last executing test programs:

4m48.213354843s ago: executing program 4 (id=136):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x8000042, 0xb}, 0x10)
bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0)

4m47.69977625s ago: executing program 4 (id=139):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28012, r2, 0x0)

4m46.287654689s ago: executing program 4 (id=142):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55)

4m45.886142099s ago: executing program 4 (id=146):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105da, &(0x7f0000010600)="$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")
syz_open_procfs(0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x12424d0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000f, 0x12, r0, 0x0)

4m44.004438261s ago: executing program 4 (id=152):
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x100, 0x70bd2c, 0x20, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50}}]}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x799, &(0x7f0000002900)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, 'l8;', 0x763, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, {[@hopopts={0x3b, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffc}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x0, [0xc19]}}, @padn]}, @hopopts={0x5e}, @dstopts={0x2f, 0xdf, '\x00', [@generic={0x0, 0x6fc, "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"}]}], @payload_named={{{{{0x2b, 0x0, 0x1, 0x1, 0x0, 0xa, 0x3, 0x2, 0xe, 0x0, 0x1, 0x1, 0x5, 0x2, 0xb, 0x3, 0x3, 0x4e24, 0x4e21}, 0x0, 0x3}, 0x3}}, [0x0, 0x0, 0x0]}}}}}}, 0x0)

4m39.915023095s ago: executing program 4 (id=173):
socket(0x2, 0x80805, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
socket$netlink(0x10, 0x3, 0x8000000004)
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

4m38.995890212s ago: executing program 32 (id=173):
socket(0x2, 0x80805, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
socket$netlink(0x10, 0x3, 0x8000000004)
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

19.181055142s ago: executing program 0 (id=1121):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r3, 0x6, 0x3, 0x0, 0x0)

17.865780802s ago: executing program 0 (id=1123):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0x6)
r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b020000000400"], 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r3, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)

16.514472727s ago: executing program 1 (id=1126):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16.384583837s ago: executing program 0 (id=1127):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

12.021987837s ago: executing program 2 (id=1136):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480))
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
epoll_create1(0x80000)
socket$nl_audit(0x10, 0x3, 0x9)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f0000000000), 0x80000)

11.782469947s ago: executing program 1 (id=1137):
socket(0x1, 0x4, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
memfd_secret(0x80000)
syz_emit_vhci(&(0x7f0000001780)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x200d}}}, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x804c4700, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

10.837467309s ago: executing program 5 (id=1138):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
r0 = gettid()
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3)
tkill(r0, 0x23)
fcntl$setsig(r2, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8)
tkill(r0, 0x3d)
dup2(r2, r3)
fcntl$setown(r2, 0x8, r1)
tkill(r1, 0x13)

10.667430645s ago: executing program 2 (id=1140):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000700)={0x40, 0x14, 0x4, "1ed5a0a7"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.410612703s ago: executing program 5 (id=1141):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)

9.233848023s ago: executing program 2 (id=1142):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9.131447603s ago: executing program 5 (id=1143):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

8.920519723s ago: executing program 1 (id=1145):
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

6.769502249s ago: executing program 3 (id=1147):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

5.002878076s ago: executing program 3 (id=1148):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000011c0)={0x8, 0x1000033, 0x2000004, 0x6, 0x2, 0x1, 0x2, 0xf8})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmmsg(r0, 0x0, 0x0, 0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d02000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="08000a00c4"], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000802)

4.882414496s ago: executing program 5 (id=1149):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(r0)
r1 = inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0xe)
inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
rmdir(&(0x7f0000000100)='./control\x00')

4.486028263s ago: executing program 1 (id=1150):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x2a, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @local}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000100), 0xffffffffffffffb6)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4c90, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2a0, &(0x7f0000000640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70200000000000085000000510000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})

4.241057195s ago: executing program 0 (id=1151):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0xe0, 0x3, 0x4a, @local}, 0x10)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x1000000000000232, 0x0)

3.818084953s ago: executing program 5 (id=1152):
r0 = socket$packet(0x11, 0x3, 0x300)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43)
r1 = dup(r0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340))
r4 = dup(r3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1})

2.940291573s ago: executing program 0 (id=1153):
r0 = inotify_init()
r1 = epoll_create(0x800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x1000})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80000006)
open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106)

