last executing test programs:

17m9.178804639s ago: executing program 1 (id=1016):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001300)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f000001a300)=0x4000007)
r4 = userfaultfd(0x80801)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f000001a340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
close_range(r4, 0xffffffffffffffff, 0x0)

17m7.418529149s ago: executing program 1 (id=1019):
r0 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000640)=0x59)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000680)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000019700)=0x7)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000019840)={0x0, 0x0, 0x1000, 0xfff})
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000199c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r5], 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000019880)={0x1, 0x4, &(0x7f0000019940)=ANY=[@ANYBLOB="18000000700600000000000009000000731117000000000095"], &(0x7f0000019980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17m5.762535238s ago: executing program 1 (id=1023):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
syz_open_dev$evdev(0x0, 0x1, 0x80240)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000000340)=""/102392, 0x18ff8)
recvfrom$binder_report(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x200, 0x4f, 0x4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000019440)={r5})
r6 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000019340)={0x3, 0x5, 0xfffff0f8})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

17m4.382665168s ago: executing program 1 (id=1026):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e03003520"], 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0)
setsockopt(0xffffffffffffffff, 0x20084, 0x200081, &(0x7f0000000080)="5a000000020000", 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0xa, 0x3, 0x5)
socket(0x2, 0x80805, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143102)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='source', 0x0, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x82, 0x0)
ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0)
gettid()
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10)

16m48.392974577s ago: executing program 32 (id=1026):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e03003520"], 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0)
setsockopt(0xffffffffffffffff, 0x20084, 0x200081, &(0x7f0000000080)="5a000000020000", 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0xa, 0x3, 0x5)
socket(0x2, 0x80805, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143102)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='source', 0x0, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x82, 0x0)
ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0)
gettid()
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10)

12m52.888985558s ago: executing program 3 (id=1360):
r0 = syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464d2, &(0x7f0000000180)={0x0, 0x0, 0x4, 0xc06c, 0x8, 0x5, 0x1000, 0x9, 0x5})

12m51.285298871s ago: executing program 3 (id=1363):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f000001a300)=0x4000007)
r4 = userfaultfd(0x80801)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f000001a340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
close_range(r4, 0xffffffffffffffff, 0x0)

12m49.220320232s ago: executing program 3 (id=1364):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xf}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f00000006c0)=""/102400, 0x19000)
syz_open_procfs(0x0, &(0x7f0000019700)='ns\x00')
syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
write(0xffffffffffffffff, 0x0, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='synaptics-smbus', 0xf)

12m44.801714722s ago: executing program 3 (id=1368):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
syz_emit_ethernet(0x1d, 0x0, 0x0)
process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1, &(0x7f0000019c00)=[{&(0x7f00000003c0)=""/165, 0xa5}, {0x0}, {0x0}, {0x0}], 0x4, 0x0)

12m39.601050432s ago: executing program 3 (id=1379):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xf}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f00000006c0)=""/102400, 0x19000)
syz_open_procfs(0x0, &(0x7f0000019700)='ns\x00')
syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
write(0xffffffffffffffff, 0x0, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='synaptics-smbus', 0xf)

12m36.732374384s ago: executing program 3 (id=1382):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
r1 = syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x800)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setuid(0xee01)

12m21.090958787s ago: executing program 33 (id=1382):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
r1 = syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x800)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setuid(0xee01)

7m24.169496738s ago: executing program 5 (id=1814):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xf, &(0x7f00000198c0)=ANY=[@ANYRES32=r1], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x20980, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x7f, 0xe40, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000640)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000680)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000006c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0)
read$msr(r6, &(0x7f0000000740)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x47, &(0x7f0000019740)=0x7)
openat(0xffffffffffffff9c, &(0x7f0000019840)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0)
r7 = fsmount(r0, 0x0, 0x0)
fchdir(r7)
r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
write$binfmt_script(r8, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a)
close(r8)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

7m22.655080362s ago: executing program 5 (id=1816):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0xa, &(0x7f0000000640)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000780), &(0x7f00000007c0)=@tcp=r0}, 0x20)
sendto(r0, &(0x7f0000000800)="01", 0x1, 0x0, 0x0, 0x0)

7m21.043220176s ago: executing program 5 (id=1823):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001100010025bd70000000000007000000", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040)
read$msr(r1, &(0x7f00000025c0)=""/102368, 0x18fe0)
bpf$PROG_LOAD(0x5, &(0x7f000001b640)={0x7, 0x17, &(0x7f000001b700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27, 0x0, 0x0, 0x10000000}}, [@printk={@lli, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x25}}], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f000001b7c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000002400)='./bus\x00', &(0x7f0000002440), 0x8, &(0x7f0000002480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

7m17.789371038s ago: executing program 5 (id=1826):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000040000083b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050"], 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x0)

7m14.416974561s ago: executing program 5 (id=1831):
socket$pppl2tp(0x18, 0x1, 0x1)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000940)=0x1, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000009c0)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8)
sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000b00)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b80)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)

7m9.311347592s ago: executing program 5 (id=1839):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002580)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000025c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000002600)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000002680), 0x0, 0x0)
read$msr(r4, &(0x7f00000026c0)=""/102392, 0x18ff8)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0xc)

6m54.169449315s ago: executing program 34 (id=1839):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002580)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000025c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000002600)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000002680), 0x0, 0x0)
read$msr(r4, &(0x7f00000026c0)=""/102392, 0x18ff8)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0xc)

4m57.669457446s ago: executing program 4 (id=2013):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xf, &(0x7f00000198c0)=ANY=[@ANYRES32=r1], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x20980, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x7f, 0xe40, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000640)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000680)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000006c0)=0x6)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0)
read$msr(r6, &(0x7f0000000740)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x47, &(0x7f0000019740)=0x7)
mkdir(&(0x7f0000019780)='dir0\x00', 0x80)
r7 = fsmount(r0, 0x0, 0x0)
fchdir(r7)
r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r8, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a)
close(r8)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

4m55.541142903s ago: executing program 4 (id=2014):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000300)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x90ffffff, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2)
socket$unix(0x1, 0x2, 0x0)
r1 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000640)={0x0, 0x21})
setxattr$trusted_overlay_origin(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000700)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0xfffff000, 0x7, 0x0, &(0x7f0000000c40)="61df712bc884fe", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r5, &(0x7f0000000c80)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0)

4m46.93600856s ago: executing program 4 (id=2026):
shutdown(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40000088}, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019ac0)=0x80000000000003)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000019b00)={0xa, 0x4001, 0x0, @empty}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

4m45.479064859s ago: executing program 4 (id=2028):
epoll_create1(0x0)
flistxattr(0xffffffffffffffff, 0x0, 0xfffffc86)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80", @ANYRES32=r0, @ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

4m40.224549684s ago: executing program 4 (id=2033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000004c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r4, &(0x7f0000000580)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000019580)=0x7)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000195c0)={&(0x7f0000019600)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000019640)={0x0, 0xdea2, 0x3400, 0x1, 0x15b}, &(0x7f00000196c0)=<r7=>0x0, &(0x7f0000019700)=<r8=>0x0, &(0x7f0000019740)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000019780)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019800)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019840))
r10 = landlock_create_ruleset(&(0x7f0000019880)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r10, 0x18)
socket$unix(0x1, 0x1, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = landlock_create_ruleset(&(0x7f00000198c0)={0x123}, 0x10, 0x0)
landlock_restrict_self(r12, 0x0)
bind$unix(r11, &(0x7f0000019900)=@file={0x1}, 0x6e)

4m38.115684819s ago: executing program 4 (id=2036):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001b40)=""/102368, 0x18fe0)
getpid()
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f000001abc0))
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4003, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000200)={'syz1\x00', {0xc, 0x4, 0x7fff, 0x1}, 0x37, [0x0, 0x2, 0x400, 0xd, 0x8, 0x6, 0x3, 0x1, 0x401, 0x4, 0x3, 0xc, 0x2, 0x101, 0x14000000, 0x1, 0xe2e, 0x7ff, 0x4bd, 0x7, 0x6, 0x6, 0x0, 0x3, 0x6, 0x6, 0x0, 0x800, 0x7f, 0x691, 0x64f0, 0x0, 0xfff, 0x2, 0x4, 0x4, 0xa469, 0x5, 0x3, 0x40, 0x2, 0x0, 0x2, 0x40, 0x5, 0x5, 0xffffffc0, 0x7, 0x448, 0x3, 0xfffffffc, 0x1, 0xfffffffd, 0x2, 0x4, 0xff, 0x0, 0x3d, 0x4, 0x200, 0xca, 0x5b4c795d, 0x10000], [0x3, 0x5, 0x3, 0x5, 0x6, 0xf1a7, 0x7, 0xfffffa3e, 0xafc, 0x100, 0xffff, 0xfffffffc, 0x387ea28a, 0x6, 0xffff, 0x0, 0x7, 0x4, 0x3, 0xfffffffb, 0x7ff, 0x0, 0x1000, 0xb, 0x7ff, 0xfffffffa, 0xe6cf, 0x2, 0x5, 0x800, 0x9e65, 0x5, 0x3, 0x2, 0x8001, 0x0, 0x10000, 0x7, 0x401, 0x91, 0xba4, 0x1, 0x3, 0x8858, 0x9, 0x8, 0x3, 0xfffffffb, 0x1dff, 0x7, 0x40, 0x8000, 0xd6, 0x7ff, 0x2, 0x8, 0x4, 0x1, 0x7, 0x30000, 0x7, 0xffffffff, 0x800, 0x7], [0x7, 0x1e3, 0x1, 0x5, 0x3ff, 0x9, 0x3ff, 0x100, 0x3, 0x5, 0x4, 0x0, 0xfffffffa, 0xb, 0x1, 0xffffffff, 0x5, 0x0, 0x0, 0x2, 0x0, 0x4, 0xf, 0x5013, 0xfff, 0x8, 0x1, 0xfff, 0x3, 0x7, 0x8000, 0x86, 0x8001, 0xe51, 0xfa46, 0x10000, 0x9, 0x9, 0x6, 0x200, 0x4, 0x4, 0x1, 0x7, 0x50, 0x8fc, 0x8, 0xb, 0x3, 0x5, 0xfffffffa, 0xd, 0x0, 0x9, 0x10000, 0x8, 0x7, 0x1, 0x8, 0x8, 0x22, 0x2, 0x3ff, 0x4], [0x2, 0x8, 0x3, 0xffff0000, 0x9, 0x8, 0xa9a, 0x0, 0x5, 0x5, 0x3, 0xf0, 0xf7f, 0x1000, 0xfff, 0x4, 0x8c7, 0x4, 0x7, 0x4, 0x10000, 0x8, 0x80000000, 0x0, 0x7a41, 0x2, 0xffff, 0x6, 0xdd, 0xfffffffa, 0x80000001, 0x7, 0x1, 0xa, 0xba, 0x3, 0x7, 0x25d3bfb5, 0x7fff, 0x5, 0x9, 0x101, 0xc, 0xb61, 0xd, 0x8, 0xffff, 0x9, 0x0, 0x9, 0x2bc, 0x3, 0x0, 0xfffffff3, 0x3, 0xfffffff1, 0xffff8000, 0x1, 0x8, 0x9, 0xffffffff, 0x9, 0x415, 0x8001]}, 0x45c)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000780)={0x3002000, 0x40001000})
r5 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f000001ac00)={'bridge0\x00'})
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f000001ac40)={{0xa, 0x0, 0x0, @mcast1, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00')
read$FUSE(r7, &(0x7f000001ad00)={0x2020}, 0x2020)

4m21.135051189s ago: executing program 35 (id=2036):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001b40)=""/102368, 0x18fe0)
getpid()
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f000001abc0))
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4003, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000200)={'syz1\x00', {0xc, 0x4, 0x7fff, 0x1}, 0x37, [0x0, 0x2, 0x400, 0xd, 0x8, 0x6, 0x3, 0x1, 0x401, 0x4, 0x3, 0xc, 0x2, 0x101, 0x14000000, 0x1, 0xe2e, 0x7ff, 0x4bd, 0x7, 0x6, 0x6, 0x0, 0x3, 0x6, 0x6, 0x0, 0x800, 0x7f, 0x691, 0x64f0, 0x0, 0xfff, 0x2, 0x4, 0x4, 0xa469, 0x5, 0x3, 0x40, 0x2, 0x0, 0x2, 0x40, 0x5, 0x5, 0xffffffc0, 0x7, 0x448, 0x3, 0xfffffffc, 0x1, 0xfffffffd, 0x2, 0x4, 0xff, 0x0, 0x3d, 0x4, 0x200, 0xca, 0x5b4c795d, 0x10000], [0x3, 0x5, 0x3, 0x5, 0x6, 0xf1a7, 0x7, 0xfffffa3e, 0xafc, 0x100, 0xffff, 0xfffffffc, 0x387ea28a, 0x6, 0xffff, 0x0, 0x7, 0x4, 0x3, 0xfffffffb, 0x7ff, 0x0, 0x1000, 0xb, 0x7ff, 0xfffffffa, 0xe6cf, 0x2, 0x5, 0x800, 0x9e65, 0x5, 0x3, 0x2, 0x8001, 0x0, 0x10000, 0x7, 0x401, 0x91, 0xba4, 0x1, 0x3, 0x8858, 0x9, 0x8, 0x3, 0xfffffffb, 0x1dff, 0x7, 0x40, 0x8000, 0xd6, 0x7ff, 0x2, 0x8, 0x4, 0x1, 0x7, 0x30000, 0x7, 0xffffffff, 0x800, 0x7], [0x7, 0x1e3, 0x1, 0x5, 0x3ff, 0x9, 0x3ff, 0x100, 0x3, 0x5, 0x4, 0x0, 0xfffffffa, 0xb, 0x1, 0xffffffff, 0x5, 0x0, 0x0, 0x2, 0x0, 0x4, 0xf, 0x5013, 0xfff, 0x8, 0x1, 0xfff, 0x3, 0x7, 0x8000, 0x86, 0x8001, 0xe51, 0xfa46, 0x10000, 0x9, 0x9, 0x6, 0x200, 0x4, 0x4, 0x1, 0x7, 0x50, 0x8fc, 0x8, 0xb, 0x3, 0x5, 0xfffffffa, 0xd, 0x0, 0x9, 0x10000, 0x8, 0x7, 0x1, 0x8, 0x8, 0x22, 0x2, 0x3ff, 0x4], [0x2, 0x8, 0x3, 0xffff0000, 0x9, 0x8, 0xa9a, 0x0, 0x5, 0x5, 0x3, 0xf0, 0xf7f, 0x1000, 0xfff, 0x4, 0x8c7, 0x4, 0x7, 0x4, 0x10000, 0x8, 0x80000000, 0x0, 0x7a41, 0x2, 0xffff, 0x6, 0xdd, 0xfffffffa, 0x80000001, 0x7, 0x1, 0xa, 0xba, 0x3, 0x7, 0x25d3bfb5, 0x7fff, 0x5, 0x9, 0x101, 0xc, 0xb61, 0xd, 0x8, 0xffff, 0x9, 0x0, 0x9, 0x2bc, 0x3, 0x0, 0xfffffff3, 0x3, 0xfffffff1, 0xffff8000, 0x1, 0x8, 0x9, 0xffffffff, 0x9, 0x415, 0x8001]}, 0x45c)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000780)={0x3002000, 0x40001000})
r5 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f000001ac00)={'bridge0\x00'})
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f000001ac40)={{0xa, 0x0, 0x0, @mcast1, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00')
read$FUSE(r7, &(0x7f000001ad00)={0x2020}, 0x2020)

