last executing test programs:

27m18.14158734s ago: executing program 32 (id=259):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
keyctl$setperm(0x5, 0x0, 0x200a0204)
r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1)
ftruncate(r4, 0x80007)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x3, 0x6)

26m11.09469468s ago: executing program 33 (id=311):
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x107280)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x80, 0x40e0, 0xc})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x5)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0)
pipe2(&(0x7f00000000c0), 0x80000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44)
unshare(0x40000000)

24m52.44193838s ago: executing program 34 (id=388):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000500)=""/102400, 0x19000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x1a, 0x0, @void}, 0x10)

23m33.085772288s ago: executing program 35 (id=463):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1700, 0x800}, 0x20)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r3, &(0x7f0000000140)=""/9, 0x9)
write$tun(r3, &(0x7f00000001c0)=ANY=[], 0xffe)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4004000)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2815\x00', [0x300, 0x3, 0x7ffffffe, 0x8, 0x2f, 0x9, 0x0, 0x890, 0x280ffa, 0xfdfffffb, 0x2, 0xffffffff, 0x1031, 0x100000b, 0xf, 0x40000009, 0xfff7ffa6, 0xd4c, 0x1ff, 0x9ea, 0x3, 0x4000b, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0x4f, 0x2000006, 0x77fd]})

22m33.259103072s ago: executing program 5 (id=537):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, r0}, 0xc)

22m30.8683363s ago: executing program 5 (id=539):
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
link(&(0x7f00000001c0)='./file1\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x60e, @private2, 0x767c}]}, &(0x7f0000000080)=0x10)
io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896)
recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}, 0x1, 0x0, 0x0, 0x4004051}, 0x4)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
listen(r4, 0xa)
recvmmsg(r4, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)

22m27.486549882s ago: executing program 5 (id=543):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = mq_open(0x0, 0x42, 0x0, 0x0)
readv(r0, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x20)
write(r2, &(0x7f0000000200)='md0\n', 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x509000, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc)
write(r3, &(0x7f0000000280)='externa', 0x7)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0)
write(0xffffffffffffffff, &(0x7f0000000400)='65536', 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/layout\x00', 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
write(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x8000)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r7, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0)

22m24.602649632s ago: executing program 5 (id=546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4450}, 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004340), 0x0, 0x0)
getpid()
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000001d00)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000001cc0)}, 0x58)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee", 0xf3}, {&(0x7f0000000cc0)="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", 0x12f}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

22m20.217793069s ago: executing program 5 (id=550):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4450}, 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004340), 0x0, 0x0)
getpid()
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000001d00)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000001cc0)}, 0x58)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee", 0xf3}, {&(0x7f0000000cc0)="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", 0x12f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}}], 0x2, 0x2090)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

22m7.280580793s ago: executing program 5 (id=563):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, r0}, 0xc)

21m50.94523907s ago: executing program 36 (id=563):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, r0}, 0xc)

16m41.095704558s ago: executing program 4 (id=888):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r1 = socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d7)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @flat=@handle={0x73682a85, 0x10b, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r10=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1})
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000013000500"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="8f4bc2ce240e120930f2ade04f25abbee54a421e56822904f2228b8d3bfe619314140fb2017477a1c80d814ca058c6e4b7592533a5bd52f1e95ffe5d9232fc690703304e197820436bb288508a02e318a5d841db0bb86d10bd00b69a394cafd6bdcc1e33d50f893e8ce5faeb3062580366f19c3a44150c8769b6a627570ee15ff02ebb27c8cbc4e0ff7d6d4d81938f44f4bdac9a1527699d9a600f43c7e1540ad3c020123240c8f0"], 0x28}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0)

16m40.085135242s ago: executing program 4 (id=889):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x29, 0x5, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4080, 0x0, 0x0)
write$hidraw(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x1, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0x6, 0x6a, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffc, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x413, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x8, 0x4, 0x5, 0x200003, 0x2, 0x1, 0x80, 0x9, 0x8006, 0x10000, 0x2, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x402, 0x4, 0xea, 0x9, 0x3ff, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c)
clock_settime(0x1, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
readv(r1, 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

16m38.901853701s ago: executing program 4 (id=890):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1700, 0x800}, 0x20)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r3, &(0x7f0000000140)=""/9, 0x9)
write$tun(r3, &(0x7f00000001c0)=ANY=[], 0xffe)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4004000)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2815\x00', [0x300, 0x3, 0x7ffffffe, 0x8, 0x2f, 0x9, 0x0, 0x890, 0x280ffa, 0xfdfffffb, 0x2, 0xffffffff, 0x1031, 0x100000b, 0xf, 0x40000009, 0xfff7ffa6, 0xd4c, 0x1ff, 0x9ea, 0x3, 0x4000b, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0x4f, 0x2000006, 0x77fd]})

16m37.447183787s ago: executing program 4 (id=893):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
r2 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10)
listen(r3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0)
mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00')
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0)
r5 = openat$binderfs(0xffffff9c, 0x0, 0x800, 0x0)
syz_io_uring_setup(0x17fb, 0x0, &(0x7f00000034c0), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00')

16m36.261193545s ago: executing program 4 (id=894):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3}, 0x4})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6})

16m30.355116419s ago: executing program 4 (id=899):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r3], 0xfdef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, 0x3012})

16m14.117239453s ago: executing program 37 (id=899):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r3], 0xfdef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, 0x3012})

15m4.369783776s ago: executing program 6 (id=984):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iochS\nset', &(0x7f0000000280)='io#ha\xd3\xe0 \xbd\x94`\a\x0f\xdd\xc8r\x1dS\x1f\xd7\xc86\xd3J\x8c\xf6V\xfe\xc1\x03\xa6\x95\xc8\x11rset\b\xe0\xc1\xc9\xc3\xaa\x8d\xf4\r;.\\\xb0\xdb\xec\xa3v\x9d\xcb\xcb\x93\x13\xaf\xd3\x9b\x97t^\xfd\xbb\xed\xc3\x9b\xf5\xcf\xff\xf8\xae\xb2\x16\x94\xd2\xb6I\xc2\x94\xe3\xa9\x8ej\xf3\xf4\\:\xe7,B\xcc\xcb!\x0e\x86\xd0\xe8f\n\x8a\t\x12\xa2!\xb0\xe0`\xeb&Pw\xd3\xcc\x95\xe1\x9a\x16\xee\x11?\xd9\xa5F\xa2\xbd\xe8d\x00\xde\x86\x19', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x2, 0x0)
socket$inet6(0xa, 0x805, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x2, &(0x7f0000000000)=0x80000000000003)
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)

15m2.278576388s ago: executing program 6 (id=988):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}}, 0x0)

14m53.787981676s ago: executing program 6 (id=996):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iochS\nset', &(0x7f0000000280)='io#ha\xd3\xe0 \xbd\x94`\a\x0f\xdd\xc8r\x1dS\x1f\xd7\xc86\xd3J\x8c\xf6V\xfe\xc1\x03\xa6\x95\xc8\x11rset\b\xe0\xc1\xc9\xc3\xaa\x8d\xf4\r;.\\\xb0\xdb\xec\xa3v\x9d\xcb\xcb\x93\x13\xaf\xd3\x9b\x97t^\xfd\xbb\xed\xc3\x9b\xf5\xcf\xff\xf8\xae\xb2\x16\x94\xd2\xb6I\xc2\x94\xe3\xa9\x8ej\xf3\xf4\\:\xe7,B\xcc\xcb!\x0e\x86\xd0\xe8f\n\x8a\t\x12\xa2!\xb0\xe0`\xeb&Pw\xd3\xcc\x95\xe1\x9a\x16\xee\x11?\xd9\xa5F\xa2\xbd\xe8d\x00\xde\x86\x19', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x2, 0x0)
socket$inet6(0xa, 0x805, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdir(0x0, 0x1ff)
sched_setaffinity(r5, 0x2, &(0x7f0000000000)=0x80000000000003)
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)

14m52.486200078s ago: executing program 6 (id=999):
epoll_create1(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
socket$pppl2tp(0x18, 0x1, 0x1)

14m50.991600775s ago: executing program 7 (id=1001):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1700, 0x800}, 0x20)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read(r3, &(0x7f0000000140)=""/9, 0x9)
write$tun(r3, &(0x7f00000001c0)=ANY=[], 0xffe)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4004000)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2815\x00', [0x300, 0x3, 0x7ffffffe, 0x8, 0x2f, 0x9, 0x0, 0x890, 0x280ffa, 0xfdfffffb, 0x2, 0xffffffff, 0x1031, 0x100000b, 0xf, 0x40000009, 0xfff7ffa6, 0xd4c, 0x1ff, 0x9ea, 0x3, 0x4000b, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0x4f, 0x2000006, 0x77fd]})

14m48.896824716s ago: executing program 6 (id=1003):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3}, 0x4})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6})

14m48.097070546s ago: executing program 7 (id=1004):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}}, 0x0)

14m46.362694039s ago: executing program 6 (id=1005):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465")
ioctl(r5, 0xc138fd09, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)

14m45.8952581s ago: executing program 7 (id=1006):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10)
listen(r2, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0)
mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00')

14m43.108243139s ago: executing program 7 (id=1009):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8030}, 0x50)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$key(r2, 0x0, 0x0)
bind$inet(r1, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x8880)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
sendmmsg(r1, 0x0, 0x0, 0x1c)
vmsplice(r2, 0x0, 0x0, 0xc)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)

14m40.692606898s ago: executing program 7 (id=1010):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iochS\nset', &(0x7f0000000280)='io#ha\xd3\xe0 \xbd\x94`\a\x0f\xdd\xc8r\x1dS\x1f\xd7\xc86\xd3J\x8c\xf6V\xfe\xc1\x03\xa6\x95\xc8\x11rset\b\xe0\xc1\xc9\xc3\xaa\x8d\xf4\r;.\\\xb0\xdb\xec\xa3v\x9d\xcb\xcb\x93\x13\xaf\xd3\x9b\x97t^\xfd\xbb\xed\xc3\x9b\xf5\xcf\xff\xf8\xae\xb2\x16\x94\xd2\xb6I\xc2\x94\xe3\xa9\x8ej\xf3\xf4\\:\xe7,B\xcc\xcb!\x0e\x86\xd0\xe8f\n\x8a\t\x12\xa2!\xb0\xe0`\xeb&Pw\xd3\xcc\x95\xe1\x9a\x16\xee\x11?\xd9\xa5F\xa2\xbd\xe8d\x00\xde\x86\x19', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x2, 0x0)
socket$inet6(0xa, 0x805, 0x0)
socket$inet_tcp(0x2, 0x1, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x1ff)
sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003)
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}})
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)

14m38.844804084s ago: executing program 7 (id=1012):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
listen(0xffffffffffffffff, 0x5)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
mlockall(0x3)

14m29.21142569s ago: executing program 38 (id=1005):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465")
ioctl(r5, 0xc138fd09, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)

14m23.230409577s ago: executing program 39 (id=1012):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
listen(0xffffffffffffffff, 0x5)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
mlockall(0x3)

4m24.345578831s ago: executing program 3 (id=1745):
syz_open_dev$sndpcmc(0x0, 0x0, 0x2)
socket$inet6(0xa, 0x3, 0x1)
lseek(0xffffffffffffffff, 0x2, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3)

4m22.380541759s ago: executing program 3 (id=1749):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0)
syz_emit_ethernet(0xd8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = dup(0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x44044)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x1409, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x8004)
sched_setaffinity(r2, 0x0, 0x0)
fanotify_init(0x40, 0x40000)
r5 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72e0, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000))
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m18.604396832s ago: executing program 3 (id=1756):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000010000000000000007ec1b8e919d5f44eb03a288f68f848c7ed8f0a189773ca737cd2fc4212fa207793548f2ff9b62983f0508df2784ea8afc3a127aa835a7a59f83028662763", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
gettid()
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)

4m16.545397063s ago: executing program 3 (id=1757):
syz_open_dev$sndpcmc(0x0, 0x0, 0x2)
socket$inet6(0xa, 0x3, 0x1)
lseek(0xffffffffffffffff, 0x2, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3)

4m11.713996062s ago: executing program 3 (id=1764):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0)
syz_emit_ethernet(0xd8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = dup(0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x44044)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x1409, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x8004)
sched_setaffinity(r2, 0x0, 0x0)
fanotify_init(0x40, 0x40000)
r5 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72e0, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000))
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m3.071601334s ago: executing program 3 (id=1776):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465")
write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58)
ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)

3m47.250196093s ago: executing program 40 (id=1776):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x2, "68756200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd163d70b939bca40000000000000000000000000000000000000000000000000000000000000000000000172200"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15d)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000007465")
write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync 2 7:0 0 7:1 0 1 handle_errors', 0x58)
ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x18d)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)

3m34.482666147s ago: executing program 9 (id=1804):
open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r1, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607b", 0x7c)

3m31.608273018s ago: executing program 9 (id=1807):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8030}, 0x50)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
sendmsg$key(r2, 0x0, 0x0)
bind$inet(r1, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x8880)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
sendmmsg(r1, 0x0, 0x0, 0x1c)
vmsplice(r2, 0x0, 0x0, 0xc)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)

3m27.337362652s ago: executing program 9 (id=1810):
mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0x2, 0x1, 0x6)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
accept4$nfc_llcp(r2, 0x0, 0x0, 0x80800)

3m24.961116291s ago: executing program 9 (id=1811):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
gettid()
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x800ffff, @mcast2}}}, 0x32)
setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x8)
writev(0xffffffffffffffff, &(0x7f0000001500), 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x10, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffa)
setsockopt(r4, 0x0, 0x489, &(0x7f0000000400), 0x0)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write(r5, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,tr', 0x21)

