x8, 0x0, &(0x7f0000000b80)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000c00)={0x73622a85, 0x109, 0xfffffffffffffffd, 0x2})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c40)={0x8, 0x0, &(0x7f0000000c80)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000cc0)={0x4c, 0x0, &(0x7f0000000d00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000d80)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3b}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000e00)=""/236, 0xec, 0x1, 0x21}, @fda={0x66646185, 0xc, 0x1, 0x4000000b4}}, &(0x7f0000000f00)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

3m20.500694391s ago: executing program 0 (id=1607):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000280))
dup(0xffffffffffffffff)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x109402, 0x0)
r4 = io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x2, &(0x7f0000001580)={&(0x7f00000015c0), 0x1000}, &(0x7f0000001600)={&(0x7f0000001640), 0x1000, 0x1}}, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./sys/fs/orangefs/op_timeout_secs\x00', 0x1, 0x0)
write(r5, &(0x7f0000001640)="5fca", 0x2)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780), 0x42, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f00000017c0)=0x4)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f0000001680)={0x0, 0x1, '\x00', @zc_export={r4}}, 0x0)

3m3.786844471s ago: executing program 39 (id=1607):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000280))
dup(0xffffffffffffffff)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x109402, 0x0)
r4 = io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x2, &(0x7f0000001580)={&(0x7f00000015c0), 0x1000}, &(0x7f0000001600)={&(0x7f0000001640), 0x1000, 0x1}}, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./sys/fs/orangefs/op_timeout_secs\x00', 0x1, 0x0)
write(r5, &(0x7f0000001640)="5fca", 0x2)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780), 0x42, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f00000017c0)=0x4)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f0000001680)={0x0, 0x1, '\x00', @zc_export={r4}}, 0x0)

2m34.915645928s ago: executing program 9 (id=1646):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r1, 0x0, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2)
sendfile(r2, r2, 0x0, 0x8000000f3aa6ea)

2m31.768903575s ago: executing program 9 (id=1648):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20101, 0x0)
ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x800, 0x0, 0xffffffff, 0x1000000})
r1 = syz_open_dev$swradio(&(0x7f0000001400), 0x1, 0x2)
dup(r1)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xe958})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000001500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000001540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f0000001580), 0x0, 0x0)
sched_setaffinity(r6, 0x2, &(0x7f000001cc40)=0x80000000000003)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f000001cc80), 0x400000000a882, 0x0)
dup(r7)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000002, 0x2010, r3, 0xe8838000)
sendto$inet6(r2, &(0x7f00000012c0)='X', 0x1, 0x0, &(0x7f0000001300)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
semctl$SETVAL(0x0, 0xff7f0000, 0x10, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000001340)=[{&(0x7f0000001380)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

2m30.34786196s ago: executing program 9 (id=1651):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x9801)
unshare(0x22020600)
move_mount(r1, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000580)='.\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
umount2(&(0x7f0000000600)='./file0\x00', 0xa)
sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x48000, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
shutdown(r0, 0x1)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2400, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xe)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x41dc, 0x4)
recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)

2m21.36727372s ago: executing program 9 (id=1658):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x80000000000003)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000019680), 0x0, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000196c0)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000019700), 0x88b02, 0x0)
write$P9_RSTATu(r5, &(0x7f0000019740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x230)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={0x0}}, 0x0)
mq_open(0x0, 0x8c2, 0x30, 0x0)

2m19.218747132s ago: executing program 9 (id=1660):
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0xd7)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x121242, 0x0)
writev(r0, &(0x7f0000000c40)=[{&(0x7f00000009c0)="7066aff9d6503bd3621f99a776c72c47f20d64", 0x13}], 0x1)

2m14.737309892s ago: executing program 9 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, r0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
mq_open(0x0, 0x800, 0x80, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
prlimit64(0x0, 0x5, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000100))
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0)

1m57.895215854s ago: executing program 40 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, r0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
mq_open(0x0, 0x800, 0x80, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
prlimit64(0x0, 0x5, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000100))
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0)

1m24.051854873s ago: executing program 5 (id=1698):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @sock_ops}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80101, 0x101)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x60}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x4000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x854)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0)
syz_open_procfs(r3, &(0x7f0000000080)='smaps\x00')
io_uring_setup(0x68e7, &(0x7f0000000340)={0x0, 0x48c9, 0x8, 0x0, 0xd1})
mq_open(&(0x7f00000003c0)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000400)={0x8000000000000000, 0x8, 0x1, 0xc05})
mq_unlink(&(0x7f0000000440)='bat\x13\x1b\r\xcbs\xecave_5\x00')

1m21.617342772s ago: executing program 5 (id=1699):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005600)={0xec, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0xd8, 0xc0, 0x0, 0x1, [@nested={0xd4, 0x24, 0x0, 0x1, [@generic="29a2f80ee615564eba39340c56fbc8edd0f7956ec23f77994e54354e349afea688ad58fe17678ffaa9d4f95aad761999b992753a7a93c6ced9fc704fa751c2cf9eb344092115569e3865226bf6cb9613bf8d4eb1bcb59e9099", @generic="320980175b78213524826d5880ebe9e330b5e44709e0defdbc919d032d51a0ac733a239138c5924f5a93ba147d4727e59cf270b24504fb63656e44f63c1425a9d2848c1f1a2e3be475297d41137105d87a5138b902a692a798fd120306169e079abfc958b31e0363eeaf7e592ad85738edd832", @nested={0x4, 0x16b}]}]}]}, 0xec}}, 0x0)
recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/152, 0x98}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)

1m16.751607132s ago: executing program 8 (id=1700):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x80000000000003)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000019680), 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000196c0)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={0x0}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019940)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4814}, 0x0)

1m16.621012054s ago: executing program 5 (id=1701):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, 0x0, 0x5e46ecbed7fd14d8)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
memfd_secret(0x0)
read$msr(r1, &(0x7f0000000980)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xe, &(0x7f0000019a80)=ANY=[@ANYBLOB], &(0x7f000001a100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000001a140)={0x1}, 0x8, 0x10, &(0x7f000001a180)={0x3}, 0x10}, 0x94)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0)
read$msr(r1, &(0x7f00000001c0)=""/171, 0xab)
kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

1m15.405992325s ago: executing program 5 (id=1702):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2)
pipe2$9p(0x0, 0x4000)
shutdown(0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r4, &(0x7f00000005c0)=""/28, 0xfffffffffffffdee)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={<r6=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r6, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, r6, r5}}, 0x18)
mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB="2373797a313a73797a311b11fb4484385d510222"], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"])
read(r1, &(0x7f0000000740)=""/16384, 0x4000)
write$binfmt_script(r0, 0x0, 0x0)

1m12.557115734s ago: executing program 8 (id=1703):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2)
pipe2$9p(0x0, 0x4000)
shutdown(0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r4, &(0x7f00000005c0)=""/28, 0xfffffffffffffdee)
write$tun(r4, 0x0, 0xffe)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={<r5=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r5, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, r5}}, 0x18)
mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB="2373797a313a73797a311b11fb4484385d510222"], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"])
read(r1, &(0x7f0000000740)=""/16384, 0x4000)
write$binfmt_script(r0, 0x0, 0x0)

1m12.473687826s ago: executing program 5 (id=1704):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xeaa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x80000000000003)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffd}, {}, {0x0, 0x5}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000196c0)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000019700), 0x88b02, 0x0)
write$P9_RSTATu(r6, &(0x7f0000019740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x230)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={0x0}}, 0x0)
mq_open(0x0, 0x8c2, 0x30, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)

1m10.248289611s ago: executing program 5 (id=1705):
syz_emit_vhci(&(0x7f0000009540)=ANY=[@ANYBLOB="04040a"], 0xd)

58.790839261s ago: executing program 8 (id=1709):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/sched/filter\x00', &(0x7f0000000100)={0x420000, 0x68, 0x12}, 0x18)
mkdirat(r0, 0x0, 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f5554"], 0x4000)
close(r2)
mlockall(0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x8047)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = userfaultfd(0x801)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff6000/0xa000)=nil, 0xa000})

54.796750519s ago: executing program 41 (id=1705):
syz_emit_vhci(&(0x7f0000009540)=ANY=[@ANYBLOB="04040a"], 0xd)

54.785344919s ago: executing program 8 (id=1711):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r1, 0x0, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2)
sendfile(r2, r2, 0x0, 0x8000000f3aa6ea)

50.610185922s ago: executing program 8 (id=1713):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000"], 0x24}}, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000200)={0xfffffffd, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0xfffbffff], [0x39aa, 0xffffffff, 0xffffffff, 0xffffffc3, 0x8, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0x3, 0x1, 0xfffffffd, 0xffffffff, 0x0, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac46, 0x2, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x6, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0)

46.518189211s ago: executing program 8 (id=1715):
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0xe, &(0x7f0000000080)})
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)

30.914978653s ago: executing program 42 (id=1715):
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0xe, &(0x7f0000000080)})
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)

20.314158153s ago: executing program 4 (id=1734):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa6)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x47, &(0x7f0000019500)=0x7)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000019580)={0x0, 0x18, 0xfa00, {0x1002, 0x0, 0x106, 0x4}}, 0x20)
mount$overlay(0x0, &(0x7f00000195c0)='./file0\x00', &(0x7f0000019600), 0x0, &(0x7f0000019640)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x0, 0xd5)
openat$cgroup_ro(r3, &(0x7f00000196c0)='cpu.stat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)

15.923298571s ago: executing program 1 (id=1735):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r3, &(0x7f00000077c0)=""/102392, 0x18ff8)
futex(0x0, 0x10b, 0x2, 0x0, 0x0, 0x0)
sched_setaffinity(r2, 0x47, &(0x7f0000020800)=0x7)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r5}, &(0x7f0000000b00), 0x0}, 0x20)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

12.744106379s ago: executing program 1 (id=1736):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x40890)

12.261377001s ago: executing program 4 (id=1737):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

10.739687278s ago: executing program 1 (id=1738):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000000d000)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000"], 0x24}}, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0xfffffffd, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0xfffbffff], [0x39aa, 0xffffffff, 0xffffffff, 0xffffffc3, 0x8, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0x3, 0x1, 0xfffffffd, 0xffffffff, 0x0, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac46, 0x2, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x6, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)

9.00909144s ago: executing program 1 (id=1739):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20101, 0x0)
ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x800, 0x0, 0xffffffff, 0x1000000})
r1 = syz_open_dev$swradio(&(0x7f0000001400), 0x1, 0x2)
dup(r1)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xe958})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000001500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000001580), 0x0, 0x0)
read$msr(r6, &(0x7f0000003c40)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x2, &(0x7f000001cc40)=0x80000000000003)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f000001cc80), 0x400000000a882, 0x0)
dup(r7)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000002, 0x2010, r3, 0xe8838000)
sendto$inet6(r2, &(0x7f00000012c0)='X', 0x1, 0x0, &(0x7f0000001300)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
semctl$SETVAL(0x0, 0xff7f0000, 0x10, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000001340)=[{&(0x7f0000001380)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

7.722687392s ago: executing program 4 (id=1740):
gettid()
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000bc0)={0x42, 0x1, 0x2, 0xf5ff}, 0x10)
socketpair(0x28, 0x1, 0x7, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008094}, 0x48094)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r6, &(0x7f0000000c40)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x47, &(0x7f0000019c40)=0x7)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

5.967962584s ago: executing program 4 (id=1741):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000ac0)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b40)={0x8, 0x0, &(0x7f0000000b80)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000bc0)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000c00)={0x73622a85, 0x109, 0xfffffffffffffffd, 0x2})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c40)={0x8, 0x0, &(0x7f0000000c80)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000cc0)={0x4c, 0x0, &(0x7f0000000d00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000d80)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3b}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000e00)=""/236, 0xec, 0x1, 0x21}, @fda={0x66646185, 0xc, 0x1, 0x4000000b4}}, &(0x7f0000000f00)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