2.886339377s ago: executing program 1 (id=1154):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100)

2.732841807s ago: executing program 3 (id=1155):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

2.697986879s ago: executing program 0 (id=1156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, r1, 0x200000000000000)
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r0, 0x7, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

2.661659467s ago: executing program 5 (id=1157):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000001040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
unshare(0x6020400)
tee(r0, r3, 0xfffffffffffffc01, 0x0)
tee(r0, r3, 0x60000000000, 0x8)
read$FUSE(r2, &(0x7f0000003a40)={0x2020}, 0x2020)

2.167012901s ago: executing program 2 (id=1158):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})

1.950393423s ago: executing program 3 (id=1159):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x8, 0x0)
syz_pidfd_open(r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x36ba, 0xf000, 0x0, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xfff0}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.790793746s ago: executing program 2 (id=1160):
r0 = io_uring_setup(0x493b, &(0x7f0000000500)={0x0, 0x747b, 0x80, 0x1, 0x2b0})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)
r3 = socket(0xa, 0x5, 0x0)
r4 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10)
sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10)
sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

1.096254793s ago: executing program 3 (id=1161):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50)

529.915288ms ago: executing program 2 (id=1162):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100)
flock(r0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
flock(r2, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
flock(r1, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
flock(r2, 0x1)

460.85337ms ago: executing program 3 (id=1163):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9)
add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)