3m53.598359925s ago: executing program 0 (id=2089):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
io_uring_setup(0x2e71, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0x80000)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000002c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000380)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000003c0)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000400)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})

3m51.191019171s ago: executing program 0 (id=2092):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x40000180)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4901)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

3m50.126363209s ago: executing program 0 (id=2093):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
io_uring_setup(0x2e71, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000002c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000380)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000003c0)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000400)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r0, 0xffffffffffffffff, 0x0)

3m49.838007639s ago: executing program 0 (id=2094):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xf}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f00000006c0)=""/102400, 0x19000)
syz_open_procfs(0x0, 0x0)
syz_open_dev$mouse(0x0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
write(0xffffffffffffffff, 0x0, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
write(r4, &(0x7f0000000680)='synaptics-smbus', 0xf)

3m46.454468683s ago: executing program 0 (id=2098):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f00000194c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000019500)=<r2=>0x0)
setrlimit(0xd, &(0x7f0000019540)={0x6, 0x1})
timer_settime(r2, 0x1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='enable_event:sched:sched_process_fork', 0x25)

3m45.248121576s ago: executing program 0 (id=2099):
r0 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
sendfile(r1, r1, 0x0, 0x7)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
fcntl$setlease(r3, 0x400, 0x1)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/snmp\x00')
read$FUSE(r5, &(0x7f0000000540)={0x2020}, 0x2020)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x7, 0x3, 'lblcr\x00', 0x4, 0x3ff, 0x2e}, 0x2c)

3m29.243203357s ago: executing program 36 (id=2099):
r0 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
sendfile(r1, r1, 0x0, 0x7)
write(0xffffffffffffffff, &(0x7f0000000180), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
fcntl$setlease(r3, 0x400, 0x1)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/snmp\x00')
read$FUSE(r5, &(0x7f0000000540)={0x2020}, 0x2020)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x7, 0x3, 'lblcr\x00', 0x4, 0x3ff, 0x2e}, 0x2c)

3m25.339938885s ago: executing program 2 (id=2126):
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48)
fchdir(0xffffffffffffffff)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x3ff, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)

3m20.538043664s ago: executing program 2 (id=2132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f00000012c0)=@filename='mtd0\x00', &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='jffs2\x00', 0x800000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000440))
setresuid(0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
chdir(&(0x7f0000001380)='./file0\x00')
mkdir(&(0x7f0000000000)='./bus\x00', 0x49)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

3m19.931929906s ago: executing program 2 (id=2134):
socket$pppl2tp(0x18, 0x1, 0x1)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000940)=0x1, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000009c0)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8)
sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000b00)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b80)="fb", 0x1}], 0x1}}], 0x1, 0x20080058)

3m16.509420864s ago: executing program 2 (id=2139):
r0 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000640)=0x59)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000680)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000019700)=0x7)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000019840)={0x0, 0x0, 0x1000, 0xfff})
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x91)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000199c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r5], 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000019880)={0x1, 0x4, &(0x7f0000019940)=ANY=[@ANYBLOB="18000000700600000000000009000000731117000000000095"], &(0x7f0000019980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m15.432031585s ago: executing program 2 (id=2140):
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
semget(0x2, 0x3, 0x39c)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, &(0x7f00000195c0)={0x2020}, 0x2020)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x10003, 0x2, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x8000})
pipe(&(0x7f0000000140))
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, r8, 0x1, 0x70bd28, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

3m9.457523543s ago: executing program 2 (id=2149):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r0 = getpgrp(0x0)
unshare(0x20000400)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r1, &(0x7f00000003c0)="14000000140005b7ffccca38b9000000060860eb", 0x14)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f000001ae40)=@vmx={0x0, 0x0, 0x2080, {0x40000, 0xbcdfeec81c24d25f, {0x2}, 0x0, 0x7fff}, {"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", "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"}})
read$msr(0xffffffffffffffff, &(0x7f0000001d00)=""/102392, 0x18ff8)
open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x81101)

2m53.422928177s ago: executing program 37 (id=2149):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r0 = getpgrp(0x0)
unshare(0x20000400)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r1, &(0x7f00000003c0)="14000000140005b7ffccca38b9000000060860eb", 0x14)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f000001ae40)=@vmx={0x0, 0x0, 0x2080, {0x40000, 0xbcdfeec81c24d25f, {0x2}, 0x0, 0x7fff}, {"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", "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"}})
read$msr(0xffffffffffffffff, &(0x7f0000001d00)=""/102392, 0x18ff8)
open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x81101)

54.522870324s ago: executing program 1 (id=2162):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x40000088}, 0x0)
r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f00000006c0)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f00000196c0)=0x80000000000003)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)

53.150365823s ago: executing program 1 (id=2272):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000300)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x90ffffff, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2)
socket$unix(0x1, 0x2, 0x0)
r1 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000640)={0x0, 0x21})
setxattr$trusted_overlay_origin(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000700)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f0000000740)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0xfffff000, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r5, &(0x7f0000000c80)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0)

37.48105667s ago: executing program 38 (id=2272):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000300)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x90ffffff, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2)
socket$unix(0x1, 0x2, 0x0)
r1 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000640)={0x0, 0x21})
setxattr$trusted_overlay_origin(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000700)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f0000000740)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0xfffff000, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r5, &(0x7f0000000c80)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0)

12.673439148s ago: executing program 7 (id=2307):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000002c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000300)={@hyper, 0x2})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000380)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000003c0)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000400)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r0, 0xffffffffffffffff, 0x0)

11.096482949s ago: executing program 7 (id=2310):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
getpid()
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write(r2, &(0x7f00000000c0)='1\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae", 0xc4)

10.343204466s ago: executing program 7 (id=2311):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000540)=""/102392, 0x18ff8)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6)
fcntl$notify(r3, 0x402, 0x8000001c)

9.091061733s ago: executing program 7 (id=2313):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r1, &(0x7f0000004780)=""/102368, 0x18fe0)
syz_open_dev$dvb_demux(&(0x7f000001d780), 0x0, 0x2000)

8.906450792s ago: executing program 8 (id=2314):
ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0)
mount(&(0x7f0000000280)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000580), 0x1, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1)

8.53141512s ago: executing program 8 (id=2316):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
getpid()
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write(r2, &(0x7f00000000c0)='1\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae", 0xc4)

7.244400271s ago: executing program 6 (id=2317):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r1 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0)
ftruncate(r1, 0x51a9497)
mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f0000000640), 0x2000, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.894083171s ago: executing program 7 (id=2318):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000002c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000300)={@hyper, 0x2})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000380)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000003c0)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000400)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.400896491s ago: executing program 7 (id=2319):
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
semget(0x2, 0x3, 0x39c)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, &(0x7f00000195c0)={0x2020}, 0x2020)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x10003, 0x2, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x8000})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, r8, 0x1, 0x70bd28, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

2.902690524s ago: executing program 8 (id=2320):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, 0x0, 0x0)

2.663063598s ago: executing program 8 (id=2321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x888}, 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x75, 0x101140)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000240)={0xe00, 0x34324142, 0x640, 0x2d0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0xa05}}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000380))
membarrier(0x2, 0x0)

2.409040964s ago: executing program 8 (id=2322):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
accept$alg(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000540)=""/102392, 0x18ff8)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6)
fcntl$notify(r3, 0x402, 0x8000001c)

2.338364831s ago: executing program 6 (id=2323):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0x40047438, &(0x7f0000000040))
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0)

1.410156776s ago: executing program 6 (id=2324):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='tcp 2', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/portlist\x00', 0x1, 0x62)
write(r1, 0x0, 0x0)

1.180924539s ago: executing program 6 (id=2325):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r3 = io_uring_setup(0x2f75, &(0x7f0000000380)={0x0, 0xb2d1, 0x20, 0x1, 0xac})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000400)=[{&(0x7f0000001340)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/19, 0x13}, {0x0}], &(0x7f0000003400)=[0xba], 0x11a}, 0x20)

225.981307ms ago: executing program 6 (id=2326):
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000940), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x141102)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000a80)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000b00)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x200)
dup3(r1, r0, 0x0)

103.907749ms ago: executing program 8 (id=2327):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r1, &(0x7f0000004780)=""/102368, 0x18fe0)
syz_open_dev$dvb_demux(&(0x7f000001d780), 0x0, 0x2000)

0s ago: executing program 6 (id=2328):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x40000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='tcp 2', 0x5)

kernel console output (not intermixed with test programs):