3m22.757516355s ago: executing program 9 (id=1816):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
socket$netlink(0x10, 0x3, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1)
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, 0x0, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket(0x10, 0x3, 0x0)

3m19.995143573s ago: executing program 9 (id=1818):
mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0x2, 0x1, 0x6)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
accept4$nfc_llcp(r2, 0x0, 0x0, 0x80800)

3m4.24675855s ago: executing program 41 (id=1818):
mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0x2, 0x1, 0x6)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
accept4$nfc_llcp(r2, 0x0, 0x0, 0x80800)

40.359132058s ago: executing program 2 (id=1978):
syz_open_dev$sndpcmc(0x0, 0x0, 0x2)
socket$inet6(0xa, 0x3, 0x1)
lseek(0xffffffffffffffff, 0x2, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3)

34.97702695s ago: executing program 0 (id=1985):
syz_emit_ethernet(0xd8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = dup(0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x44044)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x1409, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x8004)
sched_setaffinity(r3, 0x0, 0x0)
fanotify_init(0x40, 0x40000)
r6 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72e0, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000))
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)

29.424163267s ago: executing program 0 (id=1990):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r1 = socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d7)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @flat=@handle={0x73682a85, 0x10b, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r10=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1})
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000013000500"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r9, @ANYBLOB="8f4bc2ce240e120930f2ade04f25abbee54a421e56822904f2228b8d3bfe619314140fb2017477a1c80d814ca058c6e4b7592533a5bd52f1e95ffe5d9232fc690703304e197820436bb288508a02e318a5d841db0bb86d10bd00b69a394cafd6bdcc1e33d50f893e8ce5faeb3062580366f19c3a44150c8769b6a627570ee15ff02ebb27c8cbc4e0ff7d6d4d81938f44f4bdac9a1527699d9a600f43c7e1540ad3c020123240c8f0"], 0x28}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0)

27.461662855s ago: executing program 2 (id=1991):
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
link(&(0x7f00000001c0)='./file1\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x60e, @private2, 0x767c}]}, &(0x7f0000000080)=0x10)
io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc", 0x1d)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896)
recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}, 0x1, 0x0, 0x0, 0x4004051}, 0x4)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
listen(r5, 0xa)
recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)

25.149273332s ago: executing program 0 (id=1994):
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
set_robust_list(&(0x7f0000000400), 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x2000800)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20008810)

23.260289658s ago: executing program 8 (id=1996):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iochS\nset', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, 0x0)
socket$inet6(0xa, 0x805, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espin', 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x1ff)
sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003)
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)

23.19292379s ago: executing program 0 (id=1997):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000180)={@id={0x2, 0x0, @auto="63903ad51a7a5c0b0c7118b00dd7493d"}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)

21.578831029s ago: executing program 8 (id=1999):
r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000780)={0x40, 0x30, 0x1, "b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

20.652366323s ago: executing program 0 (id=2000):
syz_open_dev$sndpcmc(0x0, 0x0, 0x2)
socket$inet6(0xa, 0x3, 0x1)
lseek(0xffffffffffffffff, 0x2, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3)

18.053831286s ago: executing program 2 (id=2001):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r4], 0xfdef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, 0x0)

16.417501096s ago: executing program 0 (id=2002):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r1 = socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d7)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @flat=@handle={0x73682a85, 0x10b, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r10=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1})
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000013000500"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r9, @ANYBLOB="8f4bc2ce240e120930f2ade04f25abbee54a421e56822904f2228b8d3bfe619314140fb2017477a1c80d814ca058c6e4b7592533a5bd52f1e95ffe5d9232fc690703304e197820436bb288508a02e318a5d841db0bb86d10bd00b69a394cafd6bdcc1e33d50f893e8ce5faeb3062580366f19c3a44150c8769b6a627570ee15ff02ebb27c8cbc4e0ff7d6d4d81938f44f4bdac9a1527699d9a600f43c7e1540ad3c020123240c8f0"], 0x28}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0)

14.917418024s ago: executing program 2 (id=2003):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8030}, 0x50)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r5, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
sendmsg$key(r2, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x8881)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r6)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
sendmmsg(r1, 0x0, 0x0, 0x1c)
vmsplice(r2, 0x0, 0x0, 0xc)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)

11.957721866s ago: executing program 2 (id=2005):
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
set_robust_list(&(0x7f0000000400), 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x2000800)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20008810)

11.848904148s ago: executing program 1 (id=2006):
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000568000/0x3000)=nil, 0x3000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)

9.637576433s ago: executing program 2 (id=2007):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iochS\nset', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, 0x0)
socket$inet6(0xa, 0x805, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espint', 0x6)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0x0, 0x1ff)
sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003)
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)

9.557708685s ago: executing program 8 (id=2008):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4003, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80000, 0xa100, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0x2f1, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x4250}}], 0x1, &(0x7f0000000340)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

9.36362011s ago: executing program 1 (id=2009):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)="f2c733db0262059d65a5a425918b604aba593eac58ede5a7154d7b0f8ec35d1c75e36be6753588d510521be61032b3c2e9df5d53d86f38fa346aed7ae719b2a2728653e437f72f45e1d69ecc6c4d72c4f0d5cbf0f21cb243589198c16aa6e58920b4d4bfb44fbb94d96c3692bb658c94e6e5518fa807eee5d531ca5f119c3785426619285bc888c8510ec42f9b0b7b6141ceea0cb1ee8f5c455dc0e19004ba718e3dac0baa0da99715ca2314fa86669a7b1b59acfb0562093e5c2e7a93d3c74a2e56137dab220b70a836f03e24f0f81bff1ba234e25992c9ef87e72cacdaca989ff9e58d966ffabfce539eb4", &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38)
syz_emit_vhci(0x0, 0x14)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000100))
r4 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x2e, @rand_addr=0x64010102, 0x4e21, 0x2, 'wlc\x00', 0x0, 0x8, 0x55}, {@remote, 0x4e20, 0x0, 0x7, 0x1, 0x26}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000001c0)='f\x04', 0x0, r5)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x2)
fchdir(r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de)
open(&(0x7f0000000000)='.\x00', 0x0, 0x244)

7.603651023s ago: executing program 1 (id=2010):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x6, 0x80, 0x0, 0x0, 0xffffffec)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14)

7.33390214s ago: executing program 8 (id=2011):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r4], 0xfdef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, 0x0)

5.752165209s ago: executing program 8 (id=2012):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_emit_ethernet(0xd8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = dup(0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x44044)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x1409, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x8004)
sched_setaffinity(r3, 0x0, 0x0)
fanotify_init(0x40, 0x40000)
r6 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72e0, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000))
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_script(r8, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.728175899s ago: executing program 1 (id=2013):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
r2 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10)
listen(r4, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00')
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea9628763708efd4f4da8758b8f226d184dff8b1544d4e7ba807ad5ef2754bc0c7e2e864965f60c981e52284e9be62e0e967ad68e732254637f82eeb8ca469a6b2678fa8dd73c4829472a6c514c86fdc7fcf0104d065f5f10413797a794439a4effb5f5eea130048c34f45f8730ad", 0xbc)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0)
r6 = openat$binderfs(0xffffff9c, 0x0, 0x800, 0x0)
syz_io_uring_setup(0x17fb, 0x0, &(0x7f00000034c0), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00')

4.162648818s ago: executing program 1 (id=2014):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8030}, 0x50)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r5, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
sendmsg$key(r2, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x8881)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r6)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
sendmmsg(r1, 0x0, 0x0, 0x1c)
vmsplice(r2, 0x0, 0x0, 0xc)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)

1.926557063s ago: executing program 1 (id=2015):
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
set_robust_list(&(0x7f0000000400), 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x2000800)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20008810)

1.671976009s ago: executing program 8 (id=2016):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
landlock_restrict_self(0xffffffffffffffff, 0x9)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x4, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x8080000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0xf, 0x78, 0x5, 0x40, 0x2, 0x0, 0x4, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0xa1, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x8, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 42 (id=2002):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r1 = socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d7)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @flat=@handle={0x73682a85, 0x10b, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r10=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1})
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000013000500"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r9, @ANYBLOB="8f4bc2ce240e120930f2ade04f25abbee54a421e56822904f2228b8d3bfe619314140fb2017477a1c80d814ca058c6e4b7592533a5bd52f1e95ffe5d9232fc690703304e197820436bb288508a02e318a5d841db0bb86d10bd00b69a394cafd6bdcc1e33d50f893e8ce5faeb3062580366f19c3a44150c8769b6a627570ee15ff02ebb27c8cbc4e0ff7d6d4d81938f44f4bdac9a1527699d9a600f43c7e1540ad3c020123240c8f0"], 0x28}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

