last executing test programs:

14.949854368s ago: executing program 2 (id=787):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setlease(r0, 0x400, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)
fcntl$setlease(r0, 0x400, 0x2)

13.806432389s ago: executing program 2 (id=794):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000031c0)={0x20000014})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000003240))
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x7, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0x0, 0x6, {"4ca56ae0e82187425e000303ff010001"}, 0x4, 0x0, 0x1}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18)
close_range(r2, r6, 0x2)

12.720454878s ago: executing program 0 (id=795):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping', 0x4, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
openat$sndtimer(0xffffff9c, 0x0, 0x20480)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c", 0xc5)

12.65950972s ago: executing program 2 (id=797):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000031c0)={0x20000014})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000003240))
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x7, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0x0, 0x6, {"4ca56ae0e82187425e000303ff010001"}, 0x4, 0x0, 0x1}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18)
close_range(r2, r7, 0x2)

10.294946314s ago: executing program 2 (id=802):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x200, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r4 = add_key$user(&(0x7f0000002700), &(0x7f00000026c0)={'syz', 0x0}, &(0x7f0000000140)="5b25ad4d73d6528f703d", 0xa, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
add_key$keyring(&(0x7f0000002640), &(0x7f0000002680)={'syz', 0x1}, 0x0, 0x0, 0x0)
writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e14c", 0x58}], 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000706010400000000000000002200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0xc886)
r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8102)
writev(r8, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xa)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)

10.146429818s ago: executing program 1 (id=804):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0)
getpid()
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket(0xa, 0x3, 0x3a)
sendmmsg$inet6(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000880)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @hoplimit={{0x10, 0x29, 0x34, 0x6}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x4}}}], 0x44}}, {{&(0x7f00000009c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, 0x0}}], 0x2, 0x4004800)
writev(r0, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0))
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})
mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa02, 0x0)

9.340479559s ago: executing program 0 (id=805):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r1=>0x0)
migrate_pages(r1, 0xfffffeff, 0x0, 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'})
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0xa0}, 0x1, 0x7}, 0x0)
lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000200)={<r5=>0x0, <r6=>0x0}, 0x0)
write(r6, &(0x7f00000001c0)='functionfs\x00', 0xb)
read(r5, &(0x7f0000000100), 0xb)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6)
mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
getsockopt$sock_int(r7, 0x1, 0xc, 0x0, &(0x7f00000004c0))

9.32208987s ago: executing program 3 (id=806):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0])
close(r0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x10, 0x0, 0x39555659, 0x1, 0x9, [{0x3, 0x8001}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0xff}, {0x9, 0x80000000}, {0x80000001, 0x80000000}, {0x4, 0x8000}, {0x80000001}], 0xff, 0xff, 0x8, 0x2}})
socket$inet_sctp(0x2, 0x1, 0x84)
add_key$fscrypt_v1(&(0x7f0000000280), 0x0, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_io_uring_setup(0x36b9, 0x0, 0x0, &(0x7f00000006c0), 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000003c0)={<r5=>r2, 0x7, 0x7f, 0x1})
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000440)=@assoc_value={<r7=>0x0}, &(0x7f0000000500)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000005c0)={r7, 0x9}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000600)={r7, @in={{0x2, 0x4e24, @local}}, 0x10000, 0xff, 0x4, 0x4c, 0x18, 0x1, 0x3}, 0x9c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000480), r8)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x1d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e94, 0x4, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x3, 0x401ed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367, 0x0, r5}}], 0x1, 0x0, 0x0)
getpgrp(0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00')
r10 = epoll_create(0x10000)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000340)={0x9000000d})

9.255026432s ago: executing program 4 (id=807):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000031c0)={0x20000014})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000003240))
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x7, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0x0, 0x6, {"4ca56ae0e82187425e000303ff010001"}, 0x4, 0x0, 0x1}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18)
close_range(r2, r6, 0x2)

9.177956073s ago: executing program 1 (id=808):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setns(0xc9, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x8d00, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000001400)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000001480)=<r4=>0x0, &(0x7f00000014c0)=<r5=>0x0, &(0x7f0000001500)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000001540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}})
io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000015c0)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"})
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000001600)=0x7)
r7 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000001640)=0xd)
r8 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000001300), 0x4)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000001380)=[{0x6, 0x0, 0xa, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001b40)={0x1, &(0x7f0000001b80)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000001bc0)={[0x9]}, 0x8)
getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000001a40)=0xe4)
getgroups(0x8, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff])
sendmmsg$unix(r10, &(0x7f0000001b00)=[{{&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001700)="140f3699628446b160a2e4578c8f839878cadf29956a2edb0402aeaa327ee62caacfc43fb0b578c2774923e22ebba448ad8e254305e9395b5fc6404a1bee3b4b9ac3030325a96d4a960b6e191974bfeb1da8f44e31fc17c4bb92926520863af8f0e8fa98ec2862c72df3e25261ae34c32670fe3f349257f63a11549d8ac396e6aebe45fc2bf8cec400e8ad9fe9eb8b95937a33eea318f0f5f708d7a6bc6a2efe0d96be8a30765ef29cf3b3386c93dc04aac2f446f60d4ef56d56dabcd0857cd12e559c69de42e8cab08abb78d22a4cab879cca4058f9f83ab1bb860041cabef4bc0127ac0d1a92efe450eda8d7fa1779543019a7016acfe02e6ee5d6", 0xfc}, {&(0x7f0000001800)="89678a7947612fc8712e8ba99107af7cef8c10c23fada01ce686d5f9edfe9cb1338fbacb752f700876eb1273798159790840fbadc991c265879b1b88402e189dab496d3bc9ea4fa702c0388f6e32e0abe3d5a9d2e17476009b8e51a2a1681156cef946def86e6f8938b8d38f6f23a78366f27c968571bbbc0378d366f4a0d5fe6933ed022c38dc0443ee36c46a25c6ed852712577384dbc1c61785267583200833da2ed1cf710a00335d52cbdc154c7ede9744b6eeab75a16cf643cdb68d277f030411a816bd2262b7bc270820d72d921e7151de3b3bee44e433a8c1d23d503b0279677399e6ec73", 0xe8}], 0x2, &(0x7f0000001ac0)=[@cred={{0x18, 0x1, 0x2, {0x0, r11}}}], 0x18, 0x4}}], 0x1, 0x20000810)
pread64(r10, &(0x7f00000000c0)=""/4103, 0x1007, 0x4b)
ioctl(r0, 0x8915, &(0x7f0000000080)='wpan0')

6.786665428s ago: executing program 4 (id=809):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0xfffc, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0xfffffffd}, 0x9c)
bind$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000ac0)='X', 0x34000, 0x0, &(0x7f0000000b00)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c)

6.773794688s ago: executing program 3 (id=810):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2da, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x4}, {0x10, 0x0, 0x8}]})
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$inet_udp(0x2, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000140))
r6 = socket(0x21, 0x2, 0x10000000000002)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x11, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r7, 0x2007ffb)
sendfile(r0, r7, 0x0, 0x1000000201002)

6.71084197s ago: executing program 0 (id=811):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket(0x400000000010, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_emit_ethernet(0x46, &(0x7f0000000d00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x7}}}}}}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
pipe2(0x0, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = dup2(r1, r1)
read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
lsetxattr$security_evm(&(0x7f0000000280)='.\x00', &(0x7f0000000340), &(0x7f0000000440)=@md5={0x1, "646bb176d923d769ecfede2b025e6097"}, 0x11, 0x2)
writev(r3, &(0x7f0000000540)=[{0x0}], 0x1)

5.554815641s ago: executing program 4 (id=812):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000031c0)={0x20000014})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000003240))
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x7, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0x0, 0x6, {"4ca56ae0e82187425e000303ff010001"}, 0x4, 0x0, 0x1}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18)
close_range(r2, r7, 0x2)

5.373437536s ago: executing program 3 (id=813):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="100038de570923a2ec2294010003000000000000009194c3000085e00000420051a9e1141352549c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000700)={r2})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]})
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@acquire]})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000400)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]})

5.261540169s ago: executing program 0 (id=814):
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0x1b}}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, 0xffffffffffffffff, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000780)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x4008054)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e00)='cmdline\x00')
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18011bbc21"], 0x0, 0x9b5, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fe8, '\x00', 0x0, 0x2}, 0x94)
r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$nfc_raw(r6, &(0x7f0000000c00)={0x27, r3, 0x0, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.240922359s ago: executing program 4 (id=815):
setns(0xc9, 0x0)
socket(0x2a, 0x2, 0x9)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000100)={0xc, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x4a102)
writev(r0, &(0x7f0000000380)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(0x0, 0x0)
socket$kcm(0x2, 0x7, 0x2)
r1 = socket(0x10, 0x2, 0x0)
rseq(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000540)=0x1, 0x4)
bind$rds(r2, &(0x7f0000000580)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f00000005c0)={&(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000700)=[{0x0}], 0x1, &(0x7f00000007c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x42}], 0x10, 0x40080}, 0x4000000)
recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/216, 0xd8}, 0x2}], 0x2, 0x10000, 0x0)
clock_adjtime(0x0, 0x0)
write(r1, &(0x7f0000000940)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r3 = syz_open_dev$vim2m(&(0x7f0000000a00), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000b00)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x8, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a})

3.559783045s ago: executing program 2 (id=816):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping', 0x4, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c)
openat$sndtimer(0xffffff9c, 0x0, 0x20480)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c", 0xc5)

3.558655105s ago: executing program 3 (id=817):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}]}}]}, 0x40}}, 0x0)

3.507242546s ago: executing program 4 (id=818):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0)
getpid()
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000100), 0x4)
sendmmsg$inet6(r1, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000880)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @hoplimit={{0x10, 0x29, 0x34, 0x6}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x4}}}], 0x44}}, {{&(0x7f00000009c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, 0x0}}], 0x2, 0x4004800)
writev(r0, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0))
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})
mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa02, 0x0)

3.468497927s ago: executing program 0 (id=819):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000031c0)={0x20000014})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000003240))
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x7, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0x0, 0x6, {"4ca56ae0e82187425e000303ff010001"}, 0x4, 0x0, 0x1}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18)
close_range(r2, r6, 0x2)

731.942441ms ago: executing program 1 (id=820):
openat(0xffffffffffffff9c, &(0x7f0000000940)='./gadget\x00', 0x40, 0x100)
pipe2(&(0x7f0000000700), 0x0)
socket(0x10, 0x803, 0x0)
setns(0xc9, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0)

727.160921ms ago: executing program 4 (id=821):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0xa5, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525"], 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
munmap(&(0x7f0000583000/0x4000)=nil, 0x4000)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x200, 0x0, 0x3c0}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000004c0)=<r8=>0x0)
r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=<r11=>0x0)
r12 = syz_open_dev$ublk_chdev(0x0, r9, 0x2)
r13 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$get_keyring_id(0x0, r13, 0x1)
syz_ublk_setup_queues(r12, r11, &(0x7f00000005c0)={0x0, 0x3e0e, 0x400, 0x1, 0x28e, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x3, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x4, 0x0, 0xb1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, 0x0)
prlimit64(r1, 0x8, &(0x7f0000000300)={0x1, 0x8}, &(0x7f0000000340))
write(r0, &(0x7f0000000140)='1', 0x1)
socket$igmp(0x2, 0x3, 0x2)

688.346692ms ago: executing program 3 (id=822):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000800))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000880)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000008c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00009db000/0x2000)=nil, 0x400000, 0x1, 0x2})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

536.138556ms ago: executing program 0 (id=823):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev_mnt\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x2b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040990a01000000010200010902190001010080320904"], 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0)

412.062669ms ago: executing program 1 (id=824):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket(0x400000000010, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_emit_ethernet(0x46, &(0x7f0000000d00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x7}}}}}}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
pipe2(0x0, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = dup2(r1, r1)
read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
lsetxattr$security_evm(&(0x7f0000000280)='.\x00', &(0x7f0000000340), &(0x7f0000000440)=@md5={0x1, "646bb176d923d769ecfede2b025e6097"}, 0x11, 0x2)
writev(r3, &(0x7f0000000540)=[{0x0}], 0x1)

228.736905ms ago: executing program 1 (id=825):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000031c0)={0x20000014})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000003240))
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x7, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0x0, 0x6, {"4ca56ae0e82187425e000303ff010001"}, 0x4, 0x0, 0x1}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18)
close_range(r2, r7, 0x2)

94.271468ms ago: executing program 1 (id=826):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x200, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r4 = add_key$user(&(0x7f0000002700), &(0x7f00000026c0)={'syz', 0x0}, &(0x7f0000000140)="5b25ad4d73d6528f703d", 0xa, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
add_key$keyring(&(0x7f0000002640), &(0x7f0000002680)={'syz', 0x1}, 0x0, 0x0, 0x0)
writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e14c", 0x58}], 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000706010400000000000000002200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0xc886)
r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8102)
writev(r8, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xa)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)

70.511169ms ago: executing program 2 (id=827):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="500404"], 0x7)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x0)
write$nci(r0, &(0x7f0000000440)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xf, {0x1, 0xd, "299506ad626d94209abe7953d5"}}, 0x12)

0s ago: executing program 3 (id=828):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="100038de570923a2ec2294010003000000000000009194c3000085e00000420051a9e1141352549c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@acquire]})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000400)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]})

kernel console output (not intermixed with test programs):

 Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.370615][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.379310][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.391392][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.392250][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.399279][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.406207][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.413239][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.427572][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.457390][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.487679][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.544466][ T4281] rxe_eth0 speed is unknown, defaulting to 1000
[   76.552551][ T4281] rxe_eth0 speed is unknown, defaulting to 1000
[   76.565490][ T4271] rdma_rxe: rxe_register_device failed with error -23
[   76.566335][ T4273] rdma_rxe: rxe_register_device failed with error -23
[   76.573792][ T4271] rdma_rxe: failed to add rxe_eth0
[   76.582239][ T4279] rdma_rxe: rxe_register_device failed with error -23
[   76.586335][ T4281] rxe_eth0 speed is unknown, defaulting to 1000
[   76.592182][ T4279] rdma_rxe: failed to add rxe_eth0
[   76.616347][ T4272] rdma_rxe: rxe_register_device failed with error -23
[   76.623333][ T4272] rdma_rxe: failed to add rxe_eth0
[   76.637830][ T4273] rdma_rxe: failed to add rxe_eth0
[   76.806847][ T4281] infiniband rxe0: set active
[   76.821201][ T4281] infiniband rxe0: added rxe_eth0
[   76.833045][   T32] rxe_eth0 speed is unknown, defaulting to 1000
[   76.907611][ T4281] RDS/IB: rxe0: added
[   76.912294][ T4281] smc: adding ib device rxe0 with port count 1
[   76.919366][ T4281] smc:    ib device rxe0 port 1 has pnetid 
[   76.931769][ T4276] rxe_eth0 speed is unknown, defaulting to 1000
[   76.950139][ T4281] rxe_eth0 speed is unknown, defaulting to 1000
[   77.080312][ T4281] rxe_eth0 speed is unknown, defaulting to 1000
[   77.117334][ T4273] chnl_net:caif_netlink_parms(): no params data found
[   77.208080][ T4271] chnl_net:caif_netlink_parms(): no params data found
[   77.231568][ T4272] chnl_net:caif_netlink_parms(): no params data found
[   77.252829][ T4279] chnl_net:caif_netlink_parms(): no params data found
[   77.374845][ T4281] rxe_eth0 speed is unknown, defaulting to 1000
[   77.448172][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.466809][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.488147][ T4273] device bridge_slave_0 entered promiscuous mode
[   77.537105][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.545409][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.567015][ T4273] device bridge_slave_1 entered promiscuous mode
[   77.600821][ T4281] rxe_eth0 speed is unknown, defaulting to 1000
[   77.664378][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.678024][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.686635][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.700090][ T4271] device bridge_slave_0 entered promiscuous mode
[   77.708496][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.716667][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.734911][ T4272] device bridge_slave_0 entered promiscuous mode
[   77.771397][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.783020][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.796749][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.807344][ T4271] device bridge_slave_1 entered promiscuous mode
[   77.817926][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.825671][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.834781][ T4272] device bridge_slave_1 entered promiscuous mode
[   77.848306][ T4281] rxe_eth0 speed is unknown, defaulting to 1000
[   77.856459][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.873668][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.882085][ T4279] device bridge_slave_0 entered promiscuous mode
[   77.935010][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.942234][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.965039][ T4279] device bridge_slave_1 entered promiscuous mode
[   77.995082][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.021823][ T4273] team0: Port device team_slave_0 added
[   78.038644][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.049847][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.070709][ T4273] team0: Port device team_slave_1 added
[   78.084142][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.132955][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.157009][ T4271] team0: Port device team_slave_0 added
[   78.165588][ T4272] team0: Port device team_slave_0 added
[   78.172295][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.180144][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.207392][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.221614][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.242501][ T4271] team0: Port device team_slave_1 added
[   78.269354][ T4272] team0: Port device team_slave_1 added
[   78.276222][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.283303][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.315330][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.406804][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.415268][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.445931][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.461026][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.475045][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.506205][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.523741][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.530878][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.558343][ T4280] Bluetooth: hci1: command 0x0409 tx timeout
[   78.558353][ T4287] Bluetooth: hci4: command 0x0409 tx timeout
[   78.564619][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[   78.564768][ T4280] Bluetooth: hci0: command 0x0409 tx timeout
[   78.570897][ T4287] Bluetooth: hci3: command 0x0409 tx timeout
[   78.579415][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.603989][ T4279] team0: Port device team_slave_0 added
[   78.638942][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.650383][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.681485][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.699871][ T4279] team0: Port device team_slave_1 added
[   78.729693][ T4272] device hsr_slave_0 entered promiscuous mode
[   78.737930][ T4272] device hsr_slave_1 entered promiscuous mode
[   78.770718][ T4273] device hsr_slave_0 entered promiscuous mode
[   78.782651][ T4273] device hsr_slave_1 entered promiscuous mode
[   78.790277][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.803186][ T4273] Cannot create hsr debugfs directory
[   78.869660][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.876865][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.905672][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.919298][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.926789][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.954440][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.980676][ T4271] device hsr_slave_0 entered promiscuous mode
[   78.987538][ T4271] device hsr_slave_1 entered promiscuous mode
[   78.995912][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.003729][ T4271] Cannot create hsr debugfs directory
[   79.021160][   T22] rxe_eth0 speed is unknown, defaulting to 1000
[   79.152450][ T4279] device hsr_slave_0 entered promiscuous mode
[   79.178688][ T4279] device hsr_slave_1 entered promiscuous mode
[   79.199392][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.217981][ T4279] Cannot create hsr debugfs directory
[   79.248582][ T4281] chnl_net:caif_netlink_parms(): no params data found
[   79.562919][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.571221][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.580851][ T4281] device bridge_slave_0 entered promiscuous mode
[   79.626915][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.634471][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.642682][ T4281] device bridge_slave_1 entered promiscuous mode
[   79.703623][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.732581][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.749581][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.774768][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.814806][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.838277][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.848887][ T3933] infiniband rxe0: set active
[   79.870299][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.881947][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.899008][ T4360] rxe_eth0 speed is unknown, defaulting to 1000
[   79.917565][ T4281] team0: Port device team_slave_0 added
[   79.937166][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.959884][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.974006][ T4281] team0: Port device team_slave_1 added
[   80.023141][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.036689][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.065637][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.094138][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.101181][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.129026][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.197160][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.241961][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.266348][ T4281] device hsr_slave_0 entered promiscuous mode
[   80.275065][ T4281] device hsr_slave_1 entered promiscuous mode
[   80.284574][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.292296][ T4281] Cannot create hsr debugfs directory
[   80.314141][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.327443][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.424653][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.437811][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.448848][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.477516][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.486167][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.529031][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.565423][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.576944][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.588410][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.597793][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.608335][ T4272] 8021q: adding VLAN 0 to HW filter on device team0
[   80.624088][ T4287] Bluetooth: hci0: command 0x041b tx timeout
[   80.630186][ T4287] Bluetooth: hci4: command 0x041b tx timeout
[   80.635216][ T4289] Bluetooth: hci2: command 0x041b tx timeout
[   80.636953][ T4287] Bluetooth: hci1: command 0x041b tx timeout
[   80.642367][ T4289] Bluetooth: hci3: command 0x041b tx timeout
[   80.659663][ T4273] 8021q: adding VLAN 0 to HW filter on device team0
[   80.696407][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.706704][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.717336][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.726106][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.736428][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.745795][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.755160][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.762246][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.772036][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.781658][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.816492][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.826270][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.836729][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.844377][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.853609][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.862451][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.872710][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.880093][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.889674][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.929393][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.938471][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.969756][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.981718][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.995664][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.005164][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.015543][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.044859][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.056835][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.072186][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.091930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.102490][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.113322][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.125676][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.147298][ T4271] 8021q: adding VLAN 0 to HW filter on device team0
[   81.158027][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.166450][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.181620][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.191852][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.202249][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.210802][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.219879][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.233864][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.245335][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.264555][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.273387][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.282711][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.292378][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.301248][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.308530][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.321915][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.330797][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.341101][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.350284][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.360147][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.395341][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.410479][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.420006][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.432602][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.439824][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.461319][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.476428][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.501048][ T4279] 8021q: adding VLAN 0 to HW filter on device team0