0s ago: executing program 1 (id=1164):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2})
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x4040, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
landlock_restrict_self(r3, 0x1)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
fcntl$setown(r0, 0x8, r4)
truncate(&(0x7f0000000140)='./file0\x00', 0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts.
[   91.339398][ T5812] cgroup: Unknown subsys name 'net'
[   91.581896][ T5812] cgroup: Unknown subsys name 'cpuset'
[   91.636092][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   92.230979][   T37] cfg80211: failed to load regulatory.db
[   93.834750][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   96.510704][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.534111][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.561016][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   96.563638][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.602871][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.603405][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.604394][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.634346][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.637251][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.640166][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.643060][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.643417][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.644987][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.649249][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.661752][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   96.690897][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.692112][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.693554][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.694007][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.703406][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.713047][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.771771][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   96.855624][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   96.867801][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   96.872089][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   98.082693][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   98.170014][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   98.211653][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   98.246300][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   98.294524][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   98.600626][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.601968][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.602209][ T5829] bridge_slave_0: entered allmulticast mode
[   98.604399][ T5829] bridge_slave_0: entered promiscuous mode
[   98.692419][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.692531][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.692691][ T5829] bridge_slave_1: entered allmulticast mode
[   98.694617][ T5829] bridge_slave_1: entered promiscuous mode
[   98.757066][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.757188][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.757574][ T5828] bridge_slave_0: entered allmulticast mode
[   98.759356][ T5828] bridge_slave_0: entered promiscuous mode
[   98.819680][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.819794][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.824739][ T5827] bridge_slave_0: entered allmulticast mode
[   98.830807][ T5827] bridge_slave_0: entered promiscuous mode
[   98.856390][ T5834] Bluetooth: hci3: command tx timeout
[   98.856773][ T5838] Bluetooth: hci1: command tx timeout
[   98.889651][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.889765][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.890147][ T5828] bridge_slave_1: entered allmulticast mode
[   98.891941][ T5828] bridge_slave_1: entered promiscuous mode
[   98.902565][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.902954][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.914417][ T5825] bridge_slave_0: entered allmulticast mode
[   98.923369][ T5825] bridge_slave_0: entered promiscuous mode
[   98.935775][ T5838] Bluetooth: hci2: command tx timeout
[   98.936528][ T5834] Bluetooth: hci0: command tx timeout
[   98.977714][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.977816][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.977976][ T5827] bridge_slave_1: entered allmulticast mode
[   98.982390][ T5827] bridge_slave_1: entered promiscuous mode
[   98.990492][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.991192][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.007018][ T5826] bridge_slave_0: entered allmulticast mode
[   99.025258][ T5826] bridge_slave_0: entered promiscuous mode
[   99.026644][ T5834] Bluetooth: hci4: command tx timeout
[   99.066667][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.066805][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.067220][ T5825] bridge_slave_1: entered allmulticast mode
[   99.069143][ T5825] bridge_slave_1: entered promiscuous mode
[   99.099959][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.123955][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.124133][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.124653][ T5826] bridge_slave_1: entered allmulticast mode
[   99.141928][ T5826] bridge_slave_1: entered promiscuous mode
[   99.193966][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.235716][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.277349][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.302703][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.307691][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.345856][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.353236][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.397709][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.400493][ T5829] team0: Port device team_slave_0 added
[   99.430681][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.472005][ T5829] team0: Port device team_slave_1 added
[   99.508801][ T5828] team0: Port device team_slave_0 added
[   99.546068][ T5827] team0: Port device team_slave_0 added
[   99.568417][ T5828] team0: Port device team_slave_1 added
[   99.570403][ T5825] team0: Port device team_slave_0 added
[   99.598470][ T5827] team0: Port device team_slave_1 added
[   99.600756][ T5826] team0: Port device team_slave_0 added
[   99.629443][ T5825] team0: Port device team_slave_1 added
[   99.630765][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.630781][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.630811][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.712218][ T5826] team0: Port device team_slave_1 added