4.463369341s ago: executing program 1 (id=1742):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000640)={0x1, 0x0, [{0xc0000080, 0x0, 0x1000}]})
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
ptrace$peek(0x1, r0, &(0x7f0000000540))
r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x4a102)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2)
timerfd_create(0x8, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd\x00', 0x1ff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0)
mount(0x0, &(0x7f0000000400)='./nfsd\x00', &(0x7f0000000440)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/afs/sysname\x00', 0x0, 0x23)
pread64(r3, &(0x7f0000000900)=""/26, 0xfdef, 0xff)

3.212550232s ago: executing program 4 (id=1743):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa6)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000019500)=0x7)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000019580)={0x0, 0x18, 0xfa00, {0x1002, 0x0, 0x106, 0x4}}, 0x20)
mount$overlay(0x0, &(0x7f00000195c0)='./file0\x00', &(0x7f0000019600), 0x0, &(0x7f0000019640)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x0, 0xd5)
openat$cgroup_ro(r4, &(0x7f00000196c0)='cpu.stat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r6, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

814.67381ms ago: executing program 4 (id=1744):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0)
r0 = semget(0x0, 0x1, 0x0)
semctl$GETALL(r0, 0x0, 0xd, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @sock_ops}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80101, 0x101)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x60}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x4000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x854)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
r5 = io_uring_setup(0x68e7, &(0x7f0000000340)={0x0, 0x48c9, 0x8, 0x0, 0xd1})
r6 = mq_open(&(0x7f00000003c0)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000400)={0x8000000000000000, 0x8, 0x1, 0xc05})
mq_unlink(&(0x7f0000000440)='bat\x13\x1b\r\xcbs\xecave_5\x00')
mq_timedreceive(r6, &(0x7f00000004c0)=""/97, 0x61, 0xffffffffffffffb8, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

243.785354ms ago: executing program 2 (id=1710):
mkdir(&(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000540)='/dev/ram0,6', 0xb)

0s ago: executing program 1 (id=1745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000000d000)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000"], 0x24}}, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0xfffffffd, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0xfffbffff], [0x39aa, 0xffffffff, 0xffffffff, 0xffffffc3, 0x8, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0x3, 0x1, 0xfffffffd, 0xffffffff, 0x0, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac46, 0x2, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x6, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)

kernel console output (not intermixed with test programs):

