last executing test programs:

15m24.413444645s ago: executing program 0 (id=407):
mkdirat(0xffffffffffffff9c, 0x0, 0x40)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0)

15m22.188606609s ago: executing program 0 (id=411):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r3, 0x29, 0x50, 0x0, &(0x7f0000001380))

15m20.797199643s ago: executing program 0 (id=415):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setrlimit(0x9, &(0x7f0000000400))
io_setup(0x2004, &(0x7f0000000680))

15m19.671537387s ago: executing program 0 (id=418):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0x7fff, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]})
openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15m19.271753775s ago: executing program 0 (id=423):
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c)

15m16.141135031s ago: executing program 0 (id=428):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x2c}}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804)

15m0.94891946s ago: executing program 32 (id=428):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x2c}}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804)

10m54.964365325s ago: executing program 3 (id=1182):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x20000c4, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_pidfd_open(0x0, 0x0)
pidfd_getfd(r2, r2, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
setns(r2, 0x8020000)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x5}, {}, 0x0, 0x3502, 0xa, 0x0, 0x1, 0x61}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x1a00}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x60004050}, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x2)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

10m54.838400952s ago: executing program 3 (id=1184):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}})
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0xa6}}}, 0x0)

10m53.788181171s ago: executing program 3 (id=1185):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r3 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x20000014}, 0x2c)

10m52.635422165s ago: executing program 3 (id=1187):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611266000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
unlink(&(0x7f0000000180)='./file1\x00')

10m50.15830543s ago: executing program 3 (id=1192):
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x300, 0x0, 0x2, 0x1, 0x0, 0x6}, 0x20)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))

10m48.362094544s ago: executing program 3 (id=1196):
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)

10m46.747401159s ago: executing program 33 (id=1196):
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)

8m52.059607613s ago: executing program 4 (id=1463):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/events/kvm/enable\x00', 0x88040, 0x0)
read$FUSE(r3, 0x0, 0x0)

8m47.032658977s ago: executing program 4 (id=1470):
r0 = memfd_create(&(0x7f0000002340)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\xee\b\x00\x00\x00\x00\x00\x00\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%eM\xe2\xc2y1q-\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xffHB\xc5F#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3)
mkdir(0x0, 0x1fd)
mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
write(r2, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009", 0x1f)
io_uring_enter(r1, 0x533a, 0x8b46, 0x0, &(0x7f00000001c0)={[0xeb8f]}, 0x8)
getpriority(0x0, 0x0)
unshare(0x8040480)
getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x9, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x4, @loopback={0xfffffffffe5e0000}, 0x7}, 0x1c)

8m42.802123405s ago: executing program 4 (id=1477):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, 0x0)
unshare(0x28000600)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)

8m40.581641579s ago: executing program 4 (id=1484):
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x24622, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd_dir/threads\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)

8m39.311307498s ago: executing program 4 (id=1486):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0)

8m37.082693502s ago: executing program 4 (id=1489):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0)

8m21.398790954s ago: executing program 34 (id=1489):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0)

1m10.640484392s ago: executing program 1 (id=2340):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
getdents(r4, &(0x7f0000000ec0)=""/4096, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000508000000000000820000001801", @ANYBLOB="0000000000000100b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)

1m8.793868838s ago: executing program 1 (id=2341):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fanotify_init(0xf00, 0x1)
fanotify_mark(r4, 0x105, 0x40009967, r0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

57.528180324s ago: executing program 1 (id=2359):
socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r3, 0x400, 0x1)
fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

56.215611955s ago: executing program 1 (id=2361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c000300"], 0x120}}, 0x0)

54.816474741s ago: executing program 1 (id=2364):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10})
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$BLKTRACESTOP(r2, 0x1275, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r4, 0x4)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4080}, 0x40000)
syz_usb_connect$uac2(0x5, 0xfb, 0x0, 0x0)

51.240669908s ago: executing program 1 (id=2371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0)
pipe2$watch_queue(&(0x7f0000000180), 0x80)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x10000007, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0xf, 0x8, 0x800, 0x8000006, 0x401, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x8000001, 0x5, 0x1, 0x1, 0x4, 0xa, 0x8, 0x5, 0x9, 0x804d7f, 0x2, 0x8c40, 0x6, 0x5, 0x3, 0x9, 0x2, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xffffffff, 0x9, 0x2a, 0x1, 0x23], [0x9, 0x3, 0x7, 0x39b7c38a, 0x80000015, 0x12, 0x802, 0xc, 0x0, 0x2329, 0x9, 0x3, 0x7, 0x6, 0x8, 0x24a, 0x2, 0xfffffff7, 0xfffffffb, 0x3, 0x5, 0x5, 0x80, 0x6, 0x8001, 0x4000040, 0xa1, 0x4, 0xffffffff, 0x2, 0x200, 0x9a, 0xffffff00, 0x100007ff, 0x6, 0x1, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x5, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x1, 0x3, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x4, 0x1a9e1bfd, 0xfffffffc, 0x5, 0x9, 0x10001, 0x8, 0x7aae, 0x9, 0x2, 0x7ffffff7, 0x88000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x9a0, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b5, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x3, 0x6, 0x8007c12, 0x5, 0x1, 0x0, 0x5, 0xe, 0x3, 0x4, 0x8, 0xfff, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x10008, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0xc, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfffffffd, 0x2, 0x66608000, 0x7, 0x7fb, 0x8, 0x0, 0x8, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x6aea, 0x11, 0x1000, 0x2, 0x100, 0x3, 0x20000000, 0x8, 0x15, 0xffff, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10, 0x936f, 0x4f89, 0x3, 0x580, 0x2d1, 0x80, 0x2]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})

35.640935906s ago: executing program 35 (id=2371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0)
pipe2$watch_queue(&(0x7f0000000180), 0x80)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x10000007, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0xf, 0x8, 0x800, 0x8000006, 0x401, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x8000001, 0x5, 0x1, 0x1, 0x4, 0xa, 0x8, 0x5, 0x9, 0x804d7f, 0x2, 0x8c40, 0x6, 0x5, 0x3, 0x9, 0x2, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xffffffff, 0x9, 0x2a, 0x1, 0x23], [0x9, 0x3, 0x7, 0x39b7c38a, 0x80000015, 0x12, 0x802, 0xc, 0x0, 0x2329, 0x9, 0x3, 0x7, 0x6, 0x8, 0x24a, 0x2, 0xfffffff7, 0xfffffffb, 0x3, 0x5, 0x5, 0x80, 0x6, 0x8001, 0x4000040, 0xa1, 0x4, 0xffffffff, 0x2, 0x200, 0x9a, 0xffffff00, 0x100007ff, 0x6, 0x1, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x5, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x1, 0x3, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x4, 0x1a9e1bfd, 0xfffffffc, 0x5, 0x9, 0x10001, 0x8, 0x7aae, 0x9, 0x2, 0x7ffffff7, 0x88000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x9a0, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b5, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x3, 0x6, 0x8007c12, 0x5, 0x1, 0x0, 0x5, 0xe, 0x3, 0x4, 0x8, 0xfff, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x10008, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0xc, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfffffffd, 0x2, 0x66608000, 0x7, 0x7fb, 0x8, 0x0, 0x8, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x6aea, 0x11, 0x1000, 0x2, 0x100, 0x3, 0x20000000, 0x8, 0x15, 0xffff, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10, 0x936f, 0x4f89, 0x3, 0x580, 0x2d1, 0x80, 0x2]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})

23.203427327s ago: executing program 2 (id=2414):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setfsgid(0xee00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)

20.862449025s ago: executing program 5 (id=2418):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
setns(0xc9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$rds(0x15, 0x5, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\X', &(0x7f0000000880)='R\x8d\xe9\x1a\xe0\x04\x00\x00\x00\x00\x00\x00\x00s\x03l\x8c\x11kSg\x03\x14 \'_\v/\xe0\xb0A\rx\x19\xe8\xf6sU\xfe<\xef\xc9\x12\xc25\xf8A\t\xdb\xb7\x88\xeeT\x80\x00\x00\x00=-\xe0\xf9\xff\xd2/x\x86i9\xcb@\xfa-\x19Q\x00\x90\x04\'J\xf8\xdfs\xad\xe6dS\x98\xeb\x89p\xd6)\xe8\x94d\x9dv.3\x9b\x81\x8e\x10\xca\xbc\x888', 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

20.854515716s ago: executing program 2 (id=2419):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.840919667s ago: executing program 7 (id=2420):
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)

19.27291792s ago: executing program 5 (id=2421):
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffccb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

19.250441751s ago: executing program 2 (id=2422):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
syz_emit_ethernet(0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r1, &(0x7f0000000900)='1\x00', 0x1)

19.078975419s ago: executing program 7 (id=2423):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r4, 0x0, 0x0, 0x800)

19.013218232s ago: executing program 2 (id=2424):
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001780), 0x40040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
memfd_secret(0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
r1 = syz_open_dev$media(&(0x7f0000000280), 0xc, 0x20200)
ioctl$MEDIA_IOC_SETUP_LINK(r1, 0x541b, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket(0x11, 0x3, 0xff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0x71, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x10, 0x0}}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x0)

17.637047726s ago: executing program 5 (id=2425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
pipe(&(0x7f0000000180))
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

17.636046026s ago: executing program 2 (id=2426):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x21, 0x5, 0xd0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c000300"], 0x120}}, 0x0)

16.012764262s ago: executing program 5 (id=2427):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c000300"], 0x120}}, 0x0)

14.508081342s ago: executing program 2 (id=2428):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x2, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0xc, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x8, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0x101, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0x1, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x5, 0x8001}, {0x4, 0xffffffff, 0x1, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xeffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x2007fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0xffffffff, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0xaf5d, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0xffffffff}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8001, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x0, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x14, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x7}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xf1d}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0xee33}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x2, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a311039dbee9", 0xfa}], 0x1}, 0x20000885)

12.328001624s ago: executing program 6 (id=2429):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xa26}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

12.326676064s ago: executing program 7 (id=2430):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000100)={[{@fat=@errors_remount}, {@dots}, {@fat=@uid}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@dots}, {@dots}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff93}}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@fat=@errors_continue}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7}}, {@nodots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk")
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e110b07"], 0xec)
syz_open_dev$loop(0x0, 0x6b, 0x901)
futex(0x0, 0x2, 0x0, 0x0, 0x0, 0xb0090198)
socket$inet6(0xa, 0x802, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000280)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c756d61738a3d3030303030303030303030303030303030303030b031322c636f6465706167653d313235302c756e695f786c61f4653d302c7257ce69722c696fb80a61727365743d6b6f69382d72752c666d61736b3d30303030303030303030303030303030303030303030372c756e695f786c6174653d302c636865636b3d7374726963742c6e6f6e756d7461696c3d302c00"], 0x81, 0x2ae, &(0x7f0000001980)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61)

8.830174618s ago: executing program 5 (id=2431):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_io_uring_setup(0x3bd4, 0x0, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4000000)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpriority(0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"})

8.829989807s ago: executing program 6 (id=2432):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
socket(0x28, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

6.606990631s ago: executing program 6 (id=2433):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

4.396127854s ago: executing program 6 (id=2434):
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8=0x0, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

4.393503934s ago: executing program 7 (id=2435):
socket$tipc(0x1e, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0))
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

4.355709236s ago: executing program 5 (id=2436):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
setns(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)
sendfile(r4, r4, 0x0, 0x1000000201005)

2.305995622s ago: executing program 6 (id=2437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/229, 0xe5, 0x0, 0x0}, &(0x7f00000002c0)=0x40)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
msgget$private(0x0, 0x193)

2.261300714s ago: executing program 7 (id=2438):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
syslog(0x4, &(0x7f0000000140)=""/179, 0xb3)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20)

1.653699ms ago: executing program 6 (id=2439):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ptrace$setopts(0x4206, r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)