[   99.758268][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.758282][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.758303][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.834086][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.834101][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.834122][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.899536][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.899550][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.899570][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.950555][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.950573][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.950602][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.951811][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.951823][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.951849][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.958911][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.958929][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.958969][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.969809][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.969927][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.970005][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.082619][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.082674][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.082751][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.557246][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.557260][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.557282][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.674697][ T5829] hsr_slave_0: entered promiscuous mode
[  100.681373][ T5829] hsr_slave_1: entered promiscuous mode
[  100.779215][ T5828] hsr_slave_0: entered promiscuous mode
[  100.780265][ T5828] hsr_slave_1: entered promiscuous mode
[  100.781086][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[  100.781178][ T5828] Cannot create hsr debugfs directory
[  100.824189][ T5827] hsr_slave_0: entered promiscuous mode
[  100.827040][ T5827] hsr_slave_1: entered promiscuous mode
[  100.828019][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[  100.828044][ T5827] Cannot create hsr debugfs directory
[  100.885903][ T5825] hsr_slave_0: entered promiscuous mode
[  100.887031][ T5825] hsr_slave_1: entered promiscuous mode
[  100.887687][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[  100.887704][ T5825] Cannot create hsr debugfs directory
[  100.903956][ T5826] hsr_slave_0: entered promiscuous mode
[  100.909250][ T5826] hsr_slave_1: entered promiscuous mode
[  100.911929][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[  100.912045][ T5826] Cannot create hsr debugfs directory
[  100.935312][ T5834] Bluetooth: hci1: command tx timeout
[  100.935346][ T5834] Bluetooth: hci3: command tx timeout
[  101.015506][ T5834] Bluetooth: hci0: command tx timeout
[  101.015541][ T5834] Bluetooth: hci2: command tx timeout
[  101.096625][ T5838] Bluetooth: hci4: command tx timeout
[  102.004463][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.073027][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.083985][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.110888][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.112822][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.144255][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.169452][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.210823][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.334728][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  102.372111][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.425397][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  102.469992][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.473992][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  102.508912][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.544487][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  102.590291][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.724947][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  102.779083][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.797555][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  102.830094][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.837005][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.888924][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.923517][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  102.949058][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.015403][ T5838] Bluetooth: hci3: command tx timeout
[  103.029193][ T5838] Bluetooth: hci1: command tx timeout
[  103.095772][ T5838] Bluetooth: hci0: command tx timeout
[  103.095808][ T5838] Bluetooth: hci2: command tx timeout
[  103.149632][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.177204][ T5834] Bluetooth: hci4: command tx timeout
[  103.199091][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.220774][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  103.249864][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.286706][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  103.322923][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.380652][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.408820][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.494936][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.577787][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.619020][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.633856][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.663166][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.700478][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.719753][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.736379][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.779196][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.811525][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[  103.866427][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.866600][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.920764][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.933047][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.933160][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.061760][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[  104.092649][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.118256][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.118416][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.171517][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.171666][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.244832][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[  104.303076][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.304814][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.330727][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.390552][ T1518] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.390766][ T1518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.527087][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[  104.576741][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.604945][ T1562] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.605036][ T1562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.689131][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.689351][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.839789][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[  104.914597][ T1370] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.914813][ T1370] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.961209][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.004104][ T1370] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.013547][ T1370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.096202][ T5838] Bluetooth: hci3: command tx timeout
[  105.096257][ T5834] Bluetooth: hci1: command tx timeout
[  105.177437][ T5834] Bluetooth: hci2: command tx timeout
[  105.177472][ T5834] Bluetooth: hci0: command tx timeout
[  105.255402][ T5838] Bluetooth: hci4: command tx timeout