[   81.525830][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.553264][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.574436][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.583226][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.604450][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.619323][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.629575][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.638743][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.658659][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.678628][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.699524][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.709520][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.721337][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.762460][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.786401][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.805024][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.812181][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.857004][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.877823][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.906782][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.914010][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.948091][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.007564][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.021452][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.055314][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.075415][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.091254][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.101760][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.116439][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.125737][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.135693][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.143302][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.163350][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.179146][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.196191][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.206245][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.214117][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.221604][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.231407][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.247742][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.290568][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.301412][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.311588][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.321851][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.331264][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.368320][ T4281] 8021q: adding VLAN 0 to HW filter on device team0
[   82.375953][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.394003][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.401635][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.416249][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.435802][ T4272] device veth0_vlan entered promiscuous mode
[   82.483211][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.496641][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.505662][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.514651][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.524770][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.533263][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.540424][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.548877][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.558060][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.567603][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.574915][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.599845][ T4272] device veth1_vlan entered promiscuous mode
[   82.634306][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.643082][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.658229][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.669094][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.682084][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.693207][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.703574][ T4289] Bluetooth: hci1: command 0x040f tx timeout
[   82.709833][ T4289] Bluetooth: hci2: command 0x040f tx timeout
[   82.716758][ T4280] Bluetooth: hci4: command 0x040f tx timeout
[   82.716819][ T4287] Bluetooth: hci3: command 0x040f tx timeout
[   82.722957][ T4280] Bluetooth: hci0: command 0x040f tx timeout
[   82.738192][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.764389][ T4273] device veth0_vlan entered promiscuous mode
[   82.786895][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.796145][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.806394][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.814835][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.824721][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.835448][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.845372][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.857868][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.866864][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.892836][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.902129][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.920589][ T4273] device veth1_vlan entered promiscuous mode
[   82.931593][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.953618][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.962223][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.980175][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.998484][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.008214][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.019146][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.039157][ T4272] device veth0_macvtap entered promiscuous mode
[   83.057985][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.076901][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.105174][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.114899][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.125033][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.136790][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.151893][ T4272] device veth1_macvtap entered promiscuous mode
[   83.190377][ T4271] device veth0_vlan entered promiscuous mode
[   83.215046][ T4273] device veth0_macvtap entered promiscuous mode
[   83.222561][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.235094][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.254895][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.277410][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.288550][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.305390][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.320855][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.329126][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.372742][ T4271] device veth1_vlan entered promiscuous mode
[   83.406916][ T4273] device veth1_macvtap entered promiscuous mode
[   83.430804][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.462108][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.472547][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.520457][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.534569][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.551870][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.566321][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.580173][ T4271] device veth0_macvtap entered promiscuous mode
[   83.591127][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.600745][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.612400][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.622047][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.632272][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.647684][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.660845][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.674670][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.687807][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.698789][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.707905][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.717093][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.726106][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.743829][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.752162][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.763277][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.785707][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.797789][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.807291][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.816414][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.842047][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.850503][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.861855][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.871933][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.883075][ T4271] device veth1_macvtap entered promiscuous mode
[   83.945301][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.958286][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.969987][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.004290][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.016379][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.026713][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.043255][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.056408][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.067514][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.076473][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.086238][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.095844][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.104845][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.121099][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.137544][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.150774][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.164242][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.176992][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.205779][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.217016][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.236280][ T4279] device veth0_vlan entered promiscuous mode
[   84.261776][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.271725][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.281125][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.291824][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.314355][ T4279] device veth1_vlan entered promiscuous mode
[   84.334830][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.361712][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.380613][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.402399][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.414780][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.422865][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.425694][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.438149][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.452524][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.543622][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.552490][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.568617][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.578928][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.587886][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.596194][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.605578][ T4281] device veth0_vlan entered promiscuous mode
[   84.623326][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.634725][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.656084][ T4279] device veth0_macvtap entered promiscuous mode
[   84.664314][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.672025][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.682759][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.691929][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.700374][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.721493][ T4281] device veth1_vlan entered promiscuous mode
[   84.730730][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.756555][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.771501][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.783981][ T4280] Bluetooth: hci0: command 0x0419 tx timeout
[   84.790459][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[   84.796753][ T4289] Bluetooth: hci3: command 0x0419 tx timeout
[   84.802811][ T4289] Bluetooth: hci4: command 0x0419 tx timeout
[   84.810283][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[   84.825289][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.846815][ T4279] device veth1_macvtap entered promiscuous mode
[   84.894498][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.902513][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.916089][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.928585][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.940020][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.952187][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.962407][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.979403][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.999519][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.010954][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.025870][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.047774][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.062172][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.078417][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.102560][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.128187][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.140382][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.152302][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.162659][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.173886][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.205794][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.216979][ T4281] device veth0_macvtap entered promiscuous mode
[   85.232102][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.241900][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.256690][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.270612][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.294636][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.313518][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.333545][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.342348][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.372991][ T4281] device veth1_macvtap entered promiscuous mode
[   85.392761][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.412708][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.476881][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.506389][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.523524][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.543586][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.561176][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.584252][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.608914][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.630158][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.655417][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.694530][ T4421] device ifb1 entered promiscuous mode
[   85.714185][ T4421] device vlan0 entered promiscuous mode
[   85.883337][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.894906][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.157880][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.178429][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.194859][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.211226][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.245528][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.273460][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.293500][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.328640][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.336251][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802a9d8800: rx timeout, send abort
[   86.348123][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a9d8800: 0x00100: (3) A timeout occurred and this is the connection abort to close the session.
[   86.356658][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.471622][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.496613][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.556908][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.588308][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.618851][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.640489][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.696119][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.813437][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   86.833429][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   86.843574][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   86.853437][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   86.863432][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   86.873434][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   86.883430][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   86.893432][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   86.903437][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   86.913444][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   87.378639][ T4433] syz.1.9 (4433): drop_caches: 3