ing 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1065.449853][ T4400] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[ 1065.489652][ T4400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.891386][ T4400] dvbdev: DVB: registering new adapter (DEC2000-t)
[ 1066.990669][ T4400] usb 5-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)...
[ 1067.093777][ T4400] ttusb_dec_send_command: command bulk message failed: error -71
[ 1067.130368][ T4400] usb 5-1: USB disconnect, device number 8
[ 1067.710854][ T4400] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[ 1068.631734][ T4400] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1068.665289][ T4400] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[ 1068.802228][ T4400] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1068.835881][ T4400] usb 3-1: Product: syz
[ 1068.851748][ T4400] usb 3-1: Manufacturer: syz
[ 1069.201982][ T4400] usb 3-1: SerialNumber: syz
[ 1069.415405][ T4400] usb 3-1: config 0 descriptor??
[ 1069.448282][ T4400] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected
[ 1069.479268][ T4400] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[ 1069.506330][ T4400] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88
[ 1069.543885][ T4400] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[ 1069.559706][ T4400] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 1069.570135][ T4400] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[ 1069.578760][ T4400] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 1069.594881][ T4400] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[ 1069.615152][ T4400] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 1069.635439][ T4400] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[ 1072.132397][ T4400] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 1072.620027][   T22] usb 3-1: USB disconnect, device number 10
[ 1072.685673][T11917] netlink: 'syz.6.1824': attribute type 1 has an invalid length.
[ 1072.715320][   T22] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 1072.850526][   T22] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 1072.909969][   T22] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 1072.974279][   T22] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 1073.002282][   T22] keyspan 3-1:0.0: device disconnected
[ 1076.090170][ T4400] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1077.371128][ T4400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1077.389925][ T4400] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1077.413869][ T4400] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1077.449862][ T4400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1077.462076][ T4400] usb 3-1: SerialNumber: syz
[ 1077.706099][ T4400] usb 3-1: 0:2 : does not exist
[ 1077.772247][ T4400] usb 3-1: USB disconnect, device number 11
[ 1077.835025][T11837] udevd[11837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1078.329877][T10449] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1078.547763][T10449] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1078.589248][T10449] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1078.630068][T10449] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[ 1078.660818][T10449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1078.887508][T11957] sctp: [Deprecated]: syz.0.1837 (pid 11957) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1078.887508][T11957] Use struct sctp_sack_info instead
[ 1080.027067][T10449] ttusb_dec_send_command: result bulk message failed: error -71
[ 1080.149056][T10449] ttusb-dec: probe of 5-1:1.0 failed with error -71
[ 1080.191896][T10449] usb 5-1: USB disconnect, device number 9
[ 1080.797846][T11964] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[ 1085.920075][ T4400] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1087.311115][T11992] jffs2: notice: (11992) jffs2_build_xattr_subsystem: complete building xattr subsystem, 28 of xdatum (0 unchecked, 28 orphan) and 28 of xref (14 dead, 14 orphan) found.
[ 1087.473565][ T4400] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1087.481031][T11992] overlayfs: upper fs does not support tmpfile.
[ 1087.507659][ T4400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.514123][T11992] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1087.534678][T11997] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1087.580831][T11997] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1087.599467][ T4400] usb 3-1: Product: syz
[ 1087.627441][T11997] overlayfs: upper fs does not support tmpfile.
[ 1087.634053][ T4400] usb 3-1: Manufacturer: syz
[ 1087.638763][ T4400] usb 3-1: SerialNumber: syz
[ 1087.644499][T11997] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1087.679535][T11997] overlayfs: conflicting lowerdir path
[ 1088.068782][ T4400] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1088.420514][T12002] sctp: [Deprecated]: syz.0.1849 (pid 12002) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1088.420514][T12002] Use struct sctp_sack_info instead
[ 1089.567217][ T4400] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71
[ 1089.600151][ T4400] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1089.638258][ T4400] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1089.718160][ T4400] lan78xx: probe of 3-1:1.0 failed with error -71
[ 1091.530989][ T4400] usb 3-1: USB disconnect, device number 12
[ 1091.722159][T12009] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1094.384559][T12028] sctp: [Deprecated]: syz.0.1850 (pid 12028) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1094.384559][T12028] Use struct sctp_sack_info instead
[ 1096.380246][ T8238] tipc: Resetting bearer <eth:syz_tun>
[ 1096.471234][ T8238] tipc: Disabling bearer <eth:syz_tun>
[ 1096.511590][ T8245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1096.524936][ T8245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1096.550064][ T8245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1096.566136][ T8245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1096.575471][ T8245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1096.583379][ T8245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1096.885157][ T4527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.037506][T12035] rxe_eth0 speed is unknown, defaulting to 1000
[ 1097.452257][T12043] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12040] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12043]
[ 1097.738019][ T4527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.879630][ T4527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.971723][ T4527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1098.394312][T12035] chnl_net:caif_netlink_parms(): no params data found
[ 1098.479078][ T4527] tipc: Left network mode
[ 1098.679735][T12055] sctp: [Deprecated]: syz.4.1861 (pid 12055) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1098.679735][T12055] Use struct sctp_sack_info instead
[ 1099.294563][ T8245] Bluetooth: hci1: command 0x0409 tx timeout
[ 1099.896763][T12035] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1099.930048][T12035] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1099.972373][T12035] device bridge_slave_0 entered promiscuous mode
[ 1100.140541][T12035] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1100.183706][T12035] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1100.233535][T12035] device bridge_slave_1 entered promiscuous mode
[ 1100.405663][T12035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1100.652513][T12035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1100.829261][T12035] team0: Port device team_slave_0 added
[ 1100.937888][T12035] team0: Port device team_slave_1 added
[ 1101.037709][T12035] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1101.068285][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1101.178216][T12035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1101.263683][T12035] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1101.275608][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1101.360011][ T8245] Bluetooth: hci1: command 0x041b tx timeout
[ 1101.502718][T12035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1101.854336][T12035] device hsr_slave_0 entered promiscuous mode
[ 1101.897678][T12035] device hsr_slave_1 entered promiscuous mode
[ 1101.921203][T12035] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1101.928820][T12035] Cannot create hsr debugfs directory
[ 1103.464757][ T4285] Bluetooth: hci1: command 0x040f tx timeout
[ 1105.520003][ T4285] Bluetooth: hci1: command 0x0419 tx timeout
[ 1105.728267][ T4527] device hsr_slave_0 left promiscuous mode
[ 1105.738691][ T4527] device hsr_slave_1 left promiscuous mode
[ 1105.760654][ T4527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1105.788070][ T4527] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1105.815534][ T4527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1105.843947][ T4527] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1105.880721][ T4527] device bridge_slave_1 left promiscuous mode
[ 1105.900231][ T4527] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.928791][ T4527] device bridge_slave_0 left promiscuous mode
[ 1105.950435][ T4527] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.101583][ T4527] device veth1_macvtap left promiscuous mode
[ 1107.107651][ T4527] device veth0_macvtap left promiscuous mode
[ 1107.135416][ T4527] device veth1_vlan left promiscuous mode
[ 1107.185581][ T4527] device veth0_vlan left promiscuous mode
[ 1115.068913][ T4527] team0 (unregistering): Port device team_slave_1 removed
[ 1115.176189][ T4527] team0 (unregistering): Port device team_slave_0 removed
[ 1115.319519][ T4527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1115.608080][ T4527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1115.842486][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.848815][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.016585][ T4527] bond0 (unregistering): Released all slaves
[ 1117.223413][T12172] tipc: Started in network mode
[ 1117.228448][T12172] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[ 1117.340964][T12172] tipc: Enabled bearer <eth:syz_tun>, priority 0
[ 1117.595541][T12035] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1117.777413][T12035] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1117.900315][T12035] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1117.978259][T12035] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1118.403669][T12206] sctp: [Deprecated]: syz.6.1888 (pid 12206) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1118.403669][T12206] Use struct sctp_sack_info instead
[ 1119.505334][ T4394] tipc: Node number set to 43690
[ 1119.580247][T12035] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1119.667618][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1119.710596][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1119.744705][T12035] 8021q: adding VLAN 0 to HW filter on device team0
[ 1119.870487][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1119.890150][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1119.930569][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1119.937737][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1120.010301][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1120.060652][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1120.130339][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1120.160039][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1120.167182][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1120.218356][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1120.250763][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1120.380507][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1120.427383][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1121.223839][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1121.474697][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1122.084292][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1122.144420][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1122.184800][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1122.247246][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1122.276645][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1126.540153][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1126.547862][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1126.596442][T12035] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1127.730141][T12257] netlink: 'syz.6.1898': attribute type 1 has an invalid length.
[ 1130.321853][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1130.331487][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1130.496153][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1130.527889][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1130.567121][T12035] device veth0_vlan entered promiscuous mode
[ 1130.583114][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1130.609349][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1130.673815][T12035] device veth1_vlan entered promiscuous mode
[ 1130.799624][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[ 1130.846124][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready
[ 1130.890849][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1130.907314][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1130.953773][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1131.651018][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1131.713950][T12035] device veth0_macvtap entered promiscuous mode
[ 1131.776925][T12035] device veth1_macvtap entered promiscuous mode
[ 1132.791988][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1132.854444][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1132.899831][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1132.973843][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.027805][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.089507][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.125132][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1133.160113][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.184224][T12035] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1133.221893][T12303] netlink: 'syz.4.1896': attribute type 4 has an invalid length.
[ 1133.376445][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1133.400375][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1133.472558][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1133.498322][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.526010][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1133.580970][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.621118][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1133.669871][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.732816][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1133.829876][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1133.884180][T12035] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1133.920386][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1133.929011][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1134.003811][T12035] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1134.032709][T12035] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1134.076485][T12035] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1134.120121][T12035] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1134.529939][ T4655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1134.540058][ T4655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1134.581191][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1134.721223][ T4655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1134.729108][ T4655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1135.678794][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1139.169284][T12362] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1144.659972][   T22] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1144.861373][   T22] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1144.907364][   T22] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1144.959253][   T22] usb 8-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[ 1146.219882][   T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.768327][   T22] ttusb_dec_send_command: command bulk message failed: error -71
[ 1146.780323][   T22] ttusb-dec: probe of 8-1:1.0 failed with error -71
[ 1146.798403][   T22] usb 8-1: USB disconnect, device number 2
[ 1147.740058][T12432] No source specified
[ 1147.797590][T12432] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1149.106530][T12432] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1149.244710][T12432] overlayfs: conflicting lowerdir path
[ 1149.616269][T12449] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1149.696028][T12449] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1151.628458][T12461] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input21
[ 1154.749880][T11803] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[ 1154.951581][T11803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1154.983625][T11803] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[ 1155.047016][T11803] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[ 1155.098780][T11803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.157231][T11803] usb 5-1: Product: syz
[ 1155.176824][T11803] usb 5-1: Manufacturer: syz
[ 1155.187729][T11803] usb 5-1: SerialNumber: syz
[ 1155.187851][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1943'.
[ 1155.449507][T12484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1155.492441][T12484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1156.819694][    C0] usb 5-1: received EP1 urb->status = -71
[ 1156.838304][T11803] input:  as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22
[ 1157.760742][T11803] usb 5-1: USB disconnect, device number 10
[ 1158.365980][T11746] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1158.420107][T12524] udevd[12524]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1160.740352][T11746] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1160.807935][T11746] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1161.014362][T12540] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1162.559422][T11746] usb 1-1: string descriptor 0 read error: -71
[ 1162.596684][T11746] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.40
[ 1162.824691][T11746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.052286][T11746] usb 1-1: can't set config #1, error -71
[ 1163.202856][T11746] usb 1-1: USB disconnect, device number 17
[ 1165.343125][T12555] netlink: 'syz.7.1949': attribute type 1 has an invalid length.
[ 1168.501122][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'.
[ 1168.528419][T12578] device veth1_macvtap left promiscuous mode