[  105.337314][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.515620][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.671987][ T5827] veth0_vlan: entered promiscuous mode
[  105.829984][ T5827] veth1_vlan: entered promiscuous mode
[  105.975650][ T5826] veth0_vlan: entered promiscuous mode
[  106.028141][ T5826] veth1_vlan: entered promiscuous mode
[  106.052398][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.100403][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.120968][ T5827] veth0_macvtap: entered promiscuous mode
[  106.153085][ T5827] veth1_macvtap: entered promiscuous mode
[  106.191772][ T5829] veth0_vlan: entered promiscuous mode
[  106.254096][ T5826] veth0_macvtap: entered promiscuous mode
[  106.272774][ T5829] veth1_vlan: entered promiscuous mode
[  106.292143][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.317043][ T5826] veth1_macvtap: entered promiscuous mode
[  106.339509][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.383129][ T5828] veth0_vlan: entered promiscuous mode
[  106.410365][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.437506][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.444164][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.477525][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.497565][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.502420][ T5825] veth0_vlan: entered promiscuous mode
[  106.567648][ T5828] veth1_vlan: entered promiscuous mode
[  106.591852][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.776794][ T1370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.786095][ T5829] veth0_macvtap: entered promiscuous mode
[  106.809081][ T5825] veth1_vlan: entered promiscuous mode
[  106.848034][ T1518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.892907][ T1562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.916705][ T1562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.958493][ T5829] veth1_macvtap: entered promiscuous mode
[  107.260545][ T1562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.260572][ T1562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.382447][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.404847][ T5828] veth0_macvtap: entered promiscuous mode
[  107.464811][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.476689][ T5828] veth1_macvtap: entered promiscuous mode
[  107.526057][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.532216][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.587679][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.588318][ T5825] veth0_macvtap: entered promiscuous mode
[  107.594123][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.632744][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.632765][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.683012][ T5825] veth1_macvtap: entered promiscuous mode
[  107.751175][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.935781][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.010256][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.010278][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.279662][   T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.399525][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.400324][   T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.476578][   T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.544658][   T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.570506][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.570533][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.626617][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.710059][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  108.869247][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.878767][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.878831][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.934546][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.959667][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.999282][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.553578][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.553600][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.868567][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.868590][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.436994][ T5962] netlink: 'syz.0.9': attribute type 10 has an invalid length.
[  110.458938][ T5961] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  110.692757][ T5962] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  110.760379][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.760402][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.793471][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.793488][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.068587][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.068610][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.261961][ T1059] wlan1: Trigger new scan to find an IBSS to join
[  113.595174][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.615184][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.625189][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.635164][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.645183][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.655156][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.665144][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.675146][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.685183][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  113.695164][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  116.018494][ T5995] loop1: detected capacity change from 0 to 512
[  116.896564][ T6011] process 'syz.4.20' launched './file0' with NULL argv: empty string added
[  117.305922][ T5995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.306070][ T5995] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.509496][ T5888] libceph: connect (1)[c::]:6789 error -101
[  117.509981][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[  117.561668][ T5997] ceph: No mds server is up or the cluster is laggy
[  117.573799][  T818] libceph: connect (1)[c::]:6789 error -101
[  117.573983][  T818] libceph: mon0 (1)[c::]:6789 connect error
[  117.598752][ T5998] ceph: No mds server is up or the cluster is laggy
[  117.634718][  T818] libceph: connect (1)[c::]:6789 error -101
[  117.634866][  T818] libceph: mon0 (1)[c::]:6789 connect error
[  117.689235][ T5999] ceph: No mds server is up or the cluster is laggy
[  117.899080][  T818] libceph: connect (1)[c::]:6789 error -101
[  117.899296][  T818] libceph: mon0 (1)[c::]:6789 connect error
[  117.899613][  T818] libceph: connect (1)[c::]:6789 error -101
[  117.899772][  T818] libceph: mon0 (1)[c::]:6789 connect error
[  117.946595][   T10] libceph: connect (1)[c::]:6789 error -101
[  117.946799][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  118.230317][ T1552] wlan1: Trigger new scan to find an IBSS to join
[  118.882529][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'.
[  119.061453][ T6027] l2tp_ppp: sess 2/0: no socket in recv
[  119.220998][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.303656][ T1059] wlan1: Creating new IBSS network, BSSID f2:db:6b:a4:19:d6
[  119.543142][ T6032] netlink: 'syz.3.27': attribute type 12 has an invalid length.
[  127.691185][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.788136][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.182840][ T6117] syz.1.48 uses obsolete (PF_INET,SOCK_PACKET)