th: 249 > 3
[  951.780749][T11184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  951.844611][ T2954] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.152222][ T2954] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.299519][ T2954] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.380782][ T1087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  952.574607][T11183] chnl_net:caif_netlink_parms(): no params data found
[  952.745371][T11184] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  954.499961][T11184] Bluetooth: hci0: command tx timeout
[  955.357088][T11183] bridge0: port 1(bridge_slave_0) entered blocking state
[  955.430712][T11183] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.500531][T11183] bridge_slave_0: entered allmulticast mode
[  955.591443][T11183] bridge_slave_0: entered promiscuous mode
[  955.611849][T11183] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.619054][T11183] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.660137][T11183] bridge_slave_1: entered allmulticast mode
[  955.667202][T11183] bridge_slave_1: entered promiscuous mode
[  956.540118][T11184] Bluetooth: hci0: command tx timeout
[  956.780995][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  958.065263][   T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  958.629919][T11184] Bluetooth: hci0: command tx timeout
[  960.544110][T11183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  961.790438][T11184] Bluetooth: hci0: command tx timeout
[  961.900951][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  961.941821][T11183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  962.263267][T11183] team0: Port device team_slave_0 added
[  962.296476][T11183] team0: Port device team_slave_1 added
[  962.511514][T11183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  962.518539][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  962.580144][T11183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  962.640219][  T970] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  962.672046][T11183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  962.679073][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  962.740042][T11183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  962.852140][  T970] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  962.890249][  T970] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  962.937673][  T970] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  962.983681][  T970] usb 4-1: config 0 interface 0 has no altsetting 0
[  963.003213][  T970] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  963.032051][  T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.058557][  T970] usb 4-1: config 0 descriptor??
[  963.077802][T11183] hsr_slave_0: entered promiscuous mode
[  963.116957][  T970] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  963.135674][T11183] hsr_slave_1: entered promiscuous mode
[  963.155568][T11183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  963.171859][T11183] Cannot create hsr debugfs directory
[  967.275465][  T970] usbhid 4-1:0.0: can't add hid device: -71
[  967.367788][  T970] usbhid: probe of 4-1:0.0 failed with error -71
[  967.418706][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  967.421628][  T970] usb 4-1: USB disconnect, device number 17
[  967.660902][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  967.899131][ T2954] hsr_slave_0: left promiscuous mode
[  967.913997][ T2954] hsr_slave_1: left promiscuous mode
[  967.941877][ T2954] bridge_slave_1: left allmulticast mode
[  967.947785][ T2954] bridge_slave_1: left promiscuous mode
[  967.964849][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.979130][ T2954] bridge_slave_0: left allmulticast mode
[  967.995591][ T2954] bridge_slave_0: left promiscuous mode
[  968.005914][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.112198][ T2954] veth1_macvtap: left promiscuous mode
[  968.117827][ T2954] veth0_macvtap: left promiscuous mode
[  968.144364][ T2954] veth1_vlan: left promiscuous mode
[  968.164470][ T2954] veth0_vlan: left promiscuous mode
[  972.809469][ T1087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  973.428327][ T2964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  977.979918][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  978.001613][ T2954] team0 (unregistering): Port device team_slave_1 removed
[  978.093617][T11303] ptp ptp0: guarantee physical clock free running
[  978.104305][T11303] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  978.193028][    T9] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  978.210016][ T9221] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  978.248308][    T9] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  978.290321][    T9] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  978.356434][ T2954] team0 (unregistering): Port device team_slave_0 removed
[  978.382645][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  978.423071][    T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  978.477312][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.543369][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  978.563256][    T9] usb 6-1: config 0 descriptor??
[  978.682056][    T9] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[  978.729905][ T9221] usb 3-1: Using ep0 maxpacket: 32
[  978.811189][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  978.819993][ T9221] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  978.828603][ T9221] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  978.840181][ T9221] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  978.851532][ T9221] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  978.864912][ T9221] usb 3-1: config 0 interface 0 has no altsetting 0
[  981.497071][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  981.514647][ T2964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  981.526473][    T9] usbhid: probe of 6-1:0.0 failed with error -71
[  981.537313][    T9] usb 6-1: USB disconnect, device number 9
[  981.545162][ T9221] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  981.568805][ T9221] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  981.604771][ T9221] usb 3-1: Product: syz
[  981.623293][ T9221] usb 3-1: Manufacturer: syz
[  981.630336][ T9221] usb 3-1: SerialNumber: syz
[  981.681313][ T9221] usb 3-1: config 0 descriptor??
[  981.690171][ T9221] usb 3-1: can't set config #0, error -71
[  981.745025][ T9221] usb 3-1: USB disconnect, device number 18
[  983.314916][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  984.331613][   T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  985.261098][ T2954] bond0 (unregistering): Released all slaves
[  985.289920][T11321] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  987.182782][ T2954] IPVS: stop unused estimator thread 0...
[  987.191813][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  987.769117][T11183] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  987.884422][T11183] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  988.066452][T11183] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  988.245763][T11183] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  988.999119][T11183] 8021q: adding VLAN 0 to HW filter on device bond0
[  989.046684][T11348] ptp ptp0: guarantee physical clock free running
[  989.054347][T11348] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  989.118756][T11183] 8021q: adding VLAN 0 to HW filter on device team0
[  989.174884][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  989.182311][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  989.211862][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.219092][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  991.245657][  T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  992.623717][ T2954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  993.370927][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  993.377413][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  997.010066][   T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  997.055129][T11183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  999.370314][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  999.623441][T11392] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1002.442450][T11408] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1002.592929][T11408] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1002.647561][T11405] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1003.790161][T11183] veth0_vlan: entered promiscuous mode
[ 1003.873138][T11183] veth1_vlan: entered promiscuous mode
[ 1003.994831][T11183] veth0_macvtap: entered promiscuous mode
[ 1004.026263][T11183] veth1_macvtap: entered promiscuous mode
[ 1004.088609][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1004.136918][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.164614][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1004.195727][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.224175][T11183] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1004.253877][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1004.279916][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.316017][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1004.342166][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.371714][T11183] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1004.428747][T11183] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1004.469912][T11183] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1004.478711][T11183] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1004.519978][T11183] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1004.790291][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1004.921508][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1004.956230][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1005.043961][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1005.056819][T11434] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1005.073389][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1005.424295][T11184] Bluetooth: hci0: command tx timeout
[ 1009.391455][T11458] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1010.542700][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1010.662514][T11477] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1013.038464][T11496] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1016.303335][   T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1016.311910][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1017.319571][T11513] ptp ptp0: guarantee physical clock free running
[ 1017.364744][T11513] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1020.820123][    T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1021.859986][    T8] usb 4-1: Using ep0 maxpacket: 8
[ 1021.922320][    T8] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[ 1022.147544][  T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1022.160429][ T2954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1022.173308][    T8] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[ 1024.419869][    T8] usb 4-1: config 135 has no interface number 0
[ 1024.426277][    T8] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1024.538664][    T8] usb 4-1: string descriptor 0 read error: -71
[ 1024.573476][    T8] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[ 1024.626117][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1024.673935][    T8] usb 4-1: can't set config #135, error -71
[ 1024.705367][    T8] usb 4-1: USB disconnect, device number 18
[ 1024.837623][T11560] Bluetooth: MGMT ver 1.22
[ 1025.102773][T11184] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[ 1025.833266][T11576] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1028.929886][   T28] audit: type=1326 audit(2000000011.590:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.2.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2339e1d9 code=0x7fc00000
[ 1029.475777][   T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1029.477434][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1029.507773][T11184] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[ 1030.280795][T11625] ptp ptp0: guarantee physical clock free running
[ 1030.290854][T11625] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1032.570135][T11633] syz.6.1443 (11633) used greatest stack depth: 19944 bytes left
[ 1032.653747][T11637] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1444'.
[ 1035.336089][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1036.740192][ T3510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1038.315027][T11184] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11
[ 1041.005933][  T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1041.934186][T11694] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1042.969038][ T3510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1042.980360][ T5781] IPVS: starting estimator thread 0...
[ 1043.139904][T11697] IPVS: using max 19 ests per chain, 45600 per kthread
[ 1046.140740][ T2954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1049.135325][ T1087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1052.130719][T11756] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1053.184682][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1053.684384][T11184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1053.702525][T11184] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1053.732976][T11184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1053.743022][T11184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1053.767408][T11184] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1053.776335][T11184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1054.124131][  T990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.397269][  T990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.566669][  T990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.714920][ T2954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1054.726982][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.733503][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.071698][  T990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.932201][T11184] Bluetooth: hci4: command tx timeout
[ 1056.810023][ T5781] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1056.904883][T11760] chnl_net:caif_netlink_parms(): no params data found
[ 1057.467206][ T5781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1057.490780][  T990] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1058.691788][ T5781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1058.702215][ T5781] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1058.715343][ T5781] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1058.724624][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.733014][ T2954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1058.745227][T11184] Bluetooth: hci4: command tx timeout
[ 1058.870062][ T5781] usb 7-1: config 0 descriptor??
[ 1058.879372][ T5781] usb 7-1: can't set config #0, error -71
[ 1058.898706][ T5781] usb 7-1: USB disconnect, device number 2
[ 1059.180561][T11760] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1059.183985][T11816] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1059.200123][T11760] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.207623][T11760] bridge_slave_0: entered allmulticast mode
[ 1059.231907][T11760] bridge_slave_0: entered promiscuous mode
[ 1059.290204][T11760] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1059.298051][T11760] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.324119][T11760] bridge_slave_1: entered allmulticast mode
[ 1059.338706][T11760] bridge_slave_1: entered promiscuous mode
[ 1059.682399][T11822] sctp: [Deprecated]: syz.5.1472 (pid 11822) Use of int in max_burst socket option.
[ 1059.682399][T11822] Use struct sctp_assoc_value instead
[ 1059.699548][T11822] sctp: [Deprecated]: syz.5.1472 (pid 11822) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1059.699548][T11822] Use struct sctp_sack_info instead
[ 1060.553018][ T2964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1060.780811][T11184] Bluetooth: hci4: command tx timeout
[ 1062.860050][T11184] Bluetooth: hci4: command tx timeout
[ 1063.543621][T11760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1065.163426][   T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1065.186560][T11760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1065.456519][T11760] team0: Port device team_slave_0 added
[ 1066.525651][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1066.544245][T11760] team0: Port device team_slave_1 added
[ 1066.978767][T11760] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1067.004327][T11760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1067.062729][T11760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1067.136031][T11760] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1067.159867][T11760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1067.224345][T11760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1067.660645][T11760] hsr_slave_0: entered promiscuous mode
[ 1067.690265][T11760] hsr_slave_1: entered promiscuous mode
[ 1067.702949][T11760] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1067.728071][T11760] Cannot create hsr debugfs directory
[ 1069.562323][T11872] jffs2: notice: (11872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1071.457390][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1071.981201][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1073.207145][  T990] hsr_slave_0: left promiscuous mode
[ 1074.104746][  T990] hsr_slave_1: left promiscuous mode
[ 1074.181737][  T990] bridge_slave_1: left allmulticast mode
[ 1074.187469][  T990] bridge_slave_1: left promiscuous mode
[ 1074.212691][T11908] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1074.221583][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1074.251036][  T990] bridge_slave_0: left allmulticast mode
[ 1074.256772][  T990] bridge_slave_0: left promiscuous mode
[ 1074.266932][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1074.687119][  T990] veth1_macvtap: left promiscuous mode
[ 1075.120744][  T990] veth0_macvtap: left promiscuous mode
[ 1075.145322][  T990] veth1_vlan: left promiscuous mode
[ 1075.160148][T11912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1075.172513][  T990] veth0_vlan: left promiscuous mode