[ 1173.760940][T12610] sctp: [Deprecated]: syz.2.1968 (pid 12610) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1173.760940][T12610] Use struct sctp_sack_info instead
[ 1175.536727][T12628] netlink: 'syz.0.1967': attribute type 1 has an invalid length.
[ 1177.292420][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.298958][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1184.536976][T12695] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1185.394379][T12706] sctp: [Deprecated]: syz.2.1980 (pid 12706) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1185.394379][T12706] Use struct sctp_sack_info instead
[ 1186.580059][T12713] netlink: 'syz.4.1983': attribute type 1 has an invalid length.
[ 1187.956066][T12717] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input23
[ 1194.921029][T12780] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12781] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12780]
[ 1196.136244][T12779] sctp: [Deprecated]: syz.4.1994 (pid 12779) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1196.136244][T12779] Use struct sctp_sack_info instead
[ 1211.536874][T12864] gadgetfs: bound to dummy_udc driver
[ 1218.309898][T12614] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1218.350522][T12917] device-mapper: table: 248:4: multipath: not enough priority group arguments (-EINVAL)
[ 1218.421947][T12917] device-mapper: ioctl: error adding target to table
[ 1218.573246][T12614] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1218.613958][T12614] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1218.672760][T12614] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[ 1218.719025][T12614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1220.200011][T12614] ttusb_dec_send_command: command bulk message failed: error -110
[ 1220.292212][T12614] ttusb-dec: probe of 3-1:1.0 failed with error -110
[ 1220.319915][ T8245] Bluetooth: hci1: command 0x0406 tx timeout
[ 1222.739212][    T7] usb 3-1: USB disconnect, device number 13
[ 1224.924322][T12951] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input24
[ 1227.490742][T12968] sctp: [Deprecated]: syz.6.2024 (pid 12968) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1227.490742][T12968] Use struct sctp_sack_info instead
[ 1229.262176][    T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1229.459843][    T7] usb 1-1: Using ep0 maxpacket: 16
[ 1229.469234][    T7] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1229.701761][    T7] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1229.739960][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1229.779810][    T7] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1229.800166][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1231.111037][    T7] usb 1-1: config 0 descriptor??
[ 1231.318903][    T7] usbhid 1-1:0.0: can't add hid device: -71
[ 1231.326744][    T7] usbhid: probe of 1-1:0.0 failed with error -71
[ 1231.390806][    T7] usb 1-1: USB disconnect, device number 18
[ 1237.900212][T13033] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1238.723579][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.731319][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.757781][T13057] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input25
[ 1247.132988][T13101] sctp: [Deprecated]: syz.0.2045 (pid 13101) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1247.132988][T13101] Use struct sctp_sack_info instead
[ 1250.294945][T13123] jffs2: notice: (13123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 26 of xdatum (0 unchecked, 26 orphan) and 29 of xref (16 dead, 13 orphan) found.
[ 1252.877213][T13050] tipc: Resetting bearer <eth:syz_tun>
[ 1253.029351][T13050] tipc: Disabling bearer <eth:syz_tun>
[ 1253.744525][T13147] sctp: [Deprecated]: syz.0.2060 (pid 13147) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1253.744525][T13147] Use struct sctp_sack_info instead
[ 1254.214759][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1254.224865][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1254.233268][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1254.281462][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1254.289256][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1254.298551][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1254.501506][ T4529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1254.824598][T13143] rxe_eth0 speed is unknown, defaulting to 1000
[ 1255.792341][ T4529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.604568][T13164] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input26
[ 1257.369388][ T4285] Bluetooth: hci2: command 0x0409 tx timeout
[ 1257.380086][ T4529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.541963][ T4529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.665038][T13175] FAULT_INJECTION: forcing a failure.
[ 1258.665038][T13175] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1258.709879][T13175] CPU: 0 PID: 13175 Comm: syz.0.2066 Not tainted syzkaller #0
[ 1258.717480][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1258.727624][T13175] Call Trace:
[ 1258.730924][T13175]  <TASK>
[ 1258.733859][T13175]  dump_stack_lvl+0x188/0x24e
[ 1258.738576][T13175]  ? show_regs_print_info+0x12/0x12
[ 1258.743788][T13175]  ? load_image+0x410/0x410
[ 1258.748469][T13175]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1258.753530][T13175]  should_fail_ex+0x390/0x4c0
[ 1258.758663][T13175]  prepare_alloc_pages+0x1e1/0x5b0
[ 1258.763816][T13175]  __alloc_pages+0x130/0x4f0
[ 1258.768788][T13175]  ? zone_statistics+0x170/0x170
[ 1258.773748][T13175]  ? rcu_is_watching+0x11/0xa0
[ 1258.778538][T13175]  ? __alloc_pages+0x290/0x4f0
[ 1258.783329][T13175]  __alloc_pages_bulk+0x491/0x910
[ 1258.788385][T13175]  ? alloc_pages+0x4dd/0x740
[ 1258.793000][T13175]  kasan_populate_vmalloc+0xc9/0x280
[ 1258.798295][T13175]  ? do_raw_spin_unlock+0x11d/0x230
[ 1258.803509][T13175]  alloc_vmap_area+0x19db/0x1b10
[ 1258.808471][T13175]  ? vm_map_ram+0xab0/0xab0
[ 1258.812991][T13175]  ? rcu_is_watching+0x11/0xa0
[ 1258.817787][T13175]  __get_vm_area_node+0x158/0x330
[ 1258.822822][T13175]  ? __kasan_kmalloc+0x8e/0xa0
[ 1258.827602][T13175]  ? __vb2_queue_alloc+0x78f/0x1410
[ 1258.832815][T13175]  __vmalloc_node_range+0x357/0x1380
[ 1258.838111][T13175]  ? vb2_vmalloc_alloc+0xec/0x330
[ 1258.843174][T13175]  ? free_vm_area+0x50/0x50
[ 1258.847696][T13175]  vmalloc_user+0x70/0x80
[ 1258.852212][T13175]  ? vb2_vmalloc_alloc+0xec/0x330
[ 1258.857245][T13175]  vb2_vmalloc_alloc+0xec/0x330
[ 1258.862107][T13175]  ? __copy_timestamp+0x1f0/0x1f0
[ 1258.867139][T13175]  __vb2_queue_alloc+0x78f/0x1410
[ 1258.872197][T13175]  vb2_core_reqbufs+0x9ff/0x10e0
[ 1258.877153][T13175]  ? trace_contention_end+0x5f/0x170
[ 1258.882449][T13175]  ? vb2_verify_memory_type+0x570/0x570
[ 1258.888006][T13175]  ? __mutex_lock+0x1ab/0xb40
[ 1258.892690][T13175]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1258.898683][T13175]  ? __video_do_ioctl+0x4fc/0xe40
[ 1258.903719][T13175]  ? vb2_verify_memory_type+0x1f8/0x570
[ 1258.909280][T13175]  vb2_ioctl_reqbufs+0x470/0x780
[ 1258.914249][T13175]  __video_do_ioctl+0xa10/0xe40
[ 1258.919113][T13175]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1258.924186][T13175]  ? video_ioctl2+0x30/0x30
[ 1258.928703][T13175]  ? __might_fault+0xc2/0x120
[ 1258.933386][T13175]  ? __might_fault+0xa6/0x120
[ 1258.938076][T13175]  video_usercopy+0x987/0x1450
[ 1258.942861][T13175]  ? video_ioctl2+0x30/0x30
[ 1258.947374][T13175]  ? v4l_printk_ioctl+0x130/0x130
[ 1258.952431][T13175]  v4l2_ioctl+0x183/0x1d0
[ 1258.956777][T13175]  ? v4l2_poll+0x2b0/0x2b0
[ 1258.961211][T13175]  __se_sys_ioctl+0xfa/0x170
[ 1258.965817][T13175]  do_syscall_64+0x4c/0xa0
[ 1258.970249][T13175]  ? clear_bhb_loop+0x60/0xb0
[ 1258.974934][T13175]  ? clear_bhb_loop+0x60/0xb0
[ 1258.979626][T13175]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1258.985625][T13175] RIP: 0033:0x7fc3f7ba8fd9
[ 1258.990057][T13175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1259.009676][T13175] RSP: 002b:00007fc3f8b4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1259.018110][T13175] RAX: ffffffffffffffda RBX: 00007fc3f7e25fa0 RCX: 00007fc3f7ba8fd9
[ 1259.026091][T13175] RDX: 0000200000000340 RSI: 00000000c0145608 RDI: 0000000000000004
[ 1259.034075][T13175] RBP: 00007fc3f7c37fed R08: 0000000000000000 R09: 0000000000000000
[ 1259.042051][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1259.050029][T13175] R13: 00007fc3f7e26038 R14: 00007fc3f7e25fa0 R15: 00007ffd8bb5a498
[ 1259.058054][T13175]  </TASK>
[ 1259.431338][T13175] syz.0.2066: vmalloc error: size 831488, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[ 1259.450097][ T4285] Bluetooth: hci2: command 0x041b tx timeout
[ 1260.919976][T13175] CPU: 0 PID: 13175 Comm: syz.0.2066 Not tainted syzkaller #0
[ 1260.927525][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1260.937590][T13175] Call Trace:
[ 1260.940875][T13175]  <TASK>
[ 1260.943867][T13175]  dump_stack_lvl+0x188/0x24e
[ 1260.948613][T13175]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1260.955049][T13175]  ? show_regs_print_info+0x12/0x12
[ 1260.960295][T13175]  ? load_image+0x410/0x410
[ 1260.964826][T13175]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1260.971263][T13175]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1260.977781][T13175]  warn_alloc+0x242/0x330
[ 1260.982135][T13175]  ? slab_free_freelist_hook+0x133/0x1b0
[ 1260.987781][T13175]  ? zone_watermark_ok_safe+0x270/0x270
[ 1260.993339][T13175]  ? __get_vm_area_node+0x16d/0x330
[ 1260.998573][T13175]  ? __get_vm_area_node+0x16d/0x330
[ 1261.003798][T13175]  ? __kasan_kmalloc+0x8e/0xa0
[ 1261.008609][T13175]  ? __vb2_queue_alloc+0x78f/0x1410
[ 1261.013836][T13175]  __vmalloc_node_range+0x37c/0x1380
[ 1261.019165][T13175]  ? free_vm_area+0x50/0x50
[ 1261.023703][T13175]  vmalloc_user+0x70/0x80
[ 1261.028050][T13175]  ? vb2_vmalloc_alloc+0xec/0x330
[ 1261.033103][T13175]  vb2_vmalloc_alloc+0xec/0x330
[ 1261.037970][T13175]  ? __copy_timestamp+0x1f0/0x1f0
[ 1261.043005][T13175]  __vb2_queue_alloc+0x78f/0x1410
[ 1261.048146][T13175]  vb2_core_reqbufs+0x9ff/0x10e0
[ 1261.053106][T13175]  ? trace_contention_end+0x5f/0x170
[ 1261.058407][T13175]  ? vb2_verify_memory_type+0x570/0x570
[ 1261.063963][T13175]  ? __mutex_lock+0x1ab/0xb40
[ 1261.068651][T13175]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1261.074656][T13175]  ? __video_do_ioctl+0x4fc/0xe40
[ 1261.079700][T13175]  ? vb2_verify_memory_type+0x1f8/0x570
[ 1261.085264][T13175]  vb2_ioctl_reqbufs+0x470/0x780
[ 1261.090226][T13175]  __video_do_ioctl+0xa10/0xe40
[ 1261.095096][T13175]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1261.100138][T13175]  ? video_ioctl2+0x30/0x30
[ 1261.104654][T13175]  ? __might_fault+0xc2/0x120
[ 1261.109337][T13175]  ? __might_fault+0xa6/0x120
[ 1261.114025][T13175]  video_usercopy+0x987/0x1450
[ 1261.118805][T13175]  ? video_ioctl2+0x30/0x30
[ 1261.123319][T13175]  ? v4l_printk_ioctl+0x130/0x130
[ 1261.128374][T13175]  v4l2_ioctl+0x183/0x1d0
[ 1261.132721][T13175]  ? v4l2_poll+0x2b0/0x2b0
[ 1261.137171][T13175]  __se_sys_ioctl+0xfa/0x170
[ 1261.141792][T13175]  do_syscall_64+0x4c/0xa0
[ 1261.146221][T13175]  ? clear_bhb_loop+0x60/0xb0
[ 1261.150909][T13175]  ? clear_bhb_loop+0x60/0xb0
[ 1261.155600][T13175]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1261.161507][T13175] RIP: 0033:0x7fc3f7ba8fd9
[ 1261.166014][T13175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1261.185628][T13175] RSP: 002b:00007fc3f8b4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1261.194053][T13175] RAX: ffffffffffffffda RBX: 00007fc3f7e25fa0 RCX: 00007fc3f7ba8fd9
[ 1261.202044][T13175] RDX: 0000200000000340 RSI: 00000000c0145608 RDI: 0000000000000004
[ 1261.210020][T13175] RBP: 00007fc3f7c37fed R08: 0000000000000000 R09: 0000000000000000
[ 1261.217995][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1261.226063][T13175] R13: 00007fc3f7e26038 R14: 00007fc3f7e25fa0 R15: 00007ffd8bb5a498
[ 1261.234066][T13175]  </TASK>
[ 1261.273201][ T4529] tipc: Left network mode
[ 1261.340749][T13175] Mem-Info:
[ 1261.343942][T13175] active_anon:74668 inactive_anon:0 isolated_anon:0
[ 1261.343942][T13175]  active_file:18910 inactive_file:42671 isolated_file:0
[ 1261.343942][T13175]  unevictable:768 dirty:85 writeback:0
[ 1261.343942][T13175]  slab_reclaimable:22644 slab_unreclaimable:100388
[ 1261.343942][T13175]  mapped:42085 shmem:68142 pagetables:840
[ 1261.343942][T13175]  sec_pagetables:0 bounce:0
[ 1261.343942][T13175]  kernel_misc_reclaimable:0
[ 1261.343942][T13175]  free:1244329 free_pcp:3563 free_cma:0
[ 1261.393042][T13143] chnl_net:caif_netlink_parms(): no params data found
[ 1261.509821][T13175] Node 0 active_anon:285472kB inactive_anon:0kB active_file:75640kB inactive_file:170484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168340kB dirty:336kB writeback:0kB shmem:258032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11260kB pagetables:3360kB sec_pagetables:0kB all_unreclaimable? no
[ 1261.550179][ T4285] Bluetooth: hci2: command 0x040f tx timeout
[ 1262.839956][T13175] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1263.019942][T13175] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1263.229837][T13175] lowmem_reserve[]: 0 2509 2510 2510 2510
[ 1263.250052][T13175] Node 0 DMA32 free:987272kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:332328kB inactive_anon:0kB active_file:75640kB inactive_file:170484kB unevictable:1536kB writepending:368kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:30704kB local_pcp:21112kB free_cma:0kB
[ 1263.320024][T13175] lowmem_reserve[]: 0 0 1 1 1
[ 1263.333057][T13175] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1263.471578][T13175] lowmem_reserve[]: 0 0 0 0 0
[ 1263.602990][ T4285] Bluetooth: hci2: command 0x0419 tx timeout
[ 1263.652929][T13175] Node 1 Normal free:3918132kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:6144kB local_pcp:4896kB free_cma:0kB
[ 1263.860061][T13175] lowmem_reserve[]: 0 0 0 0 0
[ 1263.864879][T13175] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1263.880389][T13175] Node 0 DMA32: 16*4kB (M) 697*8kB (UME) 284*16kB (UME) 229*32kB (UME) 19*64kB (UME) 270*128kB (UME) 78*256kB (UME) 68*512kB (UM) 32*1024kB (UME) 16*2048kB (UM) 202*4096kB (UM) = 1001000kB
[ 1263.915572][T13143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1263.949919][T13143] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1263.958376][T13143] device bridge_slave_0 entered promiscuous mode
[ 1263.977706][T13175] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1263.985980][T13143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1264.010979][T13143] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1264.039835][T13175] Node 1 Normal: 189*4kB (UME) 48*8kB (UME) 36*16kB (UME) 170*32kB (UE) 57*64kB (UME) 24*128kB (UME) 11*256kB (UM) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 951*4096kB (M) = 3918132kB
[ 1264.042154][T13143] device bridge_slave_1 entered promiscuous mode
[ 1264.113839][T13175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1264.135799][T13175] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1264.173233][T13175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1264.207680][T13175] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1264.251902][T13175] 125471 total pagecache pages
[ 1264.256739][T13175] 0 pages in swap cache
[ 1264.279837][T13175] Free swap  = 124728kB
[ 1264.284062][T13175] Total swap = 124996kB
[ 1264.288245][T13175] 2097051 pages RAM
[ 1264.346780][T13175] 0 pages HighMem/MovableOnly
[ 1264.351850][T13175] 419799 pages reserved
[ 1264.369740][T13175] 0 pages cma reserved
[ 1264.447086][T13143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1264.498844][T13143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1264.573059][T13211] trusted_key: encrypted_key: insufficient parameters specified
[ 1265.236145][T13209] sctp: failed to load transform for md5: -2
[ 1265.836579][T13143] team0: Port device team_slave_0 added
[ 1265.882453][T13143] team0: Port device team_slave_1 added
[ 1267.735154][T13143] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1267.743918][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1267.839945][T13143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1268.052077][T13143] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1268.059075][T13143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1268.219862][T13143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1269.406482][T13143] device hsr_slave_0 entered promiscuous mode
[ 1269.430167][T13143] device hsr_slave_1 entered promiscuous mode
[ 1269.460200][T13143] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1269.499389][T13143] Cannot create hsr debugfs directory
[ 1271.097178][T13260] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1271.548982][ T4529] device hsr_slave_0 left promiscuous mode
[ 1271.567233][ T4529] device hsr_slave_1 left promiscuous mode
[ 1271.678434][ T4529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1271.691212][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1271.737399][ T4529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1271.755160][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1271.766207][ T4529] device bridge_slave_1 left promiscuous mode
[ 1271.802613][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1272.616079][ T4529] device bridge_slave_0 left promiscuous mode
[ 1272.845383][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1273.159138][T13287] jffs2: notice: (13287) jffs2_build_xattr_subsystem: complete building xattr subsystem, 26 of xdatum (0 unchecked, 26 orphan) and 29 of xref (16 dead, 13 orphan) found.
[ 1273.317845][ T4529] device veth1_macvtap left promiscuous mode
[ 1273.327948][ T4529] device veth0_macvtap left promiscuous mode
[ 1273.346654][ T4529] device veth1_vlan left promiscuous mode
[ 1273.373539][ T4529] device veth0_vlan left promiscuous mode
[ 1276.895421][T13312] overlayfs: upper fs does not support tmpfile.
[ 1276.951552][T13312] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1276.960669][T13313] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1277.064079][T13313] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1277.101103][T13313] overlayfs: upper fs does not support tmpfile.
[ 1277.108361][T13313] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1277.130259][T13313] overlayfs: conflicting lowerdir path
[ 1279.627433][ T4529] team0 (unregistering): Port device team_slave_1 removed
[ 1279.908135][ T4529] team0 (unregistering): Port device team_slave_0 removed
[ 1280.253638][ T4529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1280.581590][ T4529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1282.546492][T13337] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input27
[ 1284.584128][ T4529] bond0 (unregistering): Released all slaves
[ 1285.026109][T13143] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1285.073254][T13354] FAULT_INJECTION: forcing a failure.