0s ago: executing program 7 (id=2440):
prctl$PR_SET_NAME(0x4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'})
syz_open_procfs(0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x1, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8000, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x800005, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000020000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x8, 0x1, 0x83, 0x538a, 0x6, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0x1, 0x7, 0x8, 0x9, 0x82b, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0x7bcd, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x80000001, 0x40, 0x7fffffff, 0x7, 0xf9, 0x9]})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc})
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
close(r1)

kernel console output (not intermixed with test programs):

ld_fail_ex+0x390/0x4c0
[  565.967251][T10194]  should_failslab+0x5/0x20
[  565.971840][T10194]  slab_pre_alloc_hook+0x59/0x300
[  565.976977][T10194]  ? nf_hook+0x9e/0x390
[  565.981247][T10194]  kmem_cache_alloc+0x56/0x2f0
[  565.986072][T10194]  ? skb_clone+0x1e7/0x370
[  565.990585][T10194]  skb_clone+0x1e7/0x370
[  565.994870][T10194]  ? ip_mc_output+0x34b/0x5d0
[  565.999611][T10194]  ip_mc_output+0x36e/0x5d0
[  566.004172][T10194]  ip_send_skb+0x129/0x1c0
[  566.008635][T10194]  udp_send_skb+0xa4f/0x13f0
[  566.013328][T10194]  udp_sendmsg+0x1b46/0x23d0
[  566.017976][T10194]  ? __might_sleep+0xd0/0xd0
[  566.022683][T10194]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  566.027583][T10194]  ? udp_cmsg_send+0x350/0x350
[  566.032426][T10194]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  566.038982][T10194]  ? sock_rps_record_flow+0x19/0x3f0
[  566.044322][T10194]  ? inet_sendmsg+0x7a/0x2a0
[  566.048959][T10194]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  566.054369][T10194]  ? inet_send_prepare+0x250/0x250
[  566.059544][T10194]  ____sys_sendmsg+0x5ed/0x9a0
[  566.064356][T10194]  ? __might_fault+0xa6/0x120
[  566.069190][T10194]  ? __sys_sendmsg_sock+0x30/0x30
[  566.074261][T10194]  ? __import_iovec+0x306/0x510
[  566.079271][T10194]  ? import_iovec+0x6f/0xa0
[  566.083837][T10194]  ___sys_sendmsg+0x2a2/0x360
[  566.088570][T10194]  ? release_firmware_map_entry+0x187/0x187
[  566.094576][T10194]  ? __sys_sendmsg+0x2a0/0x2a0
[  566.099429][T10194]  __sys_sendmmsg+0x2c3/0x510
[  566.104155][T10194]  ? __ia32_sys_sendmsg+0x80/0x80
[  566.109241][T10194]  ? __ia32_sys_get_robust_list+0x100/0x100
[  566.115254][T10194]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  566.121348][T10194]  ? lock_chain_count+0x20/0x20
[  566.126276][T10194]  __x64_sys_sendmmsg+0x9c/0xb0
[  566.131168][T10194]  do_syscall_64+0x4c/0xa0
[  566.135621][T10194]  ? clear_bhb_loop+0x60/0xb0
[  566.140407][T10194]  ? clear_bhb_loop+0x60/0xb0
[  566.145137][T10194]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  566.151095][T10194] RIP: 0033:0x7f16fbb9e159
[  566.155627][T10194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.175393][T10194] RSP: 002b:00007f16fcb22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  566.183881][T10194] RAX: ffffffffffffffda RBX: 00007f16fbe25fa0 RCX: 00007f16fbb9e159
[  566.191927][T10194] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000005
[  566.199959][T10194] RBP: 00007f16fbc3506b R08: 0000000000000000 R09: 0000000000000000
[  566.208055][T10194] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000
[  566.216090][T10194] R13: 00007f16fbe26038 R14: 00007f16fbe25fa0 R15: 00007ffd670a40d8
[  566.224139][T10194]  </TASK>
[  569.162255][T10216] device syz_tun left promiscuous mode
[  569.168452][T10216] bridge0: port 4(syz_tun) entered disabled state
[  569.178522][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  569.189284][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  569.197070][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  569.206450][T10216] device bridge_slave_0 left promiscuous mode
[  569.212718][T10216] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.228064][T10216] device bridge_slave_1 left promiscuous mode
[  569.234357][T10216] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.244050][T10216] device ip6gretap0 entered promiscuous mode
[  569.250930][T10216] device macvlan2 left promiscuous mode
[  569.270454][T10216] bond4: (slave veth0_to_bond): Releasing active interface
[  569.278390][T10216] device veth0_to_bond left promiscuous mode
[  569.304039][T10216] bond0: (slave bond_slave_0): Releasing backup interface
[  569.312185][T10216] device bond_slave_0 left promiscuous mode
[  569.333145][T10216] bond0: (slave bond_slave_1): Releasing backup interface
[  569.343842][T10216] device bond_slave_1 left promiscuous mode
[  569.385276][T10216] team0: Port device team_slave_0 removed
[  569.422100][T10216] team0: Port device team_slave_1 removed
[  569.428917][T10216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  569.436471][T10216] batman_adv: batadv0: Removing interface: batadv_slave_0
[  569.467478][T10216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  569.474964][T10216] batman_adv: batadv0: Removing interface: batadv_slave_1
[  569.491659][T10216] bond0: (slave wlan1): Releasing backup interface
[  569.505729][T10216] device wlan1 left promiscuous mode
[  569.546874][T10216] bond2: (slave erspan1): Releasing active interface
[  569.553663][T10216] device erspan1 left promiscuous mode
[  569.635007][T10216] bond3: (slave bridge2): Releasing backup interface
[  569.642182][T10216] device bridge2 left promiscuous mode
[  569.688740][T10216] device ip6gretap0 left promiscuous mode
[  569.694583][T10216] bridge0: port 3(macvlan2) entered disabled state
[  569.771680][T10216] bond5: (slave veth3): Releasing active interface
[  569.779433][T10216] bond5: (slave veth3): the permanent HWaddr of slave - 76:cc:63:05:69:c4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  569.813149][T10216] bond5: (slave veth5): Releasing active interface
[  570.108973][   T27] audit: type=1800 audit(2000000318.575:554): pid=10225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1426" name=08 dev="sda1" ino=2052 res=0 errno=0
[  571.975361][T10234] ip_tables: iptables: counters copy to user failed while replacing table
[  572.320437][ T5942] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  572.566383][ T5942] usb 6-1: Using ep0 maxpacket: 16
[  572.608241][ T5942] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  572.660165][ T5942] usb 6-1: config 0 has no interface number 0
[  572.770050][ T5942] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  572.961718][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.984186][ T5942] usb 6-1: Product: syz
[  572.988758][ T5942] usb 6-1: Manufacturer: syz
[  572.993392][ T5942] usb 6-1: SerialNumber: syz
[  573.030025][ T5942] usb 6-1: config 0 descriptor??
[  573.044157][ T5942] hub 6-1:0.132: bad descriptor, ignoring hub
[  573.155808][ T5942] hub: probe of 6-1:0.132 failed with error -5
[  573.169412][ T5942] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input12
[  575.477888][T10272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  575.485421][T10272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  575.541655][T10272] device bridge_slave_0 left promiscuous mode
[  575.548050][T10272] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.584842][T10272] device bridge_slave_1 left promiscuous mode
[  575.591739][T10272] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.630584][T10272] bond0: (slave bond_slave_0): Releasing backup interface
[  575.639199][T10272] device bond_slave_0 left promiscuous mode
[  575.671695][T10272] bond0: (slave bond_slave_1): Releasing backup interface
[  575.680850][T10272] device bond_slave_1 left promiscuous mode
[  575.690343][T10272] device team_slave_0 left promiscuous mode
[  575.742802][T10272] team0: Port device team_slave_0 removed
[  575.749646][T10272] device team_slave_1 left promiscuous mode
[  575.777596][T10272] team0: Port device team_slave_1 removed
[  575.785020][T10272] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.792612][T10272] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.826860][T10272] bond1: (slave gretap1): Releasing active interface
[  575.880904][T10272] bond0: (slave macvlan2): Releasing backup interface
[  575.891474][T10272] device macvlan2 left promiscuous mode
[  575.898063][T10272] device team0 left promiscuous mode
[  575.907119][T10272] device vlan2 left promiscuous mode
[  575.912458][T10272] device bond0 left promiscuous mode
[  575.918213][T10272] bridge0: port 3(vlan2) entered disabled state
[  575.949081][T10272] bond3: (slave bridge1): Releasing backup interface
[  575.955984][T10272] device bridge1 left promiscuous mode
[  576.699086][T10294] using random self ethernet address
[  576.705014][T10294] using random host ethernet address
[  577.052704][T10295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1435'.
[  578.476841][T10319] ip_tables: iptables: counters copy to user failed while replacing table
[  578.698776][T10325] fuse: Bad value for 'fd'
[  578.721549][T10323] Cannot find del_set index 4 as target
[  578.908168][ T5942] usb 6-1: USB disconnect, device number 5
[  580.867717][T10302] netlink: 'syz.1.1447': attribute type 2 has an invalid length.
[  580.965737][ T5528] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  582.155575][ T5528] usb 5-1: Using ep0 maxpacket: 16
[  582.432670][ T5528] usb 5-1: device descriptor read/all, error -71
[  588.478667][T10410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  588.500673][T10410] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  588.517670][T10410] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  588.561525][T10410] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  588.574964][T10410] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  588.588558][T10410] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  588.623075][T10410] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  591.654027][T10435] futex_wake_op: syz.6.1476 tries to shift op by 144; fix this program
[  591.798297][T10438] loop4: detected capacity change from 0 to 128
[  591.926129][T10439] nftables ruleset with unbound set
[  592.613612][T10438] vfat filesystem being mounted at /235/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  594.496252][T10460] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5977] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10460]
[  595.965788][T10477] sctp: [Deprecated]: syz.1.1496 (pid 10477) Use of struct sctp_assoc_value in delayed_ack socket option.
[  595.965788][T10477] Use struct sctp_sack_info instead
[  596.625411][T10480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  596.634218][T10480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  597.384558][ T4284] Bluetooth: hci4: command 0x0406 tx timeout
[  602.189879][T10539] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[9116] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10539]
[  604.086898][T10512] Set syz1 is full, maxelem 6117 reached
[  608.945619][T10605] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
[  615.095253][T10681] jffs2: notice: (10681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  615.189705][    C1] vkms_vblank_simulate: vblank timer overrun
[  615.558008][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  615.571541][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  615.598971][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  615.618867][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  615.633126][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  615.721212][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  615.943764][T10682] lo speed is unknown, defaulting to 1000
[  615.970234][T10681] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  615.978117][T10681] jffs2 filesystem being mounted at /347/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  617.837464][ T4284] Bluetooth: hci5: command 0x0409 tx timeout
[  619.885691][ T4282] Bluetooth: hci5: command 0x041b tx timeout
[  620.251762][T10742] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
[  620.761767][T10751] Set syz1 is full, maxelem 6117 reached
[  621.164533][T10754] jffs2: notice: (10754) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  621.251923][T10754] jffs2 filesystem being mounted at /311/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  621.360122][T10758] gadgetfs: bound to dummy_udc driver
[  621.667356][T10682] chnl_net:caif_netlink_parms(): no params data found
[  622.320042][ T4282] Bluetooth: hci5: command 0x040f tx timeout
[  622.426839][ T5528] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  622.434618][    C0] gadgetfs: connected
[  622.443867][ T5528] gadgetfs: disconnected
[  623.675554][T10787] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10787]
[  624.142631][T10682] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.197008][T10682] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.205340][T10682] device bridge_slave_0 entered promiscuous mode
[  624.217408][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  624.223752][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  624.236718][T10682] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.246505][T10682] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.263460][T10682] device bridge_slave_1 entered promiscuous mode
[  624.365789][ T4284] Bluetooth: hci5: command 0x0419 tx timeout
[  624.380717][T10794] loop5: detected capacity change from 0 to 128
[  624.397789][T10682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  624.454220][T10682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  624.492697][T10794] vfat filesystem being mounted at /227/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  625.430712][T10682] team0: Port device team_slave_0 added
[  625.734641][   T27] audit: type=1800 audit(4147484022.188:555): pid=10790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1548" name="bus" dev="ramfs" ino=55144 res=0 errno=0
[  627.026408][T10799] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  627.643863][T10799] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  628.340218][T10799] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  628.352780][T10799] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  628.361996][T10799] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  628.405306][T10799] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  628.848480][T10799] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  628.990363][T10682] team0: Port device team_slave_1 added
[  630.426647][T10826] Set syz1 is full, maxelem 65536 reached
[  631.122620][ T4331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  631.382074][ T4331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.983953][T10682] batman_adv: batadv0: Adding interface: batadv_slave_0
[  632.116377][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  632.237056][T10682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.374998][ T4331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.513193][ T4331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.643901][T10682] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.669340][T10682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  632.781860][T10682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  632.916080][ T4331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.977031][ T4331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.030058][T10682] device hsr_slave_0 entered promiscuous mode
[  633.061438][T10682] device hsr_slave_1 entered promiscuous mode
[  633.070503][T10682] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  633.100178][T10682] Cannot create hsr debugfs directory
[  633.210582][ T4331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.231398][ T4331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.785818][ T4331] tipc: Disabling bearer <eth:syzkaller0>
[  633.793482][ T4331] tipc: Left network mode
[  636.077348][T10682] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  636.766651][T10682] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  636.790024][T10682] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  636.852101][T10682] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  637.949044][T10904] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  638.406426][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'.
[  641.001013][T10682] 8021q: adding VLAN 0 to HW filter on device bond0
[  641.110509][T10946] loop6: detected capacity change from 0 to 2048
[  641.426430][T10946] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  641.466084][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  641.474174][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  641.569270][T10682] 8021q: adding VLAN 0 to HW filter on device team0
[  641.913976][T10971] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  641.930871][T10971] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  641.943346][T10971] EXT4-fs (loop6): This should not happen!! Data will be lost
[  641.943346][T10971] 