2][ T5787] Bluetooth: hci1: command tx timeout
[ 1147.499188][T11218] team0: Port device team_slave_1 added
[ 1147.743653][T11218] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1147.767303][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1147.825858][T11218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1147.845481][T11218] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1147.852778][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1147.880369][T11218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1148.093378][ T5787] Bluetooth: hci4: command tx timeout
[ 1150.407115][ T5787] Bluetooth: hci1: command tx timeout
[ 1150.412597][ T5787] Bluetooth: hci4: command tx timeout
[ 1150.631975][T11218] hsr_slave_0: entered promiscuous mode
[ 1150.674195][T11218] hsr_slave_1: entered promiscuous mode
[ 1150.914023][T11218] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1150.921687][T11218] Cannot create hsr debugfs directory
[ 1151.060113][T11252] chnl_net:caif_netlink_parms(): no params data found
[ 1151.735398][T11293] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1152.493008][ T5787] Bluetooth: hci1: command tx timeout
[ 1153.462300][T11312] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1154.237390][T11252] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1154.244727][T11252] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.297118][T11252] bridge_slave_0: entered allmulticast mode
[ 1154.305041][T11252] bridge_slave_0: entered promiscuous mode
[ 1154.572995][ T5787] Bluetooth: hci1: command tx timeout
[ 1154.642268][T11315] netlink: 232 bytes leftover after parsing attributes in process `syz.9.1032'.
[ 1154.783690][T11252] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1154.791049][T11252] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1154.801249][T11252] bridge_slave_1: entered allmulticast mode
[ 1154.809301][T11252] bridge_slave_1: entered promiscuous mode
[ 1154.859045][T11252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1155.157447][T11252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1155.260941][T11327] befs: (nbd9): No write support. Marking filesystem read-only
[ 1155.646550][T11327] syz.9.1034: attempt to access beyond end of device
[ 1155.646550][T11327] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1156.031682][T11252] team0: Port device team_slave_0 added
[ 1156.263084][ T7179] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1156.593964][ T7179] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1156.664999][ T7179] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1156.692977][ T7179] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1156.782552][ T7179] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1156.823689][ T7179] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1156.831841][ T7179] usb 10-1: Product: syz
[ 1156.844434][T11252] team0: Port device team_slave_1 added
[ 1156.868110][ T7179] usb 10-1: Manufacturer: syz
[ 1156.932216][T11331] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1156.992345][ T7179] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected
[ 1157.085926][ T7179] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[ 1159.068950][ T5787] Bluetooth: hci3: command 0x0406 tx timeout
[ 1159.303344][ T9142] usb 10-1: USB disconnect, device number 3
[ 1159.324281][ T9142] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[ 1159.363631][ T9142] garmin_gps 10-1:1.0: device disconnected
[ 1160.014539][T11347] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1161.387127][T11252] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1161.432978][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1161.520620][T11252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1161.555428][T11252] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1161.562438][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1161.632866][T11252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1162.718793][T11252] hsr_slave_0: entered promiscuous mode
[ 1162.850210][T11252] hsr_slave_1: entered promiscuous mode
[ 1162.874752][T11252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1162.882341][T11252] Cannot create hsr debugfs directory
[ 1162.961167][ T7418] hsr_slave_0: left promiscuous mode
[ 1163.129822][ T7418] hsr_slave_1: left promiscuous mode
[ 1163.183679][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1163.191147][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1163.225130][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1163.263227][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1163.284061][ T7418] bridge_slave_1: left allmulticast mode
[ 1163.289782][ T7418] bridge_slave_1: left promiscuous mode
[ 1163.323064][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1163.394138][ T7418] bridge_slave_0: left allmulticast mode
[ 1163.399890][ T7418] bridge_slave_0: left promiscuous mode
[ 1163.412134][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1165.753916][ T7418] veth1_macvtap: left promiscuous mode
[ 1165.768621][ T7418] veth0_macvtap: left promiscuous mode
[ 1165.793598][ T7418] veth1_vlan: left promiscuous mode
[ 1165.819550][ T7418] veth0_vlan: left promiscuous mode
[ 1167.444639][T11371] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1169.559745][T11373] netlink: 232 bytes leftover after parsing attributes in process `syz.9.1040'.
[ 1171.685722][ T7418] team0 (unregistering): Port device team_slave_1 removed
[ 1171.735486][ T7418] team0 (unregistering): Port device team_slave_0 removed
[ 1171.815174][ T7418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1171.882545][ T7418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1173.026108][ T7418] bond0 (unregistering): Released all slaves
[ 1173.354530][T11218] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1173.967503][T11218] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1174.306181][T11218] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1174.369212][T11218] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1174.570351][T11407] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1175.366295][ T7418] IPVS: stop unused estimator thread 0...
[ 1176.874732][T11416] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1047'.
[ 1177.470868][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.486984][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.098746][ T7418] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1178.548739][ T7418] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1179.635109][ T7418] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1181.850424][T11450] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1182.693186][ T7418] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.716633][T11218] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1182.755564][T11218] 8021q: adding VLAN 0 to HW filter on device team0
[ 1182.771030][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1182.778254][ T5068] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1184.286936][ T2197] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.294207][ T2197] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1185.362519][T11462] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1056'.
[ 1185.481965][T11252] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1185.570035][T11252] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1185.671622][T11252] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1185.696560][T11252] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1186.671055][T11218] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1189.389807][T11494] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1190.208137][T11252] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1190.459202][T11252] 8021q: adding VLAN 0 to HW filter on device team0
[ 1191.792780][  T133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1191.800038][  T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1191.873349][T11218] veth0_vlan: entered promiscuous mode
[ 1191.905328][ T2197] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1191.912568][ T2197] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1191.931115][T11218] veth1_vlan: entered promiscuous mode
[ 1192.183399][T11218] veth0_macvtap: entered promiscuous mode
[ 1192.238711][ T7418] hsr_slave_0: left promiscuous mode
[ 1192.266630][ T7418] hsr_slave_1: left promiscuous mode
[ 1192.302278][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1192.355949][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1192.385122][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1192.392584][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1192.400870][ T7418] bridge_slave_1: left allmulticast mode
[ 1192.407144][ T7418] bridge_slave_1: left promiscuous mode
[ 1192.413404][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1192.425094][ T7418] bridge_slave_0: left allmulticast mode
[ 1192.430833][ T7418] bridge_slave_0: left promiscuous mode
[ 1192.436775][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1192.472142][ T7418] veth1_macvtap: left promiscuous mode
[ 1192.477916][ T7418] veth0_macvtap: left promiscuous mode
[ 1192.485413][ T7418] veth1_vlan: left promiscuous mode
[ 1192.490827][ T7418] veth0_vlan: left promiscuous mode
[ 1192.979487][T11508] netlink: 232 bytes leftover after parsing attributes in process `syz.9.1064'.
[ 1195.809063][T11520] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1196.759461][T11522] befs: (nbd9): No write support. Marking filesystem read-only
[ 1196.769538][T11522] syz.9.1069: attempt to access beyond end of device
[ 1196.769538][T11522] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1196.836718][T11525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1196.847093][T11525] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1196.870064][T11525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1196.898722][T11525] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1196.907238][T11525] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1196.919045][T11525] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1197.051865][ T7418] team0 (unregistering): Port device team_slave_1 removed
[ 1197.097244][ T7418] team0 (unregistering): Port device team_slave_0 removed
[ 1197.141666][ T7418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1197.188094][ T7418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1197.223281][ T7179] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1197.430807][ T7179] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1197.450164][ T7179] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1197.462588][ T7179] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1197.489574][ T7179] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1197.499282][ T7179] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1197.508071][ T7179] usb 10-1: Product: syz
[ 1197.512463][ T7179] usb 10-1: Manufacturer: syz
[ 1197.532330][T11528] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1197.552046][ T7179] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected
[ 1197.566724][ T7179] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[ 1197.641179][ T7418] bond0 (unregistering): Released all slaves
[ 1197.844559][T11296] usb 10-1: USB disconnect, device number 4
[ 1197.911497][T11296] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[ 1197.961209][T11296] garmin_gps 10-1:1.0: device disconnected
[ 1199.473388][ T9775] Bluetooth: hci2: command tx timeout
[ 1199.979887][T11252] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1200.273994][T11544] netlink: 232 bytes leftover after parsing attributes in process `syz.9.1072'.
[ 1200.467280][ T7418] IPVS: stop unused estimator thread 0...
[ 1200.677070][T11524] chnl_net:caif_netlink_parms(): no params data found
[ 1202.734182][ T9775] Bluetooth: hci2: command tx timeout
[ 1203.177408][ T9775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1203.177646][T11524] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1203.203168][ T9775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1203.211145][ T9775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1203.219431][T11524] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.234271][ T9775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1203.243100][ T9775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1203.250483][ T9775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1203.306481][T11524] bridge_slave_0: entered allmulticast mode
[ 1203.358711][T11524] bridge_slave_0: entered promiscuous mode
[ 1203.402056][T11524] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1203.416727][T11524] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1203.424217][T11524] bridge_slave_1: entered allmulticast mode
[ 1203.431769][T11524] bridge_slave_1: entered promiscuous mode
[ 1204.141391][T11524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1204.380754][T11524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1204.478165][T11524] team0: Port device team_slave_0 added
[ 1204.632540][T11524] team0: Port device team_slave_1 added
[ 1204.851631][ T9775] Bluetooth: hci2: command tx timeout
[ 1204.950938][T11576] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1205.380829][ T9775] Bluetooth: hci4: command tx timeout
[ 1205.563180][T11524] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1205.593507][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1205.656763][T11524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1205.669983][T11524] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1205.677128][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1205.704427][T11524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1207.214801][ T9775] Bluetooth: hci2: command tx timeout
[ 1207.463179][ T9775] Bluetooth: hci4: command tx timeout
[ 1207.662379][T11524] hsr_slave_0: entered promiscuous mode
[ 1207.705805][T11524] hsr_slave_1: entered promiscuous mode
[ 1207.777787][T11524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1207.801008][T11524] Cannot create hsr debugfs directory
[ 1208.515098][T11562] chnl_net:caif_netlink_parms(): no params data found
[ 1209.563506][ T9775] Bluetooth: hci4: command tx timeout
[ 1209.945692][T11296] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1210.138352][T11562] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1210.152988][T11296] usb 10-1: Using ep0 maxpacket: 8
[ 1210.162584][T11296] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1210.176679][T11562] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1210.206050][T11562] bridge_slave_0: entered allmulticast mode
[ 1210.212049][T11296] usb 10-1: string descriptor 0 read error: -22
[ 1210.227352][T11296] usb 10-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[ 1210.238837][T11562] bridge_slave_0: entered promiscuous mode
[ 1210.285609][T11296] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1210.436958][ T7418] hsr_slave_0: left promiscuous mode
[ 1210.458562][ T7418] hsr_slave_1: left promiscuous mode
[ 1210.466499][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1210.492975][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1210.510461][ T7418] bridge_slave_1: left allmulticast mode
[ 1210.520556][ T7418] bridge_slave_1: left promiscuous mode
[ 1210.530760][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1210.546393][ T7418] bridge_slave_0: left allmulticast mode
[ 1210.552178][ T7418] bridge_slave_0: left promiscuous mode
[ 1210.558250][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1210.676762][ T7418] veth0_macvtap: left promiscuous mode
[ 1210.682493][ T7418] veth1_vlan: left promiscuous mode
[ 1210.701816][ T7418] veth0_vlan: left promiscuous mode
[ 1210.814389][T11296] usb 10-1: USB disconnect, device number 5
[ 1212.481499][ T9775] Bluetooth: hci4: command tx timeout
[ 1213.232097][T11621] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1216.491389][ T7418] team0 (unregistering): Port device team_slave_1 removed
[ 1216.593316][ T7418] team0 (unregistering): Port device team_slave_0 removed
[ 1216.681041][ T7418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1216.799445][ T7418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1217.399973][ T7418] bond0 (unregistering): Released all slaves
[ 1217.461410][T11562] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1217.469095][T11562] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1217.477858][T11562] bridge_slave_1: entered allmulticast mode
[ 1217.485941][T11562] bridge_slave_1: entered promiscuous mode
[ 1217.738163][T11562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1217.807956][T11562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1219.827031][T11643] FAULT_INJECTION: forcing a failure.
[ 1219.827031][T11643] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1219.842652][T11643] CPU: 0 PID: 11643 Comm: syz.8.1093 Not tainted syzkaller #0
[ 1219.850205][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1219.860301][T11643] Call Trace:
[ 1219.863616][T11643]  <TASK>
[ 1219.866586][T11643]  dump_stack_lvl+0x18c/0x250
[ 1219.871325][T11643]  ? show_regs_print_info+0x20/0x20
[ 1219.876578][T11643]  ? load_image+0x420/0x420
[ 1219.881129][T11643]  ? __lock_acquire+0x1431/0x7eb0
[ 1219.886211][T11643]  should_fail_ex+0x394/0x4c0
[ 1219.890942][T11643]  get_futex_key+0x16f/0x1030
[ 1219.895680][T11643]  ? futex_setup_timer+0xc0/0xc0
[ 1219.900668][T11643]  futex_wake+0x127/0x4f0
[ 1219.905049][T11643]  ? futex_wake_mark+0x150/0x150
[ 1219.910081][T11643]  do_futex+0x35d/0x3e0
[ 1219.914282][T11643]  ? __might_fault+0xaa/0x120
[ 1219.919015][T11643]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1219.924968][T11643]  ? __might_fault+0xc6/0x120
[ 1219.929689][T11643]  mm_release+0x184/0x3a0
[ 1219.934072][T11643]  ? exit_mm_release+0x30/0x30
[ 1219.938880][T11643]  ? lockdep_hardirqs_on+0x98/0x150
[ 1219.944136][T11643]  exit_mm+0xa4/0x340
[ 1219.948172][T11643]  ? sysctl_delayacct+0x220/0x220
[ 1219.953242][T11643]  ? do_exit+0x2530/0x2530
[ 1219.957738][T11643]  do_exit+0x909/0x2530
[ 1219.961964][T11643]  ? put_task_struct+0xc0/0xc0
[ 1219.966786][T11643]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1219.972814][T11643]  ? get_signal+0x100e/0x1390
[ 1219.977530][T11643]  ? lock_chain_count+0x20/0x20
[ 1219.982452][T11643]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1219.987534][T11643]  do_group_exit+0x22d/0x2f0
[ 1219.992173][T11643]  ? lockdep_hardirqs_on+0x98/0x150
[ 1219.992423][T11562] team0: Port device team_slave_0 added
[ 1219.997411][T11643]  get_signal+0x12a6/0x1390
[ 1219.997456][T11643]  arch_do_signal_or_restart+0xc2/0x7b0
[ 1219.997493][T11643]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1219.997519][T11643]  ? get_sigframe_size+0x20/0x20
[ 1219.997568][T11643]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1219.997604][T11643]  exit_to_user_mode_loop+0x70/0x110
[ 1219.997635][T11643]  exit_to_user_mode_prepare+0xee/0x180
[ 1219.997668][T11643]  syscall_exit_to_user_mode+0x1a/0x50
[ 1220.046076][T11643]  do_syscall_64+0x61/0xb0