[ 1285.073254][T13354] name failslab, interval 1, probability 0, space 0, times 0
[ 1285.086993][T13354] CPU: 1 PID: 13354 Comm: syz.2.2100 Not tainted syzkaller #0
[ 1285.094501][T13354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1285.104572][T13354] Call Trace:
[ 1285.107868][T13354]  <TASK>
[ 1285.110815][T13354]  dump_stack_lvl+0x188/0x24e
[ 1285.115517][T13354]  ? show_regs_print_info+0x12/0x12
[ 1285.120729][T13354]  ? load_image+0x410/0x410
[ 1285.125254][T13354]  should_fail_ex+0x390/0x4c0
[ 1285.129951][T13354]  should_failslab+0x5/0x20
[ 1285.134458][T13354]  slab_pre_alloc_hook+0x59/0x300
[ 1285.139489][T13354]  ? __might_sleep+0xd0/0xd0
[ 1285.144089][T13354]  ? bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1285.149588][T13354]  __kmem_cache_alloc_node+0x4f/0x270
[ 1285.154974][T13354]  ? bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1285.160444][T13354]  kmalloc_trace+0x26/0xe0
[ 1285.164872][T13354]  bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1285.170172][T13354]  ? bdi_split_work_to_wbs+0xfb/0x8f0
[ 1285.175560][T13354]  ? sync_inodes_sb+0xa10/0xa10
[ 1285.180425][T13354]  ? rwsem_write_trylock+0x135/0x1c0
[ 1285.185821][T13354]  sync_inodes_sb+0x1b8/0xa10
[ 1285.190512][T13354]  ? __might_sleep+0xd0/0xd0
[ 1285.195122][T13354]  ? try_to_writeback_inodes_sb+0xc0/0xc0
[ 1285.200856][T13354]  ? __rwlock_init+0x140/0x140
[ 1285.205632][T13354]  ? down_read+0x1a8/0x2d0
[ 1285.210063][T13354]  ? ksys_sync+0x170/0x170
[ 1285.214511][T13354]  iterate_supers+0x11e/0x1d0
[ 1285.219203][T13354]  ksys_sync+0x9d/0x170
[ 1285.223469][T13354]  ? sync_filesystem+0x220/0x220
[ 1285.228417][T13354]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1285.234340][T13354]  ? lockdep_hardirqs_on+0x94/0x140
[ 1285.239550][T13354]  __ia32_sys_sync+0xa/0x10
[ 1285.244061][T13354]  do_syscall_64+0x4c/0xa0
[ 1285.248498][T13354]  ? clear_bhb_loop+0x60/0xb0
[ 1285.253193][T13354]  ? clear_bhb_loop+0x60/0xb0
[ 1285.257885][T13354]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1285.263790][T13354] RIP: 0033:0x7f0d09da8fd9
[ 1285.268217][T13354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1285.287831][T13354] RSP: 002b:00007f0d0abec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1285.296255][T13354] RAX: ffffffffffffffda RBX: 00007f0d0a025fa0 RCX: 00007f0d09da8fd9
[ 1285.304241][T13354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1285.312220][T13354] RBP: 00007f0d0a025fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1285.320205][T13354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1285.328179][T13354] R13: 00007f0d0a026038 R14: 00007f0d0a025fa0 R15: 00007ffd48f22ad8
[ 1285.336174][T13354]  </TASK>
[ 1285.367666][T13143] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1286.282818][T13143] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1286.327310][T13143] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1286.834040][T13143] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1286.902822][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1286.973227][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1287.040749][T13143] 8021q: adding VLAN 0 to HW filter on device team0
[ 1287.134285][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1287.150709][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1287.190168][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1287.197314][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1287.230133][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1287.260184][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1287.270208][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.277341][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1287.380583][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1287.405730][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1287.476171][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1287.541090][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1287.576612][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1287.631999][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1287.674782][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1287.703623][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1287.740596][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1287.775592][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1287.853745][T13143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1287.954315][T13143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1287.978280][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1288.022427][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1288.629903][ T4400] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1288.830761][ T4400] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1288.882684][ T4400] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[ 1288.979093][ T4400] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 1289.693725][ T4400] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.836784][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1289.859976][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1289.982061][T13143] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1290.095104][ T4400] cxacru 8-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[ 1290.110466][ T4400] cxacru: probe of 8-1:1.0 failed with error -22
[ 1290.544509][ T4400] usb 8-1: USB disconnect, device number 3
[ 1291.611432][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1291.645469][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1291.877696][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1291.890632][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1291.943426][T13143] device veth0_vlan entered promiscuous mode
[ 1291.953541][T13433] jffs2: notice: (13433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 26 of xdatum (0 unchecked, 26 orphan) and 30 of xref (17 dead, 13 orphan) found.
[ 1292.000310][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1292.033631][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1292.058180][T13143] device veth1_vlan entered promiscuous mode
[ 1292.625279][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1292.735249][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1292.774242][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1292.842363][T13143] device veth0_macvtap entered promiscuous mode
[ 1292.876648][T13143] device veth1_macvtap entered promiscuous mode
[ 1293.173251][T13441] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[9930] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[13441]
[ 1293.191278][T13441] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1293.856192][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1294.081566][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1294.135031][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1294.310437][T13446] sctp: [Deprecated]: syz.6.2114 (pid 13446) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1294.310437][T13446] Use struct sctp_sack_info instead
[ 1294.808611][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.865988][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1294.877914][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1296.089224][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1296.315943][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1296.417860][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1297.403007][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1297.614957][T13143] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1297.692081][ T6050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1297.739194][ T6050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1297.914256][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.030720][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.279741][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.323636][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.453926][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.469968][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.489195][T13143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.500481][T13143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1299.300965][T13143] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1299.313421][T12881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1299.330982][T12881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1299.372837][T13143] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.389092][T13143] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.407520][T13143] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.427121][T13143] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.252545][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.259178][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.791419][ T5665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1300.799311][ T5665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1301.400612][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1301.511401][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1301.519286][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1301.546716][T13483] jffs2: notice: (13483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 26 of xdatum (0 unchecked, 26 orphan) and 30 of xref (17 dead, 13 orphan) found.
[ 1301.596936][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1304.489135][ T8245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1304.499771][ T8245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1304.508231][ T8245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1304.516262][ T8245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1304.523954][ T8245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1304.532569][ T8245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1304.829828][T13498] rxe_eth0 speed is unknown, defaulting to 1000
[ 1305.655469][ T4486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1305.961893][ T4486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1306.154066][T13517] sctp: [Deprecated]: syz.7.2127 (pid 13517) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1306.154066][T13517] Use struct sctp_sack_info instead
[ 1306.562170][ T4285] Bluetooth: hci3: command 0x0409 tx timeout
[ 1306.963937][ T4486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1308.265473][ T4486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1308.641597][ T4285] Bluetooth: hci3: command 0x041b tx timeout
[ 1309.218298][T13498] chnl_net:caif_netlink_parms(): no params data found
[ 1309.271694][T13542] jffs2: notice: (13542) jffs2_build_xattr_subsystem: complete building xattr subsystem, 26 of xdatum (0 unchecked, 26 orphan) and 30 of xref (17 dead, 13 orphan) found.
[ 1309.794559][T13498] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1309.860201][T13498] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1309.890085][T13498] device bridge_slave_0 entered promiscuous mode
[ 1309.918382][ T4486] tipc: Left network mode
[ 1309.942282][T13498] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1309.949543][T13498] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.989594][T13498] device bridge_slave_1 entered promiscuous mode
[ 1310.174513][T13498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1310.432016][T13498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1310.720177][ T4285] Bluetooth: hci3: command 0x040f tx timeout
[ 1310.736025][T13498] team0: Port device team_slave_0 added
[ 1310.805824][T13498] team0: Port device team_slave_1 added
[ 1312.800718][ T4285] Bluetooth: hci3: command 0x0419 tx timeout
[ 1312.868009][T13498] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1312.902528][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1312.977145][T13498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1313.063812][T13498] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1313.073756][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1313.084066][T13588] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1313.249875][T13588] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1313.372706][T13498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1315.016771][T13498] device hsr_slave_0 entered promiscuous mode
[ 1315.060259][T13498] device hsr_slave_1 entered promiscuous mode
[ 1316.661645][T13616] jffs2: notice: (13616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 26 of xdatum (0 unchecked, 26 orphan) and 30 of xref (17 dead, 13 orphan) found.
[ 1317.156584][T13620] sctp: [Deprecated]: syz.6.2138 (pid 13620) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1317.156584][T13620] Use struct sctp_sack_info instead
[ 1320.302158][T13498] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1320.370508][T13498] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1320.467804][T13498] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1320.687640][T13498] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1322.217541][ T4486] device hsr_slave_0 left promiscuous mode
[ 1322.236150][ T4486] device hsr_slave_1 left promiscuous mode
[ 1322.310483][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1322.317972][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1322.379245][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1322.399428][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1323.106197][ T4486] device bridge_slave_1 left promiscuous mode
[ 1323.328414][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1323.407523][ T4486] device bridge_slave_0 left promiscuous mode
[ 1323.415811][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1323.911653][ T4486] device veth0_macvtap left promiscuous mode
[ 1323.929942][ T4486] device veth1_vlan left promiscuous mode
[ 1323.935823][ T4486] device veth0_vlan left promiscuous mode
[ 1324.206884][T13660] sctp: [Deprecated]: syz.7.2151 (pid 13660) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1324.206884][T13660] Use struct sctp_sack_info instead
[ 1325.413625][T13673] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1331.322708][ T4486] team0 (unregistering): Port device team_slave_1 removed
[ 1331.512727][T13699] sctp: [Deprecated]: syz.8.2158 (pid 13699) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1331.512727][T13699] Use struct sctp_sack_info instead
[ 1333.438335][ T4486] team0 (unregistering): Port device team_slave_0 removed
[ 1333.730849][ T4486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1334.335505][ T4486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1335.731816][T13715] sctp: [Deprecated]: syz.7.2160 (pid 13715) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1335.731816][T13715] Use struct sctp_sack_info instead
[ 1336.888033][T13725] trusted_key: encrypted_key: insufficient parameters specified
[ 1337.621159][T13721] sctp: failed to load transform for md5: -2
[ 1338.708365][ T4293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1338.719634][ T4293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1338.727817][ T4293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1338.736677][ T4293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1338.744199][ T4293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1338.752058][ T4293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1339.072957][ T4486] bond0 (unregistering): Released all slaves
[ 1339.318470][T13689] netlink: 'syz.6.2156': attribute type 1 has an invalid length.
[ 1339.513439][T13736] rxe_eth0 speed is unknown, defaulting to 1000
[ 1339.720675][T13668] tipc: Resetting bearer <eth:syz_tun>
[ 1339.861458][T13668] tipc: Disabling bearer <eth:syz_tun>
[ 1340.130208][T13498] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1340.210330][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1340.240542][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1340.453006][T13498] 8021q: adding VLAN 0 to HW filter on device team0
[ 1340.530198][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1340.551975][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1340.799900][ T4285] Bluetooth: hci4: command 0x0409 tx timeout
[ 1341.400361][T13655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1341.407522][T13655] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1341.415832][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1341.457142][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1341.470802][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1342.496185][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1342.503479][ T5664] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1342.761479][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1342.775746][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1342.896448][ T4285] Bluetooth: hci4: command 0x041b tx timeout
[ 1342.927208][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1343.027735][T13759] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1344.687017][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1345.888032][ T4285] Bluetooth: hci4: command 0x040f tx timeout
[ 1346.052992][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1346.081186][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1346.120209][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1346.165463][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1346.191515][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1346.334976][T13498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1346.549769][T13777] sctp: [Deprecated]: syz.7.2172 (pid 13777) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1346.549769][T13777] Use struct sctp_sack_info instead
[ 1346.978037][T13498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1347.018240][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1347.045236][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1347.449538][T13785] sctp: [Deprecated]: syz.8.2170 (pid 13785) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1347.449538][T13785] Use struct sctp_sack_info instead
[ 1347.919973][ T4285] Bluetooth: hci4: command 0x0419 tx timeout
[ 1348.072249][ T4486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.298522][ T4486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.415326][T13736] chnl_net:caif_netlink_parms(): no params data found
[ 1348.634075][ T4486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.866031][T13736] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1348.873476][T13736] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1348.884037][T13736] device bridge_slave_0 entered promiscuous mode
[ 1349.122160][ T4486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1349.180087][T13736] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1349.187253][T13736] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1349.248215][T13736] device bridge_slave_1 entered promiscuous mode