[  641.953259][T10971] EXT4-fs (loop6): Total free blocks count 0
[  641.959615][T10971] EXT4-fs (loop6): Free/Dirty block details
[  641.965807][T10971] EXT4-fs (loop6): free_blocks=2415919104
[  641.971683][T10971] EXT4-fs (loop6): dirty_blocks=48
[  641.977007][T10971] EXT4-fs (loop6): Block reservation details
[  641.983415][T10971] EXT4-fs (loop6): i_reserved_data_blocks=3
[  642.304630][ T9116] EXT4-fs (loop6): unmounting filesystem.
[  643.336609][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  643.447415][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  643.539759][ T4573] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.546987][ T4573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  643.630779][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  644.556614][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  644.625858][ T4573] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.633055][ T4573] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.806337][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  644.828233][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  647.037498][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  647.116310][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  647.180926][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  647.195717][ T7120] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  647.230453][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  648.774886][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  648.812764][T10682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  648.825717][T10682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  648.843055][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  648.905670][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  648.934341][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  648.980425][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  649.034067][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  649.056348][T10991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  650.140056][ T7120] usb 6-1: unable to read config index 0 descriptor/start: -71
[  650.190599][ T7120] usb 6-1: can't read configurations, error -71
[  650.479572][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'.
[  650.778090][T11037] loop6: detected capacity change from 0 to 4096
[  651.543066][T11037] ntfs3: loop6: failed to replay log file. Can't mount rw!
[  653.401663][ T4331] device hsr_slave_0 left promiscuous mode
[  653.456699][ T4331] device hsr_slave_1 left promiscuous mode
[  654.587728][ T4331] device veth1_macvtap left promiscuous mode
[  654.608421][ T4331] device veth0_macvtap left promiscuous mode
[  654.649083][ T4331] device veth1_vlan left promiscuous mode
[  654.678959][ T4331] device veth0_vlan left promiscuous mode
[  658.707554][ T4331] bond3 (unregistering): Released all slaves
[  658.870650][ T4331] bond2 (unregistering): Released all slaves
[  659.070468][ T4331] bond1 (unregistering): Released all slaves
[  662.020347][ T4331] bond0 (unregistering): Released all slaves
[  662.184520][T11073] bond1: option mode: unable to set because the bond device is up
[  662.203472][T11076] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  662.215671][ T6636] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  662.235381][T11084] device bridge_slave_0 entered promiscuous mode
[  662.242596][T11084] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  662.313768][T11081] netlink: 'syz.5.1610': attribute type 9 has an invalid length.
[  662.346090][ T6636] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  662.358380][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1614'.
[  662.665380][T11099] bridge1: port 1(veth3) entered blocking state
[  662.671870][T11099] bridge1: port 1(veth3) entered disabled state
[  662.877970][T11099] device veth3 entered promiscuous mode
[  663.510028][T11112] syz.5.1616: attempt to access beyond end of device
[  663.510028][T11112] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  664.590208][T11100] bridge1: port 2(veth0_to_bond) entered blocking state
[  664.670998][T11100] bridge1: port 2(veth0_to_bond) entered disabled state
[  664.713322][T11100] device veth0_to_bond entered promiscuous mode
[  664.763309][T11101] bridge1: port 3(veth5) entered blocking state
[  664.829370][T11101] bridge1: port 3(veth5) entered disabled state
[  664.848624][T11101] device veth5 entered promiscuous mode
[  664.854906][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  664.947888][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  664.968085][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  664.994853][T10682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  666.095730][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1621'.
[  666.456804][T11142] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  671.632040][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  671.641504][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  671.663725][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  671.727563][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  671.744465][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  671.773141][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  671.808363][T10682] device veth0_vlan entered promiscuous mode
[  671.869078][T10682] device veth1_vlan entered promiscuous mode
[  671.954317][T10360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  671.976804][T10360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  672.041772][T10360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  672.068792][T10360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  672.095262][T10682] device veth0_macvtap entered promiscuous mode
[  672.121132][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  672.148575][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  672.372194][T10682] device veth1_macvtap entered promiscuous mode
[  672.961847][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  673.091766][T11220] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  673.138879][T10682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  673.168704][T10682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.276331][T10682] batman_adv: batadv0: Interface activated: batadv_slave_0
[  673.340010][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  673.361531][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  675.975750][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  675.992439][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  676.005989][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  676.025293][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  676.033538][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  676.044174][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  676.111780][T11250] lo speed is unknown, defaulting to 1000
[  676.864066][T11250] chnl_net:caif_netlink_parms(): no params data found
[  678.125827][ T4284] Bluetooth: hci3: command 0x0409 tx timeout
[  679.013625][T11290] netlink: 'syz.1.1647': attribute type 1 has an invalid length.
[  679.370870][T11290] device bond4 entered promiscuous mode
[  679.440554][T11290] 8021q: adding VLAN 0 to HW filter on device bond4
[  679.514347][T11292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1647'.
[  679.553538][T11294] bond4: (slave bridge2): making interface the new active one
[  679.587862][T11294] device bridge2 entered promiscuous mode
[  679.631025][T11294] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  679.691410][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  679.782163][T11250] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.799756][T11250] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.830318][T11250] device bridge_slave_0 entered promiscuous mode
[  679.899613][T11250] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.913029][T11250] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.943207][T11250] device bridge_slave_1 entered promiscuous mode
[  681.005789][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[  681.183144][T11250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  681.333187][T11250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  681.881779][T11250] team0: Port device team_slave_0 added
[  681.956846][T11250] team0: Port device team_slave_1 added
[  682.240708][T11250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  682.300099][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  682.491310][T11250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  682.565704][T11250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  682.615689][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  682.753535][T11250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  682.976555][T11250] device hsr_slave_0 entered promiscuous mode
[  683.205478][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[  683.222831][T11250] device hsr_slave_1 entered promiscuous mode
[  683.256157][T11250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  683.295484][T11250] Cannot create hsr debugfs directory
[  684.805788][   T27] audit: type=1326 audit(4147484081.248:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  685.245527][ T4284] Bluetooth: hci3: command 0x0419 tx timeout
[  685.302793][   T27] audit: type=1326 audit(4147484081.258:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  685.386200][   T27] audit: type=1326 audit(4147484081.318:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  685.410470][   T27] audit: type=1326 audit(4147484081.328:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  685.470626][   T27] audit: type=1326 audit(4147484081.328:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  685.503226][   T27] audit: type=1326 audit(4147484081.328:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  685.636555][ T4331] device hsr_slave_0 left promiscuous mode
[  685.655911][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  685.662320][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  685.703827][ T4331] device hsr_slave_1 left promiscuous mode
[  685.719397][   T27] audit: type=1326 audit(4147484081.448:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  685.746898][   T27] audit: type=1326 audit(4147484081.448:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  685.775619][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  686.040434][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  686.080184][T11356] netlink: 'syz.6.1665': attribute type 11 has an invalid length.
[  686.329843][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  686.399804][   T27] audit: type=1326 audit(4147484081.498:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  686.436743][ T4331] device bridge_slave_1 left promiscuous mode
[  686.482004][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.533777][   T27] audit: type=1326 audit(4147484081.498:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11342 comm="syz.1.1663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061db9e159 code=0x7ffc0000
[  686.567011][ T4331] device bridge_slave_0 left promiscuous mode
[  686.573872][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.664240][ T4331] device veth1_macvtap left promiscuous mode
[  686.822324][ T4331] device veth0_macvtap left promiscuous mode
[  686.941541][ T4331] device veth1_vlan left promiscuous mode
[  687.099059][ T4331] device veth0_vlan left promiscuous mode
[  689.958670][T11009] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  691.157275][T11009] usb 6-1: config 0 has an invalid interface number: 107 but max is 0
[  691.175482][T11009] usb 6-1: config 0 has no interface number 0
[  691.181644][T11009] usb 6-1: config 0 interface 107 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  691.210227][T11009] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  691.229638][T11009] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  691.250287][T11009] usb 6-1: Product: syz
[  691.259048][T11009] usb 6-1: Manufacturer: syz
[  691.268189][T11009] usb 6-1: SerialNumber: syz
[  691.288632][T11009] usb 6-1: config 0 descriptor??
[  691.309440][T11009] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected
[  691.348825][T11009] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81
[  691.357121][T11009] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 88
[  691.370643][T11009] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1
[  691.393810][T11009] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  691.429409][T11009] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2
[  691.473010][T11009] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  691.515241][T11009] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4
[  691.557631][T11009] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  691.582632][T11009] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6
[  691.613025][T11009] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  692.152240][ T4331] team0 (unregistering): Port device team_slave_1 removed
[  692.211183][ T4331] team0 (unregistering): Port device team_slave_0 removed
[  692.262397][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  692.320593][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  692.677742][ T5942] usb 6-1: USB disconnect, device number 8
[  692.691816][ T5942] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  692.722422][ T5942] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  692.747899][ T5942] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  692.779888][ T5942] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  692.808047][ T5942] keyspan 6-1:0.107: device disconnected
[  692.861740][ T4331] bond0 (unregistering): Released all slaves
[  694.781395][T11250] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  694.829791][T11250] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  694.878124][T11250] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  694.939227][T11250] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  695.041453][T11441] netlink: 'syz.6.1683': attribute type 1 has an invalid length.
[  695.530803][T11441] device bond1 entered promiscuous mode
[  695.585007][T11441] 8021q: adding VLAN 0 to HW filter on device bond1
[  695.624555][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1683'.
[  695.663460][T11447] bond1: (slave bridge2): making interface the new active one
[  695.712240][T11447] device bridge2 entered promiscuous mode
[  695.720180][T11447] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  696.702962][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  696.787126][T11250] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.825247][T11250] 8021q: adding VLAN 0 to HW filter on device team0
[  696.864183][T11250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  696.877117][T11250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  696.948624][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  697.004697][T11461] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  697.246245][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  697.286000][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  697.746590][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  697.798750][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.805954][ T4458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.862159][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  697.888152][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  697.912173][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.919397][ T4458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.951495][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  697.980646][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  698.006691][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  698.020483][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  698.029863][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  698.039168][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  698.048311][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  698.058114][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  698.071381][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  698.081485][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  698.100572][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  698.111296][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  698.123292][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  698.350917][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  698.365629][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  698.389913][T11250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.730775][T11486] loop5: detected capacity change from 0 to 128
[  698.751067][T11486] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  698.806144][T11486] vfat filesystem being mounted at /260/bus supports timestamps until 2107-12-31 (0x10391447e)
[  701.950925][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  701.981572][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  702.369643][T11536] virtio-fs: tag </dev/nullb0> not found