[ 1220.050536][T11643]  ? clear_bhb_loop+0x40/0x90
[ 1220.055237][T11643]  ? clear_bhb_loop+0x40/0x90
[ 1220.060121][T11643]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1220.066047][T11643] RIP: 0033:0x7f3f9299e159
[ 1220.070485][T11643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1220.090206][T11643] RSP: 002b:00007f3f938c50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1220.098660][T11643] RAX: fffffffffffffe00 RBX: 00007f3f92c25fa8 RCX: 00007f3f9299e159
[ 1220.106683][T11643] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f92c25fa8
[ 1220.114673][T11643] RBP: 00007f3f92c25fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1220.122670][T11643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1220.130659][T11643] R13: 00007f3f92c26038 R14: 00007fffc878db30 R15: 00007fffc878dc18
[ 1220.138669][T11643]  </TASK>
[ 1220.165027][T11562] team0: Port device team_slave_1 added
[ 1220.228247][T11562] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1220.243871][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1220.301110][T11562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1220.326118][T11562] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1220.339174][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1220.369604][T11562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1220.620601][T11646] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1221.370205][T11562] hsr_slave_0: entered promiscuous mode
[ 1221.377242][T11562] hsr_slave_1: entered promiscuous mode
[ 1221.384119][T11562] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1221.391727][T11562] Cannot create hsr debugfs directory
[ 1221.431809][T11524] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1221.451343][T11524] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1221.540903][T11524] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1221.666746][T11524] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1223.010092][T11524] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1223.167172][T11653] =======================================================
[ 1223.167172][T11653] WARNING: The mand mount option has been deprecated and
[ 1223.167172][T11653]          and is ignored by this kernel. Remove the mand
[ 1223.167172][T11653]          option from the mount to silence this warning.
[ 1223.167172][T11653] =======================================================
[ 1223.426846][T11653] tmpfs: Too small a size for current use
[ 1223.694133][T11524] 8021q: adding VLAN 0 to HW filter on device team0
[ 1223.761761][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1223.769027][ T5068] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1223.808800][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1223.816038][ T5068] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1226.252954][ T9155] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1226.483513][ T9155] usb 9-1: Using ep0 maxpacket: 16
[ 1226.579847][ T9155] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1226.622312][T11524] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1226.641130][ T9155] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1226.663551][ T9155] usb 9-1: Product: syz
[ 1226.667780][ T9155] usb 9-1: Manufacturer: syz
[ 1226.672417][ T9155] usb 9-1: SerialNumber: syz
[ 1226.723784][ T9155] usb 9-1: config 0 descriptor??
[ 1226.769629][ T9155] visor 9-1:0.0: Sony Clie 3.5 converter detected
[ 1227.186551][ T9155] usb 9-1: clie_3_5_startup: get interface number failed: -71
[ 1227.222667][ T9155] visor: probe of 9-1:0.0 failed with error -71
[ 1227.246252][ T9155] usb 9-1: USB disconnect, device number 7
[ 1227.306164][T11524] veth0_vlan: entered promiscuous mode
[ 1227.447635][T11524] veth1_vlan: entered promiscuous mode
[ 1229.537532][T11524] veth0_macvtap: entered promiscuous mode
[ 1229.719963][   T42] hsr_slave_0: left promiscuous mode
[ 1229.743829][   T42] hsr_slave_1: left promiscuous mode
[ 1229.749987][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1229.768631][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1229.796176][   T42] bridge_slave_1: left allmulticast mode
[ 1229.801871][   T42] bridge_slave_1: left promiscuous mode
[ 1229.819913][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1229.898980][   T42] bridge_slave_0: left allmulticast mode
[ 1229.952917][   T42] bridge_slave_0: left promiscuous mode
[ 1229.958902][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1231.458969][T11711] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1234.415263][   T42] team0 (unregistering): Port device team_slave_1 removed
[ 1234.495004][   T42] team0 (unregistering): Port device team_slave_0 removed
[ 1234.609824][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1234.734244][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1234.886697][T11733] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1234.886697][T11733] 
[ 1234.900653][T11733] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1234.914192][T11733] CIFS: Attempting to mount //127.0.0.1/share
[ 1235.650023][T11733] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1236.388082][   T42] bond0 (unregistering): Released all slaves
[ 1236.606740][T11524] veth1_macvtap: entered promiscuous mode
[ 1236.669033][T11562] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1236.695746][T11562] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1236.747416][T11562] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1236.879752][T11562] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1237.199341][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1237.367244][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1237.509419][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1237.620785][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1237.681540][T11524] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1237.692279][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1237.703938][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1237.713885][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1237.724425][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1237.736021][T11524] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1237.747356][T11524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.756239][T11524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.765101][T11524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.774471][T11524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.090630][T10196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1238.126524][T10196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1238.306088][T11761] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1238.899112][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.908563][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.028211][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1239.039073][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1239.193284][T11562] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1239.305475][T11562] 8021q: adding VLAN 0 to HW filter on device team0
[ 1239.352273][T10196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1239.359531][T10196] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1239.385401][T10196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1239.392642][T10196] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1239.532441][T11562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1240.186662][T11775] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1243.261914][T11779] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1243.788427][T11562] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1244.715975][T11562] veth0_vlan: entered promiscuous mode
[ 1244.752804][T11562] veth1_vlan: entered promiscuous mode
[ 1244.945575][T11562] veth0_macvtap: entered promiscuous mode
[ 1245.001287][T11562] veth1_macvtap: entered promiscuous mode
[ 1245.113004][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1245.156304][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1245.180091][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1245.209863][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1245.249971][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1245.271444][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1245.295129][T11562] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1245.462078][T11811] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1246.081082][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1246.142222][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.152192][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1246.162794][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.172650][T11562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1246.183921][T11562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1246.205444][T11562] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1246.225660][T11562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1246.252926][T11562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1246.261693][T11562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1246.296727][T11562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1246.528672][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1246.558540][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1246.668405][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1246.679052][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1252.256888][T11851] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1252.283644][T11337] IPVS: starting estimator thread 0...
[ 1252.463224][T11852] IPVS: using max 16 ests per chain, 38400 per kthread
[ 1253.561556][T11868] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1253.561556][T11868] 
[ 1253.575548][T11868] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1253.589509][T11868] CIFS: Attempting to mount //127.0.0.1/share
[ 1254.346590][T11868] CIFS: VFS: error -4 create cifsd thread
[ 1254.493150][T11868] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1258.210413][T11896] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1259.277040][T11906] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1259.277040][T11906] 
[ 1259.292160][T11906] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1259.306188][T11906] CIFS: Attempting to mount //127.0.0.1/share
[ 1259.319433][T11906] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1259.461352][T11906] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1261.077451][T11913] binder: 11911:11913 ioctl c0306201 0 returned -14
[ 1267.716562][T11947] input: syz0 as /devices/virtual/input/input22
[ 1268.551684][T11950] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1268.551684][T11950] 
[ 1268.565846][T11950] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1268.578775][T11950] CIFS: Attempting to mount //127.0.0.1/share
[ 1268.591986][T11950] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1268.599663][T11950] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1269.583941][T11958] binder: 11954:11958 ioctl c0306201 0 returned -14
[ 1270.812505][T11965] Cannot find set identified by id 0 to match
[ 1271.991859][T11975] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1272.322639][ T7179] IPVS: starting estimator thread 0...
[ 1272.846614][T11980] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1272.846614][T11980] 
[ 1272.860455][T11980] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1272.863024][T11976] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1272.880506][T11980] CIFS: Attempting to mount //127.0.0.1/share
[ 1273.584775][T11980] CIFS: VFS: error -4 create cifsd thread
[ 1275.357125][T11980] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1275.789680][T11995] input: syz0 as /devices/virtual/input/input23
[ 1279.241173][T12015] binder: 12009:12015 ioctl c0306201 0 returned -14
[ 1280.609414][T12021] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1284.467189][T12042] input: syz0 as /devices/virtual/input/input24
[ 1288.409044][T12067] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1292.829358][T12085] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1292.829358][T12085] 
[ 1292.843394][T12085] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1292.858214][T12085] CIFS: Attempting to mount //127.0.0.1/share
[ 1293.016158][T12085] CIFS: VFS: error -4 create cifsd thread
[ 1293.156239][T12085] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1299.979889][T12118] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1299.979889][T12118] 
[ 1299.993738][T12118] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1300.006639][T12118] CIFS: Attempting to mount //127.0.0.1/share
[ 1300.781262][T12118] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1300.893377][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.922862][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1303.674977][T12137] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1303.815897][T12151] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1313.583566][T12204] befs: (nbd2): No write support. Marking filesystem read-only
[ 1313.591392][T12204] syz.2.1193: attempt to access beyond end of device
[ 1313.591392][T12204] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1313.829880][T12210] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1314.501226][T11337] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1314.835328][T11337] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1314.854998][T12216] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1314.939593][T11337] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1315.266569][T11337] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1315.511417][T11337] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1315.646968][T11337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1315.703356][T11337] usb 3-1: Product: syz
[ 1315.745993][T11337] usb 3-1: Manufacturer: syz
[ 1315.826879][T12209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1315.877229][T11337] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[ 1315.903228][T12217] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1315.961629][T11337] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[ 1317.003055][ T9155] usb 3-1: USB disconnect, device number 3
[ 1317.035882][ T9155] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[ 1317.054306][ T9155] garmin_gps 3-1:1.0: device disconnected
[ 1319.912848][   T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1321.772913][   T27] usb 3-1: Using ep0 maxpacket: 8
[ 1321.780205][   T27] usb 3-1: config 0 has no interfaces?
[ 1321.788829][   T27] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[ 1321.798239][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.806348][   T27] usb 3-1: Product: syz
[ 1321.812831][   T27] usb 3-1: Manufacturer: syz
[ 1321.817479][   T27] usb 3-1: SerialNumber: syz
[ 1321.841918][   T27] usb 3-1: config 0 descriptor??
[ 1323.925733][   T27] usb 3-1: USB disconnect, device number 4
[ 1323.940281][ T9775] Bluetooth: hci2: command 0x0406 tx timeout
[ 1324.651019][T12271] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[ 1327.427163][T12283] befs: (nbd3): No write support. Marking filesystem read-only
[ 1327.435400][T12283] syz.3.1210: attempt to access beyond end of device
[ 1327.435400][T12283] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1327.792945][T11296] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1328.017737][T11296] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1328.038812][T11296] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1328.062994][T11296] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1328.170013][T12295] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1328.933307][T11296] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1328.942682][T11296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1328.962824][T11296] usb 4-1: Product: syz
[ 1328.967189][T11296] usb 4-1: Manufacturer: syz
[ 1328.976483][T12285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1328.993776][T11296] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[ 1329.005808][T11296] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[ 1329.210195][T11296] usb 4-1: USB disconnect, device number 2
[ 1329.232080][T11296] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[ 1329.269663][T11296] garmin_gps 4-1:1.0: device disconnected
[ 1329.375858][ T9775] Bluetooth: hci4: command 0x0406 tx timeout
[ 1332.193938][T12311] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1333.333678][T12317] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1334.859443][T12327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1218'.
[ 1334.999946][T12332] warning: `syz.8.1217' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1341.340402][ T9142] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1341.599861][ T9142] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1342.256547][T12368] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1344.298496][T12376] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1344.770028][T12383] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1346.212983][T12388] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1349.231710][T12408] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8)
[ 1349.238592][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1349.247283][T12408] vhci_hcd vhci_hcd.0: Device attached
[ 1349.778990][T12409] vhci_hcd: connection closed
[ 1349.798541][T10093] vhci_hcd: stop threads
[ 1349.906974][T10093] vhci_hcd: release socket
[ 1349.982994][T10093] vhci_hcd: disconnect device
[ 1350.623540][T12419] befs: (nbd9): No write support. Marking filesystem read-only
[ 1350.679312][T12419] syz.9.1231: attempt to access beyond end of device
[ 1350.679312][T12419] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1351.112956][   T27] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1351.450958][T12427] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1351.450958][T12427] 
[ 1351.465268][T12427] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1351.481428][T12427] CIFS: Attempting to mount //127.0.0.1/share
[ 1351.820444][T12427] CIFS: VFS: error -4 create cifsd thread
[ 1351.826644][T12427] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1351.842869][   T27] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1351.863591][   T27] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1351.873802][   T27] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1351.889958][   T27] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1351.902838][   T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1351.911126][   T27] usb 10-1: Product: syz
[ 1351.915485][   T27] usb 10-1: Manufacturer: syz
[ 1351.953701][T12423] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1352.028926][   T27] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected
[ 1352.088888][   T27] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[ 1352.266218][ T5783] usb 10-1: USB disconnect, device number 6