[ 1349.307191][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1349.322797][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1349.497800][T13498] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1349.593750][T13736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1350.534543][T13736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1352.051326][T13736] team0: Port device team_slave_0 added
[ 1352.113797][T13736] team0: Port device team_slave_1 added
[ 1352.181389][T13736] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1352.202402][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1353.083263][T13736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1353.141258][T13736] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1353.148266][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1353.327218][T13736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1353.370493][ T4486] tipc: Left network mode
[ 1354.483977][T13736] device hsr_slave_0 entered promiscuous mode
[ 1354.650214][T13736] device hsr_slave_1 entered promiscuous mode
[ 1354.670471][T13736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1354.717926][T13736] Cannot create hsr debugfs directory
[ 1355.398370][T13845] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1358.245617][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1358.260694][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1359.700239][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1359.731771][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1360.562448][T13498] device veth0_vlan entered promiscuous mode
[ 1361.156507][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1361.182140][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1362.588073][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.594480][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.904480][T13884] Bluetooth: MGMT ver 1.22
[ 1363.751162][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1363.761575][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1363.771521][ T8245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1363.780985][ T8245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1363.788435][ T8245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1363.796762][ T8245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1365.525644][T13885] rxe_eth0 speed is unknown, defaulting to 1000
[ 1365.840026][ T8245] Bluetooth: hci0: command 0x0409 tx timeout
[ 1368.291784][ T8245] Bluetooth: hci0: command 0x041b tx timeout
[ 1370.843029][ T8245] Bluetooth: hci0: command 0x040f tx timeout
[ 1371.692790][T13885] chnl_net:caif_netlink_parms(): no params data found
[ 1372.461482][T13736] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1373.997532][ T8245] Bluetooth: hci0: command 0x0419 tx timeout
[ 1374.200521][T13736] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1374.281577][T13736] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1375.759743][T13736] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1376.328335][T13885] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1376.377517][T13885] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1376.608287][T13885] device bridge_slave_0 entered promiscuous mode
[ 1376.787009][T13885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1377.049911][T13885] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1377.130888][T13885] device bridge_slave_1 entered promiscuous mode
[ 1377.261057][ T4486] device hsr_slave_0 left promiscuous mode
[ 1377.268448][ T4486] device hsr_slave_1 left promiscuous mode
[ 1377.330074][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1377.356183][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1377.391531][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1377.409210][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1377.431530][ T4486] device bridge_slave_1 left promiscuous mode
[ 1377.449934][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1377.471272][ T4486] device bridge_slave_0 left promiscuous mode
[ 1377.508198][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1378.740132][ T4486] device veth1_macvtap left promiscuous mode
[ 1378.746202][ T4486] device veth0_macvtap left promiscuous mode
[ 1378.779935][ T4486] device veth1_vlan left promiscuous mode
[ 1378.785743][ T4486] device veth0_vlan left promiscuous mode
[ 1380.255175][ T4285] Bluetooth: hci2: command 0x0406 tx timeout
[ 1380.555870][T13987] trusted_key: encrypted_key: insufficient parameters specified
[ 1381.404812][T13994] FAULT_INJECTION: forcing a failure.
[ 1381.404812][T13994] name failslab, interval 1, probability 0, space 0, times 0
[ 1381.489821][T13994] CPU: 0 PID: 13994 Comm: syz.8.2206 Not tainted syzkaller #0
[ 1381.497308][T13994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1381.507373][T13994] Call Trace:
[ 1381.510650][T13994]  <TASK>
[ 1381.513574][T13994]  dump_stack_lvl+0x188/0x24e
[ 1381.518265][T13994]  ? show_regs_print_info+0x12/0x12
[ 1381.523468][T13994]  ? load_image+0x410/0x410
[ 1381.527973][T13994]  ? __might_sleep+0xd0/0xd0
[ 1381.532570][T13994]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1381.537589][T13994]  should_fail_ex+0x390/0x4c0
[ 1381.542284][T13994]  should_failslab+0x5/0x20
[ 1381.546797][T13994]  slab_pre_alloc_hook+0x59/0x300
[ 1381.551821][T13994]  kmem_cache_alloc+0x56/0x2f0
[ 1381.556583][T13994]  ? __proc_create+0x36f/0x8b0
[ 1381.561347][T13994]  __proc_create+0x36f/0x8b0
[ 1381.565934][T13994]  ? proc_symlink+0x210/0x210
[ 1381.570604][T13994]  ? _raw_write_unlock+0x24/0x40
[ 1381.575536][T13994]  ? proc_register+0x5d1/0x7e0
[ 1381.580300][T13994]  proc_create_reg+0x87/0x100
[ 1381.584972][T13994]  proc_create_net_single+0x90/0x170
[ 1381.590248][T13994]  ? sockstat6_seq_show+0x180/0x180
[ 1381.595439][T13994]  ? proc_create_net_data_write+0x1c0/0x1c0
[ 1381.601321][T13994]  ? bpf_iter_fini_seq_net+0xc0/0xc0
[ 1381.606594][T13994]  ? fib_default_rule_add+0x1fa/0x390
[ 1381.611965][T13994]  ipv6_proc_init_net+0x8e/0x150
[ 1381.616900][T13994]  ops_init+0x360/0x5e0
[ 1381.621055][T13994]  setup_net+0x4f2/0xbd0
[ 1381.625288][T13994]  ? copy_net_ns+0x5b0/0x5b0
[ 1381.629870][T13994]  ? copy_net_ns+0x324/0x5b0
[ 1381.634453][T13994]  ? down_read_killable+0x1cc/0x340
[ 1381.639657][T13994]  copy_net_ns+0x33e/0x5b0
[ 1381.644095][T13994]  create_new_namespaces+0x3ce/0x700
[ 1381.649395][T13994]  unshare_nsproxy_namespaces+0x116/0x160
[ 1381.655141][T13994]  ksys_unshare+0x4f6/0x8e0
[ 1381.659696][T13994]  ? sighand_ctor+0x40/0x40
[ 1381.664235][T13994]  ? lock_chain_count+0x20/0x20
[ 1381.669099][T13994]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1381.675088][T13994]  __x64_sys_unshare+0x34/0x40
[ 1381.679843][T13994]  do_syscall_64+0x4c/0xa0
[ 1381.684253][T13994]  ? clear_bhb_loop+0x60/0xb0
[ 1381.688954][T13994]  ? clear_bhb_loop+0x60/0xb0
[ 1381.693801][T13994]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1381.699705][T13994] RIP: 0033:0x7f3caffa8fd9
[ 1381.704206][T13994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1381.723908][T13994] RSP: 002b:00007f3cb0db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1381.732343][T13994] RAX: ffffffffffffffda RBX: 00007f3cb0225fa0 RCX: 00007f3caffa8fd9
[ 1381.740489][T13994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[ 1381.748542][T13994] RBP: 00007f3cb0037fed R08: 0000000000000000 R09: 0000000000000000
[ 1381.756505][T13994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1381.764488][T13994] R13: 00007f3cb0226038 R14: 00007f3cb0225fa0 R15: 00007ffde1f36998
[ 1381.772469][T13994]  </TASK>
[ 1382.121406][T13999] sctp: [Deprecated]: syz.7.2207 (pid 13999) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1382.121406][T13999] Use struct sctp_sack_info instead
[ 1385.490654][ T4486] team0 (unregistering): Port device team_slave_1 removed
[ 1386.275387][ T4486] team0 (unregistering): Port device team_slave_0 removed
[ 1387.066998][ T4486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1388.005485][ T4486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1390.362627][ T4486] bond0 (unregistering): Released all slaves
[ 1390.535618][T13885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1390.573062][T13885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1390.742517][T13885] team0: Port device team_slave_0 added
[ 1390.773641][T13885] team0: Port device team_slave_1 added
[ 1390.848245][T13885] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1391.705640][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1391.760005][T13885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1392.687847][T13736] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1392.727978][T13885] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1392.779707][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1392.829734][T13885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1394.020201][T13663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1394.041223][T13663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1394.084357][T13736] 8021q: adding VLAN 0 to HW filter on device team0
[ 1394.131540][T13885] device hsr_slave_0 entered promiscuous mode
[ 1394.170550][T13885] device hsr_slave_1 entered promiscuous mode
[ 1394.229735][T13885] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1394.237393][T13885] Cannot create hsr debugfs directory
[ 1394.292097][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1394.321093][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1394.337313][ T4695] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1394.344473][ T4695] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1394.535922][T14051] netlink: 'syz.8.2219': attribute type 1 has an invalid length.
[ 1395.710096][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1395.719199][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1395.743827][ T4695] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1395.750975][ T4695] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1395.788696][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1395.855022][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1395.891358][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1396.000273][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1396.033183][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1396.109943][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1396.136081][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1396.181063][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1396.246861][T13736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1396.279795][T13736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1396.329906][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1396.350108][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1396.388235][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1396.405406][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1396.442989][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1397.376442][ T8245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1397.386057][ T8245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1397.404357][ T8245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1397.423744][ T8245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1397.431648][ T8245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1397.438885][ T8245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1397.808638][T14067] rxe_eth0 speed is unknown, defaulting to 1000
[ 1399.519817][ T4285] Bluetooth: hci3: command 0x0409 tx timeout
[ 1399.801788][T14088] trusted_key: encrypted_key: insufficient parameters specified
[ 1401.986799][ T4285] Bluetooth: hci3: command 0x041b tx timeout
[ 1402.496813][T14110] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[14112] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[14110]
[ 1403.648630][T14067] chnl_net:caif_netlink_parms(): no params data found
[ 1404.010980][ T4285] Bluetooth: hci3: command 0x040f tx timeout
[ 1406.278702][ T4285] Bluetooth: hci3: command 0x0419 tx timeout
[ 1406.404281][T13885] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1406.444567][T13885] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1406.483312][T14067] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1406.515910][T14067] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1406.561288][T14067] device bridge_slave_0 entered promiscuous mode
[ 1406.601882][T14067] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1406.609088][T14067] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1406.792530][T14130] sctp: [Deprecated]: syz.7.2232 (pid 14130) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1406.792530][T14130] Use struct sctp_sack_info instead
[ 1407.569814][T14067] device bridge_slave_1 entered promiscuous mode
[ 1407.580240][T13885] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1407.703348][T13885] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1407.840811][T14067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1407.896028][T13663] device hsr_slave_0 left promiscuous mode
[ 1408.815634][T13663] device hsr_slave_1 left promiscuous mode
[ 1408.930135][T13663] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1409.780714][T13663] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1409.875242][T13663] device bridge_slave_1 left promiscuous mode
[ 1409.900255][T13663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1409.913326][T13663] device bridge_slave_0 left promiscuous mode
[ 1409.930004][T13663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1409.975783][T13663] device veth0_vlan left promiscuous mode
[ 1410.246066][T14143] jffs2: notice: (14143) jffs2_build_xattr_subsystem: complete building xattr subsystem, 26 of xdatum (0 unchecked, 26 orphan) and 30 of xref (17 dead, 13 orphan) found.
[ 1410.337574][T14144] overlayfs: conflicting lowerdir path
[ 1412.397582][T13663] team0 (unregistering): Port device team_slave_1 removed
[ 1412.592836][T13663] team0 (unregistering): Port device team_slave_0 removed
[ 1412.722345][T13663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1412.891914][T13663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1413.668483][T13663] bond0 (unregistering): Released all slaves
[ 1413.831143][T14067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1413.993352][T14067] team0: Port device team_slave_0 added
[ 1414.028113][T14067] team0: Port device team_slave_1 added
[ 1415.740191][T14067] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1415.747215][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1415.857693][T14067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1415.897463][T13885] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1415.936888][T14067] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1415.946124][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1416.090682][T14067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1416.169544][T13885] 8021q: adding VLAN 0 to HW filter on device team0
[ 1416.214865][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1416.226153][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1416.341389][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1416.360037][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1416.400465][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1416.407629][ T5664] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1416.447307][T14067] device hsr_slave_0 entered promiscuous mode
[ 1416.519123][T14067] device hsr_slave_1 entered promiscuous mode
[ 1416.583122][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1416.604693][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1416.655706][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1416.686087][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1416.693325][ T5664] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1416.728959][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1416.802170][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1416.936742][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1418.239114][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1418.267927][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1418.292566][T14174] batman_adv: batadv0: Adding interface: syz_tun
[ 1418.299089][T14174] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1418.324822][T14174] batman_adv: batadv0: Interface activated: syz_tun
[ 1418.709344][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1418.836741][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1418.923261][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1419.026486][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1419.056872][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1419.101994][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1419.150553][T13885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1421.790265][T14187] FAULT_INJECTION: forcing a failure.
[ 1421.790265][T14187] name failslab, interval 1, probability 0, space 0, times 0
[ 1421.859787][T14187] CPU: 0 PID: 14187 Comm: syz.8.2246 Not tainted syzkaller #0
[ 1421.867313][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1421.877399][T14187] Call Trace:
[ 1421.880789][T14187]  <TASK>
[ 1421.883752][T14187]  dump_stack_lvl+0x188/0x24e
[ 1421.888478][T14187]  ? show_regs_print_info+0x12/0x12
[ 1421.893705][T14187]  ? load_image+0x410/0x410
[ 1421.898243][T14187]  should_fail_ex+0x390/0x4c0
[ 1421.902945][T14187]  should_failslab+0x5/0x20
[ 1421.907458][T14187]  slab_pre_alloc_hook+0x59/0x300
[ 1421.912516][T14187]  ? __might_sleep+0xd0/0xd0
[ 1421.917129][T14187]  ? bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1421.922614][T14187]  __kmem_cache_alloc_node+0x4f/0x270
[ 1421.928015][T14187]  ? bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1421.933515][T14187]  kmalloc_trace+0x26/0xe0
[ 1421.937981][T14187]  bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1421.943302][T14187]  ? bdi_split_work_to_wbs+0xfb/0x8f0
[ 1421.948709][T14187]  ? sync_inodes_sb+0xa10/0xa10
[ 1421.953577][T14187]  ? rwsem_write_trylock+0x135/0x1c0
[ 1421.958894][T14187]  sync_inodes_sb+0x1b8/0xa10
[ 1421.963626][T14187]  ? __might_sleep+0xd0/0xd0
[ 1421.968282][T14187]  ? try_to_writeback_inodes_sb+0xc0/0xc0
[ 1421.974044][T14187]  ? __rwlock_init+0x140/0x140
[ 1421.978845][T14187]  ? down_read+0x1a8/0x2d0
[ 1421.983313][T14187]  ? ksys_sync+0x170/0x170
[ 1421.987749][T14187]  iterate_supers+0x11e/0x1d0
[ 1421.992448][T14187]  ksys_sync+0x9d/0x170
[ 1421.996648][T14187]  ? sync_filesystem+0x220/0x220
[ 1422.001614][T14187]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1422.007526][T14187]  ? lockdep_hardirqs_on+0x94/0x140
[ 1422.012740][T14187]  __ia32_sys_sync+0xa/0x10
[ 1422.017248][T14187]  do_syscall_64+0x4c/0xa0
[ 1422.021698][T14187]  ? clear_bhb_loop+0x60/0xb0
[ 1422.026410][T14187]  ? clear_bhb_loop+0x60/0xb0
[ 1422.031130][T14187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1422.037057][T14187] RIP: 0033:0x7f3caffa8fd9