[  703.059214][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  703.103600][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  703.155478][T11520] syz.5.1695 (11520): drop_caches: 2
[  703.166584][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  703.174572][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  703.239430][T11250] device veth0_vlan entered promiscuous mode
[  703.290084][T11250] device veth1_vlan entered promiscuous mode
[  704.330133][T11250] device veth0_macvtap entered promiscuous mode
[  704.392935][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  704.407766][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  705.573455][T11250] device veth1_macvtap entered promiscuous mode
[  705.587002][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  705.648863][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  705.672234][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.695849][T11250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  705.707364][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  705.718024][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.730480][T11250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  705.743207][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  705.766534][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  705.793411][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  705.821790][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  705.860789][T11250] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  705.874972][T11250] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  705.925616][T11250] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  705.934514][T11250] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  706.008959][T11557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1702'.
[  706.041232][T11557] netlink: 'syz.2.1702': attribute type 11 has an invalid length.
[  706.454576][ T6645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.518849][ T6645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  706.794104][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  707.376545][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.394938][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.442643][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  707.671482][T11582] loop6: detected capacity change from 0 to 164
[  711.554374][   T27] kauditd_printk_skb: 10 callbacks suppressed
[  711.554391][   T27] audit: type=1800 audit(4147484108.008:576): pid=11611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1712" name="bus" dev="ramfs" ino=59165 res=0 errno=0
[  711.650801][T11618] device syzkaller0 entered promiscuous mode
[  711.683633][T11620] loop6: detected capacity change from 0 to 128
[  711.991737][T11626] MPTCP: kernel_bind error, err=-99
[  712.006708][T11620] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  712.834991][T11620] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  713.317739][ T9116] EXT4-fs (loop6): unmounting filesystem.
[  713.744879][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  713.833312][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  713.915971][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  714.128242][T11659] loop7: detected capacity change from 0 to 512
[  716.554587][T11683] lo speed is unknown, defaulting to 1000
[  717.807942][T11700] loop5: detected capacity change from 0 to 1024
[  717.881557][T11700] ext2: Unknown parameter 'dont_hash'
[  720.066723][T11717] xt_nfacct: accounting object `' does not exist
[  720.367464][ T4284] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  720.376516][ T4284] Bluetooth: hci0: Injecting HCI hardware error event
[  720.391556][ T4282] Bluetooth: hci0: hardware error 0x00
[  722.605604][ T4282] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  724.212927][T11769] IPVS: set_ctl: invalid protocol: 137 172.30.0.8:20001
[  726.758741][   T22] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  727.087398][   T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  727.117198][   T22] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  727.196718][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.913985][   T22] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  727.922816][   T22] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81
[  727.930909][   T22] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[  727.939713][   T22] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  727.947564][   T22] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  728.013662][   T22] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  728.186108][   T22] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  728.327343][   T22] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  728.375997][   T22] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  730.437912][T11838] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  731.326154][T10872] usb 6-1: USB disconnect, device number 9
[  731.348471][T10872] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  731.383340][T10872] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  731.416007][T10872] keyspan 6-1:1.0: device disconnected
[  731.661611][T11849] netlink: 'syz.6.1765': attribute type 4 has an invalid length.
[  731.852588][T11853] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1766'.
[  731.872482][T11855] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  738.261664][T11926] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[11250] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11926]
[  740.144749][T11935] loop7: detected capacity change from 0 to 2048
[  740.240880][T11008] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  741.839565][T11948] lo speed is unknown, defaulting to 1000
[  747.097742][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  747.104089][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  747.495465][ T5530] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  747.700522][ T5530] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  747.738036][ T5530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[  747.818658][ T5530] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  747.908130][ T5530] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  747.943160][ T5530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.006374][ T5530] usb 6-1: Product: syz
[  748.027401][ T5530] usb 6-1: Manufacturer: syz
[  748.050169][ T5530] usb 6-1: SerialNumber: syz
[  748.086563][ T5530] usb 6-1: config 0 descriptor??
[  748.122721][T11997] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  748.142989][ T5530] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  749.102730][ T5539] usb 6-1: USB disconnect, device number 10
[  752.771418][T12034] Set syz1 is full, maxelem 65536 reached
[  754.385852][ T4282] Bluetooth: hci3: link tx timeout
[  754.393011][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.404376][ T4282] Bluetooth: hci3: link tx timeout
[  754.410294][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.420277][ T4282] Bluetooth: hci3: link tx timeout
[  754.425591][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.433854][ T4282] Bluetooth: hci3: link tx timeout
[  754.439174][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.447262][ T4282] Bluetooth: hci3: link tx timeout
[  754.452621][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.460640][ T4282] Bluetooth: hci3: link tx timeout
[  754.466430][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.474953][ T4282] Bluetooth: hci3: link tx timeout
[  754.480757][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.489341][ T4282] Bluetooth: hci3: link tx timeout
[  754.495091][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.503763][ T4282] Bluetooth: hci3: link tx timeout
[  754.509653][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.518227][ T4282] Bluetooth: hci3: link tx timeout
[  754.523934][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.532687][ T4282] Bluetooth: hci3: link tx timeout
[  754.538900][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.609911][ T4282] Bluetooth: hci3: link tx timeout
[  754.615103][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.752943][ T4282] Bluetooth: hci3: link tx timeout
[  754.758333][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.770305][ T4282] Bluetooth: hci3: link tx timeout
[  754.775607][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.784785][ T4282] Bluetooth: hci3: link tx timeout
[  754.790138][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.804791][ T4282] Bluetooth: hci3: link tx timeout
[  754.810065][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.818030][ T4282] Bluetooth: hci3: link tx timeout
[  754.823271][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.831427][ T4282] Bluetooth: hci3: link tx timeout
[  754.836678][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.844582][ T4282] Bluetooth: hci3: link tx timeout
[  754.849826][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.857900][ T4282] Bluetooth: hci3: link tx timeout
[  754.863051][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.875562][ T4282] Bluetooth: hci3: link tx timeout
[  754.880725][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.910712][ T4282] Bluetooth: hci3: link tx timeout
[  754.915927][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.928644][ T4282] Bluetooth: hci3: link tx timeout
[  754.933815][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.945580][ T4282] Bluetooth: hci3: link tx timeout
[  754.950750][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.959252][ T4282] Bluetooth: hci3: link tx timeout
[  754.964397][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.972590][ T4282] Bluetooth: hci3: link tx timeout
[  754.977843][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.985776][ T4282] Bluetooth: hci3: link tx timeout
[  754.990918][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  754.998975][ T4282] Bluetooth: hci3: link tx timeout
[  755.004129][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.012184][ T4282] Bluetooth: hci3: link tx timeout
[  755.017374][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.027631][ T4282] Bluetooth: hci3: link tx timeout
[  755.032790][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.042382][ T4282] Bluetooth: hci3: link tx timeout
[  755.047632][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.055684][ T4282] Bluetooth: hci3: link tx timeout
[  755.060859][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.069085][ T4282] Bluetooth: hci3: link tx timeout
[  755.074236][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.082953][ T4282] Bluetooth: hci3: link tx timeout
[  755.088180][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.097126][ T4282] Bluetooth: hci3: link tx timeout
[  755.102266][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.110502][ T4282] Bluetooth: hci3: link tx timeout
[  755.115751][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.123661][ T4282] Bluetooth: hci3: link tx timeout
[  755.128917][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.137772][ T4282] Bluetooth: hci3: link tx timeout
[  755.142921][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.150956][ T4282] Bluetooth: hci3: link tx timeout
[  755.156226][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.164094][ T4282] Bluetooth: hci3: link tx timeout
[  755.169325][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.177121][ T4282] Bluetooth: hci3: link tx timeout
[  755.182255][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.190297][ T4282] Bluetooth: hci3: link tx timeout
[  755.195504][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.203282][ T4282] Bluetooth: hci3: link tx timeout
[  755.208538][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.216524][ T4282] Bluetooth: hci3: link tx timeout
[  755.221658][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.229628][ T4282] Bluetooth: hci3: link tx timeout
[  755.234760][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.242735][ T4282] Bluetooth: hci3: link tx timeout
[  755.247897][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.255874][ T4282] Bluetooth: hci3: link tx timeout
[  755.261016][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.268970][ T4282] Bluetooth: hci3: link tx timeout
[  755.274146][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.283642][ T4282] Bluetooth: hci3: link tx timeout
[  755.288851][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.296859][ T4282] Bluetooth: hci3: link tx timeout
[  755.301989][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.309936][ T4282] Bluetooth: hci3: link tx timeout
[  755.315071][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.323301][ T4282] Bluetooth: hci3: link tx timeout
[  755.328723][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.336676][ T4282] Bluetooth: hci3: link tx timeout
[  755.341828][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.355686][ T4282] Bluetooth: hci3: link tx timeout
[  755.360928][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.375788][ T4282] Bluetooth: hci3: link tx timeout
[  755.380952][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.389090][ T4282] Bluetooth: hci3: link tx timeout
[  755.394246][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.402289][ T4282] Bluetooth: hci3: link tx timeout
[  755.408366][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.416346][ T4282] Bluetooth: hci3: link tx timeout
[  755.421476][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.429500][ T4282] Bluetooth: hci3: link tx timeout
[  755.434634][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.442727][ T4282] Bluetooth: hci3: link tx timeout
[  755.447936][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.457285][ T4282] Bluetooth: hci3: link tx timeout
[  755.462424][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.470313][ T4282] Bluetooth: hci3: link tx timeout
[  755.475547][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.483367][ T4282] Bluetooth: hci3: link tx timeout
[  755.488595][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.496500][ T4282] Bluetooth: hci3: link tx timeout
[  755.501642][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.509477][ T4282] Bluetooth: hci3: link tx timeout
[  755.514613][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.522592][ T4282] Bluetooth: hci3: link tx timeout
[  755.527771][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.535662][ T4282] Bluetooth: hci3: link tx timeout
[  755.540793][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.548747][ T4282] Bluetooth: hci3: link tx timeout
[  755.553915][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.561784][ T4282] Bluetooth: hci3: link tx timeout
[  755.567028][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.577162][ T4282] Bluetooth: hci3: link tx timeout
[  755.582311][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.590147][ T4282] Bluetooth: hci3: link tx timeout
[  755.595286][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.603168][ T4282] Bluetooth: hci3: link tx timeout
[  755.608365][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.616235][ T4282] Bluetooth: hci3: link tx timeout
[  755.621377][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.629247][ T4282] Bluetooth: hci3: link tx timeout
[  755.634395][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.642280][ T4282] Bluetooth: hci3: link tx timeout
[  755.647536][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.655302][ T4282] Bluetooth: hci3: link tx timeout
[  755.660638][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.668516][ T4282] Bluetooth: hci3: link tx timeout
[  755.673665][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.681570][ T4282] Bluetooth: hci3: link tx timeout
[  755.686762][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.694541][ T4282] Bluetooth: hci3: link tx timeout
[  755.699862][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.707682][ T4282] Bluetooth: hci3: link tx timeout
[  755.712840][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.720705][ T4282] Bluetooth: hci3: link tx timeout
[  755.731524][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.739425][ T4282] Bluetooth: hci3: link tx timeout
[  755.744595][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.752421][ T4282] Bluetooth: hci3: link tx timeout
[  755.757659][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.765543][ T4282] Bluetooth: hci3: link tx timeout
[  755.770673][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.778474][ T4282] Bluetooth: hci3: link tx timeout
[  755.783605][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.791407][ T4282] Bluetooth: hci3: link tx timeout
[  755.796787][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.804709][ T4282] Bluetooth: hci3: link tx timeout
[  755.809852][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.817727][ T4282] Bluetooth: hci3: link tx timeout