[ 1352.311617][ T5783] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[ 1352.351286][ T5783] garmin_gps 10-1:1.0: device disconnected
[ 1352.457761][T12441] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1355.219502][T12456] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1359.185804][T12478] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1359.185804][T12478] 
[ 1359.199654][T12478] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1359.212640][T12478] CIFS: Attempting to mount //127.0.0.1/share
[ 1359.980532][T12478] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1360.574317][T12488] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1361.780223][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.787316][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1364.178130][T12499] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1367.581582][T12519] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1369.637203][T12530] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1370.928556][T12540] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1375.658500][T12572] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1379.107647][T12584] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1380.843053][T12590] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1382.189059][T12596] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1382.189059][T12596] 
[ 1382.203067][T12596] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1382.216052][T12596] CIFS: Attempting to mount //127.0.0.1/share
[ 1382.961613][T12596] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1385.954535][T12616] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1387.167404][T12624] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1393.185524][T12648] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1397.383157][T12669] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1398.260812][T12675] FAULT_INJECTION: forcing a failure.
[ 1398.260812][T12675] name failslab, interval 1, probability 0, space 0, times 0
[ 1398.273999][T12675] CPU: 1 PID: 12675 Comm: syz.2.1269 Not tainted syzkaller #0
[ 1398.281525][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1398.291646][T12675] Call Trace:
[ 1398.294961][T12675]  <TASK>
[ 1398.297899][T12675]  dump_stack_lvl+0x18c/0x250
[ 1398.302600][T12675]  ? show_regs_print_info+0x20/0x20
[ 1398.307834][T12675]  ? load_image+0x420/0x420
[ 1398.312379][T12675]  should_fail_ex+0x394/0x4c0
[ 1398.317128][T12675]  ? __sigqueue_alloc+0x32/0x520
[ 1398.322125][T12675]  should_failslab+0x9/0x20
[ 1398.326688][T12675]  slab_pre_alloc_hook+0x59/0x300
[ 1398.331745][T12675]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1398.336810][T12675]  ? __sigqueue_alloc+0x32/0x520
[ 1398.341770][T12675]  kmem_cache_alloc+0x5a/0x2c0
[ 1398.346562][T12675]  ? __sigqueue_alloc+0x40c/0x520
[ 1398.351696][T12675]  ? __sigqueue_alloc+0x32/0x520
[ 1398.356665][T12675]  __sigqueue_alloc+0x40c/0x520
[ 1398.361561][T12675]  __send_signal_locked+0x22f/0xe00
[ 1398.366826][T12675]  send_signal_locked+0x7dc/0x940
[ 1398.371876][T12675]  ? signal_wake_up_state+0x120/0x120
[ 1398.377284][T12675]  ? _raw_spin_lock+0x40/0x40
[ 1398.381994][T12675]  ? __up_read+0x2b8/0x6b0
[ 1398.386429][T12675]  force_sig_info_to_task+0x347/0x490
[ 1398.391846][T12675]  force_sig_fault+0xf1/0x150
[ 1398.396533][T12675]  ? force_sig_fault_to_task+0x140/0x140
[ 1398.402195][T12675]  ? __bad_area_nosemaphore+0x31e/0x690
[ 1398.407775][T12675]  exc_page_fault+0x64/0x100
[ 1398.412380][T12675]  asm_exc_page_fault+0x26/0x30
[ 1398.417249][T12675] RIP: 0033:0x7f617d1872df
[ 1398.421677][T12675] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 <c5> fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79
[ 1398.441300][T12675] RSP: 002b:00007f617e029bd8 EFLAGS: 00010283
[ 1398.447384][T12675] RAX: 0000000000000000 RBX: 00000000000003a3 RCX: 0000000000000000
[ 1398.455360][T12675] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f617e029c00
[ 1398.463338][T12675] RBP: 00007f617e029c00 R08: 0000000000000000 R09: 0000000000000000
[ 1398.471314][T12675] R10: 0000000000000000 R11: 0000000000000400 R12: cccccccccccccccd
[ 1398.479288][T12675] R13: 00007f617d426038 R14: 00007f617d425fa0 R15: 00007ffc92651d48
[ 1398.487281][T12675]  </TASK>
[ 1398.561024][T12673] input: syz0 as /devices/virtual/input/input25
[ 1399.098004][T12688] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1403.205789][T12707] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1405.772091][T12716] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1406.735305][T12724] input: syz0 as /devices/virtual/input/input26
[ 1411.729177][T12755] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1413.029120][T12760] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1414.233739][T12773] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1414.233739][T12773] 
[ 1414.247575][T12773] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1414.260178][T12773] CIFS: Attempting to mount //127.0.0.1/share
[ 1414.997641][T12773] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1415.531676][T12786] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1417.953531][T12791] input: syz0 as /devices/virtual/input/input27
[ 1422.646781][T12813] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1423.220612][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.235559][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.762836][ T9281] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1423.772144][T12825] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1423.772144][T12825] 
[ 1423.786101][T12825] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1423.798708][T12825] CIFS: Attempting to mount //127.0.0.1/share
[ 1423.986929][ T9281] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1424.006999][ T9281] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1424.025904][ T9281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1424.049492][ T9281] usb 4-1: config 0 descriptor??
[ 1424.066107][ T9281] pwc: Askey VC010 type 2 USB webcam detected.
[ 1424.586648][T12825] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1424.622909][ T9281] pwc: send_video_command error -71
[ 1424.630391][ T9281] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1425.007564][ T9281] Philips webcam: probe of 4-1:0.0 failed with error -71
[ 1425.023115][ T9281] usb 4-1: USB disconnect, device number 3
[ 1427.074043][T12850] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1430.447479][T12870] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1431.298393][T12873] tipc: Started in network mode
[ 1431.309139][T12873] tipc: Node identity 623051fcf0bb, cluster identity 4711
[ 1431.320223][T12873] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[ 1431.356812][T12872] tipc: Resetting bearer <eth:syzkaller0>
[ 1431.432572][T12872] tipc: Disabling bearer <eth:syzkaller0>
[ 1434.437122][T12896] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1434.842440][T12893] input: syz0 as /devices/virtual/input/input28
[ 1435.264289][T12899] Attempt to restore checkpoint with obsolete wellknown handles
[ 1437.292293][T12913] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1438.255398][T11525] Bluetooth: hci3: adv larger than maximum supported
[ 1438.255499][T11525] Bluetooth: hci3: Malformed LE Event: 0x0d
[ 1441.389489][T12936] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1444.047679][T12947] input: syz0 as /devices/virtual/input/input29
[ 1444.297659][T12955] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1445.367541][T12964] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1446.429356][T12981] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1446.429356][T12981] 
[ 1446.443279][T12981] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1446.455889][T12981] CIFS: Attempting to mount //127.0.0.1/share
[ 1448.210264][T12986] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1332'.
[ 1449.582630][T12981] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1451.363313][T12996] input: syz0 as /devices/virtual/input/input30
[ 1454.077229][T13012] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1460.829188][T13054] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1464.116875][T13072] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1465.212820][T13085] workqueue: Failed to create a rescuer kthread for wq "kmirrord": -EINTR
[ 1465.260116][T13084] input: syz0 as /devices/virtual/input/input31
[ 1466.922893][T13085] device-mapper: raid1: couldn't start kmirrord
[ 1466.948688][T13085] device-mapper: table: 248:0: mirror: Unknown error (-ENOMEM)
[ 1466.993826][   T28] audit: type=1326 audit(1791072405.440:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.8.1345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9299e159 code=0x7ffc0000
[ 1467.082825][T13085] device-mapper: ioctl: error adding target to table
[ 1467.092884][   T28] audit: type=1326 audit(1791072405.440:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.8.1345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9299e159 code=0x7ffc0000
[ 1467.149116][   T28] audit: type=1326 audit(1791072405.470:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.8.1345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3f9299e159 code=0x7ffc0000
[ 1471.407051][T13115] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1471.913002][T13137] input: syz0 as /devices/virtual/input/input32
[ 1477.234960][T13166] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1478.063675][T13170] befs: (nbd9): No write support. Marking filesystem read-only
[ 1478.071974][T13168] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1478.079638][T13170] syz.9.1370: attempt to access beyond end of device
[ 1478.079638][T13170] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1478.454315][T11337] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1480.561016][T11337] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1480.620742][T11337] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1480.645447][T11337] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1480.654764][T11337] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1480.663507][T11337] usb 10-1: Product: syz
[ 1480.667809][T11337] usb 10-1: Manufacturer: syz
[ 1480.868421][T13187] input: syz0 as /devices/virtual/input/input33
[ 1480.925009][ T9142] usb 10-1: USB disconnect, device number 7
[ 1481.738282][T13198] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1484.729903][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.738011][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.192258][T13213] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1487.611916][T13242] input: syz0 as /devices/virtual/input/input34
[ 1488.418643][T13250] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1495.377512][T13283] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1498.922624][T13305] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1499.745446][T13307] input: syz0 as /devices/virtual/input/input35
[ 1502.020680][T13318] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1509.720850][T13369] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1510.389983][T13361] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1511.292078][T13385] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1512.406200][T13379] input: syz0 as /devices/virtual/input/input36
[ 1518.142199][T13432] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1522.739090][T13454] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1522.739090][T13454] 
[ 1522.752976][T13454] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1522.766073][T13454] CIFS: Attempting to mount //127.0.0.1/share
[ 1523.085548][T13454] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1523.462414][ T9775] Bluetooth: hci4: command 0x0406 tx timeout
[ 1524.072530][T13479] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1525.923071][ T7179] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1526.140265][ T7179] usb 9-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[ 1527.384065][ T7179] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.392143][ T7179] usb 9-1: Product: syz
[ 1527.397187][ T7179] usb 9-1: Manufacturer: syz
[ 1527.401824][ T7179] usb 9-1: SerialNumber: syz
[ 1527.434335][ T7179] ums-karma 9-1:1.0: USB Mass Storage device detected
[ 1527.500431][ T7179] ums-karma 9-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[ 1527.500431][ T7179]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 1527.873424][ T7179] scsi host1: usb-storage 9-1:1.0
[ 1527.956086][T13511] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1527.956086][T13511] 
[ 1527.969815][T13511] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1527.983091][T13511] CIFS: Attempting to mount //127.0.0.1/share
[ 1528.070753][ T9142] usb 9-1: USB disconnect, device number 8
[ 1529.368781][T13511] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1529.403459][T13516] tty tty4: ldisc open failed (-12), clearing slot 3
[ 1535.126305][T13566] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1539.234877][T13581] workqueue: Failed to create a rescuer kthread for wq "kmirrord": -EINTR
[ 1539.351029][T13581] device-mapper: raid1: couldn't start kmirrord
[ 1539.374049][T13581] device-mapper: table: 248:0: mirror: Unknown error (-ENOMEM)
[ 1539.381760][T13581] device-mapper: ioctl: error adding target to table
[ 1543.030247][T13615] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1545.276798][T13631] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1545.276798][T13631] 
[ 1545.454588][T13631] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1545.508872][T13631] CIFS: Attempting to mount //127.0.0.1/share
[ 1546.110272][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.116799][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.982526][T13631] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1548.032893][T13653] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1550.258669][T13667] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1555.498714][T13697] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1555.498714][T13697] 
[ 1555.624508][T13697] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1557.597510][T13697] CIFS: Attempting to mount //127.0.0.1/share
[ 1557.801008][T13697] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1558.724857][T13715] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1562.279532][T13729] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1562.279532][T13729] 
[ 1562.298841][T13729] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1562.313122][T13729] CIFS: Attempting to mount //127.0.0.1/share
[ 1562.452162][T13729] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1566.942514][T13759] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1566.942514][T13759] 
[ 1567.029504][T13759] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1567.178331][T13759] CIFS: Attempting to mount //127.0.0.1/share
[ 1569.758658][T13759] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1578.961390][T13850] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1582.650542][T13868] comedi comedi1: adq12b: I/O port conflict (0x10,16)
[ 1585.928654][T13898] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1588.053564][T13905] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1588.390885][T13905] nbd: must specify a size in bytes for the device
[ 1594.305256][T13942] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1600.930660][T13980] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1600.930660][T13980] 
[ 1600.944680][T13980] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1600.957904][T13980] CIFS: Attempting to mount //127.0.0.1/share
[ 1601.711868][T13980] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1605.178408][T14006] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1607.538973][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.545661][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1613.013525][T14064] usb usb8: usbfs: process 14064 (syz.9.1528) did not claim interface 0 before use
[ 1615.884971][T14086] befs: (nbd9): No write support. Marking filesystem read-only
[ 1615.893026][T14086] syz.9.1538: attempt to access beyond end of device
[ 1615.893026][T14086] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1616.262744][ T9063] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1616.495019][ T9063] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1616.512019][ T9063] usb 10-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1616.523406][ T9063] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1616.539187][ T9063] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1616.552800][ T9063] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1616.583649][ T9063] usb 10-1: Product: syz
[ 1616.592605][ T9063] usb 10-1: Manufacturer: syz
[ 1616.621618][ T9063] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected
[ 1616.641111][ T9063] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[ 1616.653282][ T9063] garmin_gps: probe of ttyUSB0 failed with error -8
[ 1616.860862][ T9063] usb 10-1: USB disconnect, device number 8
[ 1616.884553][ T9063] garmin_gps 10-1:1.0: device disconnected
[ 1617.885023][T14122] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1618.547895][   T28] audit: type=1326 audit(1791072812.992:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.9.1545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac8899e159 code=0x0
[ 1625.516899][T14168] befs: (nbd8): No write support. Marking filesystem read-only
[ 1625.572554][T14168] syz.8.1553: attempt to access beyond end of device
[ 1625.572554][T14168] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1626.041832][ T9063] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1626.268675][ T9063] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1626.371639][ T9063] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1626.503266][ T9063] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1626.624845][ T9063] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1626.787775][ T9063] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1626.906991][ T9063] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1626.983271][ T9063] usb 9-1: Product: syz
[ 1627.039455][ T9063] usb 9-1: Manufacturer: syz
[ 1627.079774][ T9063] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected
[ 1627.107477][ T9063] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90
[ 1627.188983][ T9063] garmin_gps: probe of ttyUSB0 failed with error -90
[ 1627.290304][ T9063] usb 9-1: USB disconnect, device number 9
[ 1627.300058][ T9063] garmin_gps 9-1:1.0: device disconnected
[ 1632.123116][T14226] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR
[ 1632.243013][T14226] device-mapper: table: 248:0: mirror: Unknown error (-ENOMEM)
[ 1632.288096][T14235] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1632.288096][T14235] 
[ 1632.302175][T14235] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1632.315156][T14235] CIFS: Attempting to mount //127.0.0.1/share