[ 1077.262002][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[ 1077.743747][ T1093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1079.342124][  T990] team0 (unregistering): Port device team_slave_1 removed
[ 1081.073855][ T2964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1081.103167][  T990] team0 (unregistering): Port device team_slave_0 removed
[ 1081.223276][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1081.370904][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1082.264202][  T990] bond0 (unregistering): Released all slaves
[ 1084.029362][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1084.789661][T11760] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1084.992309][T11760] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1085.049327][T11760] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1085.155025][T11760] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1085.641938][T11760] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1085.703495][T11760] 8021q: adding VLAN 0 to HW filter on device team0
[ 1085.737317][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.744624][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1085.844175][  T990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.851440][  T990] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1086.014905][T11966] binder: 11965:11966 ioctl c0306201 200000000b40 returned -14
[ 1086.058082][T11966] binder: 11965:11966 ioctl c0306201 200000000c40 returned -14
[ 1088.015454][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1088.313782][T11760] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1089.902585][ T1087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1091.892753][T11760] veth0_vlan: entered promiscuous mode
[ 1091.938066][T11760] veth1_vlan: entered promiscuous mode
[ 1093.622231][T11760] veth0_macvtap: entered promiscuous mode
[ 1093.717784][T11760] veth1_macvtap: entered promiscuous mode
[ 1093.740260][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1093.848881][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.889850][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.929826][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.959843][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.987426][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1094.028744][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.064056][T11760] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1094.163201][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.256170][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.373639][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.471950][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.568670][T11760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.688687][T11760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.809477][T11760] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1094.884679][T11760] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1094.893835][T11760] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1094.902741][T11760] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1094.911533][T11760] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.356809][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1096.020062][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1096.027965][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1096.194274][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1096.223858][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1099.620356][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1099.907409][T11184] Bluetooth: hci3: unexpected event for opcode 0x200b
[ 1100.782443][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1104.004667][T12081] netlink: 'syz.6.1507': attribute type 1 has an invalid length.
[ 1104.014556][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1507'.
[ 1105.262984][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1105.429492][T12091] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1106.178360][T12087] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1106.284434][T12087] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1106.469199][T12087] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1106.518141][T12087] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1106.541154][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1106.582131][T12087] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1106.608434][T12087] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1106.657372][T12087] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1106.669985][T12087] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1106.698180][T12087] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1108.119822][T11184] Bluetooth: hci2: command 0x0406 tx timeout
[ 1108.539781][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[ 1108.620081][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[ 1108.702818][   T51] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1109.147024][   T51] Bluetooth: hci0: ACL packet for unknown connection handle 201
[ 1111.675764][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[ 1111.680278][T11184] Bluetooth: hci3: command 0x0406 tx timeout
[ 1111.684641][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[ 1111.687824][T11184] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1111.836267][ T2964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1112.329470][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1113.030123][T12143] binder: 12141:12143 ioctl c0306201 200000000b40 returned -14
[ 1113.071533][T12143] binder: 12141:12143 ioctl c0306201 200000000c40 returned -14
[ 1113.283020][T12145] printk: console [ttyS0] disabled
[ 1113.310059][T12145] printk: console [ttyS0] enabled
[ 1114.909169][T12134] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1116.180314][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.187218][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.415154][T12172] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1116.961231][T12178] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1515'.
[ 1117.269549][T12181] vivid-000: disconnect
[ 1117.278043][T12181] vivid-000: reconnect
[ 1118.889786][ T2954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1118.901106][ T1087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1121.112752][T12196] netlink: 'syz.5.1519': attribute type 1 has an invalid length.
[ 1121.816322][T12199] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1121.879779][T12199] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1124.473408][ T1087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1124.504333][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1127.284732][T12233] binder: 12232:12233 ioctl c0306201 200000000b40 returned -14
[ 1127.323081][T12233] binder: 12232:12233 ioctl c0306201 200000000c40 returned -14
[ 1131.271378][ T3510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1131.283705][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1136.361876][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1136.398255][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1136.430123][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1136.450043][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1136.468997][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1136.476851][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1136.640233][ T2964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1136.651911][ T2954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1136.874533][T12285] tipc: Started in network mode
[ 1136.879651][T12285] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1136.941980][T12285] tipc: New replicast peer: 0081:0000:0000:0000:0000:001c:0000:00bb
[ 1136.952085][T12285] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1137.448557][T12134] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[ 1137.686630][T12279] chnl_net:caif_netlink_parms(): no params data found
[ 1137.905620][T12300] binder: 12299:12300 ioctl c0306201 200000000b40 returned -14
[ 1137.961103][T11306] tipc: Node number set to 1
[ 1139.199848][T12134] Bluetooth: hci1: command tx timeout
[ 1139.799036][T12279] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1139.825960][T12279] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.884420][T12279] bridge_slave_0: entered allmulticast mode
[ 1139.934641][T12279] bridge_slave_0: entered promiscuous mode
[ 1140.088752][T12279] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1140.179316][T12279] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1140.296913][T12279] bridge_slave_1: entered allmulticast mode
[ 1140.414537][T12279] bridge_slave_1: entered promiscuous mode
[ 1140.973747][T12279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1141.053205][T12279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1141.261687][T12134] Bluetooth: hci1: command tx timeout
[ 1141.272232][T12322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1544'.
[ 1141.789564][T12279] team0: Port device team_slave_0 added
[ 1141.820295][ T1087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1141.850264][T12279] team0: Port device team_slave_1 added
[ 1142.230732][T12279] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1142.363602][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1142.470958][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1142.656676][T12279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1142.673052][T12279] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1142.695287][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1142.920135][T12279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1143.343385][T12134] Bluetooth: hci1: command tx timeout
[ 1143.444285][T12279] hsr_slave_0: entered promiscuous mode
[ 1143.632745][T12279] hsr_slave_1: entered promiscuous mode
[ 1144.655792][T12337] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1144.712510][T12337] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1144.748154][T12337] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1145.890944][T12134] Bluetooth: hci1: command tx timeout
[ 1146.220169][T12341] binder: 12340:12341 ioctl c0306201 200000000b40 returned -14
[ 1146.525762][ T5790] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11
[ 1146.907112][  T990] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1147.263494][  T990] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1147.510392][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1147.709238][T12359] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1554'.
[ 1147.972511][ T5790] Bluetooth: hci1: command tx timeout
[ 1148.142387][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1148.301667][ T5790] Bluetooth: hci2: unexpected event for opcode 0x2011
[ 1148.480138][  T990] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1150.442556][  T990] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1153.813415][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1153.861824][T12279] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1153.901885][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1153.988792][T12279] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1154.132164][T12279] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1154.177434][T12279] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1157.505039][T12391] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1157.555067][T12391] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1157.596519][T12391] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1158.783216][ T5790] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[ 1159.382381][T12279] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1159.639052][T12279] 8021q: adding VLAN 0 to HW filter on device team0
[ 1159.660612][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1159.680111][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1160.204911][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1160.212251][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1160.811510][T12400] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1563'.
[ 1161.313856][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1161.321126][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1164.720128][T11306] IPVS: starting estimator thread 0...
[ 1164.781681][ T2999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1164.822752][T12425] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1165.420117][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1165.444753][T12279] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1170.548507][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1171.336908][T12455] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1171.474173][T12455] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1172.377381][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1173.681762][  T990] hsr_slave_0: left promiscuous mode
[ 1173.835602][  T990] hsr_slave_1: left promiscuous mode
[ 1173.984551][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1173.992223][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1174.085083][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1174.095926][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1174.246310][  T990] bridge_slave_1: left allmulticast mode
[ 1174.258672][  T990] bridge_slave_1: left promiscuous mode
[ 1174.310033][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1174.530737][  T990] bridge_slave_0: left allmulticast mode
[ 1174.536536][  T990] bridge_slave_0: left promiscuous mode
[ 1174.571462][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1175.270232][T12134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1175.282142][T12134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1175.291015][T12134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1175.340044][T12134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1175.350027][T12134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1175.364284][T12134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1175.520261][  T990] veth1_macvtap: left promiscuous mode
[ 1175.525915][  T990] veth0_macvtap: left promiscuous mode
[ 1175.535414][  T990] veth1_vlan: left promiscuous mode
[ 1175.559939][  T990] veth0_vlan: left promiscuous mode
[ 1176.305136][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1177.421683][T12134] Bluetooth: hci0: command tx timeout
[ 1177.596044][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.603715][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.232580][ T2954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1179.509991][T12134] Bluetooth: hci0: command tx timeout
[ 1180.820129][T11356] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1181.066467][T11356] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1181.129930][T11356] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[ 1181.184387][T11356] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1181.240008][T11356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.248121][T11356] usb 6-1: Product: syz
[ 1181.323723][T11356] usb 6-1: Manufacturer: syz
[ 1181.344182][T11356] usb 6-1: SerialNumber: syz
[ 1181.365706][T11356] usb 6-1: config 0 descriptor??
[ 1181.390898][T12489] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1181.410258][T12489] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1181.475911][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1181.488496][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1181.501505][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1181.510332][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1181.520755][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1181.530782][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1181.590374][ T5790] Bluetooth: hci0: command tx timeout
[ 1181.691477][T12489] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1181.698969][T12489] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1182.142512][T11356] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 1182.654556][T11356] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[ 1182.700331][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1182.722342][T11356] usb 6-1: USB disconnect, device number 10
[ 1183.131370][  T990] team0 (unregistering): Port device team_slave_1 removed
[ 1183.436803][  T990] team0 (unregistering): Port device team_slave_0 removed
[ 1183.479562][T12496] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1183.543062][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1183.580655][ T5790] Bluetooth: hci2: command tx timeout
[ 1183.660372][ T5790] Bluetooth: hci0: command tx timeout
[ 1183.700968][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1184.581418][  T990] bond0 (unregistering): Released all slaves
[ 1184.620991][ T9073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1185.868159][ T5790] Bluetooth: hci2: command tx timeout
[ 1186.131812][T12279] veth0_vlan: entered promiscuous mode
[ 1186.187485][T12279] veth1_vlan: entered promiscuous mode
[ 1187.899967][T12134] Bluetooth: hci2: command tx timeout
[ 1188.045862][ T2964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1190.107327][T12134] Bluetooth: hci2: command tx timeout
[ 1190.197185][T12279] veth0_macvtap: entered promiscuous mode
[ 1190.317284][T12279] veth1_macvtap: entered promiscuous mode
[ 1190.380282][ T1093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1190.478572][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1190.494856][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.506437][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1190.518323][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.529255][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1190.540103][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.552280][T12279] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1190.647344][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.697970][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.720274][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.779038][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.821597][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1190.849854][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1190.884344][T12279] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1191.549740][T12529] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1191.599687][T12529] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1191.627266][T12529] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1192.707833][T12491] chnl_net:caif_netlink_parms(): no params data found