[  129.629662][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.662536][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.748684][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'.
[  131.965681][ T6146] loop4: detected capacity change from 0 to 32768
[  131.968473][ T6146] btrfs: Deprecated parameter 'usebackuproot'
[  131.968677][ T6146] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  131.978616][ T6146] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.55 (6146)
[  132.083849][ T6146] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.083905][ T6146] BTRFS info (device loop4): using crc32c checksum algorithm
[  132.282997][   T58] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  132.283331][ T6146] BTRFS error (device loop4): failed to load root extent
[  132.283386][ T6146] BTRFS warning (device loop4): try to load backup roots slot 1
[  132.283767][ T1552] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  132.283911][ T6146] BTRFS warning (device loop4): couldn't read tree root
[  132.283933][ T6146] BTRFS warning (device loop4): try to load backup roots slot 2
[  132.295226][   T58] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  132.295359][ T6146] BTRFS warning (device loop4): couldn't read tree root
[  132.295379][ T6146] BTRFS warning (device loop4): try to load backup roots slot 3
[  132.421934][ T6146] BTRFS info (device loop4): rebuilding free space tree
[  132.585024][ T6146] BTRFS info (device loop4): checking UUID tree
[  132.592696][ T6146] BTRFS info (device loop4): enabling ssd optimizations
[  132.592728][ T6146] BTRFS info (device loop4): turning on async discard
[  132.592750][ T6146] BTRFS info (device loop4): enabling free space tree
[  132.592766][ T6146] BTRFS info (device loop4): force clearing of disk cache
[  132.592783][ T6146] BTRFS info (device loop4): trying to use backup root at mount time
[  132.592812][ T6146] BTRFS info (device loop4): force zlib compression, level 3
[  133.198219][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  133.198288][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  133.294295][ T5829] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.249799][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.254070][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.805027][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.883021][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.132702][ T6188] tipc: Failed to remove unknown binding: 66,0,0/0:3106765367/3106765368
[  135.782937][  T818] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  135.965291][  T818] usb 5-1: Using ep0 maxpacket: 16
[  135.989597][  T818] usb 5-1: config 0 has no interfaces?
[  135.991736][  T818] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  135.991766][  T818] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  135.991870][  T818] usb 5-1: Manufacturer: syz
[  136.083410][  T818] usb 5-1: config 0 descriptor??
[  136.263587][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'.
[  136.382123][    T9] usb 5-1: USB disconnect, device number 2
[  136.751385][   T58] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.824464][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'.
[  137.235417][   T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.235457][   T58] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.236307][ T6196] Zero length message leads to an empty skb
[  137.474962][   T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.474990][   T58] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.550663][   T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.550703][   T58] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.579267][   T58] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.651145][   T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.220317][   T58] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.305254][   T58] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.528251][   T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.018434][   T38] audit: type=1326 audit(1776188469.447:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6214 comm="syz.1.71" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbb443c819 code=0x0
[  140.527307][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'.
[  141.796261][ T6248] loop2: detected capacity change from 0 to 4096
[  141.985571][ T6248] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  142.014676][ T6248] ntfs3(loop2): ino=3, mi_enum_attr
[  142.030936][ T6248] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  142.381488][ T6248] ntfs3(loop2): volume is dirty and "force" flag is not set!
[  143.199630][ T6274] loop2: detected capacity change from 0 to 128
[  143.316009][ T6274] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.341587][ T6274] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  143.414869][ T6274] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  143.442515][ T6274] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  143.586598][ T6281] fscrypt: loop2: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13
[  143.679812][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.056383][ T6295] loop1: detected capacity change from 0 to 16
[  144.236888][ T6290] loop2: detected capacity change from 0 to 32768
[  144.238222][ T6290] btrfs: Deprecated parameter 'usebackuproot'
[  144.238246][ T6290] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  144.262050][ T6290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.95 (6290)
[  144.347925][ T6290] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.347969][ T6290] BTRFS info (device loop2): using crc32c checksum algorithm
[  144.682268][ T1552] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  144.683920][ T6290] BTRFS error (device loop2): failed to load root extent
[  144.683967][ T6290] BTRFS warning (device loop2): try to load backup roots slot 1
[  144.691018][   T12] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  144.691273][ T6290] BTRFS warning (device loop2): couldn't read tree root
[  144.691297][ T6290] BTRFS warning (device loop2): try to load backup roots slot 2
[  144.703509][   T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  144.705673][ T6290] BTRFS warning (device loop2): couldn't read tree root
[  144.705699][ T6290] BTRFS warning (device loop2): try to load backup roots slot 3
[  144.816931][ T6290] BTRFS info (device loop2): rebuilding free space tree
[  144.964314][ T6290] BTRFS info (device loop2): checking UUID tree
[  144.973454][ T6290] BTRFS info (device loop2): enabling ssd optimizations
[  144.973483][ T6290] BTRFS info (device loop2): turning on async discard
[  144.973502][ T6290] BTRFS info (device loop2): enabling free space tree
[  144.973519][ T6290] BTRFS info (device loop2): force clearing of disk cache
[  144.973537][ T6290] BTRFS info (device loop2): enabling auto defrag
[  144.973554][ T6290] BTRFS info (device loop2): trying to use backup root at mount time
[  144.973575][ T6290] BTRFS info (device loop2): use zstd compression, level 3
[  145.529015][ T6325] capability: warning: `syz.3.101' uses deprecated v2 capabilities in a way that may be insecure
[  146.347761][ T5828] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.036696][ T6333] loop3: detected capacity change from 0 to 256
[  147.074023][ T6333] exfat: Deprecated parameter 'utf8'
[  147.346285][ T6346] netlink: 'syz.0.108': attribute type 4 has an invalid length.