[   87.427784][  T126] cfg80211: failed to load regulatory.db
[   87.471001][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.546818][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.658514][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.697279][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.785604][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.895402][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.915777][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.929107][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.187652][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.216299][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.257517][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.832154][ T4445] Bluetooth: MGMT ver 1.22
[   90.122602][   T26] audit: type=1800 audit(1792645422.513:2): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="bus" dev="ramfs" ino=33561 res=0 errno=0
[   90.149663][ T4458] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[   90.944540][ T4289] Bluetooth: hci0: command 0x0c24 tx timeout
[   90.947579][ T4288] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[   91.315986][ T4481] syz.0.17 (4481) used greatest stack depth: 20304 bytes left
[   91.536235][ T4485] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.915496][ T4506] capability: warning: `syz.2.30' uses 32-bit capabilities (legacy support in use)
[   91.981546][ T4509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'.
[   92.354253][ T4518] ERROR: device name not specified.
[   92.565161][ T4523] FAULT_INJECTION: forcing a failure.
[   92.565161][ T4523] name failslab, interval 1, probability 0, space 0, times 1
[   92.641420][ T4523] CPU: 1 PID: 4523 Comm: syz.0.36 Not tainted syzkaller #0
[   92.648851][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   92.659029][ T4523] Call Trace:
[   92.662502][ T4523]  <TASK>
[   92.665452][ T4523]  dump_stack_lvl+0x188/0x24e
[   92.670153][ T4523]  ? show_regs_print_info+0x12/0x12
[   92.675381][ T4523]  ? load_image+0x410/0x410
[   92.679915][ T4523]  ? __might_sleep+0xd0/0xd0
[   92.684537][ T4523]  ? __lock_acquire+0x7ea0/0x7ea0
[   92.689565][ T4523]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   92.695654][ T4523]  should_fail_ex+0x390/0x4c0
[   92.700365][ T4523]  should_failslab+0x5/0x20
[   92.704888][ T4523]  slab_pre_alloc_hook+0x59/0x300
[   92.709914][ T4523]  ? ktime_get_coarse_real_ts64+0x2b/0x120
[   92.715743][ T4523]  kmem_cache_alloc_lru+0x49/0x2e0
[   92.720852][ T4523]  ? __d_alloc+0x2e/0x6e0
[   92.725275][ T4523]  __d_alloc+0x2e/0x6e0
[   92.729447][ T4523]  ? d_alloc_pseudo+0xe/0x70
[   92.734046][ T4523]  d_alloc_pseudo+0x19/0x70
[   92.738552][ T4523]  alloc_file_pseudo+0xe0/0x200
[   92.743411][ T4523]  ? alloc_empty_file_noaccount+0x80/0x80
[   92.749159][ T4523]  ? atime_needs_update+0x770/0x770
[   92.754381][ T4523]  ? debug_mutex_init+0x34/0x70
[   92.759303][ T4523]  ? create_pipe_files+0x2b9/0x6b0
[   92.764701][ T4523]  create_pipe_files+0x390/0x6b0
[   92.769685][ T4523]  __do_pipe_flags+0x46/0x1f0
[   92.774398][ T4523]  do_pipe2+0xa7/0x190
[   92.778567][ T4523]  ? _compound_head+0x120/0x120
[   92.783434][ T4523]  ? lock_chain_count+0x20/0x20
[   92.788559][ T4523]  ? syscall_enter_from_user_mode+0x21/0x80
[   92.794562][ T4523]  __x64_sys_pipe2+0x56/0x60
[   92.800399][ T4523]  do_syscall_64+0x4c/0xa0
[   92.804852][ T4523]  ? clear_bhb_loop+0x60/0xb0
[   92.809536][ T4523]  ? clear_bhb_loop+0x60/0xb0
[   92.814832][ T4523]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   92.820735][ T4523] RIP: 0033:0x7f569019f559
[   92.825878][ T4523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.845696][ T4523] RSP: 002b:00007f5690fcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[   92.854224][ T4523] RAX: ffffffffffffffda RBX: 00007f5690425fa0 RCX: 00007f569019f559
[   92.862237][ T4523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   92.870527][ T4523] RBP: 00007f5690236b20 R08: 0000000000000000 R09: 0000000000000000
[   92.879676][ T4523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.887676][ T4523] R13: 00007f5690426038 R14: 00007f5690425fa0 R15: 00007ffec02108b8
[   92.896298][ T4523]  </TASK>
[   92.963569][ T4521] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[   93.363819][ T4369] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.573501][ T4369] usb 5-1: Using ep0 maxpacket: 8
[   93.581984][ T4375] rxe_eth0 speed is unknown, defaulting to 1000
[   93.601180][ T4369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   93.619957][ T4369] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   93.635155][ T4369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.662495][ T4369] usb 5-1: config 0 descriptor??
[   93.891280][ T4369] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   96.189795][ T4375] usb 5-1: USB disconnect, device number 2
[   96.659168][ T4578] syz.2.50 (4578): drop_caches: 3
[   96.683285][ T4604] jffs2: notice: (4604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   96.860803][ T4611] netlink: 36 bytes leftover after parsing attributes in process `syz.2.58'.
[   97.048860][ T4616] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   97.112176][ T4616] kvm: pic: non byte read
[   97.126394][ T4616] kvm: pic: level sensitive irq not supported
[   97.127113][ T4616] kvm: pic: non byte read
[   97.147863][ T4616] kvm: pic: level sensitive irq not supported
[   97.147965][ T4616] kvm: pic: non byte read
[   97.232474][ T4616] kvm: pic: level sensitive irq not supported
[   97.232573][ T4616] kvm: pic: non byte read
[   97.304404][ T4616] kvm: pic: level sensitive irq not supported
[   97.304479][ T4616] kvm: pic: non byte read
[   99.206539][ T4690] tmpfs: Too small a size for current use
[   99.228198][   T26] audit: type=1326 audit(1792645431.623:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.73" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3acff9f559 code=0x0
[  100.322143][ T4682] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  100.562151][ T4701] nvmet_tcp: address family 255 not supported
[  100.703958][ T4702] Invalid ELF header magic: != ELF
[  101.173635][ T4702] =======================================================
[  101.173635][ T4702] WARNING: The mand mount option has been deprecated and
[  101.173635][ T4702]          and is ignored by this kernel. Remove the mand
[  101.173635][ T4702]          option from the mount to silence this warning.
[  101.173635][ T4702] =======================================================
[  101.314457][ T4702] overlayfs: unrecognized mount option "/" or missing value
[  101.808818][ T4704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.76'.
[  103.151559][ T4713] sched: RT throttling activated
[  103.348897][ T4723] overlayfs: overlapping lowerdir path
[  103.603597][ T4727] FAULT_INJECTION: forcing a failure.
[  103.603597][ T4727] name failslab, interval 1, probability 0, space 0, times 0
[  103.631578][ T4727] CPU: 0 PID: 4727 Comm: syz.2.84 Not tainted syzkaller #0
[  103.638892][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  103.649017][ T4727] Call Trace:
[  103.653207][ T4727]  <TASK>
[  103.656382][ T4727]  dump_stack_lvl+0x188/0x24e
[  103.661999][ T4727]  ? show_regs_print_info+0x12/0x12
[  103.667413][ T4727]  ? load_image+0x410/0x410
[  103.671958][ T4727]  ? __might_sleep+0xd0/0xd0
[  103.676682][ T4727]  ? __lock_acquire+0x7ea0/0x7ea0
[  103.681846][ T4727]  should_fail_ex+0x390/0x4c0
[  103.686761][ T4727]  should_failslab+0x5/0x20
[  103.691309][ T4727]  slab_pre_alloc_hook+0x59/0x300
[  103.696461][ T4727]  ? kobject_get_path+0xac/0x220
[  103.701560][ T4727]  __kmem_cache_alloc_node+0x4f/0x270
[  103.706983][ T4727]  ? kobject_get_path+0xac/0x220
[  103.712050][ T4727]  __kmalloc+0xa3/0x240
[  103.716245][ T4727]  kobject_get_path+0xac/0x220
[  103.721104][ T4727]  kobject_uevent_env+0x28d/0x890
[  103.726189][ T4727]  tty_register_device_attr+0x58a/0x9d0
[  103.731784][ T4727]  ? tty_register_device+0x30/0x30
[  103.736954][ T4727]  ? tty_port_init+0x12e/0x1a0
[  103.741778][ T4727]  ? gsm_dlci_alloc+0x297/0x3a0
[  103.746686][ T4727]  gsm_activate_mux+0x110/0x2a0
[  103.751678][ T4727]  gsmld_ioctl+0x9df/0xe70
[  103.756166][ T4727]  ? gsmld_write+0x120/0x120
[  103.760811][ T4727]  ? gsmld_write+0x120/0x120
[  103.765443][ T4727]  tty_ioctl+0x878/0xba0
[  103.769810][ T4727]  ? security_file_ioctl+0x7c/0xa0
[  103.774964][ T4727]  ? tty_get_icount+0xa0/0xa0
[  103.779693][ T4727]  __se_sys_ioctl+0xfa/0x170
[  103.784338][ T4727]  do_syscall_64+0x4c/0xa0
[  103.788814][ T4727]  ? clear_bhb_loop+0x60/0xb0
[  103.793557][ T4727]  ? clear_bhb_loop+0x60/0xb0
[  103.798276][ T4727]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  103.804524][ T4727] RIP: 0033:0x7fb55d99f559
[  103.808984][ T4727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.829580][ T4727] RSP: 002b:00007fb55e8fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  103.838570][ T4727] RAX: ffffffffffffffda RBX: 00007fb55dc25fa0 RCX: 00007fb55d99f559
[  103.846848][ T4727] RDX: 0000200000000980 RSI: 00000000404c4701 RDI: 0000000000000004
[  103.855134][ T4727] RBP: 00007fb55da36b20 R08: 0000000000000000 R09: 0000000000000000
[  103.863678][ T4727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.872148][ T4727] R13: 00007fb55dc26038 R14: 00007fb55dc25fa0 R15: 00007fff81036a78
[  103.880176][ T4727]  </TASK>
[  105.233629][ T4759] fuse: Unknown parameter '0x0000000000000008'
[  105.354478][ T4759] FAULT_INJECTION: forcing a failure.
[  105.354478][ T4759] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  105.367764][ T4759] CPU: 1 PID: 4759 Comm: syz.0.96 Not tainted syzkaller #0
[  105.374992][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  105.385520][ T4759] Call Trace:
[  105.389206][ T4759]  <TASK>
[  105.392135][ T4759]  dump_stack_lvl+0x188/0x24e
[  105.396838][ T4759]  ? show_regs_print_info+0x12/0x12
[  105.402234][ T4759]  ? load_image+0x410/0x410
[  105.406740][ T4759]  ? __lock_acquire+0x7ea0/0x7ea0
[  105.411974][ T4759]  should_fail_ex+0x390/0x4c0
[  105.417374][ T4759]  _copy_from_user+0x2c/0x170
[  105.422067][ T4759]  ___sys_sendmsg+0x1c3/0x360
[  105.426767][ T4759]  ? __sys_sendmsg+0x2a0/0x2a0
[  105.432020][ T4759]  __se_sys_sendmsg+0x1c3/0x2b0
[  105.437169][ T4759]  ? __x64_sys_sendmsg+0x80/0x80
[  105.442144][ T4759]  ? lockdep_hardirqs_on+0x94/0x140
[  105.447696][ T4759]  do_syscall_64+0x4c/0xa0
[  105.452122][ T4759]  ? clear_bhb_loop+0x60/0xb0
[  105.456889][ T4759]  ? clear_bhb_loop+0x60/0xb0
[  105.461907][ T4759]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  105.468360][ T4759] RIP: 0033:0x7f569019f559
[  105.472997][ T4759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.493319][ T4759] RSP: 002b:00007f5690fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.501774][ T4759] RAX: ffffffffffffffda RBX: 00007f5690425fa0 RCX: 00007f569019f559
[  105.509769][ T4759] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000009
[  105.518595][ T4759] RBP: 00007f5690236b20 R08: 0000000000000000 R09: 0000000000000000
[  105.526595][ T4759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.534690][ T4759] R13: 00007f5690426038 R14: 00007f5690425fa0 R15: 00007ffec02108b8
[  105.543617][ T4759]  </TASK>
[  105.896626][ T4671] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  106.968091][ T4794] device bond0 entered promiscuous mode
[  106.995462][ T4794] device bond_slave_0 entered promiscuous mode
[  107.030115][ T4794] device bond_slave_1 entered promiscuous mode
[  107.098425][ T4797] bond0: (slave bond_slave_0): Releasing backup interface
[  107.120513][ T4797] device bond_slave_0 left promiscuous mode
[  107.159341][ T4794] bond0: (slave bond_slave_1): Releasing backup interface
[  107.169117][ T4794] device bond_slave_1 left promiscuous mode
[  107.212542][ T4794] netlink: 'syz.1.105': attribute type 10 has an invalid length.
[  107.221540][ T4794] device syz_tun entered promiscuous mode
[  107.248990][ T4794] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  108.723329][ T4771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.322816][ T4842] file system registered
[  110.328582][ T4407] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  110.542595][ T4407] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  110.587471][ T4407] usb 2-1: config 0 has no interface number 0
[  110.659501][ T4407] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  110.910778][ T4407] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  111.035265][ T4407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.174862][ T4407] usb 2-1: Product: syz
[  111.251519][ T4407] usb 2-1: Manufacturer: syz
[  111.304189][ T4407] usb 2-1: SerialNumber: syz
[  111.521480][ T4407] usb 2-1: config 0 descriptor??
[  112.166460][ T4407] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  112.583198][ T4407] usb 2-1: USB disconnect, device number 2
[  112.619000][ T4407] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  112.686359][ T4271] ffs_data_put(): freeing
[  115.344848][ T4870] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  115.408382][ T4870] kvm: pic: non byte read
[  115.426212][ T4870] kvm: pic: level sensitive irq not supported
[  115.426322][ T4870] kvm: pic: non byte read
[  119.399289][ T4371] libceph: connect (1)[c::]:6789 error -101
[  119.409132][ T4371] libceph: mon0 (1)[c::]:6789 connect error
[  119.448274][ T4896] ceph: No mds server is up or the cluster is laggy
[  119.456413][  T126] libceph: connect (1)[c::]:6789 error -101
[  119.463734][  T126] libceph: mon0 (1)[c::]:6789 connect error
[  119.465315][ T4273] ffs_data_put(): freeing
[  119.726136][  T126] libceph: connect (1)[c::]:6789 error -101
[  119.732283][  T126] libceph: mon0 (1)[c::]:6789 connect error
[  120.940052][ T4921] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  123.321663][ T4273] ffs_data_put(): freeing
[  123.552034][ T4956] tmpfs: Too few inodes for current use
[  125.162325][ T4965] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  126.338106][ T4979] smc: net device vlan1 applied user defined pnetid SYZ2
[  128.089718][ T4994] Zero length message leads to an empty skb
[  128.152129][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'.
[  128.695729][ T5009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'.
[  128.727952][ T5011] 9pnet_virtio: no channels available for device syz
[  128.756844][ T5006] rxe_eth0 speed is unknown, defaulting to 1000
[  129.832997][ T5030] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  131.185120][   T26] audit: type=1326 audit(1792645463.573:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  131.214313][   T26] audit: type=1326 audit(1792645463.603:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  131.833735][   T26] audit: type=1326 audit(1792645463.613:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  131.858460][   T26] audit: type=1326 audit(1792645463.613:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  131.882952][   T26] audit: type=1326 audit(1792645463.613:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  131.912765][   T26] audit: type=1326 audit(1792645463.643:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  131.936491][   T26] audit: type=1326 audit(1792645463.663:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  131.960725][   T26] audit: type=1326 audit(1792645463.663:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  131.986191][   T26] audit: type=1326 audit(1792645463.723:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  132.034267][ T5060] device vlan0 entered promiscuous mode
[  132.040508][ T5060] device wlan0 entered promiscuous mode
[  132.051283][   T26] audit: type=1326 audit(1792645463.723:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5062 comm="syz.1.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  132.174907][ T5068] jffs2: notice: (5068) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  133.188182][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.195399][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.700884][ T5074] fuse: Unknown parameter 'fd0x0000000000000003'