[  755.822875][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.833221][ T4282] Bluetooth: hci3: link tx timeout
[  755.838516][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  755.848926][ T4282] Bluetooth: hci3: link tx timeout
[  755.854087][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  756.446083][ T4282] Bluetooth: hci3: command 0x0406 tx timeout
[  756.493474][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1813'.
[  760.155086][T12103] tipc: Started in network mode
[  760.175310][T12103] tipc: Node identity ac1414aa, cluster identity 4711
[  760.191501][T12103] tipc: New replicast peer: 172.20.20.187
[  760.204479][T12103] tipc: Enabled bearer <udp:syz0>, priority 10
[  761.073919][   T27] audit: type=1804 audit(4147484157.528:577): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1823" name="bus" dev="ramfs" ino=59996 res=1 errno=0
[  761.381798][   T27] audit: type=1804 audit(4147484157.608:578): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1823" name="bus" dev="ramfs" ino=59996 res=1 errno=0
[  761.432600][   T22] tipc: Node number set to 2886997162
[  762.545516][T12123] lo speed is unknown, defaulting to 1000
[  764.457615][T12142] xt_nfacct: accounting object `' does not exist
[  768.911927][T12153] Set syz1 is full, maxelem 65536 reached
[  775.541873][T12223] loop7: detected capacity change from 0 to 128
[  775.888330][T12223] vfat filesystem being mounted at /24/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  777.525824][T12240] input: syz1 as /devices/virtual/input/input13
[  780.207994][ T4284] Bluetooth: hci3: link tx timeout
[  780.213233][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.221988][ T4284] Bluetooth: hci3: link tx timeout
[  780.227425][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.236349][ T4284] Bluetooth: hci3: link tx timeout
[  780.242467][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.250770][ T4284] Bluetooth: hci3: link tx timeout
[  780.256488][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.265137][ T4284] Bluetooth: hci3: link tx timeout
[  780.270696][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.279557][ T4284] Bluetooth: hci3: link tx timeout
[  780.285077][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.294208][ T4284] Bluetooth: hci3: link tx timeout
[  780.299759][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.308248][ T4284] Bluetooth: hci3: link tx timeout
[  780.313916][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.322169][ T4284] Bluetooth: hci3: link tx timeout
[  780.327619][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.335679][ T4284] Bluetooth: hci3: link tx timeout
[  780.341674][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.349873][ T4284] Bluetooth: hci3: link tx timeout
[  780.355312][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.364855][ T4284] Bluetooth: hci3: link tx timeout
[  780.370849][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.449781][ T4284] Bluetooth: hci3: link tx timeout
[  780.455018][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.550190][ T4284] Bluetooth: hci3: link tx timeout
[  780.555485][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.563360][ T4284] Bluetooth: hci3: link tx timeout
[  780.569121][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.577103][ T4284] Bluetooth: hci3: link tx timeout
[  780.582269][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.592509][ T4284] Bluetooth: hci3: link tx timeout
[  780.597722][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.605769][ T4284] Bluetooth: hci3: link tx timeout
[  780.610916][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.623900][ T4284] Bluetooth: hci3: link tx timeout
[  780.629319][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.637355][ T4284] Bluetooth: hci3: link tx timeout
[  780.642505][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.655525][ T4284] Bluetooth: hci3: link tx timeout
[  780.660673][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.671957][ T4284] Bluetooth: hci3: link tx timeout
[  780.677226][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.685075][ T4284] Bluetooth: hci3: link tx timeout
[  780.690560][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.702582][ T4284] Bluetooth: hci3: link tx timeout
[  780.707815][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.715997][ T4284] Bluetooth: hci3: link tx timeout
[  780.721149][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.729249][ T4284] Bluetooth: hci3: link tx timeout
[  780.734403][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.742512][ T4284] Bluetooth: hci3: link tx timeout
[  780.747806][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.755840][ T4284] Bluetooth: hci3: link tx timeout
[  780.760988][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.769000][ T4284] Bluetooth: hci3: link tx timeout
[  780.774137][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.782132][ T4284] Bluetooth: hci3: link tx timeout
[  780.787321][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.795108][ T4284] Bluetooth: hci3: link tx timeout
[  780.800315][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.808153][ T4284] Bluetooth: hci3: link tx timeout
[  780.813286][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.821259][ T4284] Bluetooth: hci3: link tx timeout
[  780.826495][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.834281][ T4284] Bluetooth: hci3: link tx timeout
[  780.839483][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.847444][ T4284] Bluetooth: hci3: link tx timeout
[  780.852576][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.860936][ T4284] Bluetooth: hci3: link tx timeout
[  780.866158][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.874001][ T4284] Bluetooth: hci3: link tx timeout
[  780.879236][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.887164][ T4284] Bluetooth: hci3: link tx timeout
[  780.892303][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.900320][ T4284] Bluetooth: hci3: link tx timeout
[  780.905481][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.913324][ T4284] Bluetooth: hci3: link tx timeout
[  780.918610][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.926463][ T4284] Bluetooth: hci3: link tx timeout
[  780.931594][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.946699][ T4284] Bluetooth: hci3: link tx timeout
[  780.951874][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.959953][ T4284] Bluetooth: hci3: link tx timeout
[  780.965095][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.973148][ T4284] Bluetooth: hci3: link tx timeout
[  780.978337][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.986418][ T4284] Bluetooth: hci3: link tx timeout
[  780.991550][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  780.999637][ T4284] Bluetooth: hci3: link tx timeout
[  781.004808][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.013303][ T4284] Bluetooth: hci3: link tx timeout
[  781.018507][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.026555][ T4284] Bluetooth: hci3: link tx timeout
[  781.031701][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.039774][ T4284] Bluetooth: hci3: link tx timeout
[  781.044913][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.056267][ T4284] Bluetooth: hci3: link tx timeout
[  781.061409][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.073994][ T4284] Bluetooth: hci3: link tx timeout
[  781.079218][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.092690][ T4284] Bluetooth: hci3: link tx timeout
[  781.098024][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.105868][ T4284] Bluetooth: hci3: link tx timeout
[  781.110997][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.119166][ T4284] Bluetooth: hci3: link tx timeout
[  781.124408][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.132535][ T4284] Bluetooth: hci3: link tx timeout
[  781.137709][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.146209][ T4284] Bluetooth: hci3: link tx timeout
[  781.151372][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.166532][ T4284] Bluetooth: hci3: link tx timeout
[  781.171701][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.180577][ T4284] Bluetooth: hci3: link tx timeout
[  781.185799][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.193566][ T4284] Bluetooth: hci3: link tx timeout
[  781.198817][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.206730][ T4284] Bluetooth: hci3: link tx timeout
[  781.211885][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.219788][ T4284] Bluetooth: hci3: link tx timeout
[  781.224942][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.233000][ T4284] Bluetooth: hci3: link tx timeout
[  781.238192][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.246411][ T4284] Bluetooth: hci3: link tx timeout
[  781.251582][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.259925][ T4284] Bluetooth: hci3: link tx timeout
[  781.265133][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.276599][ T4284] Bluetooth: hci3: link tx timeout
[  781.281770][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.290191][ T4284] Bluetooth: hci3: link tx timeout
[  781.295348][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.303279][ T4284] Bluetooth: hci3: link tx timeout
[  781.308569][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.316398][ T4284] Bluetooth: hci3: link tx timeout
[  781.321536][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.329462][ T4284] Bluetooth: hci3: link tx timeout
[  781.334605][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.342483][ T4284] Bluetooth: hci3: link tx timeout
[  781.347665][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.355667][ T4284] Bluetooth: hci3: link tx timeout
[  781.361132][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.369471][ T4284] Bluetooth: hci3: link tx timeout
[  781.374646][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.582082][ T4284] Bluetooth: hci3: link tx timeout
[  781.587329][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.595947][ T4284] Bluetooth: hci3: link tx timeout
[  781.601136][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.609345][ T4284] Bluetooth: hci3: link tx timeout
[  781.614512][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.622690][ T4284] Bluetooth: hci3: link tx timeout
[  781.628060][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.636858][ T4284] Bluetooth: hci3: link tx timeout
[  781.642075][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.650196][ T4284] Bluetooth: hci3: link tx timeout
[  781.655456][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.665929][ T4284] Bluetooth: hci3: link tx timeout
[  781.671090][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.680069][ T4284] Bluetooth: hci3: link tx timeout
[  781.685244][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.694123][ T4284] Bluetooth: hci3: link tx timeout
[  781.699310][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.707440][ T4284] Bluetooth: hci3: link tx timeout
[  781.712582][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.721307][ T4284] Bluetooth: hci3: link tx timeout
[  781.726786][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.734863][ T4284] Bluetooth: hci3: link tx timeout
[  781.740125][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.748138][ T4284] Bluetooth: hci3: link tx timeout
[  781.753267][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.761256][ T4284] Bluetooth: hci3: link tx timeout
[  781.766494][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.779814][ T4284] Bluetooth: hci3: link tx timeout
[  781.784992][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.793270][ T4284] Bluetooth: hci3: link tx timeout
[  781.798448][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.807167][ T4284] Bluetooth: hci3: link tx timeout
[  781.812307][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.820363][ T4284] Bluetooth: hci3: link tx timeout
[  781.825554][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.835807][ T4284] Bluetooth: hci3: link tx timeout
[  781.840939][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.849037][ T4284] Bluetooth: hci3: link tx timeout
[  781.854173][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.862260][ T4284] Bluetooth: hci3: link tx timeout
[  781.867432][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.875904][ T4284] Bluetooth: hci3: link tx timeout
[  781.881067][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.889216][ T4284] Bluetooth: hci3: link tx timeout
[  781.894355][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.903400][ T4284] Bluetooth: hci3: link tx timeout
[  781.908587][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.916731][ T4284] Bluetooth: hci3: link tx timeout
[  781.921886][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.966124][ T4284] Bluetooth: hci3: link tx timeout
[  781.971353][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.979555][ T4284] Bluetooth: hci3: link tx timeout
[  781.984711][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  781.995828][ T4284] Bluetooth: hci3: link tx timeout
[  782.000996][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.009159][ T4284] Bluetooth: hci3: link tx timeout
[  782.014320][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.028491][ T4284] Bluetooth: hci3: link tx timeout
[  782.033672][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.042510][ T4284] Bluetooth: hci3: link tx timeout
[  782.047691][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.056432][ T4284] Bluetooth: hci3: link tx timeout
[  782.061606][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.069696][ T4284] Bluetooth: hci3: link tx timeout
[  782.074857][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.083007][ T4284] Bluetooth: hci3: link tx timeout
[  782.088191][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.096195][ T4284] Bluetooth: hci3: link tx timeout
[  782.101372][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.109508][ T4284] Bluetooth: hci3: link tx timeout
[  782.114669][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.124699][ T4284] Bluetooth: hci3: link tx timeout
[  782.130044][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.142865][ T4284] Bluetooth: hci3: link tx timeout
[  782.148354][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.156349][ T4284] Bluetooth: hci3: link tx timeout
[  782.161507][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.169515][ T4284] Bluetooth: hci3: link tx timeout
[  782.174677][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.185675][ T4284] Bluetooth: hci3: link tx timeout
[  782.190845][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.205713][ T4284] Bluetooth: hci3: link tx timeout
[  782.210904][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.219092][ T4284] Bluetooth: hci3: link tx timeout
[  782.224427][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.232591][ T4284] Bluetooth: hci3: link tx timeout
[  782.237798][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.245648][ T4284] Bluetooth: hci3: link tx timeout
[  782.250796][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.258710][ T4284] Bluetooth: hci3: link tx timeout
[  782.263870][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.271807][ T4284] Bluetooth: hci3: link tx timeout
[  782.277014][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.296549][ T4284] Bluetooth: hci3: link tx timeout
[  782.301722][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.314740][ T4284] Bluetooth: hci3: link tx timeout
[  782.319974][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.332379][ T4284] Bluetooth: hci3: link tx timeout
[  782.337668][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.345534][ T4284] Bluetooth: hci3: link tx timeout
[  782.350671][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.358588][ T4284] Bluetooth: hci3: link tx timeout
[  782.363755][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.371913][ T4284] Bluetooth: hci3: link tx timeout
[  782.377420][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.387218][ T4284] Bluetooth: hci3: link tx timeout
[  782.392365][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.400602][ T4284] Bluetooth: hci3: link tx timeout
[  782.406153][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.414422][ T4284] Bluetooth: hci3: link tx timeout
[  782.419618][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.427482][ T4284] Bluetooth: hci3: link tx timeout
[  782.432625][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.440514][ T4284] Bluetooth: hci3: link tx timeout
[  782.445869][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.454876][ T4284] Bluetooth: hci3: link tx timeout
[  782.460045][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.467989][ T4284] Bluetooth: hci3: link tx timeout
[  782.473140][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.481019][ T4284] Bluetooth: hci3: link tx timeout