[ 1192.915030][T12279] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1192.942520][T12279] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1192.976584][T12279] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1193.002377][T12279] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1193.165442][T12478] chnl_net:caif_netlink_parms(): no params data found
[ 1193.626238][  T990] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1193.797105][  T990] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1193.954964][  T990] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1194.042507][T12491] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1194.057978][T12491] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1194.066058][T12491] bridge_slave_0: entered allmulticast mode
[ 1194.075507][T12491] bridge_slave_0: entered promiscuous mode
[ 1194.178297][  T990] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1194.254069][T12491] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1194.280290][T12491] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1194.287708][T12491] bridge_slave_1: entered allmulticast mode
[ 1194.309255][T12491] bridge_slave_1: entered promiscuous mode
[ 1194.493195][T12478] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1194.515921][T12478] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1194.530177][T12478] bridge_slave_0: entered allmulticast mode
[ 1194.541359][T12478] bridge_slave_0: entered promiscuous mode
[ 1194.553839][T12478] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1194.570670][T12478] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1194.578008][T12478] bridge_slave_1: entered allmulticast mode
[ 1194.601642][T12478] bridge_slave_1: entered promiscuous mode
[ 1194.631628][T12491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1194.645783][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1194.669763][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1194.699848][T12134] Bluetooth: hci2: command tx timeout
[ 1194.716028][T12491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1194.790130][ T9073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1194.829190][ T9073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1194.895056][T12491] team0: Port device team_slave_0 added
[ 1195.025285][T12478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1195.080848][T12478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1195.093919][T12491] team0: Port device team_slave_1 added
[ 1195.441891][T12491] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1195.479947][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1195.549710][T12491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1195.602454][T12491] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1195.621114][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1195.729992][T12491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1195.980518][  T990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.054701][T12478] team0: Port device team_slave_0 added
[ 1196.100770][T12558] binder: 12557:12558 ioctl c0306201 200000000b40 returned -14
[ 1196.112107][T12478] team0: Port device team_slave_1 added
[ 1196.173368][T12558] binder: 12557:12558 ioctl c0306201 200000000c40 returned -14
[ 1196.217290][T12558] binder_alloc: 12557: binder_alloc_buf, no vma
[ 1196.242684][  T990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.371413][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1196.388116][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1196.398085][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1196.412168][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1196.421285][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1196.429014][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1196.666909][  T990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1197.273566][T12478] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1197.379963][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1197.578650][T12478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1197.981721][  T990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1198.046534][T12491] hsr_slave_0: entered promiscuous mode
[ 1198.095308][T12491] hsr_slave_1: entered promiscuous mode
[ 1198.121185][T12491] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1198.140350][T12491] Cannot create hsr debugfs directory
[ 1198.221685][T12478] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1198.228713][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1198.265802][T12478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1198.540634][   T51] Bluetooth: hci4: command tx timeout
[ 1199.174208][T12478] hsr_slave_0: entered promiscuous mode
[ 1199.258654][T12478] hsr_slave_1: entered promiscuous mode
[ 1199.292697][T12478] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1199.318307][T12478] Cannot create hsr debugfs directory
[ 1200.115071][  T990] tipc: Disabling bearer <udp:syz0>
[ 1200.132947][  T990] tipc: Left network mode
[ 1200.293239][  T990] tipc: Left network mode
[ 1200.514570][T12591] jffs2: notice: (12591) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1200.620172][   T51] Bluetooth: hci4: command tx timeout
[ 1202.748093][   T51] Bluetooth: hci4: command tx timeout
[ 1203.018634][T12561] chnl_net:caif_netlink_parms(): no params data found
[ 1203.657108][T12617] binder: 12615:12617 ioctl c0306201 200000000b40 returned -14
[ 1203.694057][T12617] binder: 12615:12617 ioctl c0306201 200000000c40 returned -14
[ 1203.708940][T12617] binder_alloc: 12615: binder_alloc_buf, no vma
[ 1203.931083][T12561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1203.939060][T12561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.959926][T12561] bridge_slave_0: entered allmulticast mode
[ 1203.967595][T12561] bridge_slave_0: entered promiscuous mode
[ 1203.977414][T12561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1203.990116][T12561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1203.997432][T12561] bridge_slave_1: entered allmulticast mode
[ 1204.012232][T12561] bridge_slave_1: entered promiscuous mode
[ 1204.187464][   T51] Bluetooth: hci3: ACL packet for unknown connection handle 201
[ 1204.787719][   T51] Bluetooth: hci4: command tx timeout
[ 1206.530992][T12561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1207.052799][T12561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1207.156230][T12478] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1207.727380][T12478] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1207.904142][T12478] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1208.030852][T12561] team0: Port device team_slave_0 added
[ 1209.834704][T12478] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1209.919321][T12561] team0: Port device team_slave_1 added
[ 1210.344824][T12491] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1210.392282][T12561] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1210.399318][T12561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1210.447837][T12561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1210.543176][T12491] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1210.563197][T12561] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1210.573517][T12561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1210.607395][T12561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1210.624406][T12491] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1210.668285][  T990] hsr_slave_0: left promiscuous mode
[ 1210.674966][  T990] hsr_slave_1: left promiscuous mode
[ 1210.686489][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1210.694401][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1210.706803][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1210.728992][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1210.737468][  T990] bridge_slave_1: left allmulticast mode
[ 1210.743839][  T990] bridge_slave_1: left promiscuous mode
[ 1210.749715][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1210.768411][  T990] bridge_slave_0: left allmulticast mode
[ 1210.775653][  T990] bridge_slave_0: left promiscuous mode
[ 1210.788646][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1210.811716][  T990] hsr_slave_0: left promiscuous mode
[ 1210.817951][  T990] hsr_slave_1: left promiscuous mode
[ 1210.827492][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1210.842114][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1210.852232][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1210.860441][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1210.868432][  T990] bridge_slave_1: left allmulticast mode
[ 1210.874753][  T990] bridge_slave_1: left promiscuous mode
[ 1210.881310][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1210.891615][  T990] bridge_slave_0: left allmulticast mode
[ 1210.897326][  T990] bridge_slave_0: left promiscuous mode
[ 1210.904361][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1211.508714][  T990] veth1_macvtap: left promiscuous mode
[ 1211.514496][  T990] veth0_macvtap: left promiscuous mode
[ 1211.521146][  T990] veth1_vlan: left promiscuous mode
[ 1211.526548][  T990] veth0_vlan: left promiscuous mode
[ 1211.536545][  T990] veth1_macvtap: left promiscuous mode
[ 1211.549822][  T990] veth0_macvtap: left promiscuous mode
[ 1211.555590][  T990] veth1_vlan: left promiscuous mode
[ 1211.564286][  T990] veth0_vlan: left promiscuous mode
[ 1211.590126][T11306] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1211.769769][T11306] usb 6-1: Using ep0 maxpacket: 8
[ 1211.793175][T11306] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1211.808900][T11306] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1211.825958][T11306] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1211.840702][T11306] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1211.851264][T11306] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1211.867090][T11306] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1211.881594][T11306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1212.103949][T11306] usb 6-1: usb_control_msg returned -32
[ 1212.124441][T11306] usbtmc 6-1:16.0: can't read capabilities
[ 1212.486730][T12675] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0
[ 1212.627416][  T990] team0 (unregistering): Port device team_slave_1 removed
[ 1212.685695][  T990] team0 (unregistering): Port device team_slave_0 removed
[ 1212.696595][T11306] usb 6-1: USB disconnect, device number 11
[ 1212.763586][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1212.829548][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1214.902840][  T990] bond0 (unregistering): Released all slaves
[ 1215.582897][T12681] binder: 12680:12681 ioctl c0306201 200000000b40 returned -14
[ 1215.592660][T12681] binder: 12680:12681 ioctl c0306201 200000000c40 returned -14
[ 1215.610191][T12681] binder_alloc: 12680: binder_alloc_buf, no vma
[ 1215.761257][T12684] No source specified
[ 1215.930412][  T990] team0 (unregistering): Port device team_slave_1 removed
[ 1216.003257][  T990] team0 (unregistering): Port device team_slave_0 removed
[ 1216.067017][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1216.081676][  T990] bond_slave_1 (unregistering): left promiscuous mode
[ 1216.150427][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1216.160015][  T990] bond_slave_0 (unregistering): left promiscuous mode
[ 1216.937046][  T990] bond0 (unregistering): Released all slaves
[ 1217.666599][T12491] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1217.828751][T12561] hsr_slave_0: entered promiscuous mode
[ 1217.835776][T12561] hsr_slave_1: entered promiscuous mode
[ 1217.862889][T12561] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1217.872404][T12561] Cannot create hsr debugfs directory
[ 1218.090652][ T5781] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1218.237739][T12478] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1218.304875][ T5781] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1218.330445][ T5781] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1218.343395][ T5781] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1218.366292][ T5781] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1218.376083][ T5781] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1218.386356][ T5781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1218.397585][T12561] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1218.409903][ T5781] usb 6-1: config 0 descriptor??
[ 1218.435988][ T5781] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[ 1218.533741][T12561] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1218.560454][T12478] 8021q: adding VLAN 0 to HW filter on device team0
[ 1218.600032][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1218.607241][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1220.246850][ T5781] usbhid 6-1:0.0: can't add hid device: -71
[ 1220.259307][ T5781] usbhid: probe of 6-1:0.0 failed with error -71
[ 1220.278694][ T5781] usb 6-1: USB disconnect, device number 12
[ 1220.293648][T12561] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.324922][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1220.332265][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1220.371392][T12491] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1220.428486][T12561] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.466523][T12491] 8021q: adding VLAN 0 to HW filter on device team0
[ 1220.499295][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1220.506550][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1220.515248][  T990] IPVS: stop unused estimator thread 0...
[ 1220.540514][  T990] IPVS: stop unused estimator thread 0...
[ 1220.586171][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1220.593522][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1220.757572][T12561] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1220.814442][T12561] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1220.907880][T12561] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1220.980344][T12561] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1221.634281][T12478] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1221.837537][T12561] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1221.926311][T12561] 8021q: adding VLAN 0 to HW filter on device team0
[ 1222.009931][T12491] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1222.097051][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1222.104352][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1222.250684][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1222.257954][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1222.365799][T12714] binder: 12713:12714 ioctl c0306201 200000000b40 returned -14
[ 1222.375660][T12714] binder: 12713:12714 ioctl c0306201 200000000c40 returned -14
[ 1222.459600][T12491] veth0_vlan: entered promiscuous mode
[ 1222.549339][T12716] FAULT_INJECTION: forcing a failure.
[ 1222.549339][T12716] name failslab, interval 1, probability 0, space 0, times 0
[ 1222.565141][T12716] CPU: 1 PID: 12716 Comm: syz.5.1598 Not tainted syzkaller #0
[ 1222.572685][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1222.582885][T12716] Call Trace:
[ 1222.586200][T12716]  <TASK>
[ 1222.589148][T12716]  dump_stack_lvl+0x18c/0x250
[ 1222.593859][T12716]  ? show_regs_print_info+0x20/0x20
[ 1222.599090][T12716]  ? load_image+0x420/0x420
[ 1222.603651][T12716]  ? __might_sleep+0xe0/0xe0
[ 1222.608284][T12716]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1222.613334][T12716]  ? percpu_ref_put+0x12/0x100
[ 1222.618122][T12716]  should_fail_ex+0x394/0x4c0
[ 1222.622870][T12716]  should_failslab+0x9/0x20
[ 1222.627441][T12716]  slab_pre_alloc_hook+0x59/0x300
[ 1222.632519][T12716]  kmem_cache_alloc+0x5a/0x2c0
[ 1222.637329][T12716]  ? vm_area_dup+0x61/0x270
[ 1222.641857][T12716]  vm_area_dup+0x61/0x270
[ 1222.646208][T12716]  copy_mm+0x11a6/0x1e30
[ 1222.650751][T12716]  ? copy_signal+0x640/0x640
[ 1222.655381][T12716]  ? __init_rwsem+0x122/0x160
[ 1222.660079][T12716]  ? copy_signal+0x51f/0x640
[ 1222.664716][T12716]  copy_process+0x16c9/0x3da0
[ 1222.669457][T12716]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1222.675461][T12716]  ? copy_process+0x98e/0x3da0
[ 1222.680318][T12716]  ? __pidfd_prepare+0x140/0x140
[ 1222.685344][T12716]  ? wake_up_q+0xca/0x100
[ 1222.689768][T12716]  kernel_clone+0x24b/0x8a0
[ 1222.694297][T12716]  ? futex_wake_mark+0x150/0x150
[ 1222.699257][T12716]  ? create_io_thread+0x190/0x190
[ 1222.704311][T12716]  ? do_futex+0x35d/0x3e0
[ 1222.708666][T12716]  __x64_sys_clone+0x1b7/0x230
[ 1222.713456][T12716]  ? __ia32_sys_vfork+0x140/0x140
[ 1222.718780][T12716]  ? lock_chain_count+0x20/0x20
[ 1222.723679][T12716]  ? lockdep_hardirqs_on+0x98/0x150
[ 1222.728966][T12716]  do_syscall_64+0x55/0xb0
[ 1222.733431][T12716]  ? clear_bhb_loop+0x40/0x90
[ 1222.738180][T12716]  ? clear_bhb_loop+0x40/0x90
[ 1222.742882][T12716]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1222.748816][T12716] RIP: 0033:0x7f060619e1d9
[ 1222.753306][T12716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1222.773133][T12716] RSP: 002b:00007f06070dbfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1222.781609][T12716] RAX: ffffffffffffffda RBX: 00007f0606425fa0 RCX: 00007f060619e1d9
[ 1222.789676][T12716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040200
[ 1222.797831][T12716] RBP: 00007f0606235888 R08: 00002000000003c0 R09: 00002000000003c0
[ 1222.805830][T12716] R10: 0000200000000380 R11: 0000000000000206 R12: 0000000000000000
[ 1222.813852][T12716] R13: 00007f0606426038 R14: 00007f0606425fa0 R15: 00007ffc70a9c688
[ 1222.821931][T12716]  </TASK>
[ 1222.835740][  T990] hsr_slave_0: left promiscuous mode
[ 1222.853752][  T990] hsr_slave_1: left promiscuous mode
[ 1222.863399][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1222.879899][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1222.888066][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1222.895753][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1222.906801][  T990] bridge_slave_1: left allmulticast mode
[ 1222.912634][  T990] bridge_slave_1: left promiscuous mode
[ 1222.918435][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1222.943312][  T990] bridge_slave_0: left allmulticast mode
[ 1222.949043][  T990] bridge_slave_0: left promiscuous mode