[  136.932241][ T5125] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  136.932241][ T5125] 
[  136.946812][ T5125] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  136.961803][ T5125] CIFS: Attempting to mount \\172.20.20.170\share
[  136.975180][ T5125] CIFS: VFS: Error connecting to socket. Aborting operation.
[  137.010436][ T5125] CIFS: VFS: cifs_mount failed w/return code = -22
[  141.147762][ T5146] fuse: Unknown parameter 'fd0x0000000000000003'
[  142.659937][ T5163] FAULT_INJECTION: forcing a failure.
[  142.659937][ T5163] name failslab, interval 1, probability 0, space 0, times 0
[  142.720440][ T5163] CPU: 1 PID: 5163 Comm: syz.4.204 Not tainted syzkaller #0
[  142.728023][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  142.738483][ T5163] Call Trace:
[  142.741792][ T5163]  <TASK>
[  142.744755][ T5163]  dump_stack_lvl+0x188/0x24e
[  142.749768][ T5163]  ? show_regs_print_info+0x12/0x12
[  142.755039][ T5163]  ? load_image+0x410/0x410
[  142.759683][ T5163]  ? __might_sleep+0xd0/0xd0
[  142.764466][ T5163]  ? __lock_acquire+0x7ea0/0x7ea0
[  142.770024][ T5163]  should_fail_ex+0x390/0x4c0
[  142.774830][ T5163]  should_failslab+0x5/0x20
[  142.779361][ T5163]  slab_pre_alloc_hook+0x59/0x300
[  142.785370][ T5163]  ? v4l2_m2m_ctx_init+0x57/0x2a0
[  142.790458][ T5163]  __kmem_cache_alloc_node+0x4f/0x270
[  142.795950][ T5163]  ? v4l2_m2m_ctx_init+0x57/0x2a0
[  142.801723][ T5163]  kmalloc_trace+0x26/0xe0
[  142.806193][ T5163]  ? vicodec_release+0x110/0x110
[  142.811272][ T5163]  v4l2_m2m_ctx_init+0x57/0x2a0
[  142.816172][ T5163]  vicodec_open+0x7fe/0xc30
[  142.820814][ T5163]  v4l2_open+0x201/0x340
[  142.825117][ T5163]  chrdev_open+0x585/0x5f0
[  142.829576][ T5163]  ? cd_forget+0x160/0x160
[  142.834147][ T5163]  ? fsnotify_perm+0x39b/0x550
[  142.839304][ T5163]  ? cd_forget+0x160/0x160
[  142.843822][ T5163]  do_dentry_open+0x7dd/0x10b0
[  142.848656][ T5163]  path_openat+0x2674/0x2f10
[  142.853394][ T5163]  ? kasan_set_track+0x60/0x70
[  142.858204][ T5163]  ? verify_lock_unused+0x140/0x140
[  142.863482][ T5163]  ? do_sys_openat2+0xdd/0x4f0
[  142.868383][ T5163]  ? do_filp_open+0x420/0x420
[  142.873127][ T5163]  do_filp_open+0x1ee/0x420
[  142.877687][ T5163]  ? vfs_tmpfile+0x470/0x470
[  142.882343][ T5163]  ? _raw_spin_unlock+0x24/0x40
[  142.887244][ T5163]  ? alloc_fd+0x590/0x640
[  142.891633][ T5163]  do_sys_openat2+0x14b/0x4f0
[  142.896367][ T5163]  ? do_sys_open+0xe0/0xe0
[  142.900834][ T5163]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  142.907072][ T5163]  ? lock_chain_count+0x20/0x20
[  142.912233][ T5163]  __x64_sys_openat+0x135/0x160
[  142.917133][ T5163]  do_syscall_64+0x4c/0xa0
[  142.921791][ T5163]  ? clear_bhb_loop+0x60/0xb0
[  142.926498][ T5163]  ? clear_bhb_loop+0x60/0xb0
[  142.931403][ T5163]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  142.937593][ T5163] RIP: 0033:0x7ffbc799f559
[  142.942204][ T5163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.961930][ T5163] RSP: 002b:00007ffbc8813028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  142.970475][ T5163] RAX: ffffffffffffffda RBX: 00007ffbc7c25fa0 RCX: 00007ffbc799f559
[  142.978595][ T5163] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c
[  142.986697][ T5163] RBP: 00007ffbc7a36b20 R08: 0000000000000000 R09: 0000000000000000
[  142.994674][ T5163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.002738][ T5163] R13: 00007ffbc7c26038 R14: 00007ffbc7c25fa0 R15: 00007ffe724caf78
[  143.010749][ T5163]  </TASK>
[  143.172752][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  143.172767][   T26] audit: type=1800 audit(1792645475.563:15): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.212" name="zone_nr_conv" dev="configfs" ino=35682 res=0 errno=0
[  143.442657][   T26] audit: type=1800 audit(1792645475.763:16): pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.212" name="zoned" dev="configfs" ino=36845 res=0 errno=0
[  145.031939][ T5220] FAULT_INJECTION: forcing a failure.
[  145.031939][ T5220] name failslab, interval 1, probability 0, space 0, times 0
[  145.088357][ T5220] CPU: 0 PID: 5220 Comm: syz.2.224 Not tainted syzkaller #0
[  145.095817][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  145.105884][ T5220] Call Trace:
[  145.109190][ T5220]  <TASK>
[  145.112477][ T5220]  dump_stack_lvl+0x188/0x24e
[  145.117177][ T5220]  ? show_regs_print_info+0x12/0x12
[  145.122392][ T5220]  ? load_image+0x410/0x410
[  145.127112][ T5220]  ? __might_sleep+0xd0/0xd0
[  145.132336][ T5220]  ? __lock_acquire+0x7ea0/0x7ea0
[  145.137396][ T5220]  should_fail_ex+0x390/0x4c0
[  145.142479][ T5220]  should_failslab+0x5/0x20
[  145.147173][ T5220]  slab_pre_alloc_hook+0x59/0x300
[  145.152424][ T5220]  ? memcg_list_lru_alloc+0x331/0xb00
[  145.157910][ T5220]  __kmem_cache_alloc_node+0x4f/0x270
[  145.163300][ T5220]  ? memcg_list_lru_alloc+0x331/0xb00
[  145.168773][ T5220]  __kmalloc+0xa3/0x240
[  145.173101][ T5220]  memcg_list_lru_alloc+0x331/0xb00
[  145.178495][ T5220]  ? slab_pre_alloc_hook+0xb1/0x300
[  145.184051][ T5220]  ? memcg_reparent_list_lrus+0x850/0x850
[  145.190671][ T5220]  ? get_obj_cgroup_from_current+0xd0/0x280
[  145.196944][ T5220]  ? get_obj_cgroup_from_current+0xd0/0x280
[  145.202865][ T5220]  slab_pre_alloc_hook+0x2ad/0x300
[  145.208004][ T5220]  ? slab_pre_alloc_hook+0xb1/0x300
[  145.213321][ T5220]  kmem_cache_alloc_lru+0x49/0x2e0
[  145.218439][ T5220]  ? __d_alloc+0x2e/0x6e0
[  145.222774][ T5220]  __d_alloc+0x2e/0x6e0
[  145.226964][ T5220]  d_make_root+0x46/0xd0
[  145.231274][ T5220]  shmem_fill_super+0x7b0/0xb60
[  145.236158][ T5220]  ? shmem_reconfigure+0x790/0x790
[  145.241639][ T5220]  get_tree_nodev+0xb0/0x160
[  145.246255][ T5220]  vfs_get_tree+0x88/0x270
[  145.250681][ T5220]  do_new_mount+0x247/0xa40
[  145.255217][ T5220]  __se_sys_mount+0x2e3/0x3d0
[  145.260263][ T5220]  ? __x64_sys_mount+0xc0/0xc0
[  145.265144][ T5220]  ? lockdep_hardirqs_on+0x94/0x140
[  145.270369][ T5220]  ? __x64_sys_mount+0x1c/0xc0
[  145.275181][ T5220]  do_syscall_64+0x4c/0xa0
[  145.279620][ T5220]  ? clear_bhb_loop+0x60/0xb0
[  145.285175][ T5220]  ? clear_bhb_loop+0x60/0xb0
[  145.290323][ T5220]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.296549][ T5220] RIP: 0033:0x7fb55d99f559
[  145.301247][ T5220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.321311][ T5220] RSP: 002b:00007fb55e8fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  145.329783][ T5220] RAX: ffffffffffffffda RBX: 00007fb55dc25fa0 RCX: 00007fb55d99f559
[  145.339269][ T5220] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000
[  145.347772][ T5220] RBP: 00007fb55da36b20 R08: 00002000000000c0 R09: 0000000000000000
[  145.355847][ T5220] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  145.364190][ T5220] R13: 00007fb55dc26038 R14: 00007fb55dc25fa0 R15: 00007fff81036a78
[  145.372195][ T5220]  </TASK>
[  145.393118][   T26] audit: type=1326 audit(1792645477.783:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  145.654945][   T26] audit: type=1326 audit(1792645477.823:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  146.116778][   T26] audit: type=1326 audit(1792645477.823:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  146.216532][   T26] audit: type=1326 audit(1792645477.823:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  146.246834][   T26] audit: type=1326 audit(1792645477.823:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  146.308699][   T26] audit: type=1326 audit(1792645477.823:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  146.369474][ T5241] nbd3: detected capacity change from 0 to 18
[  146.369890][ T4289] block nbd3: Receive control failed (result -107)
[  148.013717][ T1080] block nbd3: Dead connection, failed to find a fallback
[  148.022177][ T1080] block nbd3: shutting down sockets
[  148.028801][ T1080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.033576][   T26] audit: type=1326 audit(1792645477.823:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  148.038982][ T1080] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.074954][   T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.094033][   T53] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.106545][   T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.116275][   T53] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.127294][   T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.136893][   T53] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.145092][   T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.154224][   T53] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.172482][ T1080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.183284][ T1080] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.192236][ T1080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.202714][ T1080] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.210747][ T1080] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.220649][ T1080] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.250154][ T5180] ldm_validate_partition_table(): Disk read failed.
[  148.265939][ T4271] ffs_data_put(): freeing
[  148.293839][   T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.303108][   T53] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.311646][   T53] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.320994][   T53] Buffer I/O error on dev nbd3, logical block 0, async page read
[  148.333886][ T5180] Dev nbd3: unable to read RDB block 0
[  148.680356][ T5180]  nbd3: unable to read partition table
[  149.143741][ T5180] nbd3: partition table beyond EOD, truncated
[  149.327418][   T26] audit: type=1326 audit(1792645477.823:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  149.364288][ T5180] ldm_validate_partition_table(): Disk read failed.
[  149.393719][ T5180] Dev nbd3: unable to read RDB block 0
[  149.430270][ T5180]  nbd3: unable to read partition table
[  149.457245][ T5180] nbd3: partition table beyond EOD, truncated
[  149.489888][   T26] audit: type=1326 audit(1792645477.823:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  149.706257][   T26] audit: type=1326 audit(1792645477.823:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  149.965810][   T26] audit: type=1326 audit(1792645477.823:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  150.513715][   T26] audit: type=1326 audit(1792645477.823:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  150.649483][   T26] audit: type=1326 audit(1792645477.823:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  150.721036][ T5287] tmpfs: Too small a size for current use
[  150.752713][   T26] audit: type=1326 audit(1792645477.833:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  150.825941][   T26] audit: type=1326 audit(1792645477.833:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  150.935651][ T4273] ffs_data_put(): freeing
[  150.993695][   T26] audit: type=1326 audit(1792645477.833:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  151.074137][   T26] audit: type=1326 audit(1792645477.833:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5219 comm="syz.2.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55d99f559 code=0x7fc00000
[  154.087700][ T4281] ffs_data_put(): freeing
[  154.668993][ T5365] loop9: detected capacity change from 0 to 255852544
[  155.399090][ T5377] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  155.434203][ T4289] Bluetooth: hci0: unexpected event for opcode 0x2016
[  155.470505][ T5377] kvm: pic: non byte read
[  155.483859][ T5377] kvm: pic: level sensitive irq not supported
[  155.483928][ T5377] kvm: pic: non byte read
[  155.513805][ T5377] kvm: pic: level sensitive irq not supported
[  155.513902][ T5377] kvm: pic: non byte read
[  155.561716][ T5377] kvm: pic: level sensitive irq not supported
[  155.562735][ T5377] kvm: pic: non byte read
[  155.661651][ T5377] kvm: pic: level sensitive irq not supported
[  155.661705][ T5377] kvm: pic: non byte read
[  157.741810][ T4273] ffs_data_put(): freeing
[  159.918149][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  159.918160][   T26] audit: type=1326 audit(1792645492.313:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  159.983306][   T26] audit: type=1326 audit(1792645492.363:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  160.008874][   T26] audit: type=1326 audit(1792645492.363:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  160.034506][   T26] audit: type=1326 audit(1792645492.363:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  160.068232][   T26] audit: type=1326 audit(1792645492.363:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  160.276541][ T5431] loop0: detected capacity change from 0 to 128
[  160.566173][   T26] audit: type=1326 audit(1792645492.363:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  160.861590][ T5431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  161.041910][   T26] audit: type=1326 audit(1792645492.363:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  161.103964][ T4279] ffs_data_put(): freeing
[  161.120102][ T5431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.446709][   T26] audit: type=1326 audit(1792645492.363:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  162.303106][   T26] audit: type=1326 audit(1792645492.363:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  163.930064][   T26] audit: type=1326 audit(1792645492.363:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5423 comm="syz.3.285" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa19f559 code=0x7ffc0000
[  166.277142][ T5485] batman_adv: batadv0: Adding interface: syzkaller0
[  166.283962][ T5485] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.309992][ T5485] batman_adv: batadv0: Interface activated: syzkaller0
[  167.179580][ T5484] batman_adv: batadv0: Interface deactivated: syzkaller0
[  167.208053][ T5493] loop1: detected capacity change from 0 to 128
[  167.274453][ T4281] ffs_data_put(): freeing
[  167.307950][ T5493] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  167.394907][ T5493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.416571][ T5484] batman_adv: batadv0: Removing interface: syzkaller0
[  167.459456][ T5499] fuse: Unknown parameter '0x000000000000000300000000000000000000'
[  168.470683][ T5503] nvmet_tcp: enabling port 1 (127.0.0.1:4420)
[  168.873358][ T5514] FAULT_INJECTION: forcing a failure.
[  168.873358][ T5514] name failslab, interval 1, probability 0, space 0, times 0
[  169.027526][ T5514] CPU: 1 PID: 5514 Comm: syz.1.306 Not tainted syzkaller #0
[  169.036422][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  169.049004][ T5514] Call Trace:
[  169.052410][ T5514]  <TASK>
[  169.055361][ T5514]  dump_stack_lvl+0x188/0x24e
[  169.060086][ T5514]  ? show_regs_print_info+0x12/0x12
[  169.065852][ T5514]  ? load_image+0x410/0x410
[  169.070392][ T5514]  ? verify_lock_unused+0x140/0x140
[  169.075778][ T5514]  should_fail_ex+0x390/0x4c0
[  169.081564][ T5514]  should_failslab+0x5/0x20
[  169.086192][ T5514]  slab_pre_alloc_hook+0x59/0x300
[  169.091631][ T5514]  kmem_cache_alloc+0x56/0x2f0
[  169.098308][ T5514]  ? skb_clone+0x1e7/0x370
[  169.103843][ T5514]  skb_clone+0x1e7/0x370
[  169.108421][ T5514]  __netlink_deliver_tap+0x3e4/0x7e0
[  169.114120][ T5514]  ? netlink_deliver_tap+0x2e/0x1b0
[  169.119798][ T5514]  netlink_deliver_tap+0x19c/0x1b0
[  169.124947][ T5514]  netlink_unicast+0x777/0x920
[  169.129981][ T5514]  netlink_sendmsg+0x8ad/0xbd0
[  169.135411][ T5514]  ? netlink_getsockopt+0x550/0x550
[  169.140926][ T5514]  ? apparmor_socket_sendmsg+0x8a/0x330
[  169.146522][ T5514]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  169.151838][ T5514]  ? security_socket_sendmsg+0x7c/0xa0
[  169.157345][ T5514]  ? netlink_getsockopt+0x550/0x550
[  169.162586][ T5514]  ____sys_sendmsg+0x5ed/0x9a0
[  169.167575][ T5514]  ? __sys_sendmsg_sock+0x30/0x30
[  169.172724][ T5514]  ? __import_iovec+0x306/0x510
[  169.177805][ T5514]  ? import_iovec+0x6f/0xa0
[  169.182789][ T5514]  ___sys_sendmsg+0x2a2/0x360
[  169.187609][ T5514]  ? __sys_sendmsg+0x2a0/0x2a0