[ 1632.329534][T14235] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1632.337659][T14235] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1632.680370][T14226] device-mapper: ioctl: error adding target to table
[ 1633.321229][T14245] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1633.321229][T14245] 
[ 1633.335384][T14245] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1633.348531][T14245] CIFS: Attempting to mount //127.0.0.1/share
[ 1635.182935][T14245] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1636.882872][T14281] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1638.017830][T14297] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1638.017830][T14297] 
[ 1638.032701][T14297] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1638.045665][T14297] CIFS: Attempting to mount //127.0.0.1/share
[ 1638.060313][T14297] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1638.069077][T14297] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1638.578819][T14303] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1638.578819][T14303] 
[ 1638.592844][T14303] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1638.606003][T14303] CIFS: Attempting to mount //127.0.0.1/share
[ 1639.343351][T14303] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1639.662646][ T5878] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1640.047287][ T9775] Bluetooth: hci0: unexpected event for opcode 0x0035
[ 1640.620006][ T5878] usb 3-1: Using ep0 maxpacket: 32
[ 1640.638675][ T5878] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1640.657751][ T5878] usb 3-1: config 0 has no interface number 0
[ 1640.694658][ T5878] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1640.739467][ T5878] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1640.761112][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1640.769184][ T5878] usb 3-1: Product: syz
[ 1640.813561][ T5878] usb 3-1: Manufacturer: syz
[ 1640.846119][ T5878] usb 3-1: SerialNumber: syz
[ 1640.879079][ T5878] usb 3-1: config 0 descriptor??
[ 1640.915547][ T5878] smsc75xx v1.0.0
[ 1644.439903][ T5878] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[ 1645.349578][ T5878] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[ 1645.359900][ T5878] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1645.370983][ T5878] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1645.381573][ T5878] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1645.392238][ T5878] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1645.402654][ T5878] smsc75xx: probe of 3-1:0.184 failed with error -71
[ 1645.413707][ T5878] usb 3-1: USB disconnect, device number 5
[ 1653.329138][T14440] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR
[ 1653.534560][T14440] device-mapper: table: 248:0: mirror: Unknown error (-ENOMEM)
[ 1653.652026][T14440] device-mapper: ioctl: error adding target to table
[ 1657.916670][T14483] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1663.051106][T14528] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1663.051106][T14528] 
[ 1663.065113][T14528] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1663.078389][T14528] CIFS mount error: No usable UNC path provided in device string!
[ 1663.078389][T14528] 
[ 1663.088982][T14528] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1663.755924][T14541] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[ 1663.769901][T14540] tipc: Resetting bearer <eth:syzkaller0>
[ 1663.916747][T14540] tipc: Disabling bearer <eth:syzkaller0>
[ 1668.340129][T14606] FAULT_INJECTION: forcing a failure.
[ 1668.340129][T14606] name failslab, interval 1, probability 0, space 0, times 0
[ 1670.377484][T14606] CPU: 0 PID: 14606 Comm: syz.2.1636 Not tainted syzkaller #0
[ 1670.385009][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1670.395071][T14606] Call Trace:
[ 1670.398358][T14606]  <TASK>
[ 1670.401314][T14606]  dump_stack_lvl+0x18c/0x250
[ 1670.406016][T14606]  ? show_regs_print_info+0x20/0x20
[ 1670.411257][T14606]  ? load_image+0x420/0x420
[ 1670.415781][T14606]  ? verify_lock_unused+0x140/0x140
[ 1670.421022][T14606]  should_fail_ex+0x394/0x4c0
[ 1670.425739][T14606]  should_failslab+0x9/0x20
[ 1670.430264][T14606]  slab_pre_alloc_hook+0x59/0x300
[ 1670.435307][T14606]  kmem_cache_alloc+0x5a/0x2c0
[ 1670.440097][T14606]  ? skb_clone+0x1eb/0x370
[ 1670.444548][T14606]  skb_clone+0x1eb/0x370
[ 1670.448812][T14606]  __netlink_deliver_tap+0x411/0x7f0
[ 1670.454119][T14606]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1670.459352][T14606]  netlink_deliver_tap+0x19c/0x1b0
[ 1670.464474][T14606]  netlink_sendskb+0x68/0x130
[ 1670.469189][T14606]  netlink_ack+0xcd5/0x1160
[ 1670.473704][T14606]  ? lock_chain_count+0x20/0x20
[ 1670.478580][T14606]  ? netlink_dump+0xec0/0xec0
[ 1670.483269][T14606]  ? slab_free_freelist_hook+0x130/0x1a0
[ 1670.488912][T14606]  ? nfnetlink_rcv+0x22c4/0x2490
[ 1670.493861][T14606]  ? __kmem_cache_free+0xba/0x1f0
[ 1670.498907][T14606]  nfnetlink_rcv+0x21ba/0x2490
[ 1670.503704][T14606]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 1670.509282][T14606]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1670.515197][T14606]  ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30
[ 1670.521839][T14606]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1670.527080][T14606]  ? __rcu_read_unlock+0x7c/0xd0
[ 1670.532036][T14606]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1670.537253][T14606]  netlink_unicast+0x7b1/0x930
[ 1670.542055][T14606]  netlink_sendmsg+0x8d0/0xbf0
[ 1670.546845][T14606]  ? netlink_getsockopt+0x590/0x590
[ 1670.552068][T14606]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1670.557650][T14606]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1670.562950][T14606]  ? security_socket_sendmsg+0x80/0xa0
[ 1670.568426][T14606]  ? netlink_getsockopt+0x590/0x590
[ 1670.573679][T14606]  ____sys_sendmsg+0x61b/0x980
[ 1670.578471][T14606]  ? lockdep_hardirqs_on+0x98/0x150
[ 1670.583791][T14606]  ? __sys_sendmsg_sock+0x30/0x30
[ 1670.588843][T14606]  ? ___sys_sendmsg+0x28b/0x360
[ 1670.593717][T14606]  ___sys_sendmsg+0x2a6/0x360
[ 1670.598415][T14606]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1670.603250][T14606]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1670.608137][T14606]  ? __x64_sys_sendmsg+0x80/0x80
[ 1670.613196][T14606]  ? lockdep_hardirqs_on+0x98/0x150
[ 1670.618425][T14606]  do_syscall_64+0x55/0xb0
[ 1670.622893][T14606]  ? clear_bhb_loop+0x40/0x90
[ 1670.627583][T14606]  ? clear_bhb_loop+0x40/0x90
[ 1670.632272][T14606]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1670.638184][T14606] RIP: 0033:0x7f617d19e159
[ 1670.642620][T14606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1670.662235][T14606] RSP: 002b:00007f617e02a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1670.670657][T14606] RAX: ffffffffffffffda RBX: 00007f617d425fa0 RCX: 00007f617d19e159
[ 1670.678640][T14606] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1670.686620][T14606] RBP: 00007f617d23506b R08: 0000000000000000 R09: 0000000000000000
[ 1670.694597][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1670.702570][T14606] R13: 00007f617d426038 R14: 00007f617d425fa0 R15: 00007ffc92651d48
[ 1670.710569][T14606]  </TASK>
[ 1670.767184][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1670.773670][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1674.584338][T14643] IPVS: rr: UDP 127.0.0.1:5060 - no destination available
[ 1681.363491][T14675] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1684.618623][T14696] tipc: Started in network mode
[ 1684.623579][T14696] tipc: Node identity fa8d889a515, cluster identity 4711
[ 1684.665105][T14696] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[ 1684.706265][T14694] tipc: Resetting bearer <eth:syzkaller0>
[ 1684.806502][T14694] tipc: Disabling bearer <eth:syzkaller0>
[ 1687.785838][T14715] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1692.615739][T14753] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1692.615739][T14753] 
[ 1692.714517][T14753] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1692.751650][T14753] CIFS: Attempting to mount //127.0.0.1/share
[ 1693.193058][T14753] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1693.608164][T14765] tipc: Enabled bearer <eth:syzkaller0>, priority 1
[ 1693.635027][T14763] tipc: Resetting bearer <eth:syzkaller0>
[ 1693.715750][T14763] tipc: Disabling bearer <eth:syzkaller0>
[ 1695.306751][T14780] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1697.223491][T14767] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1698.267038][T14803] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1698.267038][T14803] 
[ 1698.288286][T14805] befs: (nbd3): No write support. Marking filesystem read-only
[ 1698.298686][T14805] syz.3.1678: attempt to access beyond end of device
[ 1698.298686][T14805] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1698.346148][T14803] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1698.384302][T14803] CIFS: Attempting to mount //127.0.0.1/share
[ 1698.873345][ T9063] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1699.017718][T14803] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1699.068389][ T9063] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1699.101240][ T9063] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1699.143240][ T9063] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1699.177236][ T9063] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1699.190535][ T9063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1699.214399][ T9063] usb 4-1: Product: syz
[ 1699.218651][ T9063] usb 4-1: Manufacturer: syz
[ 1699.248753][T14805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1699.270734][ T9063] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[ 1699.524142][ T9063] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[ 1699.541524][ T9063] usb 4-1: USB disconnect, device number 5
[ 1699.568472][ T9063] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[ 1699.578776][ T9063] garmin_gps 4-1:1.0: device disconnected
[ 1699.949932][T14834] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1701.930406][T14844] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1703.659702][T14875] befs: (nbd2): No write support. Marking filesystem read-only
[ 1703.703696][T14875] syz.2.1690: attempt to access beyond end of device
[ 1703.703696][T14875] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1703.985883][T14887] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1704.142848][  T971] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1705.295230][T14893] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1705.404180][T14854] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1705.414661][  T971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1705.432280][  T971] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1705.453020][  T971] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1705.500303][  T971] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1705.529401][  T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1705.560960][  T971] usb 3-1: Product: syz
[ 1705.571050][  T971] usb 3-1: Manufacturer: syz
[ 1705.600247][T14875] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1708.035806][  T971] usb 3-1: can't set config #1, error -71
[ 1708.053387][  T971] usb 3-1: USB disconnect, device number 6
[ 1709.657026][T14933] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1709.758356][T14935] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1709.758356][T14935] 
[ 1709.772474][T14935] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1709.785072][T14935] CIFS: Attempting to mount //127.0.0.1/share
[ 1711.129738][T14944] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1711.281918][T14935] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1711.622981][T14955] befs: (nbd8): No write support. Marking filesystem read-only
[ 1711.641731][T14955] syz.8.1705: attempt to access beyond end of device
[ 1711.641731][T14955] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1712.091514][   T56] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1713.131819][   T56] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.161234][   T56] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1713.178877][   T56] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1713.216682][   T56] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1713.243179][   T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1713.271334][   T56] usb 9-1: Product: syz
[ 1713.275685][   T56] usb 9-1: Manufacturer: syz
[ 1713.305344][T14958] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1713.363677][   T56] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected
[ 1714.156514][   T56] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[ 1714.168166][   T56] usb 9-1: USB disconnect, device number 10
[ 1714.178752][   T56] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[ 1714.189364][   T56] garmin_gps 9-1:1.0: device disconnected
[ 1716.106155][T14998] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1716.212385][T15003] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1719.208588][T15022] befs: (nbd9): No write support. Marking filesystem read-only
[ 1719.216917][T15022] syz.9.1719: attempt to access beyond end of device
[ 1719.216917][T15022] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1719.710536][T11296] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1719.797245][ T9775] Bluetooth: hci0: unexpected event for opcode 0x0035
[ 1720.689448][T11296] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1720.740500][T11296] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1720.770506][T11296] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1720.852234][T11296] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1720.880451][T11296] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1720.888606][T11296] usb 10-1: Product: syz
[ 1720.935457][T11296] usb 10-1: Manufacturer: syz
[ 1720.968620][T15023] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1720.995579][T11296] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected
[ 1721.051267][T11296] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[ 1721.248788][T15047] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1721.248788][T15047] 
[ 1721.263013][T15047] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1721.275737][T15047] CIFS: Attempting to mount //127.0.0.1/share
[ 1721.289706][ T9155] usb 10-1: USB disconnect, device number 9
[ 1721.334639][ T9155] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[ 1721.367277][ T9155] garmin_gps 10-1:1.0: device disconnected
[ 1722.045409][T15047] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1722.812033][T15078] workqueue: Failed to create a rescuer kthread for wq "kmirrord": -EINTR
[ 1722.822098][T15078] device-mapper: raid1: couldn't start kmirrord
[ 1722.891551][T15078] device-mapper: table: 248:0: mirror: Unknown error (-ENOMEM)
[ 1722.899147][T15078] device-mapper: ioctl: error adding target to table
[ 1724.590171][T15085] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1724.838038][T15090] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1727.101880][T15118] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1727.101880][T15118] 
[ 1727.115714][T15118] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1727.128319][T15118] CIFS: Attempting to mount //127.0.0.1/share
[ 1728.059828][T15126] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:2": -EINTR
[ 1728.063327][T15118] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1728.094087][T15107] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1729.611395][T15133] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1729.761289][T15128] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR
[ 1729.763548][T15128] device-mapper: table: 248:0: mirror: Unknown error (-ENOMEM)
[ 1729.790334][T15128] device-mapper: ioctl: error adding target to table
[ 1730.411928][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.419006][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.633915][T15158] binder: BINDER_SET_CONTEXT_MGR already set
[ 1731.640126][T15158] binder: 15151:15158 ioctl 4018620d 200000000100 returned -16
[ 1734.008257][ T9775] Bluetooth: hci3: unexpected event for opcode 0x0035
[ 1736.213360][T15181] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1738.978400][T15188] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1743.869878][T15234] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1745.689275][T15247] workqueue: Failed to create a rescuer kthread for wq "kmirrord": -EINTR
[ 1745.797440][T15247] device-mapper: raid1: couldn't start kmirrord
[ 1745.851889][T15247] device-mapper: table: 248:0: mirror: Unknown error (-ENOMEM)
[ 1746.075544][T15247] device-mapper: ioctl: error adding target to table
[ 1746.877341][T15242] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1747.334962][T15267] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1747.334962][T15267] 
[ 1747.349293][T15267] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1747.361877][T15267] CIFS: Attempting to mount //127.0.0.1/share
[ 1748.134653][T15276] overlayfs: failed to resolve './file1': -2
[ 1748.144211][T15267] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1751.209674][   T28] audit: type=1326 audit(1791073201.671:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15287 comm="syz.2.1762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f617d19e159 code=0x0
[ 1755.206600][T15307] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1757.856986][T15337] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1763.875916][T15373] overlayfs: failed to resolve './file1': -2
[ 1765.870343][T15384] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1770.645801][T15397] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1771.997000][ T9775] Bluetooth: hci3: unexpected event for opcode 0x0035
[ 1772.716253][T15436] binder: BINDER_SET_CONTEXT_MGR already set
[ 1772.722352][T15436] binder: 15430:15436 ioctl 4018620d 200000000100 returned -16
[ 1777.187516][T15456] workqueue: Failed to create a rescuer kthread for wq "kmirrord": -EINTR
[ 1778.080510][T15468] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1778.653595][T15456] device-mapper: raid1: couldn't start kmirrord
[ 1778.741589][T15456] device-mapper: table: 248:0: mirror: Unknown error (-ENOMEM)
[ 1778.884629][T15456] device-mapper: ioctl: error adding target to table
[ 1780.084353][T15481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1780.095377][T15481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1780.110851][T15481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1780.122242][T15481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1780.185366][T15481] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1780.203455][T15481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1782.393074][T15481] Bluetooth: hci1: command tx timeout