[ 1222.957501][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1223.001281][  T990] veth1_macvtap: left promiscuous mode
[ 1223.006907][  T990] veth0_macvtap: left promiscuous mode
[ 1223.012862][  T990] veth1_vlan: left promiscuous mode
[ 1223.018243][  T990] veth0_vlan: left promiscuous mode
[ 1224.323325][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1224.566860][    T9] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1224.582617][    T9] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1224.592745][    T9] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1224.605749][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1224.628288][    T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1224.642642][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1224.677033][    T9] usb 6-1: config 0 descriptor??
[ 1224.690637][    T9] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[ 1224.714056][  T990] team0 (unregistering): Port device team_slave_1 removed
[ 1224.782886][  T990] team0 (unregistering): Port device team_slave_0 removed
[ 1224.848371][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1226.411857][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1226.509441][    T9] usbhid 6-1:0.0: can't add hid device: -71
[ 1226.527373][    T9] usbhid: probe of 6-1:0.0 failed with error -71
[ 1226.536512][    T9] usb 6-1: USB disconnect, device number 13
[ 1226.986255][  T990] bond0 (unregistering): Released all slaves
[ 1227.075208][T12491] veth1_vlan: entered promiscuous mode
[ 1227.293703][T12478] veth0_vlan: entered promiscuous mode
[ 1227.354441][T12491] veth0_macvtap: entered promiscuous mode
[ 1227.368944][T12491] veth1_macvtap: entered promiscuous mode
[ 1227.449055][T12478] veth1_vlan: entered promiscuous mode
[ 1227.534844][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1227.553600][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1227.582400][T12491] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1227.609928][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1227.625294][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1227.639298][T12491] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1227.733209][T12491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.750173][T12491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.759044][T12491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.775384][T12491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.807701][T12478] veth0_macvtap: entered promiscuous mode
[ 1227.876598][T12478] veth1_macvtap: entered promiscuous mode
[ 1227.948967][T12561] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1228.003811][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1228.030230][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1228.050167][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1228.079972][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1228.101624][T12478] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1228.149164][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1228.170680][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1228.188492][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1228.199419][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1228.211609][T12478] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1228.227699][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1228.243161][T12478] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1228.269751][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1228.270792][T12478] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1228.300642][T12478] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1228.309425][T12478] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1228.445021][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1228.510597][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1228.626251][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1228.656294][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1228.760880][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1228.768777][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1229.420607][T12740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1573'.
[ 1229.433113][T12561] veth0_vlan: entered promiscuous mode
[ 1229.994164][T12561] veth1_vlan: entered promiscuous mode
[ 1230.290135][   T51] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11
[ 1230.611351][T12561] veth0_macvtap: entered promiscuous mode
[ 1230.629043][T12561] veth1_macvtap: entered promiscuous mode
[ 1230.780835][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1230.833191][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1230.891536][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1230.909789][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1230.926882][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1230.927107][T12750] binder: 12749:12750 ioctl c0306201 200000000b40 returned -14
[ 1230.952703][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1230.991181][T12561] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1231.040372][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1231.071375][T12750] binder: 12749:12750 ioctl c0306201 200000000c40 returned -14
[ 1231.079120][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1231.079149][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1231.079169][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1231.079183][T12561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1231.079198][T12561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1231.083984][T12561] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1231.165919][T12561] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.184723][T12561] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.196553][T12561] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1232.160655][T12561] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1234.764827][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1234.795361][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1235.439705][T12768] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1235.483178][T12768] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1236.442929][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1236.570546][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1238.110194][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1610'.
[ 1239.034057][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.047672][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1242.133498][T12803] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1243.674059][T12812] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1243.731598][T12812] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1249.959074][T12134] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11
[ 1250.867023][T12840] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1251.056189][T12839] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1251.151116][T12839] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1251.852417][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1620'.
[ 1252.257255][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1252.278590][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1252.288191][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1252.311550][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1252.322764][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1252.330511][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1252.651999][   T28] audit: type=1800 audit(2000000222.370:78): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1618" name="idProduct" dev="configfs" ino=32297 res=0 errno=0
[ 1253.547991][T12842] chnl_net:caif_netlink_parms(): no params data found
[ 1253.720050][  T970] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[ 1254.000213][  T970] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1254.011804][  T970] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1254.024489][  T970] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1254.037976][  T970] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1254.046195][  T970] usb 6-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00
[ 1254.056024][  T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1254.073295][  T970] usb 6-1: config 0 descriptor??
[ 1254.126591][T12860] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1254.172024][T12842] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1254.221969][T12842] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1254.229295][T12842] bridge_slave_0: entered allmulticast mode
[ 1254.274291][T12842] bridge_slave_0: entered promiscuous mode
[ 1254.334949][T12842] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1254.349387][T12842] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1254.357002][T12842] bridge_slave_1: entered allmulticast mode
[ 1254.377219][T12842] bridge_slave_1: entered promiscuous mode
[ 1254.460710][T12134] Bluetooth: hci1: command tx timeout
[ 1257.125041][T12134] Bluetooth: hci1: command tx timeout
[ 1259.179809][T12134] Bluetooth: hci1: command tx timeout
[ 1259.553835][  T970] usbhid 6-1:0.0: can't add hid device: -32
[ 1259.589866][  T970] usbhid: probe of 6-1:0.0 failed with error -32
[ 1259.670153][  T970] usb 6-1: USB disconnect, device number 14
[ 1259.981903][T12893] FAULT_INJECTION: forcing a failure.
[ 1259.981903][T12893] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1260.020253][T12842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1260.041396][T12883] netlink: 'syz.9.1625': attribute type 1 has an invalid length.
[ 1260.061614][T12893] CPU: 0 PID: 12893 Comm: syz.8.1621 Not tainted syzkaller #0
[ 1260.069169][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1260.079294][T12893] Call Trace:
[ 1260.082672][T12893]  <TASK>
[ 1260.085659][T12893]  dump_stack_lvl+0x18c/0x250
[ 1260.090406][T12893]  ? show_regs_print_info+0x20/0x20
[ 1260.095659][T12893]  ? load_image+0x420/0x420
[ 1260.100208][T12893]  ? ____sys_sendmsg+0x779/0x980
[ 1260.105203][T12893]  ? __asan_memset+0x22/0x40
[ 1260.109840][T12893]  ? __sys_sendmsg_sock+0x30/0x30
[ 1260.115101][T12893]  should_fail_ex+0x394/0x4c0
[ 1260.119849][T12893]  get_futex_key+0x136/0x1030
[ 1260.124575][T12893]  ? rcu_is_watching+0x15/0xb0
[ 1260.129458][T12893]  ? ___sys_sendmsg+0x2b6/0x360
[ 1260.134347][T12893]  ? kfree+0x31/0x1a0
[ 1260.138397][T12893]  ? ___sys_sendmsg+0x2b6/0x360
[ 1260.143335][T12893]  ? futex_setup_timer+0xc0/0xc0
[ 1260.148357][T12893]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1260.153162][T12893]  futex_wake+0x127/0x4f0
[ 1260.157563][T12893]  ? futex_wake_mark+0x150/0x150
[ 1260.162593][T12893]  do_futex+0x35d/0x3e0
[ 1260.166843][T12893]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1260.172962][T12893]  ? fput+0x154/0x1a0
[ 1260.177003][T12893]  __se_sys_futex+0x3a9/0x440
[ 1260.181738][T12893]  ? __x64_sys_futex+0xf0/0xf0
[ 1260.186547][T12893]  ? __x64_sys_futex+0x21/0xf0
[ 1260.191520][T12893]  do_syscall_64+0x55/0xb0
[ 1260.196249][T12893]  ? clear_bhb_loop+0x40/0x90
[ 1260.200976][T12893]  ? clear_bhb_loop+0x40/0x90
[ 1260.205679][T12893]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1260.211614][T12893] RIP: 0033:0x7f550539e1d9
[ 1260.216063][T12893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1260.235816][T12893] RSP: 002b:00007f55035f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1260.244269][T12893] RAX: ffffffffffffffda RBX: 00007f5505625fa8 RCX: 00007f550539e1d9
[ 1260.252268][T12893] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5505625fac
[ 1260.260266][T12893] RBP: 00007f5505625fa0 R08: 0000000000745d1e R09: 0000000000000000
[ 1260.268302][T12893] R10: 000000000000007c R11: 0000000000000246 R12: 0000000000000000
[ 1260.276305][T12893] R13: 00007f5505626038 R14: 00007fff1fbb5840 R15: 00007fff1fbb5928
[ 1260.284408][T12893]  </TASK>
[ 1260.441002][T12897] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1261.259814][T12134] Bluetooth: hci1: command tx timeout
[ 1262.768319][T12842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1263.036394][   T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1263.094368][T12134] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11
[ 1263.587524][T12842] team0: Port device team_slave_0 added
[ 1264.037176][   T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1264.272459][T12842] team0: Port device team_slave_1 added
[ 1266.984699][   T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1267.012918][T12842] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1267.029962][T12842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1267.129311][T12842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1267.232935][T12842] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1267.256356][T12842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1267.388813][T12842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1267.450058][ T6214] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1269.809457][   T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1271.497760][ T6214] usb 10-1: device descriptor read/all, error -71
[ 1271.696039][T12842] hsr_slave_0: entered promiscuous mode
[ 1271.735401][T12842] hsr_slave_1: entered promiscuous mode
[ 1271.810117][T12134] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11
[ 1273.652102][T12966] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1276.640394][T12971] fuse: Bad value for 'fd'
[ 1277.160376][T12970] netlink: 'syz.9.1643': attribute type 4 has an invalid length.
[ 1277.631858][T12499] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1277.892850][T12499] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1277.989716][T12499] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1278.000562][T12499] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1278.014007][T12499] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1278.023845][T12499] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1278.034179][T12499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.049891][T12499] usb 6-1: config 0 descriptor??
[ 1278.061788][T12499] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[ 1280.661881][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1636'.
[ 1280.729313][T12499] usbhid 6-1:0.0: can't add hid device: -71
[ 1280.799899][T12499] usbhid: probe of 6-1:0.0 failed with error -71
[ 1280.822504][T12499] usb 6-1: USB disconnect, device number 15
[ 1280.946513][T12995] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1283.228472][T13009] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1284.788941][ T5781] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1285.005146][ T5781] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1285.051266][ T5781] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1285.080311][ T5781] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1285.107537][ T5781] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1285.125510][ T5781] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1285.149799][ T5781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1285.193740][ T5781] usb 6-1: config 0 descriptor??
[ 1285.228914][ T5781] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[ 1285.414189][T12842] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1288.062456][ T5781] usbhid 6-1:0.0: can't add hid device: -71
[ 1288.068534][ T5781] usbhid: probe of 6-1:0.0 failed with error -71
[ 1288.078330][ T5781] usb 6-1: USB disconnect, device number 16
[ 1288.191042][T13040] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1288.231578][T12842] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1291.053211][T12842] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1291.740262][T12842] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1293.283365][    T8] IPVS: starting estimator thread 0...
[ 1293.373171][T13057] IPVS: using max 19 ests per chain, 45600 per kthread
[ 1293.534880][   T32] hsr_slave_0: left promiscuous mode
[ 1293.590645][   T32] hsr_slave_1: left promiscuous mode
[ 1293.617763][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1293.641830][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1293.701077][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1293.708697][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1294.878669][   T32] bridge_slave_1: left allmulticast mode
[ 1294.884752][   T32] bridge_slave_1: left promiscuous mode
[ 1294.890939][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1294.960886][   T32] bridge_slave_0: left allmulticast mode
[ 1294.966627][   T32] bridge_slave_0: left promiscuous mode
[ 1295.029896][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1295.290262][   T32] veth1_macvtap: left promiscuous mode
[ 1295.295839][   T32] veth0_macvtap: left promiscuous mode
[ 1295.330416][   T32] veth1_vlan: left promiscuous mode
[ 1295.335871][   T32] veth0_vlan: left promiscuous mode
[ 1296.214610][T13072] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1296.268029][T13072] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1301.336937][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1301.345947][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1302.510009][ T5781] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1302.568992][T13092] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1302.755771][ T5781] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1302.852487][ T5781] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1302.946755][ T5781] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1303.074726][ T5781] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1303.128400][ T5781] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1303.221202][ T5781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.296536][ T5781] usb 6-1: config 0 descriptor??
[ 1303.420142][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[ 1304.595148][ T5781] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[ 1306.074076][ T5781] usbhid 6-1:0.0: can't add hid device: -71
[ 1306.097977][ T5781] usbhid: probe of 6-1:0.0 failed with error -71
[ 1306.127779][   T32] team0 (unregistering): Port device team_slave_1 removed
[ 1306.129191][ T5781] usb 6-1: USB disconnect, device number 17
[ 1306.302511][T12134] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11
[ 1306.519304][   T32] team0 (unregistering): Port device team_slave_0 removed
[ 1306.730371][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1306.951470][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1307.721977][ T9428] IPVS: starting estimator thread 0...