[  169.192810][ T5514]  __se_sys_sendmsg+0x1c3/0x2b0
[  169.197749][ T5514]  ? __x64_sys_sendmsg+0x80/0x80
[  169.202944][ T5514]  ? lockdep_hardirqs_on+0x94/0x140
[  169.208252][ T5514]  do_syscall_64+0x4c/0xa0
[  169.212880][ T5514]  ? clear_bhb_loop+0x60/0xb0
[  169.217736][ T5514]  ? clear_bhb_loop+0x60/0xb0
[  169.223244][ T5514]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.229637][ T5514] RIP: 0033:0x7f3acff9f559
[  169.234091][ T5514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.254800][ T5514] RSP: 002b:00007f3ad0df0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.263870][ T5514] RAX: ffffffffffffffda RBX: 00007f3ad0225fa0 RCX: 00007f3acff9f559
[  169.271961][ T5514] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  169.280192][ T5514] RBP: 00007f3ad0036b20 R08: 0000000000000000 R09: 0000000000000000
[  169.288548][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.296818][ T5514] R13: 00007f3ad0226038 R14: 00007f3ad0225fa0 R15: 00007ffe43ebc248
[  169.305470][ T5514]  </TASK>
[  169.534502][ T5525] capability: warning: `syz.1.312' uses deprecated v2 capabilities in a way that may be insecure
[  169.536639][ T5522] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  169.536639][ T5522] 
[  169.546901][ T5525] sg_write: process 185 (syz.1.312) changed security contexts after opening file descriptor, this is not allowed.
[  169.654374][ T5522] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  170.413662][ T5522] CIFS: Attempting to mount \\172.20.20.170\share
[  170.421717][ T5522] CIFS: VFS: Error connecting to socket. Aborting operation.
[  170.430877][ T5522] CIFS: VFS: cifs_mount failed w/return code = -22
[  172.246216][ T4273] ffs_data_put(): freeing
[  172.357015][ T5532] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  173.081527][ T5542] loop2: detected capacity change from 0 to 128
[  173.138784][ T5532] kvm: pic: non byte read
[  173.140104][ T5542] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  173.144409][ T5532] kvm: pic: level sensitive irq not supported
[  173.153800][ T5532] kvm: pic: non byte read
[  173.166253][ T5532] kvm: pic: level sensitive irq not supported
[  173.166320][ T5532] kvm: pic: non byte read
[  173.179751][ T5532] kvm: pic: level sensitive irq not supported
[  173.179855][ T5532] kvm: pic: non byte read
[  173.194336][ T5532] kvm: pic: level sensitive irq not supported
[  173.194404][ T5532] kvm: pic: non byte read
[  173.252069][ T5542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.301227][ T5545] FAULT_INJECTION: forcing a failure.
[  173.301227][ T5545] name failslab, interval 1, probability 0, space 0, times 0
[  173.314794][ T5548] fuse: Unknown parameter '0x000000000000000300000000000000000000'
[  173.352034][ T5545] CPU: 0 PID: 5545 Comm: syz.1.317 Not tainted syzkaller #0
[  173.359497][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  173.369762][ T5545] Call Trace:
[  173.373080][ T5545]  <TASK>
[  173.376386][ T5545]  dump_stack_lvl+0x188/0x24e
[  173.381807][ T5545]  ? show_regs_print_info+0x12/0x12
[  173.387139][ T5545]  ? load_image+0x410/0x410
[  173.391679][ T5545]  ? __might_sleep+0xd0/0xd0
[  173.396300][ T5545]  ? __lock_acquire+0x7ea0/0x7ea0
[  173.401364][ T5545]  should_fail_ex+0x390/0x4c0
[  173.406090][ T5545]  should_failslab+0x5/0x20
[  173.410621][ T5545]  slab_pre_alloc_hook+0x59/0x300
[  173.415733][ T5545]  ? sbitmap_queue_init_node+0x24c/0x650
[  173.421401][ T5545]  __kmem_cache_alloc_node+0x4f/0x270
[  173.426913][ T5545]  ? sbitmap_queue_init_node+0x24c/0x650
[  173.432669][ T5545]  kmalloc_node_trace+0x22/0xe0
[  173.437635][ T5545]  sbitmap_queue_init_node+0x24c/0x650
[  173.443219][ T5545]  blk_mq_init_tags+0x159/0x280
[  173.448225][ T5545]  blk_mq_alloc_map_and_rqs+0xc1/0x920
[  173.453829][ T5545]  blk_mq_alloc_set_map_and_rqs+0x1a0/0x800
[  173.459800][ T5545]  blk_mq_alloc_tag_set+0x75b/0xd90
[  173.465041][ T5545]  loop_add+0x2ef/0x9a0
[  173.469411][ T5545]  loop_control_ioctl+0x124/0x590
[  173.474475][ T5545]  ? loop_set_hw_queue_depth+0x60/0x60
[  173.479977][ T5545]  ? bpf_lsm_file_ioctl+0x5/0x10
[  173.485037][ T5545]  ? security_file_ioctl+0x7c/0xa0
[  173.490268][ T5545]  ? loop_set_hw_queue_depth+0x60/0x60
[  173.496117][ T5545]  __se_sys_ioctl+0xfa/0x170
[  173.500743][ T5545]  do_syscall_64+0x4c/0xa0
[  173.505362][ T5545]  ? clear_bhb_loop+0x60/0xb0
[  173.510079][ T5545]  ? clear_bhb_loop+0x60/0xb0
[  173.514892][ T5545]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.520838][ T5545] RIP: 0033:0x7f3acff9f559
[  173.525376][ T5545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.545190][ T5545] RSP: 002b:00007f3ad0df0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.553827][ T5545] RAX: ffffffffffffffda RBX: 00007f3ad0225fa0 RCX: 00007f3acff9f559
[  173.562025][ T5545] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004
[  173.570209][ T5545] RBP: 00007f3ad0036b20 R08: 0000000000000000 R09: 0000000000000000
[  173.578299][ T5545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.586302][ T5545] R13: 00007f3ad0226038 R14: 00007f3ad0225fa0 R15: 00007ffe43ebc248
[  173.594499][ T5545]  </TASK>
[  174.438240][ T5545] blk-mq: reduced tag depth (128 -> 64)
[  174.790397][ T5564] netlink: 'syz.3.322': attribute type 10 has an invalid length.
[  174.946530][ T5573] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  174.946530][ T5573] 
[  174.960803][ T5573] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  174.974114][ T5573] CIFS: Attempting to mount \\172.20.20.170\share
[  174.985587][ T5573] CIFS: VFS: Error connecting to socket. Aborting operation.
[  175.003377][ T5573] CIFS: VFS: cifs_mount failed w/return code = -22
[  177.895187][ T4271] ffs_data_put(): freeing
[  178.777166][ T5598] fuse: Unknown parameter '0x000000000000000300000000000000000000'
[  179.858184][ T5612] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  179.885036][ T4371] libceph: connect (1)[c::]:6789 error -101
[  179.903987][ T4371] libceph: mon0 (1)[c::]:6789 connect error
[  180.007763][ T5622] netlink: 156 bytes leftover after parsing attributes in process `syz.1.337'.
[  180.183463][ T4371] libceph: connect (1)[c::]:6789 error -101
[  180.259432][ T4371] libceph: mon0 (1)[c::]:6789 connect error
[  180.631848][ T5609] ceph: No mds server is up or the cluster is laggy
[  180.855313][ T4371] libceph: connect (1)[c::]:6789 error -101
[  180.861659][ T4371] libceph: mon0 (1)[c::]:6789 connect error
[  182.680804][ T4273] ffs_data_put(): freeing
[  182.738301][ T5640] fuse: Unknown parameter 'f0x000000000000000300000000000000000000'
[  183.638338][ T4289] Bluetooth: hci4: link tx timeout
[  183.647135][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.675117][ T4289] Bluetooth: hci4: link tx timeout
[  183.680308][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.688682][ T4289] Bluetooth: hci4: link tx timeout
[  183.693942][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.701901][ T4289] Bluetooth: hci4: link tx timeout
[  183.707131][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.716931][ T4289] Bluetooth: hci4: link tx timeout
[  183.722185][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.732319][ T4289] Bluetooth: hci4: link tx timeout
[  183.737600][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.803777][ T4289] Bluetooth: hci4: link tx timeout
[  183.809509][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.823681][ T4289] Bluetooth: hci4: link tx timeout
[  183.828727][ T5648] syz.4.343 uses obsolete (PF_INET,SOCK_PACKET)
[  183.829118][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.865356][ T5650] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  183.874145][ T5650] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  183.885524][ T5650] ntfs3: Unknown parameter 'ecryptfs_sig'
[  185.663535][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  186.375191][ T5667] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  186.468568][ T5671] netlink: 'syz.1.351': attribute type 3 has an invalid length.
[  186.763264][ T4407] libceph: connect (1)[c::]:6789 error -101
[  186.816091][ T4407] libceph: mon0 (1)[c::]:6789 connect error
[  187.193241][ T4407] libceph: connect (1)[c::]:6789 error -101
[  187.231606][ T4407] libceph: mon0 (1)[c::]:6789 connect error
[  187.464062][ T5681] ceph: No mds server is up or the cluster is laggy
[  187.528052][ T5696] fuse: Unknown parameter 'f0x000000000000000300000000000000000000'
[  189.437722][ T4289] Bluetooth: Wrong link type (-22)
[  189.482450][ T4273] ffs_data_put(): freeing
[  190.549857][ T5719] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  192.007022][ T5745] fuse: Unknown parameter 'f0x000000000000000300000000000000000000'
[  192.031931][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  192.031946][   T26] audit: type=1800 audit(1792645524.423:64): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.371" name="zone_nr_conv" dev="configfs" ino=38918 res=0 errno=0
[  194.636124][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.642598][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  195.369694][ T5762] binder: 5761:5762 ioctl 8004550f 2000000005c0 returned -22
[  195.377811][ T4281] ffs_data_put(): freeing
[  195.466873][ T5764] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  195.601611][ T5771] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  198.287890][   T26] audit: type=1800 audit(1792645530.683:65): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.383" name="zone_nr_conv" dev="configfs" ino=38854 res=0 errno=0
[  198.325335][ T5789] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  199.700593][ T5809] device syzkaller1 entered promiscuous mode
[  201.833636][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  201.834733][ T4280] Bluetooth: hci0: command 0x0406 tx timeout
[  201.848113][ T4289] Bluetooth: hci3: command 0x0406 tx timeout
[  201.848242][ T4282] Bluetooth: hci1: command 0x0406 tx timeout
[  203.562473][ T5820] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  203.756271][ T4281] ffs_data_put(): freeing
[  204.759700][   T26] audit: type=1800 audit(1792645537.153:66): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.397" name="zone_nr_conv" dev="configfs" ino=39941 res=0 errno=0
[  205.800465][ T5851] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  209.712460][ T4273] ffs_data_put(): freeing
[  210.712383][ T5871] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  211.002687][   T26] audit: type=1800 audit(1792645543.393:67): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.412" name="zone_nr_conv" dev="configfs" ino=39122 res=0 errno=0
[  211.884197][ T5882] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  211.944413][   T26] audit: type=1800 audit(1792645543.543:68): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.412" name="zoned" dev="configfs" ino=40018 res=0 errno=0
[  212.157436][ T5898] device-mapper: table: 248:0: multipath: invalid initial priority group (-EINVAL)
[  212.169684][ T5898] device-mapper: ioctl: error adding target to table
[  214.334350][ T4271] ffs_data_put(): freeing
[  215.787480][ T5931] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  216.056113][   T26] audit: type=1800 audit(1792645548.453:69): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.426" name="zone_nr_conv" dev="configfs" ino=39212 res=0 errno=0
[  217.846574][   T26] audit: type=1800 audit(1792645548.613:70): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.426" name="zoned" dev="configfs" ino=40072 res=0 errno=0
[  218.041244][ T5942] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  218.376554][ T4273] ffs_data_put(): freeing
[  218.475850][ T5958] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  219.448162][ T5964] netlink: 'syz.4.425': attribute type 4 has an invalid length.
[  219.473856][ T4280] Bluetooth: hci0: unexpected event for opcode 0x0419
[  219.485992][ T5967] binder: 5966:5967 ioctl 8004550f 2000000005c0 returned -22
[  219.552061][   T26] audit: type=1800 audit(1792645551.943:71): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.440" name="zone_nr_conv" dev="configfs" ino=39300 res=0 errno=0
[  220.432420][   T26] audit: type=1800 audit(1792645552.103:72): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.440" name="zoned" dev="configfs" ino=40129 res=0 errno=0
[  223.516221][ T4280] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  223.525233][ T4280] Bluetooth: hci0: Injecting HCI hardware error event
[  223.536481][ T4282] Bluetooth: hci0: hardware error 0x00
[  224.006804][ T4272] ffs_data_put(): freeing
[  224.144447][ T6008] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  224.380237][ T6010] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  224.612734][ T6017] binder: 6016:6017 ioctl 8004550f 2000000005c0 returned -22
[  224.727772][   T26] audit: type=1800 audit(1792645557.123:73): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.452" name="zone_nr_conv" dev="configfs" ino=40195 res=0 errno=0
[  224.894800][   T26] audit: type=1800 audit(1792645557.263:74): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.452" name="zoned" dev="configfs" ino=39377 res=0 errno=0
[  225.983717][ T4282] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  226.652320][ T4282] Bluetooth: hci4: link tx timeout
[  226.657607][ T4282] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.683659][ T4282] Bluetooth: hci4: link tx timeout
[  226.690060][ T4282] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  227.122826][ T6042] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  227.550858][ T4281] ffs_data_put(): freeing
[  227.812171][   T26] audit: type=1800 audit(1792645560.203:75): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.468" name="zone_nr_conv" dev="configfs" ino=40267 res=0 errno=0
[  228.063596][ T4282] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  228.072395][ T4282] Bluetooth: hci4: Injecting HCI hardware error event
[  228.082164][ T4280] Bluetooth: hci4: hardware error 0x00
[  228.773381][ T6058] loop9: detected capacity change from 0 to 255852544
[  228.794726][   T26] audit: type=1800 audit(1792645561.163:76): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.468" name="zoned" dev="configfs" ino=39463 res=0 errno=0
[  230.783812][ T4280] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  230.944378][ T6086] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  231.064470][ T4279] ffs_data_put(): freeing
[  232.156307][   T26] audit: type=1800 audit(1792645564.533:77): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.484" name="zone_nr_conv" dev="configfs" ino=40350 res=0 errno=0
[  232.798628][   T26] audit: type=1800 audit(1792645564.723:78): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.484" name="zoned" dev="configfs" ino=39557 res=0 errno=0
[  233.026787][ T6113] loop9: detected capacity change from 0 to 255852544
[  237.790701][ T6126] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  237.805209][ T4273] ffs_data_put(): freeing
[  239.933914][ T6167] loop9: detected capacity change from 0 to 255852544
[  242.567274][   T26] audit: type=1800 audit(1792645574.963:79): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.503" name="zone_nr_conv" dev="configfs" ino=40501 res=0 errno=0
[  244.612953][ T4272] ffs_data_put(): freeing
[  244.950752][ T6251] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  247.744689][ T6277] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  247.744689][ T6277] 
[  247.758879][ T6277] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  247.772586][ T6277] CIFS: Attempting to mount \\172.20.20.170\share
[  247.790111][ T6277] CIFS: VFS: Error connecting to socket. Aborting operation.
[  248.652882][ T6277] CIFS: VFS: cifs_mount failed w/return code = -111
[  250.951939][ T6292] tmpfs: Too few inodes for current use
[  251.068997][ T4281] ffs_data_put(): freeing
[  251.634648][ T6305] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  254.002561][ T4281] ffs_data_put(): freeing
[  254.193885][ T6350] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  255.549305][ T6363] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  255.549305][ T6363] 
[  255.563083][ T6363] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  255.576093][ T6363] CIFS: Attempting to mount \\172.20.20.170\share