[ 1782.751096][T15478] chnl_net:caif_netlink_parms(): no params data found
[ 1785.405398][T15481] Bluetooth: hci1: command tx timeout
[ 1785.813638][T15478] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1785.820766][T15478] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1785.833736][T15478] bridge_slave_0: entered allmulticast mode
[ 1785.841862][T15478] bridge_slave_0: entered promiscuous mode
[ 1785.852295][T15478] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1785.860088][T15478] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1785.873810][T15478] bridge_slave_1: entered allmulticast mode
[ 1785.920062][T15478] bridge_slave_1: entered promiscuous mode
[ 1786.089556][T15478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1786.354087][T15478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1787.193827][T15478] team0: Port device team_slave_0 added
[ 1787.264078][T15478] team0: Port device team_slave_1 added
[ 1787.432374][T15481] Bluetooth: hci1: command tx timeout
[ 1788.479581][T15548] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1789.512283][T15481] Bluetooth: hci1: command tx timeout
[ 1789.969750][T15478] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1790.051946][T15478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1790.195409][T15478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1790.296575][T15478] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1790.347116][T15478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1790.472003][T15478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1791.849897][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.856457][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1796.109892][  T133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1796.453424][T15478] hsr_slave_0: entered promiscuous mode
[ 1796.481770][T15478] hsr_slave_1: entered promiscuous mode
[ 1796.488620][T15478] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1796.501225][T15478] Cannot create hsr debugfs directory
[ 1796.660068][  T133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1797.128661][  T133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1797.482151][  T133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1799.220194][T15604] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1799.688340][T15610] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1799.688340][T15610] 
[ 1799.703228][T15610] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1799.715833][T15610] CIFS: Attempting to mount //127.0.0.1/share
[ 1800.462136][T15610] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1805.313760][T15654] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1805.313760][T15654] 
[ 1805.327568][T15654] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1805.340224][T15654] CIFS: Attempting to mount //127.0.0.1/share
[ 1806.063138][T15654] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1810.473926][  T133] tipc: Left network mode
[ 1813.235607][T15693] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1819.307037][T15478] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1819.574678][T15478] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1819.689439][T15478] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1821.540982][T15720] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request
[ 1821.672466][T15478] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1821.849771][ T9775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1821.871879][ T9775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1821.880232][ T9775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1821.895218][ T9775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1821.902975][ T9775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1821.912662][ T9775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1822.857635][  T133] hsr_slave_0: left promiscuous mode
[ 1822.888285][  T133] hsr_slave_1: left promiscuous mode
[ 1822.985956][  T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1823.018007][  T133] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1823.139010][  T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1823.146517][  T133] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1823.987946][ T9775] Bluetooth: hci2: command tx timeout
[ 1824.130381][  T133] bridge_slave_1: left allmulticast mode
[ 1824.136089][  T133] bridge_slave_1: left promiscuous mode
[ 1824.167989][  T133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1824.206645][  T133] bridge_slave_0: left allmulticast mode
[ 1824.212544][  T133] bridge_slave_0: left promiscuous mode
[ 1824.226163][  T133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1824.425731][  T133] veth1_macvtap: left promiscuous mode
[ 1824.435478][  T133] veth0_macvtap: left promiscuous mode
[ 1824.441594][  T133] veth1_vlan: left promiscuous mode
[ 1824.457238][  T133] veth0_vlan: left promiscuous mode
[ 1824.909440][ T9775] Bluetooth: hci0: unexpected event for opcode 0x0035
[ 1826.068399][ T9775] Bluetooth: hci2: command tx timeout
[ 1826.627336][  T133] team0 (unregistering): Port device team_slave_1 removed
[ 1826.736368][  T133] team0 (unregistering): Port device team_slave_0 removed
[ 1826.867060][  T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1826.952490][  T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1827.682381][  T133] bond0 (unregistering): Released all slaves
[ 1829.547956][ T9775] Bluetooth: hci2: command tx timeout
[ 1831.586996][ T9775] Bluetooth: hci2: command tx timeout
[ 1831.810527][T15478] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1832.128455][T15478] 8021q: adding VLAN 0 to HW filter on device team0
[ 1832.253606][T15751] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1832.253606][T15751] 
[ 1832.267497][T15751] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1832.280120][T15751] CIFS: Attempting to mount //127.0.0.1/share
[ 1832.374891][T15176] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1832.382119][T15176] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1832.546500][T15723] chnl_net:caif_netlink_parms(): no params data found
[ 1832.585025][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1832.592227][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1832.609936][  T133] IPVS: stop unused estimator thread 0...
[ 1832.821980][  T133] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1832.962130][  T133] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1832.995427][T15723] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1833.004372][T15723] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1833.030658][T15751] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1833.096877][T15723] bridge_slave_0: entered allmulticast mode
[ 1833.104555][T15723] bridge_slave_0: entered promiscuous mode
[ 1833.142414][T15723] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1833.151381][T15723] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1833.163748][T15723] bridge_slave_1: entered allmulticast mode
[ 1833.174176][T15723] bridge_slave_1: entered promiscuous mode
[ 1833.336008][  T133] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.412136][T15723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1833.614983][T15723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1833.729757][  T133] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.883102][T15723] team0: Port device team_slave_0 added
[ 1834.093798][T15723] team0: Port device team_slave_1 added
[ 1834.612068][T15723] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1834.619135][T15723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1834.645846][T15723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1834.659034][T15723] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1834.666016][T15723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1834.696691][T15723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1834.970173][T15723] hsr_slave_0: entered promiscuous mode
[ 1835.033737][T15723] hsr_slave_1: entered promiscuous mode
[ 1835.097428][T15723] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1835.147736][T15723] Cannot create hsr debugfs directory
[ 1841.131970][T15481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1841.145547][T15481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1841.157357][T15481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1841.170267][T15481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1841.226466][T15481] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1841.233883][T15481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1844.395453][T15803] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1844.405122][ T9775] Bluetooth: hci1: command tx timeout
[ 1845.547894][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1860'.
[ 1847.392730][ T9775] Bluetooth: hci1: command tx timeout
[ 1847.732584][T15800] chnl_net:caif_netlink_parms(): no params data found
[ 1847.891721][T15723] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1847.924630][T15723] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1847.957361][T15723] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1848.169745][T15723] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1850.511742][ T9775] Bluetooth: hci1: command tx timeout
[ 1850.728117][T15800] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1850.745187][T15800] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1850.752502][T15800] bridge_slave_0: entered allmulticast mode
[ 1850.776670][T15800] bridge_slave_0: entered promiscuous mode
[ 1850.821743][T15800] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1850.834716][T15800] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1850.842032][T15800] bridge_slave_1: entered allmulticast mode
[ 1850.866716][T15800] bridge_slave_1: entered promiscuous mode
[ 1850.926124][  T133] hsr_slave_0: left promiscuous mode
[ 1850.962563][  T133] hsr_slave_1: left promiscuous mode
[ 1850.969324][  T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1850.998101][  T133] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1851.007656][  T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1851.024618][  T133] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1851.032949][  T133] bridge_slave_1: left allmulticast mode
[ 1851.045001][  T133] bridge_slave_1: left promiscuous mode
[ 1851.050826][  T133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1851.078285][  T133] bridge_slave_0: left allmulticast mode
[ 1851.084008][  T133] bridge_slave_0: left promiscuous mode
[ 1851.095018][  T133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1851.138410][  T133] veth1_macvtap: left promiscuous mode
[ 1851.144138][  T133] veth0_macvtap: left promiscuous mode
[ 1851.151925][  T133] veth1_vlan: left promiscuous mode
[ 1851.159436][  T133] veth0_vlan: left promiscuous mode
[ 1852.549336][ T9775] Bluetooth: hci1: command tx timeout
[ 1852.633222][  T133] team0 (unregistering): Port device team_slave_1 removed
[ 1852.683510][  T133] team0 (unregistering): Port device team_slave_0 removed
[ 1852.733029][  T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1852.784927][  T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1853.167133][  T133] bond0 (unregistering): Released all slaves
[ 1853.271651][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.278737][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.305021][T15800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1853.339049][T15800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1853.523643][T15800] team0: Port device team_slave_0 added
[ 1853.539937][T15850] binder: BINDER_SET_CONTEXT_MGR already set
[ 1853.546349][T15850] binder: 15848:15850 ioctl 4018620d 200000000100 returned -16
[ 1853.602526][T15800] team0: Port device team_slave_1 added
[ 1853.682943][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1867'.
[ 1854.144796][T15846] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1854.411681][T15800] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1854.433405][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1854.472252][T15800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1854.486905][T15800] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1854.493901][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1856.094243][T15800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1856.172456][  T133] IPVS: stop unused estimator thread 0...
[ 1856.238722][T15723] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1856.287758][T15723] 8021q: adding VLAN 0 to HW filter on device team0
[ 1856.370718][T15800] hsr_slave_0: entered promiscuous mode
[ 1856.385243][T15800] hsr_slave_1: entered promiscuous mode
[ 1856.397875][T15800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1856.409543][T15800] Cannot create hsr debugfs directory
[ 1856.479988][T10093] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1856.487251][T10093] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1856.877886][T10093] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1856.885164][T10093] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1857.617471][T15864] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1857.617471][T15864] 
[ 1857.631515][T15864] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1857.644114][T15864] CIFS: Attempting to mount //127.0.0.1/share
[ 1858.246017][ T9775] Bluetooth: hci0: unexpected event for opcode 0x0035
[ 1858.978713][T15864] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1860.272320][T15885] binder: BINDER_SET_CONTEXT_MGR already set
[ 1860.278631][T15885] binder: 15883:15885 ioctl 4018620d 200000000100 returned -16
[ 1860.492844][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'.
[ 1862.813183][T15723] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1863.232557][T15800] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1863.261675][T15800] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1863.284917][T15800] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1863.340792][T15800] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1863.382100][T15723] veth0_vlan: entered promiscuous mode
[ 1863.402222][  T133] hsr_slave_0: left promiscuous mode
[ 1863.424599][  T133] hsr_slave_1: left promiscuous mode
[ 1863.434745][  T133] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1863.458065][  T133] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1863.469045][  T133] bridge_slave_1: left allmulticast mode
[ 1863.479230][  T133] bridge_slave_1: left promiscuous mode
[ 1863.485312][  T133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1863.497717][  T133] bridge_slave_0: left allmulticast mode
[ 1863.521339][  T133] bridge_slave_0: left promiscuous mode
[ 1863.527641][  T133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1864.255213][  T133] team0 (unregistering): Port device team_slave_1 removed
[ 1864.318191][  T133] team0 (unregistering): Port device team_slave_0 removed
[ 1864.404550][  T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1864.487396][  T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1864.860889][  T133] bond0 (unregistering): Released all slaves
[ 1864.943083][T15895] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1865.055371][T15723] veth1_vlan: entered promiscuous mode
[ 1865.196213][T15723] veth0_macvtap: entered promiscuous mode
[ 1865.245928][T15723] veth1_macvtap: entered promiscuous mode
[ 1865.306692][T15723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1865.333060][T15723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1865.349415][T15723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1865.361378][T15723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1865.389252][T15723] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1865.413077][T15723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1865.429368][T15723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1865.440269][T15723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1865.458283][T15723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1865.500906][T15723] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1865.545477][T15723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1865.572458][T15723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1865.586377][T15723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1865.595719][T15723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1865.670003][T15800] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1866.718975][T15800] 8021q: adding VLAN 0 to HW filter on device team0
[ 1866.799205][T10093] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1866.806494][T10093] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1866.866489][T10093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1866.943319][T10093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1866.975842][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1866.983084][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1867.145257][ T9775] Bluetooth: hci4: unexpected event for opcode 0x0035
[ 1867.447401][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1867.799302][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1868.038140][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1882'.
[ 1874.062704][T15982] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1874.349748][T15800] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1874.554537][T15800] veth0_vlan: entered promiscuous mode
[ 1874.770881][ T9775] Bluetooth: hci4: unexpected event for opcode 0x0035
[ 1875.624379][T15995] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1875.624379][T15995] 
[ 1875.638269][T15995] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1875.650962][T15995] CIFS: Attempting to mount //127.0.0.1/share
[ 1875.729764][T15800] veth1_vlan: entered promiscuous mode
[ 1875.922448][T15995] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1875.940325][T15800] veth0_macvtap: entered promiscuous mode
[ 1876.002900][T15800] veth1_macvtap: entered promiscuous mode
[ 1876.172512][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'.
[ 1876.519895][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1876.651264][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1876.772847][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1876.896104][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1876.962767][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1877.169641][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1878.106394][T15800] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1878.551624][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1878.738004][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1878.905357][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1879.075235][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1879.234096][T15800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1879.409019][T15800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1879.552279][T15800] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1879.599636][T15800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1879.634802][T15800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1879.651270][T15800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1879.660089][T15800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1882.108031][ T5068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1882.177394][ T5068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1882.426699][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1882.594882][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1885.200799][ T9775] Bluetooth: hci0: unexpected event for opcode 0x1004