[  782.486342][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.494183][ T4284] Bluetooth: hci3: link tx timeout
[  782.499617][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.508844][ T4284] Bluetooth: hci3: link tx timeout
[  782.513987][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.521968][ T4284] Bluetooth: hci3: link tx timeout
[  782.527153][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.534942][ T4284] Bluetooth: hci3: link tx timeout
[  782.540219][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.548064][ T4284] Bluetooth: hci3: link tx timeout
[  782.553214][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.561093][ T4284] Bluetooth: hci3: link tx timeout
[  782.566267][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.575569][ T4284] Bluetooth: hci3: link tx timeout
[  782.580716][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.589263][ T4284] Bluetooth: hci3: link tx timeout
[  782.594400][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.607764][ T4284] Bluetooth: hci3: link tx timeout
[  782.612927][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.631400][ T4284] Bluetooth: hci3: link tx timeout
[  782.636856][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.644846][ T4284] Bluetooth: hci3: link tx timeout
[  782.650082][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.658011][ T4284] Bluetooth: hci3: link tx timeout
[  782.663159][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.671289][ T4284] Bluetooth: hci3: link tx timeout
[  782.676570][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.693964][ T4284] Bluetooth: hci3: link tx timeout
[  782.699301][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.707380][ T4284] Bluetooth: hci3: link tx timeout
[  782.712530][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.720480][ T4284] Bluetooth: hci3: link tx timeout
[  782.725663][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.734092][ T4284] Bluetooth: hci3: link tx timeout
[  782.739415][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.748782][ T4284] Bluetooth: hci3: link tx timeout
[  782.753926][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.765678][ T4284] Bluetooth: hci3: link tx timeout
[  782.770913][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.786101][ T4284] Bluetooth: hci3: link tx timeout
[  782.791268][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.799931][ T4284] Bluetooth: hci3: link tx timeout
[  782.805081][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.812981][ T4284] Bluetooth: hci3: link tx timeout
[  782.818157][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.826021][ T4284] Bluetooth: hci3: link tx timeout
[  782.831158][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.839136][ T4284] Bluetooth: hci3: link tx timeout
[  782.844297][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.852923][ T4284] Bluetooth: hci3: link tx timeout
[  782.858146][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.867414][ T4284] Bluetooth: hci3: link tx timeout
[  782.872564][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.881856][ T4284] Bluetooth: hci3: link tx timeout
[  782.887065][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.895566][ T4284] Bluetooth: hci3: link tx timeout
[  782.900793][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.910829][ T4284] Bluetooth: hci3: link tx timeout
[  782.916011][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.927411][ T4284] Bluetooth: hci3: link tx timeout
[  782.932559][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.941423][ T4284] Bluetooth: hci3: link tx timeout
[  782.946601][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.957774][ T4284] Bluetooth: hci3: link tx timeout
[  782.962927][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.972004][ T4284] Bluetooth: hci3: link tx timeout
[  782.977357][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  782.987651][ T4284] Bluetooth: hci3: link tx timeout
[  782.992821][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  783.005687][ T4284] Bluetooth: hci3: link tx timeout
[  783.010869][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  783.025648][ T4284] Bluetooth: hci3: link tx timeout
[  783.030826][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  783.045578][ T4284] Bluetooth: hci3: link tx timeout
[  783.050752][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  783.065799][ T4284] Bluetooth: hci3: link tx timeout
[  783.070965][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  783.085504][ T4284] Bluetooth: hci3: link tx timeout
[  783.090695][ T4284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  783.647158][T12262] xt_hashlimit: size too large, truncated to 1048576
[  783.654039][T12262] xt_hashlimit: max too large, truncated to 1048576
[  787.989086][T12292] device lo entered promiscuous mode
[  787.995296][T12292] device tunl0 entered promiscuous mode
[  788.026715][T12292] device gre0 entered promiscuous mode
[  788.033006][T12292] device gretap0 entered promiscuous mode
[  788.096364][T12292] device erspan0 entered promiscuous mode
[  788.103033][T12292] device ip_vti0 entered promiscuous mode
[  788.146309][T12292] device ip6_vti0 entered promiscuous mode
[  788.156130][T12292] device sit0 entered promiscuous mode
[  788.162000][T12292] device ip6tnl0 entered promiscuous mode
[  788.206133][T12292] device ip6gre0 entered promiscuous mode
[  788.212255][T12292] device ip6gretap0 entered promiscuous mode
[  788.229689][T12296] loop7: detected capacity change from 0 to 512
[  788.250944][T12292] device bridge0 entered promiscuous mode
[  788.257129][T12296] EXT4-fs: Ignoring removed orlov option
[  788.281281][T12296] ext4: Bad value for 'data'
[  788.296503][T12292] device vcan0 entered promiscuous mode
[  788.303048][T12292] device bond0 entered promiscuous mode
[  788.356172][T12292] device bond_slave_0 entered promiscuous mode
[  788.362535][T12292] device bond_slave_1 entered promiscuous mode
[  788.423224][T12292] device vxlan1 entered promiscuous mode
[  788.489242][T12292] device team0 entered promiscuous mode
[  788.514886][T12292] device team_slave_0 entered promiscuous mode
[  788.522868][T12292] device team_slave_1 entered promiscuous mode
[  788.550324][T12292] device dummy0 entered promiscuous mode
[  788.563296][T12292] device nlmon0 entered promiscuous mode
[  788.576969][T12292] device caif0 entered promiscuous mode
[  789.527104][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'.
[  792.589111][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'.
[  792.602386][T12355] device erspan2 entered promiscuous mode
[  792.710611][T12360] loop6: detected capacity change from 0 to 1024
[  792.734645][T12360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  793.369863][T12373] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  795.120857][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'.
[  795.463245][T12391] netlink: 'syz.5.1879': attribute type 1 has an invalid length.
[  795.545883][T12391] bond4: (slave bridge2): making interface the new active one
[  795.604275][T12391] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  800.482024][T12462] lo speed is unknown, defaulting to 1000
[  801.959623][T12483] loop6: detected capacity change from 0 to 128
[  802.076451][T12483] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  802.128015][T12483] vfat filesystem being mounted at /150/bus supports timestamps until 2107-12-31 (0x10391447e)
[  802.883252][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1901'.
[  804.722150][T12500] ip_tables: iptables: counters copy to user failed while replacing table
[  806.941885][T12504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  806.950716][T12504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  806.958223][T12504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  808.676259][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  808.684993][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  809.551725][T12531] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups)
[  812.447173][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1905'.
[  813.075957][T12564] xt_nfacct: accounting object `' does not exist
[  813.266841][T12576] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  814.158893][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'.
[  814.185432][T12578] bond0: option resend_igmp: invalid value (18446744072707910257)
[  814.193326][T12578] bond0: option resend_igmp: allowed values 0 - 255
[  817.243240][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1926'.
[  818.127517][T12622] gadgetfs: bound to dummy_udc driver
[  818.395450][ T7120] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  818.425111][    C0] gadgetfs: connected
[  818.439445][ T7120] gadgetfs: disconnected
[  818.725718][    C0] gadgetfs: connected
[  818.731402][ T7120] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  818.779393][T12621] gadgetfs: suspended from state 3
[  818.785715][T12621] gadgetfs: disconnected
[  818.803092][ T7120] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  819.823930][ T7120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.884319][ T7120] usb 1-1: can't set config #1, error -71
[  819.906324][ T7120] usb 1-1: USB disconnect, device number 4
[  820.666041][T12642] xt_nfacct: accounting object `' does not exist
[  823.713121][T12658] lo speed is unknown, defaulting to 1000
[  827.533699][T12685] loop5: detected capacity change from 0 to 128
[  830.698897][T12714] ip_tables: iptables: counters copy to user failed while replacing table
[  835.762400][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1953'.
[  837.099286][   T27] audit: type=1326 audit(4147484233.558:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b9e159 code=0x7ffc0000
[  837.185431][   T27] audit: type=1326 audit(4147484233.568:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b9e159 code=0x7ffc0000
[  837.305457][   T27] audit: type=1326 audit(4147484233.568:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc1a4b9e159 code=0x7ffc0000
[  837.435429][   T22] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  837.478161][   T27] audit: type=1326 audit(4147484233.568:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b9e159 code=0x7ffc0000
[  837.911131][   T27] audit: type=1326 audit(4147484233.568:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b9e159 code=0x7ffc0000
[  838.337524][   T27] audit: type=1326 audit(4147484233.568:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1a4b9e159 code=0x7ffc0000
[  838.480801][   T27] audit: type=1326 audit(4147484233.568:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b9e159 code=0x7ffc0000
[  838.505819][   T27] audit: type=1326 audit(4147484233.578:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1a4b5e98e code=0x7ffc0000
[  838.530758][   T27] audit: type=1326 audit(4147484233.578:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1a4b9ddeb code=0x7ffc0000
[  838.555878][   T27] audit: type=1326 audit(4147484233.578:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.7.1955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1a4b9ddeb code=0x7ffc0000
[  838.661182][   T22] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  838.691000][   T22] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  838.734237][   T22] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  838.774053][   T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.814572][   T22] usb 8-1: Product: syz
[  838.823291][   T22] usb 8-1: Manufacturer: syz
[  838.848146][   T22] usb 8-1: SerialNumber: syz
[  838.905838][   T22] sisusb 8-1:1.0: Invalid USB2VGA device
[  838.911588][   T22] sisusb: probe of 8-1:1.0 failed with error -22
[  839.195153][   T22] usb 8-1: USB disconnect, device number 2
[  841.717817][T12795] gadgetfs: bound to dummy_udc driver
[  841.831625][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1965'.
[  841.947047][T12801] gadgetfs: suspended from state 2
[  841.985453][   T22] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  842.228326][T12815] loop9: detected capacity change from 0 to 7
[  842.657140][T12815] Dev loop9: unable to read RDB block 7
[  843.386133][T12815]  loop9: unable to read partition table
[  843.392119][T12815] loop9: partition table beyond EOD, truncated
[  843.398835][T12815] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  843.643697][T12815] device lo entered promiscuous mode
[  843.871495][T12815] device tunl0 entered promiscuous mode
[  845.914275][T12815] device gre0 entered promiscuous mode
[  846.351610][T12815] device gretap0 entered promiscuous mode
[  846.978687][T12852] syz.7.1977 (12852): drop_caches: 2
[  848.291879][T12815] device erspan0 entered promiscuous mode
[  849.316371][T12815] device ip_vti0 entered promiscuous mode
[  849.367516][T12815] device ip6_vti0 entered promiscuous mode
[  849.495899][T12815] device sit0 entered promiscuous mode
[  849.670628][T12875] loop5: detected capacity change from 0 to 512
[  849.686015][T12815] device ip6tnl0 entered promiscuous mode
[  849.721193][T12875] EXT4-fs: Ignoring removed orlov option
[  849.745443][T12875] ext4: Bad value for 'data'
[  849.774811][T12815] device ip6gre0 entered promiscuous mode
[  849.885708][T12815] device syz_tun entered promiscuous mode
[  849.916338][T12690] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  850.800528][T12815] device ip6gretap0 entered promiscuous mode
[  851.026855][T12887] overlayfs: failed to clone lowerpath
[  851.127924][T12815] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.152799][T12815] device bridge0 entered promiscuous mode
[  852.394191][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1989'.
[  855.780775][T12945] loop5: detected capacity change from 0 to 512
[  855.946310][T12945] msdos filesystem being mounted at /320/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  857.275811][T12959] loop9: detected capacity change from 0 to 7
[  857.712588][T12959] Dev loop9: unable to read RDB block 7
[  857.720436][T12959]  loop9: unable to read partition table
[  857.733610][T12966] netlink: 'syz.7.2001': attribute type 1 has an invalid length.
[  857.748035][T12959] loop9: partition table beyond EOD, truncated
[  857.802020][T12966] device lo entered promiscuous mode
[  857.821786][T12959] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  858.096230][T12966] device tunl0 entered promiscuous mode
[  858.176214][T12966] device gre0 entered promiscuous mode
[  860.076614][T12966] device gretap0 entered promiscuous mode
[  860.156228][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2004'.
[  860.251966][T12966] device erspan0 entered promiscuous mode
[  860.427343][T12966] device ip_vti0 entered promiscuous mode
[  860.516499][T12966] device ip6_vti0 entered promiscuous mode
[  860.726165][T12966] device sit0 entered promiscuous mode
[  863.245588][T12998] input: syz1 as /devices/virtual/input/input14
[  864.277312][T12966] device ip6tnl0 entered promiscuous mode
[  864.327034][T12966] device ip6gre0 entered promiscuous mode
[  864.446560][T12966] device syz_tun entered promiscuous mode
[  864.515202][T13002] loop6: detected capacity change from 0 to 512
[  864.666679][T12966] device ip6gretap0 entered promiscuous mode
[  864.946629][T12966] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.954159][T12966] bridge0: port 1(bridge_slave_0) entered disabled state
[  865.868500][T12966] device bridge0 entered promiscuous mode
[  869.975826][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  869.982317][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  870.069731][T13029] loop6: detected capacity change from 0 to 131072
[  870.091028][T13029] F2FS-fs (loop6): invalid crc value
[  870.147366][T13029] F2FS-fs (loop6): Found nat_bits in checkpoint
[  870.192330][T13029] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[  870.222617][T13029] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  872.741718][T13057] kvm [13054]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x2
[  872.826721][T13057] kvm [13054]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x81
[  872.856454][T13062] futex_wake_op: syz.2.2020 tries to shift op by 144; fix this program
[  873.915901][T13065] xt_nfacct: accounting object `' does not exist
[  874.624252][T13079] overlayfs: failed to clone upperpath
[  877.356680][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2029'.
[  877.760141][T13113] loop6: detected capacity change from 0 to 256
[  877.823988][T13113] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  877.970188][T13113] exfat filesystem being mounted at /180/file0 supports timestamps until 2107-12-31 (0x10391447f)
[  880.665667][T13136] xt_nfacct: accounting object `' does not exist
[  883.625667][   T22] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  883.867062][   T22] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  884.780858][   T22] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  884.794233][   T22] usb 7-1: config 0 interface 0 has no altsetting 0
[  884.801178][   T22] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  884.810647][   T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.824667][   T22] usb 7-1: config 0 descriptor??