[  255.585908][ T6363] CIFS: VFS: Error connecting to socket. Aborting operation.
[  255.593726][ T6363] CIFS: VFS: cifs_mount failed w/return code = -111
[  256.066017][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  256.072473][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.435345][ T6380] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  256.435345][ T6380] 
[  256.451388][ T6380] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  256.466906][ T6380] CIFS: Attempting to mount \\172.20.20.170\share
[  257.588918][ T6385] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  257.638664][ T6380] CIFS: VFS: cifs_mount failed w/return code = -112
[  260.567275][ T4272] ffs_data_put(): freeing
[  260.620561][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'.
[  260.694428][ T6408] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  260.816465][   T26] audit: type=1326 audit(1792645593.213:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  260.869057][   T26] audit: type=1326 audit(1792645593.213:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  260.909882][   T26] audit: type=1326 audit(1792645593.213:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  260.992472][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.558'.
[  261.879585][ T6436] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  261.879585][ T6436] 
[  261.893513][ T6436] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  261.906522][ T6436] CIFS: Attempting to mount \\172.20.20.170\share
[  261.914200][ T6436] CIFS: VFS: Error connecting to socket. Aborting operation.
[  261.921839][ T6436] CIFS: VFS: cifs_mount failed w/return code = -22
[  261.973265][   T26] audit: type=1326 audit(1792645593.213:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  262.225878][ T6443] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  262.327195][   T26] audit: type=1326 audit(1792645593.263:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  262.730971][   T26] audit: type=1326 audit(1792645593.263:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3acff5fd8e code=0x7ffc0000
[  263.188236][   T26] audit: type=1326 audit(1792645593.263:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  263.673226][   T26] audit: type=1326 audit(1792645593.263:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  264.713868][   T26] audit: type=1326 audit(1792645593.263:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  264.738567][   T26] audit: type=1326 audit(1792645593.263:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3acff9f559 code=0x7ffc0000
[  264.838058][ T4271] ffs_data_put(): freeing
[  264.982484][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'.
[  265.901111][ T6470] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  266.702182][ T6477] overlayfs: failed to clone lowerpath
[  266.968487][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'.
[  267.816368][ T4271] ffs_data_put(): freeing
[  268.039727][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'.
[  268.915875][ T6511] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  269.174878][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.590'.
[  270.273872][ T6534] ffs_data_put(): freeing
[  273.714578][ T6550] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  273.845007][ T6555] FAULT_INJECTION: forcing a failure.
[  273.845007][ T6555] name failslab, interval 1, probability 0, space 0, times 0
[  273.885600][ T6555] CPU: 0 PID: 6555 Comm: syz.3.602 Not tainted syzkaller #0
[  273.892969][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  273.903068][ T6555] Call Trace:
[  273.906372][ T6555]  <TASK>
[  273.909330][ T6555]  dump_stack_lvl+0x188/0x24e
[  273.914053][ T6555]  ? show_regs_print_info+0x12/0x12
[  273.919291][ T6555]  ? load_image+0x410/0x410
[  273.923832][ T6555]  ? __might_sleep+0xd0/0xd0
[  273.928446][ T6555]  ? __lock_acquire+0x7ea0/0x7ea0
[  273.933500][ T6555]  should_fail_ex+0x390/0x4c0
[  273.938210][ T6555]  should_failslab+0x5/0x20
[  273.942741][ T6555]  slab_pre_alloc_hook+0x59/0x300
[  273.947894][ T6555]  ? __kernfs_new_node+0xa6/0x7f0
[  273.952955][ T6555]  __kmem_cache_alloc_node+0x4f/0x270
[  273.958365][ T6555]  ? __kernfs_new_node+0xa6/0x7f0
[  273.963408][ T6555]  __kmalloc_node_track_caller+0xa0/0x240
[  273.969165][ T6555]  kstrdup_const+0x56/0x90
[  273.973621][ T6555]  __kernfs_new_node+0xa6/0x7f0
[  273.978506][ T6555]  ? __lock_acquire+0x7ea0/0x7ea0
[  273.983578][ T6555]  ? kernfs_new_node+0x250/0x250
[  273.988556][ T6555]  ? sysfs_do_create_link_sd+0x75/0x110
[  273.994126][ T6555]  kernfs_new_node+0x148/0x250
[  273.998908][ T6555]  kernfs_create_link+0xa3/0x200
[  274.003862][ T6555]  sysfs_do_create_link_sd+0x83/0x110
[  274.009251][ T6555]  device_add+0x83b/0x1050
[  274.013693][ T6555]  netdev_register_kobject+0x184/0x320
[  274.019216][ T6555]  register_netdevice+0x133a/0x1b80
[  274.024452][ T6555]  ? netif_stacked_transfer_operstate+0x200/0x200
[  274.030867][ T6555]  ? vscnprintf+0x80/0x80
[  274.035224][ T6555]  ? net_generic+0x1e/0x240
[  274.039747][ T6555]  ? radix_tree_lookup+0x263/0x280
[  274.044883][ T6555]  ppp_dev_configure+0x875/0xad0
[  274.049843][ T6555]  ppp_ioctl+0x8eb/0x1b20
[  274.054180][ T6555]  ? ppp_poll+0x250/0x250
[  274.058535][ T6555]  ? __fget_files+0x28/0x460
[  274.063140][ T6555]  ? bpf_lsm_file_ioctl+0x5/0x10
[  274.068089][ T6555]  ? security_file_ioctl+0x7c/0xa0
[  274.073220][ T6555]  ? ppp_poll+0x250/0x250
[  274.077556][ T6555]  __se_sys_ioctl+0xfa/0x170
[  274.082150][ T6555]  do_syscall_64+0x4c/0xa0
[  274.086563][ T6555]  ? clear_bhb_loop+0x60/0xb0
[  274.091235][ T6555]  ? clear_bhb_loop+0x60/0xb0
[  274.095917][ T6555]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.101813][ T6555] RIP: 0033:0x7f0afa19f559
[  274.106233][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.125871][ T6555] RSP: 002b:00007f0afb001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  274.134288][ T6555] RAX: ffffffffffffffda RBX: 00007f0afa425fa0 RCX: 00007f0afa19f559
[  274.142279][ T6555] RDX: 0000200000000840 RSI: 00000000c004743e RDI: 0000000000000004
[  274.150254][ T6555] RBP: 00007f0afa236b20 R08: 0000000000000000 R09: 0000000000000000
[  274.158266][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.166239][ T6555] R13: 00007f0afa426038 R14: 00007f0afa425fa0 R15: 00007ffe72c736e8
[  274.174240][ T6555]  </TASK>
[  274.419608][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'.
[  274.457923][ T6573] ffs_data_put(): freeing
[  274.784880][ T6580] lo speed is unknown, defaulting to 1000
[  274.815120][ T6580] lo speed is unknown, defaulting to 1000
[  274.859190][ T6580] lo speed is unknown, defaulting to 1000
[  274.973214][ T6580] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22
[  276.535213][ T6580] lo speed is unknown, defaulting to 1000
[  276.819648][ T6580] lo speed is unknown, defaulting to 1000
[  276.879181][ T6580] lo speed is unknown, defaulting to 1000
[  276.887031][ T6580] lo speed is unknown, defaulting to 1000
[  276.894124][ T6580] lo speed is unknown, defaulting to 1000
[  276.930045][ T6593] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  277.275179][ T6601] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  277.487292][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.497180][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.838981][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.620'.
[  279.359944][ T6641] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  279.670823][ T6655] device syzkaller0 entered promiscuous mode
[  279.721540][ T6655] tipc: Started in network mode
[  279.736948][ T6655] tipc: Node identity eafdf5059501, cluster identity 4711
[  279.760962][ T6655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.802271][ T6655] tipc: Resetting bearer <eth:syzkaller0>
[  279.836153][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  279.836167][   T26] audit: type=1800 audit(1792645612.233:92): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.636" name="zone_nr_conv" dev="configfs" ino=41505 res=0 errno=0
[  279.908636][ T6653] tipc: Resetting bearer <eth:syzkaller0>
[  280.045007][   T26] audit: type=1800 audit(1792645612.443:93): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.636" name="zoned" dev="configfs" ino=42611 res=0 errno=0
[  281.929705][ T6653] tipc: Disabling bearer <eth:syzkaller0>
[  281.940930][    T7] tipc: Node number set to 2147284229
[  283.492467][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'.
[  284.360777][   T26] audit: type=1800 audit(1792645616.753:94): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.648" name="zone_nr_conv" dev="configfs" ino=42673 res=0 errno=0
[  285.244056][ T4271] ffs_data_put(): freeing
[  285.270471][   T26] audit: type=1800 audit(1792645616.913:95): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.648" name="zoned" dev="configfs" ino=42676 res=0 errno=0
[  286.889106][ T6727] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  286.889106][ T6727] 
[  286.903094][ T6727] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  286.916060][ T6727] CIFS: Attempting to mount \\172.20.20.170\share
[  287.156607][ T6727] CIFS: VFS: cifs_mount failed w/return code = -112
[  288.187136][ T6734] rxe_eth0 speed is unknown, defaulting to 1000
[  288.579857][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.661'.
[  289.398693][ T6734] lo speed is unknown, defaulting to 1000
[  289.584703][   T26] audit: type=1800 audit(1792645621.983:96): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.663" name="zone_nr_conv" dev="configfs" ino=41666 res=0 errno=0
[  291.608864][   T26] audit: type=1800 audit(1792645622.133:97): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.663" name="zoned" dev="configfs" ino=41669 res=0 errno=0
[  291.648928][ T4271] ffs_data_put(): freeing
[  291.722213][ T6773] netlink: 'syz.1.665': attribute type 1 has an invalid length.
[  292.639553][ T6773] bond2: (slave bridge1): making interface the new active one
[  292.647614][ T6773] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  292.827310][ T6792] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  292.905481][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'.
[  294.307466][ T6819] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  294.307466][ T6819] 
[  294.321838][ T6819] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  294.335892][ T6819] CIFS: Attempting to mount \\172.20.20.170\share
[  294.343723][ T6819] CIFS: VFS: Error connecting to socket. Aborting operation.
[  294.351412][ T6819] CIFS: VFS: cifs_mount failed w/return code = -22
[  295.065006][ T4271] ffs_data_put(): freeing
[  295.119045][   T26] audit: type=1800 audit(1792645627.513:98): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="zone_nr_conv" dev="configfs" ino=41758 res=0 errno=0
[  296.030374][   T26] audit: type=1800 audit(1792645627.673:99): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="zoned" dev="configfs" ino=42819 res=0 errno=0
[  296.204203][ T6828] FAULT_INJECTION: forcing a failure.
[  296.204203][ T6828] name failslab, interval 1, probability 0, space 0, times 0
[  296.365760][ T6828] CPU: 1 PID: 6828 Comm: syz.0.681 Not tainted syzkaller #0
[  296.373134][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  296.383232][ T6828] Call Trace:
[  296.386539][ T6828]  <TASK>
[  296.389493][ T6828]  dump_stack_lvl+0x188/0x24e
[  296.394208][ T6828]  ? show_regs_print_info+0x12/0x12
[  296.399467][ T6828]  ? load_image+0x410/0x410
[  296.403994][ T6828]  ? __might_sleep+0xd0/0xd0
[  296.408601][ T6828]  ? __lock_acquire+0x7ea0/0x7ea0
[  296.413670][ T6828]  should_fail_ex+0x390/0x4c0
[  296.418423][ T6828]  should_failslab+0x5/0x20
[  296.422943][ T6828]  slab_pre_alloc_hook+0x59/0x300
[  296.427998][ T6828]  kmem_cache_alloc+0x56/0x2f0
[  296.432880][ T6828]  ? security_inode_alloc+0x30/0x110
[  296.438220][ T6828]  security_inode_alloc+0x30/0x110
[  296.443369][ T6828]  inode_init_always+0x910/0xc90
[  296.448331][ T6828]  new_inode_pseudo+0x91/0x1c0
[  296.453124][ T6828]  ? __ns_get_path+0x2c/0x650
[  296.457834][ T6828]  __ns_get_path+0x252/0x650
[  296.462455][ T6828]  ns_get_path+0x50/0x90
[  296.466726][ T6828]  proc_ns_get_link+0x168/0x290
[  296.471605][ T6828]  ? proc_ns_instantiate+0xf0/0xf0
[  296.476743][ T6828]  ? pick_link+0x10f/0xe20
[  296.481176][ T6828]  ? bpf_lsm_inode_follow_link+0x5/0x10
[  296.486744][ T6828]  ? security_inode_follow_link+0xb3/0x100
[  296.492581][ T6828]  ? proc_ns_instantiate+0xf0/0xf0
[  296.497727][ T6828]  pick_link+0x6ad/0xe20
[  296.502005][ T6828]  step_into+0xc14/0xee0
[  296.506279][ T6828]  ? rcu_read_lock_any_held+0xb0/0x130
[  296.511757][ T6828]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  296.517066][ T6828]  ? set_root+0x3a0/0x3a0
[  296.521413][ T6828]  ? d_splice_alias+0x110/0x320
[  296.526294][ T6828]  path_openat+0x15dd/0x2f10
[  296.530933][ T6828]  ? do_filp_open+0x420/0x420
[  296.535645][ T6828]  do_filp_open+0x1ee/0x420
[  296.540175][ T6828]  ? vfs_tmpfile+0x470/0x470
[  296.544809][ T6828]  ? _raw_spin_unlock+0x24/0x40
[  296.549677][ T6828]  ? alloc_fd+0x590/0x640
[  296.554040][ T6828]  do_sys_openat2+0x14b/0x4f0
[  296.558746][ T6828]  ? do_sys_open+0xe0/0xe0
[  296.563186][ T6828]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  296.569204][ T6828]  ? lock_chain_count+0x20/0x20
[  296.574085][ T6828]  __x64_sys_openat+0x135/0x160
[  296.578972][ T6828]  do_syscall_64+0x4c/0xa0
[  296.583407][ T6828]  ? clear_bhb_loop+0x60/0xb0
[  296.588106][ T6828]  ? clear_bhb_loop+0x60/0xb0
[  296.592815][ T6828]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  296.599055][ T6828] RIP: 0033:0x7f569015fd8e
[  296.603496][ T6828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  296.623137][ T6828] RSP: 002b:00007f5690fceec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  296.631573][ T6828] RAX: ffffffffffffffda RBX: 00007f5690fcf6c0 RCX: 00007f569015fd8e
[  296.639576][ T6828] RDX: 0000000000000002 RSI: 00007f5690fcef90 RDI: ffffffffffffff9c
[  296.647572][ T6828] RBP: 00007f5690236b20 R08: 0000000000000000 R09: 0000000000000000
[  296.655572][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.663567][ T6828] R13: 00007f5690426038 R14: 00007f5690425fa0 R15: 00007ffec02108b8
[  296.671581][ T6828]  </TASK>
[  297.163253][ T6841] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  297.214092][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.684'.
[  297.243180][ T6840] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  298.428886][ T6864] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  298.428886][ T6864] 
[  298.442771][ T6864] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  298.455835][ T6864] CIFS: Attempting to mount \\172.20.20.170\share
[  299.904261][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'.
[  299.950471][ T6878] FAULT_INJECTION: forcing a failure.
[  299.950471][ T6878] name fail_futex, interval 1, probability 0, space 0, times 1
[  299.969695][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'.
[  299.974617][ T6864] CIFS: VFS: cifs_mount failed w/return code = -512
[  300.030384][ T6878] CPU: 0 PID: 6878 Comm: syz.0.696 Not tainted syzkaller #0
[  300.037850][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  300.048068][ T6878] Call Trace:
[  300.051351][ T6878]  <TASK>
[  300.054284][ T6878]  dump_stack_lvl+0x188/0x24e
[  300.058995][ T6878]  ? show_regs_print_info+0x12/0x12
[  300.064418][ T6878]  ? load_image+0x410/0x410
[  300.068963][ T6878]  ? cgroup_rstat_updated+0xce/0x350
[  300.074276][ T6878]  ? rcu_read_lock_sched_held+0x86/0x110
[  300.079940][ T6878]  ? sched_slice+0x430/0x430
[  300.084542][ T6878]  should_fail_ex+0x390/0x4c0
[  300.089362][ T6878]  get_futex_key+0x1b1/0x1000
[  300.094149][ T6878]  ? futex_setup_timer+0xc0/0xc0
[  300.099179][ T6878]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  300.105160][ T6878]  ? __lock_acquire+0x7ea0/0x7ea0
[  300.110447][ T6878]  ? lock_chain_count+0x20/0x20
[  300.115297][ T6878]  futex_wait_setup+0xb8/0x270
[  300.120065][ T6878]  ? futex_wait_multiple+0x920/0x920
[  300.125395][ T6878]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  300.131306][ T6878]  ? _raw_spin_unlock+0x40/0x40