[ 1307.880155][T13102] IPVS: using max 17 ests per chain, 40800 per kthread
[ 1311.561019][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1311.572982][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1311.582520][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1311.591906][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1311.599813][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1311.607207][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1312.543968][   T32] bond0 (unregistering): Released all slaves
[ 1312.687304][T13123] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1312.747172][T13083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1312.769446][T13083] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1312.796875][T13083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1312.810114][T13083] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1313.550076][T13129] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1314.552445][T12134] Bluetooth: hci2: command tx timeout
[ 1315.655354][T13113] chnl_net:caif_netlink_parms(): no params data found
[ 1316.279878][T13151] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[ 1316.286577][T13151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1316.389916][T13151] vhci_hcd vhci_hcd.0: Device attached
[ 1316.621824][T12134] Bluetooth: hci2: command tx timeout
[ 1316.700854][T11356] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[ 1317.177662][T13152] vhci_hcd: connection reset by peer
[ 1317.271470][ T2964] vhci_hcd: stop threads
[ 1317.305266][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1317.314798][ T2964] vhci_hcd: release socket
[ 1317.350228][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1317.392495][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1317.422635][ T2964] vhci_hcd: disconnect device
[ 1317.455465][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1317.494644][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1317.521886][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1318.700622][   T51] Bluetooth: hci2: command tx timeout
[ 1319.104793][T13113] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1319.114870][T13113] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1319.141126][T13113] bridge_slave_0: entered allmulticast mode
[ 1319.155318][T13113] bridge_slave_0: entered promiscuous mode
[ 1319.176047][T13113] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1319.195433][T13113] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1320.329300][   T51] Bluetooth: hci1: command tx timeout
[ 1320.370047][T13113] bridge_slave_1: entered allmulticast mode
[ 1320.382104][T13113] bridge_slave_1: entered promiscuous mode
[ 1320.419819][  T970] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1320.611787][  T970] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1320.629489][T13113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1320.639464][  T970] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1320.666230][  T970] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1320.667662][T13113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1320.719753][  T970] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1320.731573][  T970] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1320.759788][  T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1320.789829][   T51] Bluetooth: hci2: command tx timeout
[ 1320.796544][  T970] usb 6-1: config 0 descriptor??
[ 1320.841406][  T970] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[ 1320.857174][T13113] team0: Port device team_slave_0 added
[ 1320.915726][T13113] team0: Port device team_slave_1 added
[ 1322.474595][ T5790] Bluetooth: hci1: command tx timeout
[ 1322.481716][  T970] usbhid 6-1:0.0: can't add hid device: -71
[ 1322.489457][  T970] usbhid: probe of 6-1:0.0 failed with error -71
[ 1322.549884][T11356] vhci_hcd: vhci_device speed not set
[ 1322.570691][  T970] usb 6-1: USB disconnect, device number 18
[ 1322.772343][T13113] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1322.779422][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1322.839934][T13113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1322.854252][T13113] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1322.861610][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1322.888628][T13113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1323.024097][ T5790] Bluetooth: hci4: command 0x0406 tx timeout
[ 1323.298116][T13113] hsr_slave_0: entered promiscuous mode
[ 1323.332054][T13113] hsr_slave_1: entered promiscuous mode
[ 1323.359918][T13113] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1323.367557][T13113] Cannot create hsr debugfs directory
[ 1323.454823][T13155] chnl_net:caif_netlink_parms(): no params data found
[ 1323.922891][T13155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1323.932002][T13155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1323.940861][T13155] bridge_slave_0: entered allmulticast mode
[ 1325.493173][T12134] Bluetooth: hci1: command tx timeout
[ 1325.529851][T13155] bridge_slave_0: entered promiscuous mode
[ 1325.555009][T13155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1325.565940][T13155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1325.578422][T13155] bridge_slave_1: entered allmulticast mode
[ 1325.587674][T13155] bridge_slave_1: entered promiscuous mode
[ 1325.751414][   T32] hsr_slave_0: left promiscuous mode
[ 1325.770308][   T32] hsr_slave_1: left promiscuous mode
[ 1325.786702][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1325.795355][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1325.805167][   T32] bridge_slave_1: left allmulticast mode
[ 1325.820831][   T32] bridge_slave_1: left promiscuous mode
[ 1325.826661][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1325.855847][   T32] bridge_slave_0: left allmulticast mode
[ 1325.873275][   T32] bridge_slave_0: left promiscuous mode
[ 1325.879140][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1326.474144][   T32] team0 (unregistering): Port device team_slave_1 removed
[ 1326.609472][   T32] team0 (unregistering): Port device team_slave_0 removed
[ 1326.718854][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1326.827434][T13228] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1681'.
[ 1326.959929][T13228] FAULT_INJECTION: forcing a failure.
[ 1326.959929][T13228] name failslab, interval 1, probability 0, space 0, times 0
[ 1327.057894][T13228] CPU: 0 PID: 13228 Comm: syz.8.1681 Not tainted syzkaller #0
[ 1327.065562][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1327.075669][T13228] Call Trace:
[ 1327.078999][T13228]  <TASK>
[ 1327.081979][T13228]  dump_stack_lvl+0x18c/0x250
[ 1327.086712][T13228]  ? show_regs_print_info+0x20/0x20
[ 1327.091979][T13228]  ? load_image+0x420/0x420
[ 1327.096541][T13228]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1327.101622][T13228]  should_fail_ex+0x394/0x4c0
[ 1327.106449][T13228]  should_failslab+0x9/0x20
[ 1327.111007][T13228]  slab_pre_alloc_hook+0x59/0x300
[ 1327.116264][T13228]  ? mark_lock+0x94/0x320
[ 1327.120663][T13228]  kmem_cache_alloc+0x5a/0x2c0
[ 1327.125483][T13228]  ? alloc_empty_file+0x9e/0x1d0
[ 1327.130472][T13228]  alloc_empty_file+0x9e/0x1d0
[ 1327.135300][T13228]  path_openat+0x120/0x3270
[ 1327.139959][T13228]  ? kasan_set_track+0x5f/0x70
[ 1327.144803][T13228]  ? verify_lock_unused+0x140/0x140
[ 1327.150050][T13228]  ? do_sys_openat2+0xda/0x1d0
[ 1327.154873][T13228]  ? __x64_sys_openat+0x139/0x160
[ 1327.159946][T13228]  ? do_syscall_64+0x55/0xb0
[ 1327.164581][T13228]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1327.170710][T13228]  ? verify_lock_unused+0x140/0x140
[ 1327.175958][T13228]  ? do_filp_open+0x430/0x430
[ 1327.180690][T13228]  do_filp_open+0x1f2/0x430
[ 1327.185238][T13228]  ? vfs_tmpfile+0x620/0x620
[ 1327.189899][T13228]  ? _raw_spin_unlock+0x28/0x40
[ 1327.194854][T13228]  ? alloc_fd+0x590/0x640
[ 1327.199234][T13228]  do_sys_openat2+0x134/0x1d0
[ 1327.203952][T13228]  ? do_sys_open+0xe0/0xe0
[ 1327.208405][T13228]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1327.214592][T13228]  ? lock_chain_count+0x20/0x20
[ 1327.219501][T13228]  __x64_sys_openat+0x139/0x160
[ 1327.224488][T13228]  do_syscall_64+0x55/0xb0
[ 1327.228971][T13228]  ? clear_bhb_loop+0x40/0x90
[ 1327.233694][T13228]  ? clear_bhb_loop+0x40/0x90
[ 1327.238398][T13228]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1327.244417][T13228] RIP: 0033:0x7f550535ea0e
[ 1327.248873][T13228] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1327.268530][T13228] RSP: 002b:00007f55035f5ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1327.277016][T13228] RAX: ffffffffffffffda RBX: 00007f55035f66c0 RCX: 00007f550535ea0e
[ 1327.285127][T13228] RDX: 0000000000000000 RSI: 00007f5505434a5a RDI: ffffffffffffff9c
[ 1327.293297][T13228] RBP: 00007f5505435888 R08: 0000000000000000 R09: 0000000000000000
[ 1327.301307][T13228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1327.309338][T13228] R13: 0000000000000000 R14: 00007f5505625fa0 R15: 00007fff1fbb5928
[ 1327.317359][T13228]  </TASK>
[ 1327.350577][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1327.500955][T12134] Bluetooth: hci1: command tx timeout
[ 1327.976315][   T32] bond0 (unregistering): Released all slaves
[ 1328.159548][T13155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1328.220227][T13155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1329.293821][T13155] team0: Port device team_slave_0 added
[ 1329.315402][T13155] team0: Port device team_slave_1 added
[ 1332.844957][T13155] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1332.860144][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1332.951640][T13155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1333.182651][T13155] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1333.471259][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1333.613875][T13155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1333.803935][T13155] hsr_slave_0: entered promiscuous mode
[ 1333.860882][T13155] hsr_slave_1: entered promiscuous mode
[ 1334.422503][T13271] ptp ptp0: guarantee physical clock free running
[ 1334.441550][T13271] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1335.061094][T13113] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1335.298521][   T32] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1335.463413][T13113] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1335.477790][T13113] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1337.253147][   T32] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.275310][T13113] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1337.308896][T13282] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1339.576943][   T32] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.135721][   T32] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1344.274256][T13113] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1344.380478][T13113] 8021q: adding VLAN 0 to HW filter on device team0
[ 1344.498600][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1344.505875][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1344.544477][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1344.551658][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1344.964703][T13155] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1345.065898][T13155] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1345.144064][T13155] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1345.236725][T13155] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1345.349948][T12499] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1345.562424][T12499] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1345.589406][T12499] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64
[ 1345.618924][T13113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1345.619842][T12499] usb 6-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping
[ 1345.655762][T13113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1345.689743][T12499] usb 6-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1345.787876][T12499] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[ 1345.797323][T12499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1345.817742][T12499] usb 6-1: Product: syz
[ 1345.829643][T12499] usb 6-1: Manufacturer: syz
[ 1346.084265][T13320] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1346.138905][T12499] dvb_ttusb_budget: ttusb_init_controller: error
[ 1346.170054][T12499] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1346.319357][T13320] mmap: syz.5.1694 (13320) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1348.064149][T12499] DVB: Unable to find symbol cx22700_attach()
[ 1348.272635][T13113] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1348.293905][T12499] DVB: Unable to find symbol tda10046_attach()
[ 1348.316260][T12499] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1348.387955][T13155] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1348.397718][T12499] usb 6-1: USB disconnect, device number 19
[ 1348.680283][T13155] 8021q: adding VLAN 0 to HW filter on device team0
[ 1348.732545][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1348.739815][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1348.766594][T13354] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1348.967646][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1348.974906][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1350.657859][T13113] veth0_vlan: entered promiscuous mode
[ 1350.953319][   T32] hsr_slave_0: left promiscuous mode
[ 1351.049832][   T32] hsr_slave_1: left promiscuous mode
[ 1351.068904][   T32] bridge_slave_1: left allmulticast mode
[ 1351.074857][   T32] bridge_slave_1: left promiscuous mode
[ 1351.120043][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1351.182074][   T32] bridge_slave_0: left allmulticast mode
[ 1351.187803][   T32] bridge_slave_0: left promiscuous mode
[ 1351.230954][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1351.361870][   T32] veth1_macvtap: left promiscuous mode
[ 1351.367507][   T32] veth0_macvtap: left promiscuous mode
[ 1351.400025][   T32] veth1_vlan: left promiscuous mode
[ 1351.405479][   T32] veth0_vlan: left promiscuous mode
[ 1353.295993][T13391] overlayfs: overlapping lowerdir path
[ 1354.460920][   T32] team0 (unregistering): Port device team_slave_1 removed
[ 1354.590766][   T32] team0 (unregistering): Port device team_slave_0 removed
[ 1354.730376][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1354.877086][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1355.783528][   T32] bond0 (unregistering): Released all slaves
[ 1355.967063][T13113] veth1_vlan: entered promiscuous mode
[ 1356.073701][T13155] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1356.349461][T13113] veth0_macvtap: entered promiscuous mode
[ 1356.437597][T13113] veth1_macvtap: entered promiscuous mode
[ 1357.058040][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1357.077294][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1357.109174][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1357.129938][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1357.182864][T13113] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1357.253002][T13155] veth0_vlan: entered promiscuous mode
[ 1357.260217][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1357.287416][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1357.297795][T13113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1357.315785][T13113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1357.328464][T13113] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1357.385191][T13113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1357.396499][   T32] IPVS: stop unused estimator thread 0...
[ 1357.404699][T13113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1357.420918][T13113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1357.436291][T13113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1357.468684][T13155] veth1_vlan: entered promiscuous mode
[ 1357.733689][T13155] veth0_macvtap: entered promiscuous mode
[ 1357.809249][T13428] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1357.962827][T13155] veth1_macvtap: entered promiscuous mode
[ 1358.821288][T13429] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1358.930815][T13429] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1360.311285][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1360.319183][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1360.347887][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1360.358877][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1360.369114][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1360.399660][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.226126][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.240673][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.261387][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1362.285356][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.331892][T13155] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1362.555419][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.589049][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.611908][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.649886][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.667865][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.689666][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.711433][T13155] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1362.759691][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1362.760906][T13155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1362.790113][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1362.792113][T13155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1362.821996][T13155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1362.839785][T13155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.081015][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1363.088924][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1363.446964][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1364.460164][T13446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1619'.
[ 1364.884706][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1365.150343][T13452] input: syz1 as /devices/virtual/input/input43
[ 1370.093109][T13460] overlayfs: overlapping lowerdir path