[  885.268743][T13198] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2050'.
[  885.299281][   T22] usbhid 7-1:0.0: can't add hid device: -71
[  885.844008][   T22] usbhid: probe of 7-1:0.0 failed with error -71
[  885.879349][   T22] usb 7-1: USB disconnect, device number 3
[  886.580667][T13208] xt_nfacct: accounting object `' does not exist
[  890.731051][T13233] xt_nfacct: accounting object `' does not exist
[  892.075459][T13239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready
[  892.129011][T13239] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  893.385885][T13236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  897.745870][T13288] xt_nfacct: accounting object `' does not exist
[  898.018105][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  898.036119][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  898.044520][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  898.062912][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  899.000607][T13294] loop9: detected capacity change from 0 to 7
[  899.040101][T12693] Dev loop9: unable to read RDB block 7
[  899.045834][T12693]  loop9: unable to read partition table
[  899.062638][T13295] device lo entered promiscuous mode
[  899.081178][T13295] device tunl0 entered promiscuous mode
[  899.086379][T12693] loop9: partition table beyond EOD, truncated
[  899.112706][T13294] Dev loop9: unable to read RDB block 7
[  899.119878][T13294]  loop9: unable to read partition table
[  899.139362][T13295] device gre0 entered promiscuous mode
[  899.153351][T13294] loop9: partition table beyond EOD, truncated
[  899.164702][T13295] device gretap0 entered promiscuous mode
[  900.583821][T13295] device erspan0 entered promiscuous mode
[  900.586254][T13294] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  900.600552][T13295] device ip_vti0 entered promiscuous mode
[  900.615862][T13295] device ip6_vti0 entered promiscuous mode
[  900.622266][T13295] device sit0 entered promiscuous mode
[  900.786107][T13295] device ip6tnl0 entered promiscuous mode
[  900.811592][T13295] device ip6gre0 entered promiscuous mode
[  900.885966][T13295] device ip6gretap0 entered promiscuous mode
[  900.892450][T13295] device bridge0 entered promiscuous mode
[  902.404898][T13295] device vcan0 entered promiscuous mode
[  902.411796][T13295] device team0 entered promiscuous mode
[  902.425868][T13295] device dummy0 entered promiscuous mode
[  902.448666][T13295] device nlmon0 entered promiscuous mode
[  902.468208][T13295] device caif0 entered promiscuous mode
[  906.805887][T13325] xt_nfacct: accounting object `' does not exist
[  907.975484][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  908.557816][T13334] 9pnet_fd: Insufficient options for proto=fd
[  909.493460][T13341] ubi0: attaching mtd0
[  909.500791][T13341] ubi0: scanning is finished
[  909.505508][T13341] ubi0: empty MTD device detected
[  909.879115][T13341] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  910.585787][T13345] xt_nfacct: accounting object `' does not exist
[  912.603002][T13365] overlayfs: failed to resolve './bus': -2
[  916.125932][T13389] xt_nfacct: accounting object `' does not exist
[  917.461506][T13396] loop6: detected capacity change from 0 to 512
[  917.480811][T13396] EXT4-fs: Ignoring removed orlov option
[  917.508834][T13396] ext4: Bad value for 'data'
[  917.684803][T12693] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  918.757765][T13410] FAULT_INJECTION: forcing a failure.
[  918.757765][T13410] name failslab, interval 1, probability 0, space 0, times 0
[  918.834837][T13410] CPU: 0 PID: 13410 Comm: syz.6.2100 Not tainted syzkaller #0
[  918.842404][T13410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  918.852518][T13410] Call Trace:
[  918.855846][T13410]  <TASK>
[  918.858824][T13410]  dump_stack_lvl+0x188/0x24e
[  918.863563][T13410]  ? show_regs_print_info+0x12/0x12
[  918.868817][T13410]  ? load_image+0x410/0x410
[  918.873404][T13410]  ? __might_sleep+0xd0/0xd0
[  918.878058][T13410]  ? __lock_acquire+0x7c40/0x7c40
[  918.883167][T13410]  should_fail_ex+0x390/0x4c0
[  918.887912][T13410]  should_failslab+0x5/0x20
[  918.892483][T13410]  slab_pre_alloc_hook+0x59/0x300
[  918.897569][T13410]  ? ntfs_init_fs_context+0x1d1/0x490
[  918.903031][T13410]  __kmem_cache_alloc_node+0x4f/0x270
[  918.908468][T13410]  ? ntfs_init_fs_context+0x1d1/0x490
[  918.913897][T13410]  kmalloc_trace+0x26/0xe0
[  918.918376][T13410]  ntfs_init_fs_context+0x1d1/0x490
[  918.923649][T13410]  alloc_fs_context+0x628/0x7d0
[  918.928639][T13410]  __se_sys_fsopen+0xa0/0x2c0
[  918.933383][T13410]  do_syscall_64+0x4c/0xa0
[  918.937859][T13410]  ? clear_bhb_loop+0x60/0xb0
[  918.942594][T13410]  ? clear_bhb_loop+0x60/0xb0
[  918.947329][T13410]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  918.953303][T13410] RIP: 0033:0x7f294bf9e159
[  918.957769][T13410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  918.977425][T13410] RSP: 002b:00007f294ce8c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  918.985892][T13410] RAX: ffffffffffffffda RBX: 00007f294c225fa0 RCX: 00007f294bf9e159
[  918.993923][T13410] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140
[  919.002043][T13410] RBP: 00007f294c03506b R08: 0000000000000000 R09: 0000000000000000
[  919.010056][T13410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  919.018059][T13410] R13: 00007f294c226038 R14: 00007f294c225fa0 R15: 00007ffebb21c0a8
[  919.026098][T13410]  </TASK>
[  920.506367][T13423] netlink: 'syz.6.2106': attribute type 1 has an invalid length.
[  923.726050][T13431] xt_nfacct: accounting object `' does not exist
[  924.515820][T13434] xt_nfacct: accounting object `' does not exist
[  925.189126][T13442] loop5: detected capacity change from 0 to 4096
[  931.674047][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  931.684219][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  934.375848][T13511] xt_nfacct: accounting object `' does not exist
[  935.123436][T13519] loop5: detected capacity change from 0 to 512
[  935.404244][T13525] syz.6.2130 sent an empty control message without MSG_MORE.
[  936.297599][T12693] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  938.731571][T13553] loop5: detected capacity change from 0 to 512
[  939.415790][T13555] xt_nfacct: accounting object `' does not exist
[  939.784956][T13553] EXT4-fs: Ignoring removed orlov option
[  939.841333][T13553] ext4: Bad value for 'data'
[  943.075739][T13579] xt_nfacct: accounting object `' does not exist
[  945.779861][T13595] loop7: detected capacity change from 0 to 512
[  952.275878][T13618] xt_nfacct: accounting object `' does not exist
[  955.173000][T13648] loop6: detected capacity change from 0 to 512
[  955.276203][T13648] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  955.352142][T13648] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  956.388682][T13665] futex_wake_op: syz.1.2158 tries to shift op by 144; fix this program
[  956.555488][T13648] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  956.627555][T13648] EXT4-fs (loop6): unmounting filesystem.
[  958.614632][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  958.625250][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  958.635896][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2263 instead
[  958.646383][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd648 instead
[  959.035644][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  959.046181][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  959.056657][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  959.067196][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  959.077716][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  959.088236][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  959.098800][T13682] jffs2: Further such events for this erase block will not be printed
[  959.107610][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  959.118114][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  959.128661][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2263 instead
[  959.139124][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd648 instead
[  959.149622][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  959.160135][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  959.170765][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  959.181229][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  959.191755][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  959.202263][T13682] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  959.212755][T13682] jffs2: Further such events for this erase block will not be printed
[  959.221463][T13682] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  959.232056][T13682] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[  960.269656][T13690] overlayfs: failed to clone upperpath
[  960.321326][T13697] loop7: detected capacity change from 0 to 164
[  961.610017][T13708] rock: directory entry would overflow storage
[  961.617091][T13708] rock: sig=0x4f50, size=4, remaining=3
[  961.622824][T13708] iso9660: Corrupted directory entry in block 5 of inode 1792
[  962.170893][T13718] loop7: detected capacity change from 0 to 512
[  969.127955][T13772] overlayfs: failed to clone upperpath
[  969.697190][T13778] overlayfs: failed to resolve './bus': -2
[  982.574863][T13866] overlayfs: failed to clone upperpath
[  987.941830][T13893] xt_nfacct: accounting object `' does not exist
[  988.883430][T13906] xt_policy: output policy not valid in PREROUTING and INPUT
[  990.263577][T13914] loop5: detected capacity change from 0 to 512
[  990.272102][T13914] EXT4-fs: Ignoring removed nomblk_io_submit option
[  990.279714][T13914] EXT4-fs (loop5): can't mount with both data=journal and delalloc
[  990.709088][T13921] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  992.858392][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  993.790957][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  994.979033][T13936] xt_nfacct: accounting object `' does not exist
[  995.928234][T13956] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  996.334856][T13968] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  996.616559][T13968] kvm: pic: non byte read
[  996.622267][T13968] kvm: pic: level sensitive irq not supported
[  996.622461][T13968] kvm: pic: non byte read
[  996.634069][T13968] kvm: pic: level sensitive irq not supported
[  996.634140][T13968] kvm: pic: non byte read
[  996.646337][T13968] kvm: pic: level sensitive irq not supported
[  996.646462][T13968] kvm: pic: non byte read
[  996.752880][T13975] overlayfs: failed to clone upperpath
[  997.543677][   T27] kauditd_printk_skb: 62 callbacks suppressed
[  997.543694][   T27] audit: type=1800 audit(4147484393.998:651): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2235" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1000.590703][T14005] overlayfs: failed to resolve './bus': -2
[ 1006.658972][T14062] xt_nfacct: accounting object `' does not exist
[ 1014.503595][T14115] xt_nfacct: accounting object `' does not exist
[ 1015.575655][T14143] overlayfs: failed to resolve './bus': -2
[ 1017.197671][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[ 1017.208226][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[ 1017.218752][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2263 instead
[ 1017.229214][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd648 instead
[ 1017.239674][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[ 1017.250382][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[ 1017.260872][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[ 1017.271509][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[ 1017.282118][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[ 1017.292743][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[ 1017.303290][T14150] jffs2: Further such events for this erase block will not be printed
[ 1017.313420][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[ 1017.324004][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[ 1017.334726][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2263 instead
[ 1017.345249][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd648 instead
[ 1017.404230][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[ 1017.414732][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[ 1017.425230][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[ 1017.435686][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[ 1017.446117][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[ 1017.456543][T14150] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[ 1017.466989][T14150] jffs2: Further such events for this erase block will not be printed
[ 1017.475617][T14150] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1017.484924][T14150] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[ 1019.391705][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2280'.
[ 1021.321162][T14190] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1021.757112][T14200] overlayfs: failed to clone upperpath
[ 1022.863607][T14209] overlayfs: failed to clone lowerpath
[ 1024.418197][T14231] overlayfs: failed to clone upperpath
[ 1025.541084][T14238] loop7: detected capacity change from 0 to 1024
[ 1025.584719][T14238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1027.696096][T14254] overlayfs: failed to resolve './bus': -2
[ 1028.772655][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2300'.
[ 1028.983834][T14264] overlayfs: failed to resolve './bus': -2
[ 1029.624290][T14239] udevd[14239]: symlink '../../loop7' '/dev/disk/by-diskseq/315.tmp-b7:7' failed: Read-only file system
[ 1031.079088][T14278] 9pnet: p9_errstr2errno: server reported unknown error tun
[ 1031.485668][T14284] overlayfs: failed to clone upperpath
[ 1031.535078][T14281] loop7: detected capacity change from 0 to 2048
[ 1031.599322][T14281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1034.475345][T14317] overlayfs: failed to resolve './bus': -2
[ 1035.298439][T14324] loop7: detected capacity change from 0 to 256
[ 1035.313786][T14324] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[ 1036.342040][T14324] exfat filesystem being mounted at /126/file0 supports timestamps until 2107-12-31 (0x10391447f)
[ 1038.282034][T14339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready
[ 1038.328903][T14339] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1039.097180][T14345] loop5: detected capacity change from 0 to 2048
[ 1039.143122][T14345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1039.245937][T14338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1040.532325][T14368] overlayfs: failed to clone upperpath
[ 1040.823112][T14372] overlayfs: failed to clone upperpath
[ 1042.899536][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2335'.
[ 1049.130846][T14424] xt_nfacct: accounting object `' does not exist
[ 1050.484377][T14434] loop5: detected capacity change from 0 to 164
[ 1051.624740][T14442] rock: directory entry would overflow storage
[ 1051.631071][T14442] rock: sig=0x4f50, size=4, remaining=3
[ 1051.636718][T14442] iso9660: Corrupted directory entry in block 5 of inode 1792
[ 1054.326034][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.332552][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.922303][T14461] overlayfs: failed to resolve './bus': -2
[ 1058.762133][T14489] xt_nfacct: accounting object `' does not exist
[ 1058.849325][T14496] overlayfs: failed to clone upperpath
[ 1063.120502][T14525] loop5: detected capacity change from 0 to 128
[ 1063.172897][T14525] msdos filesystem being mounted at /382/file2 supports timestamps until 2107-12-31 (0x10391447e)
[ 1067.192871][T14535] xt_nfacct: accounting object `' does not exist
[ 1075.572589][T14599] xt_nfacct: accounting object `' does not exist
[ 1076.691268][T14616] lo speed is unknown, defaulting to 1000
[ 1080.436678][T14640] nvmet: adding nsid 1 to subsystem testnqn
[ 1080.491350][   T27] audit: type=1800 audit(4147484476.948:652): pid=14640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2401" name="enable" dev="configfs" ino=68947 res=0 errno=0
[ 1080.522570][T14640] nvmet: failed to open block device (null): (-22)
[ 1080.585783][T14652] loop7: detected capacity change from 0 to 164
[ 1082.136134][T14657] xt_nfacct: accounting object `' does not exist
[ 1082.629781][T14671] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1084.098968][ T4934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1084.227460][ T4934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1085.468083][ T4934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1085.505358][ T4934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1085.572281][T14693] overlayfs: failed to clone upperpath
[ 1086.739063][ T4934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1086.794428][ T4934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1086.994607][T14684] xt_nfacct: accounting object `' does not exist