[  300.136212][ T6878]  futex_wait+0x1b8/0x5c0
[  300.140562][ T6878]  ? futex_wait_setup+0x270/0x270
[  300.145594][ T6878]  do_futex+0x310/0x320
[  300.149740][ T6878]  ? __ia32_sys_get_robust_list+0x100/0x100
[  300.155630][ T6878]  ? bpf_link_show_fdinfo+0x380/0x380
[  300.161130][ T6878]  __se_sys_futex+0x381/0x410
[  300.165854][ T6878]  ? __x64_sys_futex+0xf0/0xf0
[  300.170684][ T6878]  ? __x64_sys_futex+0x1d/0xf0
[  300.175516][ T6878]  do_syscall_64+0x4c/0xa0
[  300.179948][ T6878]  ? clear_bhb_loop+0x60/0xb0
[  300.184732][ T6878]  ? clear_bhb_loop+0x60/0xb0
[  300.189577][ T6878]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  300.195494][ T6878] RIP: 0033:0x7f569019f559
[  300.199932][ T6878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.219547][ T6878] RSP: 002b:00007f5690fcf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  300.227970][ T6878] RAX: ffffffffffffffda RBX: 00007f5690425fa8 RCX: 00007f569019f559
[  300.235952][ T6878] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5690425fa8
[  300.243939][ T6878] RBP: 00007f5690425fa0 R08: 0000000000000000 R09: 0000000000000000
[  300.251976][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.259965][ T6878] R13: 00007f5690426038 R14: 00007ffec02107d0 R15: 00007ffec02108b8
[  300.267954][ T6878]  </TASK>
[  303.185906][ T6889] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  303.306750][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'.
[  305.977061][ T6914] netlink: 56 bytes leftover after parsing attributes in process `syz.3.708'.
[  306.055409][ T6918] tmpfs: Bad value for 'nr_inodes'
[  306.251413][ T6922] device syzkaller1 entered promiscuous mode
[  306.363031][ T6924] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  307.374094][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'.
[  307.517102][ T6935] Invalid ELF header magic: != ELF
[  307.552745][ T6935] overlayfs: unrecognized mount option "/" or missing value
[  309.159262][ T6955] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  311.165838][ T6964] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  311.180894][ T6966] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  313.903485][ T7002] netlink: 68 bytes leftover after parsing attributes in process `syz.0.736'.
[  314.200012][ T7011] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  314.200012][ T7011] 
[  314.213943][ T7011] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  314.227016][ T7011] CIFS: Attempting to mount \\172.20.20.170\share
[  314.235839][ T7011] CIFS: VFS: Error connecting to socket. Aborting operation.
[  314.243519][ T7011] CIFS: VFS: cifs_mount failed w/return code = -22
[  315.190266][ T7024] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  315.269232][ T7027] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  317.510405][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.516812][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  318.034594][ T7042] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  318.194497][ T4280] Bluetooth: hci1: adv larger than maximum supported
[  318.549949][ T7068] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  323.806308][ T7150] device-mapper: table: 248:1: ram8 too small for target: start=8, len=8192, dev_size=8192
[  323.869823][ T7150] device-mapper: core: Cannot calculate initial queue limits
[  323.894471][ T7150] device-mapper: ioctl: unable to set up device queue for new table.
[  326.731032][ T7187] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  327.546547][ T4281] ffs_data_put(): freeing
[  327.826528][ T7201] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  330.947366][ T7219] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000'
[  334.367162][ T4281] ffs_data_put(): freeing
[  336.776214][   T26] audit: type=1800 audit(2000000022.840:100): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.818" name="zone_nr_conv" dev="configfs" ino=44527 res=0 errno=0
[  337.615851][   T26] audit: type=1800 audit(2000000023.030:101): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.818" name="zoned" dev="configfs" ino=43610 res=0 errno=0
[  337.731274][ T7270] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  340.077808][ T4276] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  340.275179][ T4276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.318670][ T4276] usb 1-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  340.337638][ T7298] binder: BINDER_SET_CONTEXT_MGR already set
[  340.348789][ T7300] 
[  340.351167][ T7300] ======================================================
[  340.358195][ T7300] WARNING: possible circular locking dependency detected
[  340.365424][ T7300] syzkaller #0 Not tainted
[  340.369851][ T7300] ------------------------------------------------------
[  340.376890][ T7300] syz.2.827/7300 is trying to acquire lock:
[  340.382804][ T7300] ffff88801dbbd350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x55c/0xd10
[  340.391981][ T7300] 
[  340.391981][ T7300] but task is already holding lock:
[  340.399347][ T7300] ffff88801dbb9510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340
[  340.409953][ T7300] 
[  340.409953][ T7300] which lock already depends on the new lock.
[  340.409953][ T7300] 
[  340.420355][ T7300] 
[  340.420355][ T7300] the existing dependency chain (in reverse order) is:
[  340.429364][ T7300] 
[  340.429364][ T7300] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}:
[  340.438040][ T7300]        __mutex_lock+0x12d/0xae0
[  340.443072][ T7300]        nfc_urelease_event_work+0x120/0x310
[  340.449081][ T7300]        process_one_work+0x8ab/0x1160
[  340.454557][ T7300]        worker_thread+0xaf5/0x12a0
[  340.459757][ T7300]        kthread+0x29d/0x330
[  340.464342][ T7300]        ret_from_fork+0x1f/0x30
[  340.470068][ T7300] 
[  340.470068][ T7300] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}:
[  340.477918][ T7300]        __mutex_lock+0x12d/0xae0
[  340.482951][ T7300]        nfc_register_device+0x38/0x300
[  340.488522][ T7300]        nci_register_device+0x89f/0x9f0
[  340.494184][ T7300]        virtual_ncidev_open+0x55/0xc0
[  340.499657][ T7300]        misc_open+0x31f/0x390
[  340.504441][ T7300]        chrdev_open+0x585/0x5f0
[  340.509405][ T7300]        do_dentry_open+0x7dd/0x10b0
[  340.514696][ T7300]        path_openat+0x2674/0x2f10
[  340.519819][ T7300]        do_filp_open+0x1ee/0x420
[  340.524853][ T7300]        do_sys_openat2+0x14b/0x4f0
[  340.530060][ T7300]        __x64_sys_openat+0x135/0x160
[  340.535468][ T7300]        do_syscall_64+0x4c/0xa0
[  340.540416][ T7300]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  340.546854][ T7300] 
[  340.546854][ T7300] -> #1 (nci_mutex){+.+.}-{3:3}:
[  340.554074][ T7300]        __mutex_lock+0x12d/0xae0
[  340.559113][ T7300]        virtual_nci_close+0x13/0x40
[  340.564406][ T7300]        nci_dev_up+0x976/0xd90
[  340.569269][ T7300]        nfc_dev_up+0x15d/0x310
[  340.574143][ T7300]        nfc_genl_dev_up+0x85/0xd0
[  340.579275][ T7300]        genl_family_rcv_msg_doit+0x22f/0x350
[  340.585368][ T7300]        genl_rcv_msg+0x601/0x790
[  340.590390][ T7300]        netlink_rcv_skb+0x1ef/0x440
[  340.595667][ T7300]        genl_rcv+0x24/0x40
[  340.600188][ T7300]        netlink_unicast+0x7ad/0x920
[  340.605495][ T7300]        netlink_sendmsg+0x8ad/0xbd0
[  340.610872][ T7300]        ____sys_sendmsg+0x5ed/0x9a0
[  340.616604][ T7300]        ___sys_sendmsg+0x2a2/0x360
[  340.621833][ T7300]        __se_sys_sendmsg+0x1c3/0x2b0
[  340.627205][ T7300]        do_syscall_64+0x4c/0xa0
[  340.632162][ T7300]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  340.638582][ T7300] 
[  340.638582][ T7300] -> #0 (&ndev->req_lock){+.+.}-{3:3}:
[  340.646261][ T7300]        __lock_acquire+0x3a03/0x7ea0
[  340.651735][ T7300]        lock_acquire+0x1bc/0x4a0
[  340.656762][ T7300]        __mutex_lock+0x12d/0xae0
[  340.661796][ T7300]        nci_start_poll+0x55c/0xd10
[  340.667007][ T7300]        nfc_start_poll+0x141/0x2c0
[  340.672224][ T7300]        nfc_genl_start_poll+0x1d7/0x340
[  340.677858][ T7300]        genl_family_rcv_msg_doit+0x22f/0x350
[  340.683922][ T7300]        genl_rcv_msg+0x601/0x790
[  340.689021][ T7300]        netlink_rcv_skb+0x1ef/0x440
[  340.694316][ T7300]        genl_rcv+0x24/0x40
[  340.698824][ T7300]        netlink_unicast+0x7ad/0x920
[  340.704301][ T7300]        netlink_sendmsg+0x8ad/0xbd0
[  340.709624][ T7300]        ____sys_sendmsg+0x5ed/0x9a0
[  340.714914][ T7300]        ___sys_sendmsg+0x2a2/0x360
[  340.720099][ T7300]        __se_sys_sendmsg+0x1c3/0x2b0
[  340.725467][ T7300]        do_syscall_64+0x4c/0xa0
[  340.730543][ T7300]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  340.736966][ T7300] 
[  340.736966][ T7300] other info that might help us debug this:
[  340.736966][ T7300] 
[  340.747185][ T7300] Chain exists of:
[  340.747185][ T7300]   &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex
[  340.747185][ T7300] 
[  340.761444][ T7300]  Possible unsafe locking scenario:
[  340.761444][ T7300] 
[  340.768884][ T7300]        CPU0                    CPU1
[  340.774247][ T7300]        ----                    ----
[  340.779627][ T7300]   lock(&genl_data->genl_data_mutex);
[  340.785204][ T7300]                                lock(nfc_devlist_mutex);
[  340.792314][ T7300]                                lock(&genl_data->genl_data_mutex);
[  340.800560][ T7300]   lock(&ndev->req_lock);
[  340.804979][ T7300] 
[  340.804979][ T7300]  *** DEADLOCK ***
[  340.804979][ T7300] 
[  340.813115][ T7300] 4 locks held by syz.2.827/7300:
[  340.818145][ T7300]  #0: ffffffff8ebb71d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40
[  340.826521][ T7300]  #1: ffffffff8ebb6fe8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790
[  340.835528][ T7300]  #2: ffff88801dbb9510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340
[  340.846585][ T7300]  #3: ffff88801dbb9100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0
[  340.855747][ T7300] 
[  340.855747][ T7300] stack backtrace:
[  340.861623][ T7300] CPU: 0 PID: 7300 Comm: syz.2.827 Not tainted syzkaller #0
[  340.869299][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  340.879352][ T7300] Call Trace:
[  340.882632][ T7300]  <TASK>
[  340.885574][ T7300]  dump_stack_lvl+0x188/0x24e
[  340.890282][ T7300]  ? load_image+0x410/0x410
[  340.894779][ T7300]  ? show_regs_print_info+0x12/0x12
[  340.899967][ T7300]  ? print_circular_bug+0x12b/0x1a0
[  340.905160][ T7300]  check_noncircular+0x2f8/0x400
[  340.910096][ T7300]  ? print_deadlock_bug+0x5d0/0x5d0
[  340.915293][ T7300]  ? lockdep_lock+0xf1/0x1f0
[  340.919898][ T7300]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  340.925816][ T7300]  ? _find_first_zero_bit+0xd2/0x100
[  340.931310][ T7300]  __lock_acquire+0x3a03/0x7ea0
[  340.936176][ T7300]  ? __stack_depot_save+0x439/0x480
[  340.941370][ T7300]  ? kasan_set_track+0x4b/0x70
[  340.946132][ T7300]  ? nfc_llcp_build_gb+0x31f/0x3e0
[  340.951227][ T7300]  ? nfc_start_poll+0x141/0x2c0
[  340.956079][ T7300]  ? netlink_unicast+0x7ad/0x920
[  340.961031][ T7300]  ? netlink_sendmsg+0x8ad/0xbd0
[  340.963524][ T7298] binder: 7297:7298 ioctl 4018620d 200000000240 returned -16
[  340.965963][ T7300]  ? ____sys_sendmsg+0x5ed/0x9a0
[  340.965987][ T7300]  ? __se_sys_sendmsg+0x1c3/0x2b0
[  340.966002][ T7300]  ? do_syscall_64+0x4c/0xa0
[  340.966023][ T7300]  ? verify_lock_unused+0x140/0x140
[  340.993097][ T7300]  ? mark_lock+0x94/0x320
[  340.997426][ T7300]  lock_acquire+0x1bc/0x4a0
[  341.001920][ T7300]  ? nci_start_poll+0x55c/0xd10
[  341.006762][ T7300]  ? kasan_quarantine_put+0xd4/0x210
[  341.012038][ T7300]  ? __might_sleep+0xd0/0xd0
[  341.016614][ T7300]  ? read_lock_is_recursive+0x10/0x10
[  341.022003][ T7300]  ? slab_free_freelist_hook+0x133/0x1b0
[  341.027636][ T7300]  ? nfc_llcp_build_gb+0x31f/0x3e0
[  341.032753][ T7300]  ? __kmem_cache_free+0xb6/0x200
[  341.037790][ T7300]  __mutex_lock+0x12d/0xae0
[  341.042316][ T7300]  ? nci_start_poll+0x55c/0xd10
[  341.047197][ T7300]  ? nfc_llcp_general_bytes+0x240/0x240
[  341.052736][ T7300]  ? nci_start_poll+0x55c/0xd10
[  341.057584][ T7300]  ? mutex_lock_nested+0x10/0x10
[  341.062536][ T7300]  ? nfc_llcp_general_bytes+0x141/0x240
[  341.068097][ T7300]  ? nfc_llcp_general_bytes+0x204/0x240
[  341.073651][ T7300]  nci_start_poll+0x55c/0xd10
[  341.078331][ T7300]  ? nci_dev_down+0x40/0x40
[  341.082820][ T7300]  ? trace_raw_output_contention_end+0xd0/0xd0
[  341.088961][ T7300]  ? __mutex_trylock_common+0x15c/0x260
[  341.094533][ T7300]  ? rcu_is_watching+0x11/0xa0
[  341.099289][ T7300]  ? trace_contention_end+0x5f/0x170
[  341.104566][ T7300]  ? __mutex_lock+0x1ab/0xae0
[  341.109249][ T7300]  ? trace_contention_end+0x5f/0x170
[  341.114521][ T7300]  ? __mutex_lock+0x1ab/0xae0
[  341.119187][ T7300]  ? nfc_start_poll+0x4f/0x2c0
[  341.123940][ T7300]  ? nfc_get_device+0x82/0xd0
[  341.128601][ T7300]  ? nfc_release+0x2e0/0x2e0
[  341.133174][ T7300]  nfc_start_poll+0x141/0x2c0
[  341.137838][ T7300]  nfc_genl_start_poll+0x1d7/0x340
[  341.142934][ T7300]  genl_family_rcv_msg_doit+0x22f/0x350
[  341.148467][ T7300]  ? end_current_label_crit_section+0x170/0x170
[  341.154744][ T7300]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  341.160625][ T7300]  ? bpf_lsm_capable+0x5/0x10
[  341.165298][ T7300]  ? security_capable+0x85/0xb0
[  341.170147][ T7300]  genl_rcv_msg+0x601/0x790
[  341.174637][ T7300]  ? genl_bind+0x360/0x360
[  341.179038][ T7300]  ? nfc_genl_dev_down+0xd0/0xd0
[  341.183968][ T7300]  netlink_rcv_skb+0x1ef/0x440
[  341.188735][ T7300]  ? genl_bind+0x360/0x360
[  341.193234][ T7300]  ? netlink_ack+0x1160/0x1160
[  341.197995][ T7300]  ? down_read+0x1a8/0x2d0
[  341.202417][ T7300]  genl_rcv+0x24/0x40
[  341.206418][ T7300]  netlink_unicast+0x7ad/0x920
[  341.211175][ T7300]  netlink_sendmsg+0x8ad/0xbd0
[  341.215927][ T7300]  ? netlink_getsockopt+0x550/0x550
[  341.221107][ T7300]  ? apparmor_socket_sendmsg+0x8a/0x330
[  341.226641][ T7300]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  341.231910][ T7300]  ? security_socket_sendmsg+0x7c/0xa0
[  341.237355][ T7300]  ? netlink_getsockopt+0x550/0x550
[  341.242751][ T7300]  ____sys_sendmsg+0x5ed/0x9a0
[  341.247525][ T7300]  ? __sys_sendmsg_sock+0x30/0x30
[  341.252547][ T7300]  ? __import_iovec+0x306/0x510
[  341.257607][ T7300]  ? import_iovec+0x6f/0xa0
[  341.262112][ T7300]  ___sys_sendmsg+0x2a2/0x360
[  341.266783][ T7300]  ? __sys_sendmsg+0x2a0/0x2a0
[  341.271545][ T7300]  __se_sys_sendmsg+0x1c3/0x2b0
[  341.276410][ T7300]  ? __x64_sys_sendmsg+0x80/0x80
[  341.281341][ T7300]  ? lockdep_hardirqs_on+0x94/0x140
[  341.286534][ T7300]  do_syscall_64+0x4c/0xa0
[  341.290941][ T7300]  ? clear_bhb_loop+0x60/0xb0
[  341.295616][ T7300]  ? clear_bhb_loop+0x60/0xb0
[  341.300290][ T7300]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  341.306202][ T7300] RIP: 0033:0x7fb55d99f559
[  341.310635][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  341.330415][ T7300] RSP: 002b:00007fb55e8d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  341.339258][ T7300] RAX: ffffffffffffffda RBX: 00007fb55dc26090 RCX: 00007fb55d99f559
[  341.347238][ T7300] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005
[  341.355208][ T7300] RBP: 00007fb55da36b20 R08: 0000000000000000 R09: 0000000000000000
[  341.363178][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  341.371608][ T7300] R13: 00007fb55dc26128 R14: 00007fb55dc26090 R15: 00007fff81036a78
[  341.379760][ T7300]  </TASK>
[  341.393484][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  341.405058][ T4276] usb 1-1: Product: syz
[  341.409268][ T4276] usb 1-1: Manufacturer: syz
[  341.416689][ T4276] navman 1-1:1.0: navman converter detected
[  341.428088][ T4276] usb 1-1: navman converter now attached to ttyUSB0
[  341.619312][ T4276] usb 1-1: USB disconnect, device number 2
[  341.635775][ T4276] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  341.699067][ T4276] navman 1-1:1.0: device disconnected
[  343.219574][ T7300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  343.228396][ T7300] nci: nci_start_poll: failed to set local general bytes
[  343.236846][ T7291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512