[ 1886.684914][T16072] befs: (nbd2): No write support. Marking filesystem read-only
[ 1886.693724][T16072] syz.2.1902: attempt to access beyond end of device
[ 1886.693724][T16072] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1887.050712][   T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1888.369941][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'.
[ 1888.387996][   T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1888.550157][   T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1890.155205][   T27] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1890.867184][   T27] usb 3-1: string descriptor 0 read error: -71
[ 1891.642121][   T27] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1892.440193][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1892.452526][   T27] usb 3-1: can't set config #1, error -71
[ 1892.461070][   T27] usb 3-1: USB disconnect, device number 7
[ 1899.070759][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'.
[ 1901.842819][T16155] block device autoloading is deprecated and will be removed.
[ 1906.620069][ T9775] Bluetooth: hci0: unexpected event for opcode 0x0035
[ 1908.648534][ T9775] Bluetooth: hci4: unexpected event for opcode 0x0035
[ 1911.311378][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1923'.
[ 1914.701991][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.751578][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1916.076895][ T9063] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1916.195984][ T9775] Bluetooth: hci0: unexpected event for opcode 0x0035
[ 1917.350173][ T9063] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00
[ 1917.359517][ T9063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1917.833200][ T9063] mvusb_mdio: probe of 3-1:1.0 failed with error -5
[ 1918.256342][T11296] usb 3-1: USB disconnect, device number 8
[ 1922.282118][T16273] binder: BINDER_SET_CONTEXT_MGR already set
[ 1922.289235][T16273] binder: 16265:16273 ioctl 4018620d 200000000100 returned -16
[ 1922.307783][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'.
[ 1922.522221][T16275] FAULT_INJECTION: forcing a failure.
[ 1922.522221][T16275] name failslab, interval 1, probability 0, space 0, times 0
[ 1923.725944][T16275] CPU: 0 PID: 16275 Comm: syz.0.1935 Not tainted syzkaller #0
[ 1923.733489][T16275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1923.743597][T16275] Call Trace:
[ 1923.746917][T16275]  <TASK>
[ 1923.749881][T16275]  dump_stack_lvl+0x18c/0x250
[ 1923.754598][T16275]  ? show_regs_print_info+0x20/0x20
[ 1923.759834][T16275]  ? load_image+0x420/0x420
[ 1923.764374][T16275]  ? __might_sleep+0xe0/0xe0
[ 1923.769000][T16275]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1923.774053][T16275]  should_fail_ex+0x394/0x4c0
[ 1923.778767][T16275]  should_failslab+0x9/0x20
[ 1923.783304][T16275]  slab_pre_alloc_hook+0x59/0x300
[ 1923.788372][T16275]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[ 1923.794116][T16275]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[ 1923.800118][T16275]  __kmem_cache_alloc_node+0x53/0x250
[ 1923.805527][T16275]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[ 1923.811272][T16275]  __kmalloc+0xa7/0x240
[ 1923.815472][T16275]  tomoyo_realpath_from_path+0xe6/0x5c0
[ 1923.821054][T16275]  ? tomoyo_domain+0xd6/0x120
[ 1923.825772][T16275]  tomoyo_path_number_perm+0x248/0x5e0
[ 1923.831280][T16275]  ? tomoyo_path_number_perm+0x217/0x5e0
[ 1923.836957][T16275]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1923.842586][T16275]  ? __fget_files+0x28/0x460
[ 1923.847217][T16275]  security_file_ioctl+0x70/0xa0
[ 1923.852188][T16275]  __se_sys_ioctl+0x48/0x170
[ 1923.856817][T16275]  do_syscall_64+0x55/0xb0
[ 1923.861266][T16275]  ? clear_bhb_loop+0x40/0x90
[ 1923.865964][T16275]  ? clear_bhb_loop+0x40/0x90
[ 1923.870681][T16275]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1923.876617][T16275] RIP: 0033:0x7f1516f9e159
[ 1923.881050][T16275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1923.900719][T16275] RSP: 002b:00007f1517e14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1923.909156][T16275] RAX: ffffffffffffffda RBX: 00007f1517225fa0 RCX: 00007f1516f9e159
[ 1923.917147][T16275] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003
[ 1923.925139][T16275] RBP: 00007f151703506b R08: 0000000000000000 R09: 0000000000000000
[ 1923.933146][T16275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1923.941166][T16275] R13: 00007f1517226038 R14: 00007f1517225fa0 R15: 00007ffcab6d5dc8
[ 1923.949172][T16275]  </TASK>
[ 1925.673799][T16275] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1926.010860][T16290] netlink: 'syz.2.1939': attribute type 4 has an invalid length.
[ 1926.173368][T16297] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1926.173368][T16297] 
[ 1926.188360][T16297] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1926.202570][T16297] CIFS: Attempting to mount //127.0.0.1/share
[ 1927.775665][T16297] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1929.858658][ T9775] Bluetooth: hci4: unexpected event for opcode 0x0035
[ 1933.553011][T16327] netlink: 'syz.8.1945': attribute type 4 has an invalid length.
[ 1933.560841][T16327] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1945'.
[ 1939.294170][ T9063] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1939.558405][T16368] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1939.558405][T16368] 
[ 1939.572357][T16368] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1939.585535][T16368] CIFS: Attempting to mount //127.0.0.1/share
[ 1939.597131][T16368] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1939.605086][T16368] CIFS: VFS: cifs_mount failed w/return code = -101
[ 1939.773471][ T9063] usb 2-1: Using ep0 maxpacket: 16
[ 1939.785622][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1939.803955][ T9063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1939.814875][ T9063] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1939.833954][ T9063] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1939.843280][ T9063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1940.308510][ T9063] usb 2-1: config 0 descriptor??
[ 1940.771245][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1947'.
[ 1941.536559][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.614303][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.622539][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.630352][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.639655][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.655793][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.663113][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.723833][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.731168][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.760253][ T9063] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1941.805471][ T9063] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input37
[ 1943.855716][ T9063] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 1944.366834][T16401] netlink: 'syz.1.1955': attribute type 3 has an invalid length.
[ 1944.423576][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'.
[ 1944.456819][T16401] Bluetooth: MGMT ver 1.22
[ 1944.547728][T16401] loop3: detected capacity change from 0 to 7
[ 1944.619209][T16401] Dev loop3: unable to read RDB block 7
[ 1944.663604][T16401]  loop3: AHDI p1 p2
[ 1944.679843][T16401] loop3: partition table partially beyond EOD, truncated
[ 1944.714166][T16401] loop3: p1 start 1702000233 is beyond EOD, truncated
[ 1944.773901][T11337] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1944.965612][T11337] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1945.013451][T11337] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1945.045645][T11337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1945.073788][T11337] usb 1-1: config 0 descriptor??
[ 1945.095093][T11337] pwc: Askey VC010 type 2 USB webcam detected.
[ 1945.144476][ T7179] usb 2-1: reset high-speed USB device number 5 using dummy_hcd
[ 1947.305074][ T9775] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1947.306195][ T7179] usb 2-1: device reset changed ep0 maxpacket size!
[ 1947.325094][ T9063] usb 2-1: USB disconnect, device number 5
[ 1947.415318][T11337] pwc: send_video_command error -71
[ 1947.420681][T11337] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1947.448819][T11337] Philips webcam: probe of 1-1:0.0 failed with error -71
[ 1947.469212][T11337] usb 1-1: USB disconnect, device number 5
[ 1948.043017][T11337] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1948.614746][T11337] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1949.345409][ T9775] Bluetooth: hci2: command 0x0406 tx timeout
[ 1949.787123][T11337] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1949.802790][T11337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1949.834348][T11337] usb 1-1: config 0 descriptor??
[ 1950.821815][T11337] usb 1-1: can't set config #0, error -71
[ 1950.954006][T11337] usb 1-1: USB disconnect, device number 6
[ 1951.133636][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'.
[ 1958.272616][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'.
[ 1961.221738][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'.
[ 1962.931427][ T9063] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1963.127244][ T9063] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1963.176068][ T9063] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1963.206695][ T9063] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1963.231981][ T9063] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 1963.248898][ T9063] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1966.717849][ T9063] cxacru 9-1:1.0: send of cm 0x90 failed (-104)
[ 1966.725972][ T9063] cxacru 9-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[ 1966.744756][ T9063] cxacru: probe of 9-1:1.0 failed with error -22
[ 1968.517163][ T5878] usb 9-1: USB disconnect, device number 11
[ 1968.770651][T15481] Bluetooth: hci1: command 0x0406 tx timeout
[ 1973.381148][ T9063] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1973.604494][ T9063] usb 2-1: Using ep0 maxpacket: 8
[ 1973.637926][ T9063] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1973.676940][ T9063] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1973.710013][ T9063] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1973.766564][ T9063] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1973.826190][ T9063] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1973.845642][ T9063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1976.032925][ T9063] usb 2-1: usb_control_msg returned -71
[ 1976.038616][ T9063] usbtmc 2-1:16.0: can't read capabilities
[ 1976.097238][ T9063] usb 2-1: USB disconnect, device number 7
[ 1976.137250][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.144844][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1979.966554][T16614] netlink: 'syz.0.1994': attribute type 4 has an invalid length.
[ 1979.974545][T16614] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1994'.
[ 1982.049221][T16638] EXT4-fs (sda1): shut down requested (0)
[ 1988.828263][ T5878] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1989.041496][ T5878] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1990.830462][ T5878] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1990.848750][ T5878] usb 9-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[ 1991.174886][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1991.183471][ T5878] usb 9-1: Product: syz
[ 1991.187756][ T5878] usb 9-1: Manufacturer: syz
[ 1991.214652][ T5878] mos7840 9-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 1992.144573][T16706] netlink: 'syz.2.2005': attribute type 4 has an invalid length.
[ 1992.152692][T16706] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2005'.
[ 1993.803742][ T5878] mos7840: probe of ttyUSB0 failed with error -71
[ 1993.849911][ T5878] usb 9-1: USB disconnect, device number 12
[ 1993.864685][ T5878] mos7840 9-1:1.0: device disconnected
[ 1994.260472][T16722] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001
[ 1994.271620][T16722] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1994.287600][ T5878] IPVS: starting estimator thread 0...
[ 1994.308036][T16722] autofs4:pid:16722:autofs_fill_super: called with bogus options
[ 1994.521106][T16723] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1995.967962][T16731] syzkaller0: entered promiscuous mode
[ 1995.982384][T16731] syzkaller0: entered allmulticast mode
[ 2002.213923][T16776] netlink: 'syz.1.2015': attribute type 4 has an invalid length.
[ 2002.222042][T16776] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2015'.
SYZFAIL: posix_spawnp failed
 (errno 5: Input/output error)
[ 2004.993986][T15178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2005.282643][T15178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2005.422669][T15178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2005.594911][T15178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2006.374994][T15178] tipc: Left network mode
[ 2007.372645][T15178] hsr_slave_0: left promiscuous mode
[ 2007.379389][T15178] hsr_slave_1: left promiscuous mode
[ 2007.385688][T15178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2007.395803][T15178] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2007.404366][T15178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2007.412175][T15178] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2007.420546][T15178] bridge_slave_1: left allmulticast mode
[ 2007.426390][T15178] bridge_slave_1: left promiscuous mode
[ 2007.432189][T15178] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2007.442686][T15178] bridge_slave_0: left allmulticast mode
[ 2007.450195][T15178] bridge_slave_0: left promiscuous mode
[ 2007.456891][T15178] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2007.482752][T15178] veth1_macvtap: left promiscuous mode
[ 2007.489424][T15178] veth0_macvtap: left promiscuous mode
[ 2007.495133][T15178] veth1_vlan: left promiscuous mode
[ 2007.501633][T15178] veth0_vlan: left promiscuous mode
[ 2008.113092][T15178] team0 (unregistering): Port device team_slave_1 removed
[ 2008.159246][T15178] team0 (unregistering): Port device team_slave_0 removed
[ 2008.209870][T15178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2008.261334][T15178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2008.611920][T15178] bond0 (unregistering): Released all slaves
[ 2008.959297][T15178] IPVS: stop unused estimator thread 0...
[ 2009.310653][ T3475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2009.395092][ T3475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2009.479565][ T3475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2009.565912][ T3475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2009.769533][ T3475] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2009.840233][ T3475] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2009.926078][ T3475] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2010.007143][ T3475] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2010.211915][ T3475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2010.299053][ T3475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2010.387339][ T3475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2010.462918][ T3475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2012.429959][ T3475] hsr_slave_0: left promiscuous mode
[ 2012.436292][ T3475] hsr_slave_1: left promiscuous mode
[ 2012.442360][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2012.450460][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2012.469948][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2012.477604][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2012.485302][ T3475] bridge_slave_1: left allmulticast mode
[ 2012.491121][ T3475] bridge_slave_1: left promiscuous mode
[ 2012.498056][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2012.508014][ T3475] bridge_slave_0: left allmulticast mode
[ 2012.513812][ T3475] bridge_slave_0: left promiscuous mode
[ 2012.520154][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2012.537018][ T3475] hsr_slave_0: left promiscuous mode
[ 2012.543534][ T3475] hsr_slave_1: left promiscuous mode
[ 2012.549576][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2012.559389][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2012.567452][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2012.574879][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2012.583170][ T3475] bridge_slave_1: left allmulticast mode
[ 2012.589125][ T3475] bridge_slave_1: left promiscuous mode
[ 2012.594913][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2012.603883][ T3475] bridge_slave_0: left allmulticast mode
[ 2012.610197][ T3475] bridge_slave_0: left promiscuous mode
[ 2012.616074][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2012.631692][ T3475] hsr_slave_0: left promiscuous mode
[ 2012.638834][ T3475] hsr_slave_1: left promiscuous mode
[ 2012.644743][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2012.652268][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2012.661777][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2012.669463][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2012.677416][ T3475] bridge_slave_1: left allmulticast mode
[ 2012.683090][ T3475] bridge_slave_1: left promiscuous mode
[ 2012.695211][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2012.705726][ T3475] bridge_slave_0: left allmulticast mode
[ 2012.711495][ T3475] bridge_slave_0: left promiscuous mode
[ 2012.718076][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2012.777682][ T3475] veth1_macvtap: left promiscuous mode
[ 2012.783268][ T3475] veth0_macvtap: left promiscuous mode
[ 2012.789432][ T3475] veth1_vlan: left promiscuous mode
[ 2012.794868][ T3475] veth0_vlan: left promiscuous mode
[ 2012.804720][ T3475] veth1_macvtap: left promiscuous mode
[ 2012.810489][ T3475] veth0_macvtap: left promiscuous mode
[ 2012.816358][ T3475] veth1_vlan: left promiscuous mode
[ 2012.822802][ T3475] veth0_vlan: left promiscuous mode
[ 2012.832250][ T3475] veth1_macvtap: left promiscuous mode
[ 2012.838153][ T3475] veth0_macvtap: left promiscuous mode
[ 2012.843768][ T3475] veth1_vlan: left promiscuous mode
[ 2012.849267][ T3475] veth0_vlan: left promiscuous mode