[ 1087.056132][ T4934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1087.096840][ T4934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1089.507768][T14708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1089.938931][T14708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready
[ 1089.948902][T14708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1089.956526][T14708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1090.040307][T14714] loop7: detected capacity change from 0 to 1024
[ 1090.066089][ T4573] bond1: (slave ip6gretap1): link status up again after 0 ms
[ 1090.085602][ T5320] bond1: (slave ip6gretap1): link status up again after 0 ms
[ 1090.093052][ T5320] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1090.146805][T14714] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1090.348948][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1090.599622][   T27] audit: type=1800 audit(4147484487.018:653): pid=14722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2413" name="file1" dev="loop7" ino=15 res=0 errno=0
[ 1090.884453][ T4557] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1091.135459][T10360] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1091.308527][T11250] EXT4-fs (loop7): unmounting filesystem.
[ 1091.415987][ T4934] tipc: Disabling bearer <udp:syz0>
[ 1091.424268][ T4934] tipc: Left network mode
[ 1091.539622][T10360] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1091.711020][T10360] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1092.005457][T14725] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1092.438416][T14736] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1092.459388][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1092.709134][T14725] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1092.782625][T14731] xt_nfacct: accounting object `' does not exist
[ 1093.348606][ T4934] bond2: (slave ip6gretap1): Releasing active interface
[ 1093.405707][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1095.190335][T10991] net_ratelimit: 2 callbacks suppressed
[ 1095.190432][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1096.525738][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1096.809234][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1099.305779][T14768] xt_nfacct: accounting object `' does not exist
[ 1099.571281][ T6636] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1099.799809][T14725] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1100.071051][T14725] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1100.235734][T14725] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1100.426498][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1100.555477][T10360] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1102.060318][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1103.636066][ T4557] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1103.746059][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1103.856139][ T4557] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1103.965526][ T4557] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1104.231471][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1104.250391][ T4934] device veth9 left promiscuous mode
[ 1105.235740][T14787] xt_nfacct: accounting object `' does not exist
[ 1105.529090][ T4934] bridge1: port 3(veth9) entered disabled state
[ 1105.570026][ T4934] device veth0_to_bond left promiscuous mode
[ 1105.595460][ T4934] bridge1: port 2(veth0_to_bond) entered disabled state
[ 1105.684461][ T4934] device veth7 left promiscuous mode
[ 1105.710495][ T4934] bridge1: port 1(veth7) entered disabled state
[ 1106.172310][ T4934] device hsr_slave_0 left promiscuous mode
[ 1106.209988][ T4934] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1106.296714][ T4934] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1106.317898][ T4934] device bridge_slave_1 left promiscuous mode
[ 1106.350072][ T4934] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.403916][ T4934] device bridge_slave_0 left promiscuous mode
[ 1106.451079][ T4934] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.654793][ T4934] bond4 (unregistering): (slave bridge2): Releasing backup interface
[ 1106.719926][T14809] loop7: detected capacity change from 0 to 512
[ 1106.799758][T14809] msdos filesystem being mounted at /149/bus supports timestamps until 2108-01-01 (0x103915e0a)
[ 1106.818757][ T4284] Bluetooth: hci3: unknown advertising packet type: 0x30
[ 1106.818835][ T4284] Bluetooth: hci3: unknown advertising packet type: 0x74
[ 1106.833495][ T4284] Bluetooth: hci3: unknown advertising packet type: 0x69
[ 1106.840624][ T4284] Bluetooth: hci3: unknown advertising packet type: 0x66
[ 1106.847745][ T4284] Bluetooth: hci3: unknown advertising packet type: 0x65
[ 1106.854805][ T4284] Bluetooth: hci3: unknown advertising packet type: 0x5f
[ 1106.862593][ T4284] Bluetooth: hci3: unknown advertising packet type: 0x30
[ 1106.875107][T14809] FAT-fs (loop7): error, corrupted directory (invalid entries)
[ 1107.027702][ T4934] device bridge2 left promiscuous mode
[ 1108.314357][ T4934] bond4 (unregistering): Released all slaves
[ 1111.915951][ T4934] bond2 (unregistering): (slave geneve2): Releasing active interface
[ 1114.066944][ T4934] bond3 (unregistering): Released all slaves
[ 1114.097052][ T4934] bond0 (unregistering): (slave vxlan1): Releasing backup interface
[ 1114.115586][ T4934] device vxlan1 left promiscuous mode
[ 1114.269340][ T4934] bond2 (unregistering): (slave bond0): Releasing active interface
[ 1114.279112][ T4934] bond2 (unregistering): Released all slaves
[ 1114.310162][ T4934] bond1 (unregistering): (slave veth5): Releasing active interface
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: open of /sys/kernel/debug/kcov failed
 (errno 2: No such file or directory)
SYZFAIL: repeatedly failed to execute the program
proc=8 req=2397 state=1 status=67 (errno 9: Bad file descriptor)
[ 1114.495083][ T4934] bond1 (unregistering): Released all slaves
[ 1115.740541][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.747117][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.087094][ T4934] device team_slave_1 left promiscuous mode
[ 1116.100415][ T4934] team0 (unregistering): Port device team_slave_1 removed
[ 1116.149338][ T4934] device team_slave_0 left promiscuous mode
[ 1116.158598][ T4934] team0 (unregistering): Port device team_slave_0 removed
[ 1116.205815][ T4934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1116.214625][ T4934] device bond_slave_1 left promiscuous mode
[ 1116.260096][ T4934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1116.269524][ T4934] device bond_slave_0 left promiscuous mode
[ 1116.587484][ T4934] bond0 (unregistering): Released all slaves
[ 1117.086428][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1117.198392][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1117.331653][T10360] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1117.476332][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1117.587170][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1117.705364][T10991] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1117.816420][T10360] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1117.925554][   T11] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1118.051346][   T11] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1118.165464][   T11] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1119.297372][ T4934] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1119.308246][ T4934] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.394391][ T4934] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1119.404924][ T4934] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.463589][ T4934] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1119.474865][ T4934] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.547284][ T4934] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1119.557913][ T4934] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.728696][ T4934] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.797377][ T4934] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.853027][ T4934] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.903489][ T4934] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.064035][ T4934] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.157399][ T4934] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.228034][ T4934] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.306808][ T4934] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.762509][ T4934] tipc: Disabling bearer <udp:syz0>
[ 1120.768202][ T4934] tipc: Left network mode
[ 1120.809154][ T4934] tipc: Disabling bearer <udp:syz0>
[ 1120.814691][ T4934] tipc: Left network mode
[ 1120.943791][ T4934] bond1: (slave ip6gretap1): Removing an active aggregator
[ 1120.953193][ T4934] bond1: (slave ip6gretap1): Releasing backup interface
[ 1122.517112][ T4934] ------------[ cut here ]------------
[ 1122.523316][ T4934] WARNING: CPU: 0 PID: 4934 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180
[ 1122.534231][ T4934] Modules linked in:
[ 1122.538366][ T4934] CPU: 0 PID: 4934 Comm: kworker/u4:14 Not tainted syzkaller #0
[ 1122.546123][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1122.556379][ T4934] Workqueue: netns cleanup_net
[ 1122.561288][ T4934] RIP: 0010:ieee80211_link_release_channel+0x150/0x180
[ 1122.568352][ T4934] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 17 19 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 19 81 00 e8 30 d2 c7 f7 <0f> 0b eb c5 48 c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51
[ 1122.588270][ T4934] RSP: 0018:ffffc9001b1776e8 EFLAGS: 00010293
[ 1122.594389][ T4934] RAX: ffffffff89ba60b0 RBX: ffff88807861d5a8 RCX: ffff888027049e00
[ 1122.602459][ T4934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1122.610501][ T4934] RBP: 0000000000000000 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d
[ 1122.618725][ T4934] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff88807861eab0
[ 1122.626769][ T4934] R13: 1ffff1100f0c3ab5 R14: ffff88807861e228 R15: dffffc0000000000
[ 1122.634779][ T4934] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1122.643807][ T4934] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1122.650492][ T4934] CR2: 0000563181d86238 CR3: 000000007ced5000 CR4: 00000000003506f0
[ 1122.658591][ T4934] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1122.666636][ T4934] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1122.674616][ T4934] Call Trace:
[ 1122.677994][ T4934]  <TASK>
[ 1122.680984][ T4934]  ? trace_drv_return_void+0x240/0x240
[ 1122.686695][ T4934]  unregister_netdevice_many_notify+0x13c4/0x1990
[ 1122.693210][ T4934]  ? unregister_netdevice_many+0x20/0x20
[ 1122.698963][ T4934]  ? mutex_unlock+0x10/0x10
[ 1122.703531][ T4934]  ? unregister_netdevice_queue+0x17c/0x330
[ 1122.709522][ T4934]  ? rcu_is_watching+0x11/0xa0
[ 1122.714415][ T4934]  ? list_netdevice+0x640/0x640
[ 1122.719362][ T4934]  ? ieee80211_txq_teardown_flows+0x15c/0x220
[ 1122.725577][ T4934]  ? cfg80211_shutdown_all_interfaces+0x173/0x1c0
[ 1122.732046][ T4934]  ieee80211_remove_interfaces+0x44b/0x700
[ 1122.737951][ T4934]  ? ieee80211_unregister_hw+0x51/0x290
[ 1122.743598][ T4934]  ? ieee80211_do_stop+0x2020/0x2020
[ 1122.749005][ T4934]  ? atomic_notifier_chain_unregister+0xf1/0x100
[ 1122.755504][ T4934]  ieee80211_unregister_hw+0x59/0x290
[ 1122.760930][ T4934]  mac80211_hwsim_del_radio+0x285/0x480
[ 1122.766862][ T4934]  ? rhashtable_remove_fast+0xc50/0xc50
[ 1122.772492][ T4934]  hwsim_exit_net+0x589/0x650
[ 1122.777318][ T4934]  ? hwsim_init_net+0x80/0x80
[ 1122.782074][ T4934]  ? __ip_vs_dev_cleanup_batch+0x234/0x250
[ 1122.788065][ T4934]  cleanup_net+0x703/0xba0
[ 1122.792559][ T4934]  ? ops_free_list+0x3b0/0x3b0
[ 1122.797414][ T4934]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1122.803365][ T4934]  ? _raw_spin_unlock+0x40/0x40
[ 1122.808304][ T4934]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1122.813565][ T4934]  ? process_one_work+0x7b4/0x1160
[ 1122.818841][ T4934]  process_one_work+0x8ab/0x1160
[ 1122.823850][ T4934]  ? worker_detach_from_pool+0x240/0x240
[ 1122.829610][ T4934]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1122.834677][ T4934]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1122.840379][ T4934]  ? wq_worker_running+0x97/0x190
[ 1122.845583][ T4934]  worker_thread+0xaf5/0x12a0
[ 1122.850338][ T4934]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 1122.856396][ T4934]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1122.862362][ T4934]  kthread+0x29d/0x330
[ 1122.866527][ T4934]  ? worker_clr_flags+0x1a0/0x1a0
[ 1122.871614][ T4934]  ? kthread_blkcg+0xd0/0xd0
[ 1122.876322][ T4934]  ret_from_fork+0x1f/0x30
[ 1122.880835][ T4934]  </TASK>
[ 1122.883909][ T4934] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1122.891216][ T4934] CPU: 0 PID: 4934 Comm: kworker/u4:14 Not tainted syzkaller #0
[ 1122.898880][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1122.908989][ T4934] Workqueue: netns cleanup_net
[ 1122.913806][ T4934] Call Trace:
[ 1122.917119][ T4934]  <TASK>
[ 1122.920099][ T4934]  dump_stack_lvl+0x188/0x24e
[ 1122.924812][ T4934]  ? memcpy+0x3c/0x60
[ 1122.928828][ T4934]  ? show_regs_print_info+0x12/0x12
[ 1122.934088][ T4934]  ? load_image+0x410/0x410
[ 1122.938654][ T4934]  panic+0x2d3/0x710
[ 1122.942593][ T4934]  ? bpf_jit_dump+0xd0/0xd0
[ 1122.947143][ T4934]  ? ret_from_fork+0x1f/0x30
[ 1122.951775][ T4934]  __warn+0x2f8/0x4f0
[ 1122.955796][ T4934]  ? ieee80211_link_release_channel+0x150/0x180
[ 1122.962072][ T4934]  ? ieee80211_link_release_channel+0x150/0x180
[ 1122.968348][ T4934]  report_bug+0x2ba/0x4f0
[ 1122.972741][ T4934]  ? ieee80211_link_release_channel+0x150/0x180
[ 1122.979021][ T4934]  handle_bug+0x3a/0x70
[ 1122.983221][ T4934]  exc_invalid_op+0x16/0x40
[ 1122.987755][ T4934]  asm_exc_invalid_op+0x16/0x20
[ 1122.992632][ T4934] RIP: 0010:ieee80211_link_release_channel+0x150/0x180
[ 1122.999514][ T4934] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 17 19 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 19 81 00 e8 30 d2 c7 f7 <0f> 0b eb c5 48 c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51
[ 1123.019143][ T4934] RSP: 0018:ffffc9001b1776e8 EFLAGS: 00010293
[ 1123.025235][ T4934] RAX: ffffffff89ba60b0 RBX: ffff88807861d5a8 RCX: ffff888027049e00
[ 1123.033244][ T4934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1123.041262][ T4934] RBP: 0000000000000000 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d
[ 1123.049260][ T4934] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff88807861eab0
[ 1123.057284][ T4934] R13: 1ffff1100f0c3ab5 R14: ffff88807861e228 R15: dffffc0000000000
[ 1123.065295][ T4934]  ? ieee80211_link_release_channel+0x150/0x180
[ 1123.071579][ T4934]  ? ieee80211_link_release_channel+0x150/0x180
[ 1123.077880][ T4934]  ? trace_drv_return_void+0x240/0x240
[ 1123.083373][ T4934]  unregister_netdevice_many_notify+0x13c4/0x1990
[ 1123.089828][ T4934]  ? unregister_netdevice_many+0x20/0x20
[ 1123.095490][ T4934]  ? mutex_unlock+0x10/0x10
[ 1123.100043][ T4934]  ? unregister_netdevice_queue+0x17c/0x330
[ 1123.106053][ T4934]  ? rcu_is_watching+0x11/0xa0
[ 1123.110872][ T4934]  ? list_netdevice+0x640/0x640
[ 1123.115753][ T4934]  ? ieee80211_txq_teardown_flows+0x15c/0x220
[ 1123.121863][ T4934]  ? cfg80211_shutdown_all_interfaces+0x173/0x1c0
[ 1123.128314][ T4934]  ieee80211_remove_interfaces+0x44b/0x700
[ 1123.134151][ T4934]  ? ieee80211_unregister_hw+0x51/0x290
[ 1123.139741][ T4934]  ? ieee80211_do_stop+0x2020/0x2020
[ 1123.145079][ T4934]  ? atomic_notifier_chain_unregister+0xf1/0x100
[ 1123.151461][ T4934]  ieee80211_unregister_hw+0x59/0x290
[ 1123.156878][ T4934]  mac80211_hwsim_del_radio+0x285/0x480
[ 1123.162492][ T4934]  ? rhashtable_remove_fast+0xc50/0xc50
[ 1123.168078][ T4934]  hwsim_exit_net+0x589/0x650
[ 1123.172783][ T4934]  ? hwsim_init_net+0x80/0x80
[ 1123.177498][ T4934]  ? __ip_vs_dev_cleanup_batch+0x234/0x250
[ 1123.183362][ T4934]  cleanup_net+0x703/0xba0
[ 1123.187812][ T4934]  ? ops_free_list+0x3b0/0x3b0
[ 1123.192603][ T4934]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1123.198522][ T4934]  ? _raw_spin_unlock+0x40/0x40
[ 1123.203412][ T4934]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1123.208636][ T4934]  ? process_one_work+0x7b4/0x1160
[ 1123.213774][ T4934]  process_one_work+0x8ab/0x1160
[ 1123.218769][ T4934]  ? worker_detach_from_pool+0x240/0x240
[ 1123.224427][ T4934]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1123.229480][ T4934]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1123.235051][ T4934]  ? wq_worker_running+0x97/0x190
[ 1123.240102][ T4934]  worker_thread+0xaf5/0x12a0
[ 1123.244812][ T4934]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 1123.250733][ T4934]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1123.256655][ T4934]  kthread+0x29d/0x330
[ 1123.260741][ T4934]  ? worker_clr_flags+0x1a0/0x1a0
[ 1123.265785][ T4934]  ? kthread_blkcg+0xd0/0xd0
[ 1123.270391][ T4934]  ret_from_fork+0x1f/0x30
[ 1123.274845][ T4934]  </TASK>
[ 1123.278453][ T4934] Kernel Offset: disabled
[ 1123.282912][ T4934] Rebooting in 86400 seconds..