[ 1373.535360][T13473] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1377.492109][T13487] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[ 1379.979745][T12134] Bluetooth: hci3: command 0x0406 tx timeout
[ 1381.745552][T13504] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1385.760228][T13508] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1713'.
[ 1386.273540][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1386.290399][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1386.299331][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1386.329934][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1386.342783][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1386.362821][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1387.965176][   T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1388.127139][T13511] chnl_net:caif_netlink_parms(): no params data found
[ 1388.387539][   T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1388.459922][ T5790] Bluetooth: hci0: command tx timeout
[ 1389.717376][T13531] overlayfs: overlapping lowerdir path
[ 1390.052890][   T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1390.325947][T13511] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1390.338603][T13511] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1390.347482][T13511] bridge_slave_0: entered allmulticast mode
[ 1390.355016][T13511] bridge_slave_0: entered promiscuous mode
[ 1390.540076][ T5790] Bluetooth: hci0: command tx timeout
[ 1393.445746][ T5790] Bluetooth: hci0: command tx timeout
[ 1393.475662][T13552] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1393.840860][T13511] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1393.848158][T13511] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1393.886456][T13511] bridge_slave_1: entered allmulticast mode
[ 1393.901809][T13511] bridge_slave_1: entered promiscuous mode
[ 1394.016205][T13558] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input44
[ 1394.062304][T13511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1394.099725][T13511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1394.296755][T13511] team0: Port device team_slave_0 added
[ 1394.329059][T13511] team0: Port device team_slave_1 added
[ 1394.502953][T13511] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1394.525772][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1394.571064][T13511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1394.673436][T13511] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1394.700775][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1395.032449][T13569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1722'.
[ 1395.974784][ T5790] Bluetooth: hci0: command tx timeout
[ 1395.999630][T13511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1396.244773][T13511] hsr_slave_0: entered promiscuous mode
[ 1396.286382][T13511] hsr_slave_1: entered promiscuous mode
[ 1396.305368][T13511] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1396.330086][T13511] Cannot create hsr debugfs directory
[ 1402.922569][T13608] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1403.882779][T12134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1403.899962][T12134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1403.909126][T12134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1403.923283][T12134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1403.931258][T12134] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1403.939677][T12134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1405.194142][T13615] overlayfs: overlapping lowerdir path
[ 1406.060107][ T5790] Bluetooth: hci3: command tx timeout
[ 1406.261914][   T59] bridge0: port 3(wlan1) entered disabled state
[ 1406.332034][   T59] mac80211_hwsim hwsim13 wlan1 (unregistering): left allmulticast mode
[ 1406.349707][   T59] mac80211_hwsim hwsim13 wlan1 (unregistering): left promiscuous mode
[ 1406.391185][   T59] bridge0: port 3(wlan1) entered disabled state
[ 1406.780379][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1730'.
[ 1408.139744][ T5790] Bluetooth: hci3: command tx timeout
[ 1408.239010][T13511] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1409.417277][T13511] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1409.759858][T13511] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1409.802270][T13511] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1409.966870][   T59] hsr_slave_0: left promiscuous mode
[ 1409.973973][   T59] hsr_slave_1: left promiscuous mode
[ 1410.029121][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1410.036887][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1410.101572][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1410.109070][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1410.140780][   T59] bridge_slave_1: left allmulticast mode
[ 1410.146514][   T59] bridge_slave_1: left promiscuous mode
[ 1410.174618][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1410.195485][   T59] bridge_slave_0: left allmulticast mode
[ 1410.213182][   T59] bridge_slave_0: left promiscuous mode
[ 1410.219063][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1410.227536][ T5790] Bluetooth: hci3: command tx timeout
[ 1410.387708][   T59] veth1_macvtap: left promiscuous mode
[ 1410.394105][   T59] veth0_macvtap: left promiscuous mode
[ 1410.407199][   T59] veth1_vlan: left promiscuous mode
[ 1410.419888][   T59] veth0_vlan: left promiscuous mode
[ 1412.370268][ T5790] Bluetooth: hci3: command tx timeout
[ 1415.459619][T13658] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1415.509019][T13658] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1415.619981][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'.
[ 1416.756683][T13654] overlayfs: overlapping lowerdir path
[ 1417.248777][   T59] team0 (unregistering): Port device team_slave_1 removed
[ 1417.375595][   T59] team0 (unregistering): Port device team_slave_0 removed
[ 1417.540464][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1417.660262][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1420.202248][   T59] bond0 (unregistering): Released all slaves
[ 1420.696172][T13611] chnl_net:caif_netlink_parms(): no params data found
[ 1420.885277][T13511] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1420.966637][T13511] 8021q: adding VLAN 0 to HW filter on device team0
[ 1420.985869][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1420.993075][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1421.092138][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1421.099366][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1421.269497][T13611] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1421.291033][T13611] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1421.298364][T13611] bridge_slave_0: entered allmulticast mode
[ 1421.322008][T13611] bridge_slave_0: entered promiscuous mode
[ 1421.341872][T13611] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1421.349442][T13611] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1421.388247][T13611] bridge_slave_1: entered allmulticast mode
[ 1421.400065][T13611] bridge_slave_1: entered promiscuous mode
[ 1421.494344][   T59] IPVS: stop unused estimator thread 0...
[ 1421.539303][T13611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1421.593251][T13611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1421.766599][T13611] team0: Port device team_slave_0 added
[ 1421.793316][T13611] team0: Port device team_slave_1 added
[ 1421.889365][T13611] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1421.927507][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1421.994814][T13611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1422.018877][T13611] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1422.026520][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1423.629398][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.636037][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.705486][T13611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1423.962347][T13611] hsr_slave_0: entered promiscuous mode
[ 1423.990082][T13611] hsr_slave_1: entered promiscuous mode
[ 1424.015860][T13611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1424.036543][T13611] Cannot create hsr debugfs directory
[ 1424.081936][T13511] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1425.055242][T13511] veth0_vlan: entered promiscuous mode
[ 1426.890802][T13511] veth1_vlan: entered promiscuous mode
[ 1428.452552][T13511] veth0_macvtap: entered promiscuous mode
[ 1428.496079][T13511] veth1_macvtap: entered promiscuous mode
[ 1428.593621][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1428.629779][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.650326][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1428.670043][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.719705][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1428.739714][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.772257][T13511] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1428.920194][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1428.949819][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.969640][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1428.989608][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.999496][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1429.047692][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1429.077151][T13511] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1429.112922][T13511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1429.149930][T13511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1429.158716][T13511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1429.189763][T13511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1429.247791][T13611] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1429.312981][T13611] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1429.335453][T13611] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1429.344201][T13734] binder: BINDER_SET_CONTEXT_MGR already set
[ 1429.370948][T13734] binder: 13733:13734 ioctl 4018620d 200000000c00 returned -16
[ 1429.425856][T13611] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1429.592430][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1429.612275][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1429.896153][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1429.905576][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1431.060892][T13737] overlayfs: overlapping lowerdir path
[ 1431.751830][T13744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'.
[ 1432.585891][T13611] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1432.684061][T13611] 8021q: adding VLAN 0 to HW filter on device team0
[ 1432.697479][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1432.704735][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1432.718465][T13750] block2mtd: erasesize must be a divisor of device size
[ 1432.740372][T13750] ------------[ cut here ]------------
[ 1432.746484][T13750] WARNING: CPU: 0 PID: 13750 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290
[ 1432.755842][T13750] Modules linked in:
[ 1432.760178][T13750] CPU: 0 PID: 13750 Comm: syz.2.1710 Not tainted syzkaller #0
[ 1432.767836][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1432.778127][T13750] RIP: 0010:blkdev_flush_mapping+0xac/0x290
[ 1432.784253][T13750] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 7f 92 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 eb 14 a1 fd eb 11 e8 34 b1 72 fd <0f> 0b 48 85 db 75 9f e8 28 b1 72 fd 48 89 1c 24 4c 8d b3 80 00 00
[ 1432.804047][T13750] RSP: 0018:ffffc900038a7970 EFLAGS: 00010287
[ 1432.810810][T13750] RAX: ffffffff8414df7c RBX: ffff8881488f8000 RCX: 0000000000080000
[ 1432.819637][T13750] RDX: ffffc900137bf000 RSI: 000000000000b9d6 RDI: 000000000000b9d7
[ 1432.827832][T13750] RBP: 0000000000000002 R08: ffff8881488f803b R09: 1ffff1102911f007
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1432.836318][T13750] R10: dffffc0000000000 R11: ffffed102911f008 R12: dffffc0000000000
[ 1432.844427][T13750] R13: dffffc0000000000 R14: ffff8881488f8134 R15: ffff8881488f8038
[ 1432.852936][T13750] FS:  00007fbde6efc6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 1432.862053][T13750] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1432.868748][T13750] CR2: 00007fff5c96de88 CR3: 000000002fc0d000 CR4: 00000000003506f0
[ 1432.877024][T13750] Call Trace:
[ 1432.880429][T13750]  <TASK>
[ 1432.883423][T13750]  ? blkdev_put+0x492/0x7a0
[ 1432.888003][T13750]  blkdev_put+0x49a/0x7a0
[ 1432.892494][T13750]  block2mtd_setup2+0x98f/0xe30
[ 1432.897462][T13750]  ? block2mtd_setup+0xd0/0xd0
[ 1432.902459][T13750]  ? rcu_is_watching+0x15/0xb0
[ 1432.907665][T13750]  ? mutex_lock_nested+0x20/0x20
[ 1432.912934][T13750]  ? __virt_addr_valid+0x10c/0x380
[ 1432.918755][T13750]  ? kernfs_fop_write_iter+0x1dc/0x520
[ 1432.924872][T13750]  block2mtd_setup+0x27/0xd0
[ 1432.929596][T13750]  param_attr_store+0x20e/0x300
[ 1432.934530][T13750]  ? param_attr_show+0x170/0x170
[ 1432.939539][T13750]  ? sysfs_kf_read+0x360/0x360
[ 1432.944670][T13750]  module_attr_store+0x5f/0x80
[ 1432.949508][T13750]  kernfs_fop_write_iter+0x3a4/0x520
[ 1432.954935][T13750]  vfs_write+0x474/0x9a0
[ 1432.959286][T13750]  ? file_end_write+0x250/0x250
[ 1432.964314][T13750]  ? __fget_files+0x3fc/0x460
[ 1432.969236][T13750]  ? __fdget_pos+0x2a3/0x330
[ 1432.973953][T13750]  ? ksys_write+0x74/0x260
[ 1432.978449][T13750]  ksys_write+0x151/0x260
[ 1432.982957][T13750]  ? __ia32_sys_read+0x90/0x90
[ 1432.987819][T13750]  ? lockdep_hardirqs_on+0x98/0x150
[ 1432.993174][T13750]  do_syscall_64+0x55/0xb0
[ 1432.997757][T13750]  ? clear_bhb_loop+0x40/0x90
[ 1433.002876][T13750]  ? clear_bhb_loop+0x40/0x90
[ 1433.007644][T13750]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1433.014036][T13750] RIP: 0033:0x7fbde5f9e1d9
[ 1433.018518][T13750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1433.039043][T13750] RSP: 002b:00007fbde6efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1433.048049][T13750] RAX: ffffffffffffffda RBX: 00007fbde6225fa0 RCX: 00007fbde5f9e1d9
[ 1433.056138][T13750] RDX: 000000000000000b RSI: 0000200000000540 RDI: 0000000000000003
[ 1433.064249][T13750] RBP: 00007fbde6035888 R08: 0000000000000000 R09: 0000000000000000
[ 1433.072355][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1433.080471][T13750] R13: 00007fbde6226038 R14: 00007fbde6225fa0 R15: 00007ffe70f68f88
[ 1433.088545][T13750]  </TASK>
[ 1433.091775][T13750] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1433.099114][T13750] CPU: 0 PID: 13750 Comm: syz.2.1710 Not tainted syzkaller #0
[ 1433.106629][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1433.116747][T13750] Call Trace:
[ 1433.120059][T13750]  <TASK>
[ 1433.123032][T13750]  dump_stack_lvl+0x18c/0x250
[ 1433.127759][T13750]  ? show_regs_print_info+0x20/0x20
[ 1433.132995][T13750]  ? load_image+0x420/0x420
[ 1433.137551][T13750]  panic+0x2ca/0x720
[ 1433.141486][T13750]  ? bpf_jit_dump+0xd0/0xd0
[ 1433.146035][T13750]  __warn+0x2e0/0x470
[ 1433.150055][T13750]  ? blkdev_flush_mapping+0xac/0x290
[ 1433.155393][T13750]  ? blkdev_flush_mapping+0xac/0x290
[ 1433.160712][T13750]  report_bug+0x2be/0x4f0
[ 1433.165160][T13750]  ? blkdev_flush_mapping+0xac/0x290
[ 1433.170478][T13750]  ? blkdev_flush_mapping+0xac/0x290
[ 1433.175794][T13750]  ? blkdev_flush_mapping+0xae/0x290
[ 1433.181148][T13750]  handle_bug+0xcf/0x120
[ 1433.185454][T13750]  exc_invalid_op+0x1a/0x50
[ 1433.189993][T13750]  asm_exc_invalid_op+0x1a/0x20
[ 1433.194914][T13750] RIP: 0010:blkdev_flush_mapping+0xac/0x290
[ 1433.200854][T13750] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 7f 92 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 eb 14 a1 fd eb 11 e8 34 b1 72 fd <0f> 0b 48 85 db 75 9f e8 28 b1 72 fd 48 89 1c 24 4c 8d b3 80 00 00
[ 1433.220589][T13750] RSP: 0018:ffffc900038a7970 EFLAGS: 00010287
[ 1433.226696][T13750] RAX: ffffffff8414df7c RBX: ffff8881488f8000 RCX: 0000000000080000
[ 1433.234734][T13750] RDX: ffffc900137bf000 RSI: 000000000000b9d6 RDI: 000000000000b9d7
[ 1433.242743][T13750] RBP: 0000000000000002 R08: ffff8881488f803b R09: 1ffff1102911f007
[ 1433.250750][T13750] R10: dffffc0000000000 R11: ffffed102911f008 R12: dffffc0000000000
[ 1433.258753][T13750] R13: dffffc0000000000 R14: ffff8881488f8134 R15: ffff8881488f8038
[ 1433.266804][T13750]  ? blkdev_flush_mapping+0xac/0x290
[ 1433.272145][T13750]  ? blkdev_put+0x492/0x7a0
[ 1433.276686][T13750]  blkdev_put+0x49a/0x7a0
[ 1433.281145][T13750]  block2mtd_setup2+0x98f/0xe30
[ 1433.286037][T13750]  ? block2mtd_setup+0xd0/0xd0
[ 1433.290836][T13750]  ? rcu_is_watching+0x15/0xb0
[ 1433.295692][T13750]  ? mutex_lock_nested+0x20/0x20
[ 1433.300702][T13750]  ? __virt_addr_valid+0x10c/0x380
[ 1433.305900][T13750]  ? kernfs_fop_write_iter+0x1dc/0x520
[ 1433.311444][T13750]  block2mtd_setup+0x27/0xd0
[ 1433.316088][T13750]  param_attr_store+0x20e/0x300
[ 1433.320989][T13750]  ? param_attr_show+0x170/0x170
[ 1433.325975][T13750]  ? sysfs_kf_read+0x360/0x360
[ 1433.330811][T13750]  module_attr_store+0x5f/0x80
[ 1433.335620][T13750]  kernfs_fop_write_iter+0x3a4/0x520
[ 1433.340960][T13750]  vfs_write+0x474/0x9a0
[ 1433.345269][T13750]  ? file_end_write+0x250/0x250
[ 1433.350181][T13750]  ? __fget_files+0x3fc/0x460
[ 1433.354911][T13750]  ? __fdget_pos+0x2a3/0x330
[ 1433.359550][T13750]  ? ksys_write+0x74/0x260
[ 1433.364059][T13750]  ksys_write+0x151/0x260
[ 1433.368537][T13750]  ? __ia32_sys_read+0x90/0x90
[ 1433.373383][T13750]  ? lockdep_hardirqs_on+0x98/0x150
[ 1433.378633][T13750]  do_syscall_64+0x55/0xb0
[ 1433.383095][T13750]  ? clear_bhb_loop+0x40/0x90
[ 1433.387833][T13750]  ? clear_bhb_loop+0x40/0x90
[ 1433.392575][T13750]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1433.398528][T13750] RIP: 0033:0x7fbde5f9e1d9
[ 1433.402981][T13750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1433.422627][T13750] RSP: 002b:00007fbde6efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1433.431081][T13750] RAX: ffffffffffffffda RBX: 00007fbde6225fa0 RCX: 00007fbde5f9e1d9
[ 1433.439103][T13750] RDX: 000000000000000b RSI: 0000200000000540 RDI: 0000000000000003
[ 1433.447102][T13750] RBP: 00007fbde6035888 R08: 0000000000000000 R09: 0000000000000000
[ 1433.455104][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1433.463104][T13750] R13: 00007fbde6226038 R14: 00007fbde6225fa0 R15: 00007ffe70f68f88
[ 1433.471123][T13750]  </TASK>
[ 1433.474767][T13750] Kernel Offset: disabled
[ 1433.479197][T13750] Rebooting in 86400 seconds..