[ 1422.041510][T14187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1422.061148][T14187] RSP: 002b:00007f3cb0db7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1422.069585][T14187] RAX: ffffffffffffffda RBX: 00007f3cb0225fa0 RCX: 00007f3caffa8fd9
[ 1422.077573][T14187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1422.085551][T14187] RBP: 00007f3cb0225fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1422.093528][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1422.101508][T14187] R13: 00007f3cb0226038 R14: 00007f3cb0225fa0 R15: 00007ffde1f36998
[ 1422.109509][T14187]  </TASK>
[ 1423.043296][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.049723][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.260795][ T8245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1424.270964][ T8245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1424.279323][ T8245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1424.296715][ T8245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1424.304286][ T8245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1424.311619][ T8245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1424.704044][T14197] rxe_eth0 speed is unknown, defaulting to 1000
[ 1424.821972][T14067] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1424.848809][T14067] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1426.250943][T14067] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1426.299557][T14067] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1426.399986][ T8245] Bluetooth: hci0: command 0x0409 tx timeout
[ 1428.341765][T14067] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1428.480077][ T8245] Bluetooth: hci0: command 0x041b tx timeout
[ 1428.853189][T14067] 8021q: adding VLAN 0 to HW filter on device team0
[ 1428.890692][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1428.910678][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1429.261364][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1429.280989][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1429.345352][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1429.352494][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1429.853431][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1429.957701][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1429.982099][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1429.989258][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1430.040200][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1430.291173][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1430.367319][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1430.699885][ T8245] Bluetooth: hci0: command 0x040f tx timeout
[ 1430.801590][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1430.915662][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1431.006225][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1431.031227][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1431.060848][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1431.104525][T14197] chnl_net:caif_netlink_parms(): no params data found
[ 1431.380191][T13663] device hsr_slave_0 left promiscuous mode
[ 1431.398954][T13663] device hsr_slave_1 left promiscuous mode
[ 1431.402720][T14232] FAULT_INJECTION: forcing a failure.
[ 1431.402720][T14232] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1431.470126][T13663] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1431.484688][T13663] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1431.620352][T13663] device bridge_slave_1 left promiscuous mode
[ 1431.628140][T13663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1431.639928][T14232] CPU: 1 PID: 14232 Comm: syz.6.2255 Not tainted syzkaller #0
[ 1431.647462][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1431.657694][T14232] Call Trace:
[ 1431.660977][T14232]  <TASK>
[ 1431.663913][T14232]  dump_stack_lvl+0x188/0x24e
[ 1431.668617][T14232]  ? show_regs_print_info+0x12/0x12
[ 1431.673821][T14232]  ? load_image+0x410/0x410
[ 1431.678350][T14232]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1431.683386][T14232]  ? mark_lock+0x94/0x320
[ 1431.687753][T14232]  should_fail_ex+0x390/0x4c0
[ 1431.692446][T14232]  prepare_alloc_pages+0x1e1/0x5b0
[ 1431.697570][T14232]  __alloc_pages+0x130/0x4f0
[ 1431.702175][T14232]  ? zone_statistics+0x170/0x170
[ 1431.707125][T14232]  ? verify_lock_unused+0x140/0x140
[ 1431.712683][T14232]  __folio_alloc+0xe/0x30
[ 1431.717019][T14232]  vma_alloc_folio+0x499/0x900
[ 1431.721786][T14232]  ? mpol_shared_policy_lookup+0x147/0x1e0
[ 1431.727598][T14232]  shmem_alloc_and_acct_folio+0x463/0xbd0
[ 1431.733326][T14232]  ? shmem_replace_folio+0xdc0/0xdc0
[ 1431.738625][T14232]  ? xas_load+0x127/0x140
[ 1431.742961][T14232]  ? __filemap_get_folio+0x10f/0xde0
[ 1431.748286][T14232]  ? __filemap_get_folio+0xb43/0xde0
[ 1431.753592][T14232]  ? __filemap_get_folio+0x10f/0xde0
[ 1431.759509][T14232]  ? page_cache_prev_miss+0x380/0x380
[ 1431.764929][T14232]  ? lockdep_hardirqs_on+0x94/0x140
[ 1431.770143][T14232]  shmem_get_folio_gfp+0x1439/0x35e0
[ 1431.775518][T14232]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1431.780578][T14232]  shmem_read_mapping_page_gfp+0x99/0x2c0
[ 1431.786338][T14232]  udmabuf_create+0x99b/0x1020
[ 1431.791843][T14232]  ? udmabuf_ioctl+0x300/0x300
[ 1431.796620][T14232]  ? __might_fault+0xc2/0x120
[ 1431.801300][T14232]  ? __might_fault+0xa6/0x120
[ 1431.806239][T14232]  udmabuf_ioctl+0x1f3/0x300
[ 1431.810916][T14232]  ? sync_print_fence+0x550/0x550
[ 1431.815956][T14232]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1431.820918][T14232]  ? security_file_ioctl+0x7c/0xa0
[ 1431.826553][T14232]  ? sync_print_fence+0x550/0x550
[ 1431.831586][T14232]  __se_sys_ioctl+0xfa/0x170
[ 1431.836178][T14232]  do_syscall_64+0x4c/0xa0
[ 1431.840597][T14232]  ? clear_bhb_loop+0x60/0xb0
[ 1431.845273][T14232]  ? clear_bhb_loop+0x60/0xb0
[ 1431.849947][T14232]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1431.856195][T14232] RIP: 0033:0x7fed0c1a8fd9
[ 1431.860606][T14232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1431.880209][T14232] RSP: 002b:00007fed0d0d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1431.888622][T14232] RAX: ffffffffffffffda RBX: 00007fed0c425fa0 RCX: 00007fed0c1a8fd9
[ 1431.896590][T14232] RDX: 0000200000000640 RSI: 0000000040187542 RDI: 0000000000000004
[ 1431.904558][T14232] RBP: 00007fed0c237fed R08: 0000000000000000 R09: 0000000000000000
[ 1431.912533][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1431.920529][T14232] R13: 00007fed0c426038 R14: 00007fed0c425fa0 R15: 00007ffcaee38e58
[ 1431.928512][T14232]  </TASK>
[ 1431.949928][T13663] device bridge_slave_0 left promiscuous mode
[ 1431.956108][T13663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1432.809832][ T8245] Bluetooth: hci0: command 0x0419 tx timeout
[ 1437.341468][T13663] team0 (unregistering): Port device team_slave_1 removed
[ 1437.601704][T13663] team0 (unregistering): Port device team_slave_0 removed
[ 1438.628559][T13663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1441.645943][T13663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1443.093090][T13663] bond0 (unregistering): Released all slaves
[ 1443.470573][T12747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1443.510108][T12747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1443.669908][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1443.710525][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1443.773130][T14067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1445.290595][T14197] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1445.318274][T14197] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1445.377337][T14197] device bridge_slave_0 entered promiscuous mode
[ 1445.439549][T14197] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1445.479835][T14197] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1445.521067][T14197] device bridge_slave_1 entered promiscuous mode
[ 1445.691291][T14197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1445.721143][T14197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1445.872973][T14197] team0: Port device team_slave_0 added
[ 1445.921852][T14197] team0: Port device team_slave_1 added
[ 1445.978867][T14197] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1446.066001][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1446.136868][T14282] FAULT_INJECTION: forcing a failure.
[ 1446.136868][T14282] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1446.160549][T14197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1446.199732][T14282] CPU: 1 PID: 14282 Comm: syz.7.2266 Not tainted syzkaller #0
[ 1446.207276][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1446.211138][T14067] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1446.217347][T14282] Call Trace:
[ 1446.217358][T14282]  <TASK>
[ 1446.217367][T14282]  dump_stack_lvl+0x188/0x24e
[ 1446.235159][T14282]  ? show_regs_print_info+0x12/0x12
[ 1446.240365][T14282]  ? load_image+0x410/0x410
[ 1446.244867][T14282]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1446.249924][T14282]  ? __lock_acquire+0x1359/0x7ea0
[ 1446.254993][T14282]  should_fail_ex+0x390/0x4c0
[ 1446.259687][T14282]  prepare_alloc_pages+0x1e1/0x5b0
[ 1446.264808][T14282]  __alloc_pages+0x130/0x4f0
[ 1446.269407][T14282]  ? zone_statistics+0x170/0x170
[ 1446.274350][T14282]  ? verify_lock_unused+0x140/0x140
[ 1446.279540][T14282]  __folio_alloc+0xe/0x30
[ 1446.283861][T14282]  vma_alloc_folio+0x499/0x900
[ 1446.288627][T14282]  ? mpol_shared_policy_lookup+0x147/0x1e0
[ 1446.294423][T14282]  shmem_alloc_and_acct_folio+0x463/0xbd0
[ 1446.300171][T14282]  ? shmem_replace_folio+0xdc0/0xdc0
[ 1446.305504][T14282]  ? xas_load+0x127/0x140
[ 1446.309841][T14282]  ? __filemap_get_folio+0x10f/0xde0
[ 1446.315128][T14282]  ? __filemap_get_folio+0xb43/0xde0
[ 1446.320420][T14282]  ? __filemap_get_folio+0x10f/0xde0
[ 1446.325705][T14282]  ? page_cache_prev_miss+0x380/0x380
[ 1446.331523][T14282]  ? lockdep_hardirqs_on+0x94/0x140
[ 1446.336722][T14282]  shmem_get_folio_gfp+0x1439/0x35e0
[ 1446.342020][T14282]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1446.347065][T14282]  shmem_read_mapping_page_gfp+0x99/0x2c0
[ 1446.352810][T14282]  udmabuf_create+0x99b/0x1020
[ 1446.357593][T14282]  ? udmabuf_ioctl+0x300/0x300
[ 1446.362363][T14282]  ? __might_fault+0xc2/0x120
[ 1446.367036][T14282]  ? __might_fault+0xa6/0x120
[ 1446.371710][T14282]  udmabuf_ioctl+0x1f3/0x300
[ 1446.376294][T14282]  ? sync_print_fence+0x550/0x550
[ 1446.381332][T14282]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1446.386266][T14282]  ? security_file_ioctl+0x7c/0xa0
[ 1446.391391][T14282]  ? sync_print_fence+0x550/0x550
[ 1446.396410][T14282]  __se_sys_ioctl+0xfa/0x170
[ 1446.400993][T14282]  do_syscall_64+0x4c/0xa0
[ 1446.405396][T14282]  ? clear_bhb_loop+0x60/0xb0
[ 1446.410066][T14282]  ? clear_bhb_loop+0x60/0xb0
[ 1446.414744][T14282]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1446.420651][T14282] RIP: 0033:0x7fbeea5a8fd9
[ 1446.425060][T14282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1446.444746][T14282] RSP: 002b:00007fbeeb4c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1446.453190][T14282] RAX: ffffffffffffffda RBX: 00007fbeea825fa0 RCX: 00007fbeea5a8fd9
[ 1446.461166][T14282] RDX: 0000200000000640 RSI: 0000000040187542 RDI: 0000000000000004
[ 1446.469133][T14282] RBP: 00007fbeea637fed R08: 0000000000000000 R09: 0000000000000000
[ 1446.477102][T14282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1446.485072][T14282] R13: 00007fbeea826038 R14: 00007fbeea825fa0 R15: 00007ffcb59030c8
[ 1446.493061][T14282]  </TASK>
[ 1446.653437][T12747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1446.680272][T12747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1446.688311][T14197] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1446.695990][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1446.783443][T14197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1446.977150][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1446.996688][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1447.035490][T14067] device veth0_vlan entered promiscuous mode
[ 1447.061127][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1447.080678][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1447.145047][T14197] device hsr_slave_0 entered promiscuous mode
[ 1447.160650][T14197] device hsr_slave_1 entered promiscuous mode
[ 1447.176407][T14197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1447.209306][T14197] Cannot create hsr debugfs directory
[ 1447.246712][T14067] device veth1_vlan entered promiscuous mode
[ 1447.265027][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1447.280979][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1447.329918][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1448.891482][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[ 1448.922786][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready
[ 1450.140732][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1450.473998][T14067] device veth0_macvtap entered promiscuous mode
[ 1450.498258][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1450.521826][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1450.561343][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1450.604846][T14067] device veth1_macvtap entered promiscuous mode
[ 1450.930123][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1450.941654][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1450.959775][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1450.979724][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1450.999724][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1451.039742][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1451.071348][T14067] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1452.586398][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1452.613818][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1452.663641][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1452.708006][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1452.740088][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1452.797071][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1452.839944][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1452.909675][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1452.939680][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1452.971346][T14067] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1453.202486][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1453.292319][T14320] sctp: [Deprecated]: syz.7.2269 (pid 14320) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1453.292319][T14320] Use struct sctp_sack_info instead
[ 1454.389068][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1454.401065][T14067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1454.410796][T14067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1454.419527][T14067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1454.428740][T14067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1454.766590][ T4527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1454.806464][ T4527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1454.887583][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1454.938152][T12747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1454.962214][T12747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1454.995353][T12747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1461.022872][T14197] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1461.081678][T14197] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1461.153898][T13663] device hsr_slave_0 left promiscuous mode
[ 1461.208149][T13663] device hsr_slave_1 left promiscuous mode
[ 1461.231738][T13663] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1461.270541][T13663] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1461.329506][T13663] device bridge_slave_1 left promiscuous mode
[ 1461.355586][T13663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1462.135682][T13663] device bridge_slave_0 left promiscuous mode
[ 1462.156843][T13663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1463.952667][T14368] FAULT_INJECTION: forcing a failure.
[ 1463.952667][T14368] name failslab, interval 1, probability 0, space 0, times 0
[ 1463.979833][T14368] CPU: 0 PID: 14368 Comm: syz.6.2275 Not tainted syzkaller #0
[ 1463.987380][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1463.997477][T14368] Call Trace:
[ 1464.000772][T14368]  <TASK>
[ 1464.003715][T14368]  dump_stack_lvl+0x188/0x24e
[ 1464.008402][T14368]  ? show_regs_print_info+0x12/0x12
[ 1464.013601][T14368]  ? load_image+0x410/0x410
[ 1464.018109][T14368]  should_fail_ex+0x390/0x4c0
[ 1464.022785][T14368]  should_failslab+0x5/0x20
[ 1464.027287][T14368]  slab_pre_alloc_hook+0x59/0x300
[ 1464.032331][T14368]  ? __might_sleep+0xd0/0xd0
[ 1464.036967][T14368]  ? bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1464.042478][T14368]  __kmem_cache_alloc_node+0x4f/0x270
[ 1464.047967][T14368]  ? bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1464.053433][T14368]  kmalloc_trace+0x26/0xe0
[ 1464.057871][T14368]  bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1464.063159][T14368]  ? bdi_split_work_to_wbs+0xfb/0x8f0
[ 1464.068555][T14368]  ? sync_inodes_sb+0xa10/0xa10
[ 1464.073430][T14368]  ? rwsem_write_trylock+0x135/0x1c0
[ 1464.078726][T14368]  sync_inodes_sb+0x1b8/0xa10
[ 1464.083409][T14368]  ? __might_sleep+0xd0/0xd0
[ 1464.087999][T14368]  ? try_to_writeback_inodes_sb+0xc0/0xc0
[ 1464.093718][T14368]  ? __rwlock_init+0x140/0x140
[ 1464.098476][T14368]  ? down_read+0x1a8/0x2d0
[ 1464.102891][T14368]  ? ksys_sync+0x170/0x170
[ 1464.107305][T14368]  iterate_supers+0x11e/0x1d0
[ 1464.112007][T14368]  ksys_sync+0x9d/0x170
[ 1464.116156][T14368]  ? sync_filesystem+0x220/0x220
[ 1464.121085][T14368]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1464.126972][T14368]  ? lockdep_hardirqs_on+0x94/0x140
[ 1464.132165][T14368]  __ia32_sys_sync+0xa/0x10
[ 1464.136677][T14368]  do_syscall_64+0x4c/0xa0
[ 1464.141097][T14368]  ? clear_bhb_loop+0x60/0xb0
[ 1464.145770][T14368]  ? clear_bhb_loop+0x60/0xb0
[ 1464.150444][T14368]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1464.156332][T14368] RIP: 0033:0x7fed0c1a8fd9
[ 1464.160742][T14368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1464.180347][T14368] RSP: 002b:00007fed0d0d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1464.188759][T14368] RAX: ffffffffffffffda RBX: 00007fed0c425fa0 RCX: 00007fed0c1a8fd9
[ 1464.196730][T14368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1464.204698][T14368] RBP: 00007fed0c425fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1464.212663][T14368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1464.220637][T14368] R13: 00007fed0c426038 R14: 00007fed0c425fa0 R15: 00007ffcaee38e58
[ 1464.228617][T14368]  </TASK>
[ 1465.780424][T14377] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1465.788835][T14377] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1466.242305][T13663] team0 (unregistering): Port device team_slave_1 removed
[ 1466.843071][T13663] team0 (unregistering): Port device team_slave_0 removed
[ 1467.059310][T13663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1467.200379][T13663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1470.778436][T13663] bond0 (unregistering): Released all slaves
[ 1472.280578][T14197] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1472.310694][T14197] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1472.729823][T14197] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1472.860125][T12881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1472.868162][T12881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1472.943355][T14197] 8021q: adding VLAN 0 to HW filter on device team0
[ 1473.182229][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1473.207372][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1473.258753][T14237] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1473.265970][T14237] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1473.298902][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1473.330618][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1473.367277][T14237] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1473.374508][T14237] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1473.386838][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1473.396351][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1473.404999][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1473.415306][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1473.424446][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1473.437633][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1474.693524][T13890] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[ 1474.695568][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1474.712943][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1474.850167][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1474.871870][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1474.892055][T13890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1474.938860][T13890] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[ 1474.958495][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1474.995804][T13890] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1475.005098][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1475.017262][T13890] usb 9-1: Product: syz
[ 1475.028399][T14415] rxe_eth0 speed is unknown, defaulting to 1000
[ 1475.042727][T13890] usb 9-1: Manufacturer: syz
[ 1475.059185][T14197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1475.089965][T13890] usb 9-1: SerialNumber: syz
[ 1475.106917][T13890] usb 9-1: config 0 descriptor??
[ 1475.119301][T13890] keyspan 9-1:0.0: Keyspan 4 port adapter converter detected
[ 1475.141618][T14197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1475.154367][T13890] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[ 1475.189806][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1475.198809][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1475.208022][T13890] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 88
[ 1475.230608][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1475.244769][T13890] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[ 1475.247694][T14429] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1475.270518][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1475.297481][T13890] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 1475.306698][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1475.334142][T13890] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[ 1475.340359][T14429] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1475.343189][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1475.491740][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1476.800227][ T8245] Bluetooth: hci3: command 0x0409 tx timeout
[ 1476.826058][T13890] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 1476.897708][T13890] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[ 1476.961762][T13890] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 1477.097983][T13890] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[ 1477.175080][T13890] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 1477.890198][   T22] usb 9-1: USB disconnect, device number 2
[ 1478.024445][   T22] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 1478.080167][   T22] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 1478.141685][   T22] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 1478.310877][T14445] netlink: 'syz.6.2289': attribute type 1 has an invalid length.
[ 1478.997117][ T8245] Bluetooth: hci3: command 0x041b tx timeout
[ 1479.002919][   T22] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 1479.017909][   T22] keyspan 9-1:0.0: device disconnected
[ 1479.071619][T13663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.235720][T13663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1480.645444][T14415] chnl_net:caif_netlink_parms(): no params data found
[ 1480.820535][T13663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1480.901134][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1480.960142][T14237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1480.973453][T14197] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1481.049749][ T4293] Bluetooth: hci3: command 0x040f tx timeout
[ 1481.776382][T13663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1482.177687][T14415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1482.234328][T14415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1482.261576][T14415] device bridge_slave_0 entered promiscuous mode
[ 1482.316331][T14415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1482.360163][T14415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1482.368564][T14415] device bridge_slave_1 entered promiscuous mode
[ 1482.578060][T14415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1482.629132][T14415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1482.881639][T14415] team0: Port device team_slave_0 added
[ 1482.960909][T14415] team0: Port device team_slave_1 added
[ 1484.369998][ T4293] Bluetooth: hci3: command 0x0419 tx timeout
[ 1484.482478][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.488838][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.653623][T14415] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1484.676698][T14415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1484.726716][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1484.739990][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1484.750065][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1484.757944][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1484.765701][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1484.774658][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1484.783706][T14415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1484.957236][T14415] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1484.979021][T14415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1485.069653][T14415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1485.223226][T14496] netlink: 'syz.8.2299': attribute type 1 has an invalid length.
[ 1485.980080][T14500] FAULT_INJECTION: forcing a failure.
[ 1485.980080][T14500] name failslab, interval 1, probability 0, space 0, times 0
[ 1486.028754][T14500] CPU: 0 PID: 14500 Comm: syz.7.2295 Not tainted syzkaller #0
[ 1486.036291][T14500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1486.046388][T14500] Call Trace:
[ 1486.049700][T14500]  <TASK>
[ 1486.052659][T14500]  dump_stack_lvl+0x188/0x24e
[ 1486.057386][T14500]  ? show_regs_print_info+0x12/0x12
[ 1486.062631][T14500]  ? load_image+0x410/0x410
[ 1486.067178][T14500]  should_fail_ex+0x390/0x4c0
[ 1486.071893][T14500]  should_failslab+0x5/0x20
[ 1486.076406][T14500]  slab_pre_alloc_hook+0x59/0x300
[ 1486.081447][T14500]  ? __might_sleep+0xd0/0xd0
[ 1486.086043][T14500]  ? bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1486.091517][T14500]  __kmem_cache_alloc_node+0x4f/0x270
[ 1486.096898][T14500]  ? bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1486.102373][T14500]  kmalloc_trace+0x26/0xe0
[ 1486.106802][T14500]  bdi_split_work_to_wbs+0x4dd/0x8f0
[ 1486.112105][T14500]  ? bdi_split_work_to_wbs+0xfb/0x8f0
[ 1486.117496][T14500]  ? sync_inodes_sb+0xa10/0xa10
[ 1486.122363][T14500]  ? rwsem_write_trylock+0x135/0x1c0
[ 1486.127674][T14500]  sync_inodes_sb+0x1b8/0xa10
[ 1486.132365][T14500]  ? __might_sleep+0xd0/0xd0
[ 1486.136966][T14500]  ? try_to_writeback_inodes_sb+0xc0/0xc0
[ 1486.142698][T14500]  ? __rwlock_init+0x140/0x140
[ 1486.147475][T14500]  ? down_read+0x1a8/0x2d0
[ 1486.151897][T14500]  ? ksys_sync+0x170/0x170
[ 1486.156329][T14500]  iterate_supers+0x11e/0x1d0
[ 1486.161017][T14500]  ksys_sync+0x9d/0x170
[ 1486.165184][T14500]  ? sync_filesystem+0x220/0x220
[ 1486.170131][T14500]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1486.176031][T14500]  ? lockdep_hardirqs_on+0x94/0x140
[ 1486.181242][T14500]  __ia32_sys_sync+0xa/0x10
[ 1486.185748][T14500]  do_syscall_64+0x4c/0xa0
[ 1486.190181][T14500]  ? clear_bhb_loop+0x60/0xb0
[ 1486.194864][T14500]  ? clear_bhb_loop+0x60/0xb0
[ 1486.199553][T14500]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1486.205460][T14500] RIP: 0033:0x7fbeea5a8fd9
[ 1486.209881][T14500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1486.229502][T14500] RSP: 002b:00007fbeeb4c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1486.237928][T14500] RAX: ffffffffffffffda RBX: 00007fbeea825fa0 RCX: 00007fbeea5a8fd9
[ 1486.245911][T14500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1486.253974][T14500] RBP: 00007fbeea825fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1486.261956][T14500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1486.269932][T14500] R13: 00007fbeea826038 R14: 00007fbeea825fa0 R15: 00007ffcb59030c8
[ 1486.277928][T14500]  </TASK>
[ 1486.424479][T14415] device hsr_slave_0 entered promiscuous mode
[ 1486.444443][T14415] device hsr_slave_1 entered promiscuous mode
[ 1486.465728][T14415] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1486.489738][T14415] Cannot create hsr debugfs directory
[ 1486.516785][T14489] rxe_eth0 speed is unknown, defaulting to 1000
[ 1486.879888][ T8245] Bluetooth: hci0: command 0x0409 tx timeout
[ 1488.509916][ T8277] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[ 1488.751583][ T8277] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.792427][ T8277] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[ 1488.817232][ T8277] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1488.846134][ T8277] usb 8-1: Product: syz
[ 1488.856257][ T8277] usb 8-1: Manufacturer: syz
[ 1488.866390][ T8277] usb 8-1: SerialNumber: syz
[ 1488.879521][ T8277] usb 8-1: config 0 descriptor??
[ 1488.936454][ T8277] keyspan 8-1:0.0: Keyspan 4 port adapter converter detected
[ 1488.959888][ T8245] Bluetooth: hci0: command 0x041b tx timeout
[ 1488.969153][ T8277] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81
[ 1488.990164][ T8277] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 88
[ 1489.009425][ T8277] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1
[ 1489.115335][ T8277] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 1489.138267][ T8277] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2
[ 1489.160412][ T8277] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 1489.198925][ T8277] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4
[ 1489.218645][ T8277] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 1489.243251][ T8277] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6
[ 1489.329694][ T8277] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 1491.041290][ T8245] Bluetooth: hci0: command 0x040f tx timeout
[ 1492.620422][ T4373] usb 8-1: USB disconnect, device number 4
[ 1492.659965][ T4373] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 1492.694939][ T4373] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 1492.744158][ T4373] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 1492.798489][ T4373] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 1492.887327][ T4373] keyspan 8-1:0.0: device disconnected
[ 1493.119722][ T8245] Bluetooth: hci0: command 0x0419 tx timeout
[ 1495.502166][T14539] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1498.644700][T14489] chnl_net:caif_netlink_parms(): no params data found
[ 1498.732696][T14555] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1499.014960][T13663] device hsr_slave_0 left promiscuous mode
[ 1499.028442][T13663] device hsr_slave_1 left promiscuous mode
[ 1499.064357][T13663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1499.089967][T13663] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1499.130542][T13663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1499.138014][T13663] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1499.156422][T13663] device bridge_slave_1 left promiscuous mode
[ 1499.184210][T13663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1499.201824][T13663] device bridge_slave_0 left promiscuous mode
[ 1499.218365][T13663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1499.366251][T13663] device veth1_macvtap left promiscuous mode
[ 1499.379794][T13663] device veth0_macvtap left promiscuous mode
[ 1499.386073][T13663] device veth1_vlan left promiscuous mode
[ 1499.539905][T13663] device veth0_vlan left promiscuous mode
[ 1504.913303][T14596] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1509.914738][T14646] ------------[ cut here ]------------
[ 1509.920842][T14646] kernel BUG at net/sunrpc/svc.c:605!
[ 1509.947276][T14646] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1509.953431][T14646] CPU: 0 PID: 14646 Comm: syz.6.2328 Not tainted syzkaller #0
[ 1509.960910][T14646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[ 1509.970969][T14646] RIP: 0010:svc_destroy+0x184/0x190
[ 1509.976182][T14646] Code: 5f 5d e9 7f dd 5e f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 74 77 f8 e9 17 ff ff ff e8 9c 10 26 f8 <0f> 0b e8 95 10 26 f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53
[ 1509.995790][T14646] RSP: 0018:ffffc900036e7b10 EFLAGS: 00010283
[ 1510.001859][T14646] RAX: ffffffff895c5804 RBX: ffff8880283e9450 RCX: 0000000000080000
[ 1510.009833][T14646] RDX: ffffc9001115a000 RSI: 00000000000091f1 RDI: 00000000000091f2
[ 1510.017796][T14646] RBP: ffffc900036e7cb8 R08: ffffffff91b6238f R09: 1ffffffff236c471
[ 1510.025761][T14646] R10: dffffc0000000000 R11: fffffbfff236c472 R12: dffffc0000000000
[ 1510.033750][T14646] R13: dffffc0000000000 R14: ffff8880283e9468 R15: 0000000000000001
[ 1510.041801][T14646] FS:  00007fed0d0d46c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 1510.050724][T14646] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1510.057313][T14646] CR2: 00005555737984e8 CR3: 0000000063864000 CR4: 00000000003506f0
[ 1510.065288][T14646] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1510.073265][T14646] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1510.081231][T14646] Call Trace:
[ 1510.084505][T14646]  <TASK>
[ 1510.087428][T14646]  write_ports+0xa26/0xb80
[ 1510.091847][T14646]  ? write_versions+0xbb0/0xbb0
[ 1510.096789][T14646]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1510.101827][T14646]  ? __virt_addr_valid+0x188/0x540
[ 1510.106977][T14646]  ? __might_fault+0xc2/0x120
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1510.111687][T14646]  ? __might_fault+0xa6/0x120
[ 1510.116392][T14646]  ? _copy_from_user+0x10b/0x170
[ 1510.121371][T14646]  ? simple_transaction_get+0x119/0x140
[ 1510.126962][T14646]  nfsctl_transaction_write+0x105/0x150
[ 1510.132535][T14646]  ? nfsctl_transaction_read+0x1b0/0x1b0
[ 1510.138168][T14646]  vfs_write+0x2dc/0x9a0
[ 1510.142403][T14646]  ? file_end_write+0x250/0x250
[ 1510.147245][T14646]  ? __fget_files+0x28/0x460
[ 1510.151847][T14646]  ? __fget_files+0x3fc/0x460
[ 1510.156544][T14646]  ? __fdget_pos+0x2ae/0x360
[ 1510.161133][T14646]  ? ksys_write+0x70/0x260
[ 1510.165536][T14646]  ksys_write+0x14d/0x260
[ 1510.169855][T14646]  ? __ia32_sys_read+0x80/0x80
[ 1510.174612][T14646]  ? lockdep_hardirqs_on+0x94/0x140
[ 1510.179804][T14646]  do_syscall_64+0x4c/0xa0
[ 1510.184224][T14646]  ? clear_bhb_loop+0x60/0xb0
[ 1510.188902][T14646]  ? clear_bhb_loop+0x60/0xb0
[ 1510.193576][T14646]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1510.199465][T14646] RIP: 0033:0x7fed0c1a8fd9
[ 1510.203874][T14646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1510.223481][T14646] RSP: 002b:00007fed0d0d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1510.231914][T14646] RAX: ffffffffffffffda RBX: 00007fed0c425fa0 RCX: 00007fed0c1a8fd9
[ 1510.239881][T14646] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000004
[ 1510.247849][T14646] RBP: 00007fed0c237fed R08: 0000000000000000 R09: 0000000000000000
[ 1510.255814][T14646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1510.263790][T14646] R13: 00007fed0c426038 R14: 00007fed0c425fa0 R15: 00007ffcaee38e58
[ 1510.271763][T14646]  </TASK>
[ 1510.274775][T14646] Modules linked in:
[ 1510.550003][T14646] ---[ end trace 0000000000000000 ]---
[ 1510.555582][T14646] RIP: 0010:svc_destroy+0x184/0x190
[ 1510.790239][T14646] Code: 5f 5d e9 7f dd 5e f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 74 77 f8 e9 17 ff ff ff e8 9c 10 26 f8 <0f> 0b e8 95 10 26 f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53
[ 1510.884382][T14646] RSP: 0018:ffffc900036e7b10 EFLAGS: 00010283
[ 1510.909644][T14646] RAX: ffffffff895c5804 RBX: ffff8880283e9450 RCX: 0000000000080000
[ 1510.930476][T13663] team0 (unregistering): Port device team_slave_1 removed
[ 1510.949715][T14646] RDX: ffffc9001115a000 RSI: 00000000000091f1 RDI: 00000000000091f2
[ 1510.969758][T14646] RBP: ffffc900036e7cb8 R08: ffffffff91b6238f R09: 1ffffffff236c471
[ 1510.986663][T14646] R10: dffffc0000000000 R11: fffffbfff236c472 R12: dffffc0000000000
[ 1511.009934][T14646] R13: dffffc0000000000 R14: ffff8880283e9468 R15: 0000000000000001
[ 1511.029754][T14646] FS:  00007fed0d0d46c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[ 1511.059842][T14646] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1511.079773][T14646] CR2: 00007f4b4ae10a90 CR3: 0000000063864000 CR4: 00000000003506e0
[ 1511.109778][T14646] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1511.129875][T14646] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1511.138171][T13663] team0 (unregistering): Port device team_slave_0 removed
[ 1511.149791][T14646] Kernel panic - not syncing: Fatal exception
[ 1511.156315][T14646] Kernel Offset: disabled
[ 1511.160638][T14646] Rebooting in 86400 seconds..