[  147.407780][ T6345] netlink: 'syz.0.108': attribute type 4 has an invalid length.
[  147.831209][ T6333] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  149.318644][   T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  151.585786][ T6390] loop3: detected capacity change from 0 to 32768
[  151.699987][ T6390] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.145007][ T6390] XFS (loop3): Ending clean mount
[  152.381741][ T6401] io-wq is not configured for unbound workers
[  153.644660][ T6415] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[  153.986523][ T6422] netlink: 14 bytes leftover after parsing attributes in process `syz.1.127'.
[  154.896567][ T6419] bond1: (slave veth5): Enslaving as an active interface with a down link
[  155.013497][ T6421] bond1: (slave dummy0): making interface the new active one
[  155.014976][ T6421] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  155.198659][ T5825] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  155.427589][ T6422] bond1: (slave dummy0): Releasing active interface
[  156.219169][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'.
[  157.010205][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[  157.010245][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[  159.927696][ T6480] loop4: detected capacity change from 0 to 131072
[  159.969023][ T6480] F2FS-fs (loop4): invalid crc value
[  160.153438][ T6480] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  160.185919][ T6480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  160.353182][   T38] audit: type=1800 audit(1776188490.817:3): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.146" name="#16" dev="overlay" ino=16 res=0 errno=0
[  160.497538][ T6494] netlink: 'syz.3.151': attribute type 10 has an invalid length.
[  160.619387][ T6494] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  160.638892][ T6494] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  160.639031][ T6494] team0: Failed to send options change via netlink (err -105)
[  160.639049][ T6494] team0: Port device netdevsim0 added
[  163.724475][ T6539] fuse: Bad value for 'fd'
[  164.121211][ T6549] loop1: detected capacity change from 0 to 512
[  164.124552][ T6549] EXT4-fs: Ignoring removed nobh option
[  164.189826][ T6549] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0)
[  164.189982][ T6549] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  164.191284][ T6549] EXT4-fs (loop1): external journal has bad superblock
[  164.779988][   T38] audit: type=1326 audit(1776188495.247:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74d72c819 code=0x7ffc0000
[  164.780192][   T38] audit: type=1326 audit(1776188495.247:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74d72c819 code=0x7ffc0000
[  164.843093][   T38] audit: type=1326 audit(1776188495.277:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74d72c819 code=0x7ffc0000
[  164.843155][   T38] audit: type=1326 audit(1776188495.277:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74d72c819 code=0x7ffc0000
[  164.843210][   T38] audit: type=1326 audit(1776188495.277:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb74d72c4ab code=0x7ffc0000
[  164.843256][   T38] audit: type=1326 audit(1776188495.317:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74d72c819 code=0x7ffc0000
[  164.843308][   T38] audit: type=1326 audit(1776188495.317:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74d72c819 code=0x7ffc0000
[  164.843356][   T38] audit: type=1326 audit(1776188495.277:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb74d72c4ab code=0x7ffc0000
[  164.843403][   T38] audit: type=1326 audit(1776188495.317:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb74d72c4ab code=0x7ffc0000
[  165.253442][  T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.312807][ T6549] loop1: detected capacity change from 0 to 32768
[  165.408576][ T6549] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.170 (6549)
[  165.810355][ T6549] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.810386][ T6549] BTRFS info (device loop1): using sha256 checksum algorithm
[  166.455141][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  166.479912][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  166.504245][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  166.546039][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  166.567044][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  166.777982][ T6549] BTRFS info (device loop1): enabling ssd optimizations
[  166.778013][ T6549] BTRFS info (device loop1): turning on async discard
[  166.778031][ T6549] BTRFS info (device loop1): enabling free space tree
[  166.839692][  T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.198281][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.885851][  T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.855288][ T5838] Bluetooth: hci4: command tx timeout
[  169.127152][  T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.559162][ T6611] bridge0: port 3(erspan0) entered blocking state
[  169.559359][ T6611] bridge0: port 3(erspan0) entered disabled state
[  169.639171][ T6611] erspan0: entered allmulticast mode
[  169.752793][ T6611] erspan0: entered promiscuous mode
[  169.818375][ T6611] bridge0: port 3(erspan0) entered blocking state
[  169.865627][ T6611] bridge0: port 3(erspan0) entered forwarding state
[  169.871478][ T6600] loop3: detected capacity change from 0 to 32768
[  169.891394][ T6600] =======================================================
[  169.891394][ T6600] WARNING: The mand mount option has been deprecated and
[  169.891394][ T6600]          and is ignored by this kernel. Remove the mand
[  169.891394][ T6600]          option from the mount to silence this warning.
[  169.891394][ T6600] =======================================================
[  170.414751][ T6614] erspan0: left allmulticast mode
[  170.414783][ T6614] erspan0: left promiscuous mode
[  170.453187][ T6614] bridge0: port 3(erspan0) entered disabled state
[  170.936819][ T5838] Bluetooth: hci4: command tx timeout
[  171.078401][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'.
[  171.139092][ T6600] JBD2: Ignoring recovery information on journal
[  171.516236][ T6600] JBD2: journal reset failed
[  171.516254][ T6600] (syz.3.184,6600,1):ocfs2_journal_load:1162 ERROR: Failed to load journal!
[  171.520516][ T6600] (syz.3.184,6600,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4
[  172.626467][ T6647] bond1: entered allmulticast mode
[  172.693888][ T6650] macvlan2: entered promiscuous mode
[  172.693920][ T6650] macvlan2: entered allmulticast mode
[  172.712939][ T6650] bond1: (slave macvlan2): Opening slave failed
[  173.015480][ T5838] Bluetooth: hci4: command tx timeout
[  173.963467][  T154] bridge_slave_1: left allmulticast mode
[  174.015384][  T154] bridge_slave_1: left promiscuous mode
[  174.171620][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.373436][  T154] bridge_slave_0: left allmulticast mode
[  174.373466][  T154] bridge_slave_0: left promiscuous mode
[  174.373699][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.602158][ T6680] netlink: 'syz.2.207': attribute type 10 has an invalid length.
[  175.098706][ T5838] Bluetooth: hci4: command tx timeout
[  176.376038][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.446082][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.491240][  T154] bond0 (unregistering): Released all slaves
[  176.536734][ T6576] chnl_net:caif_netlink_parms(): no params data found
[  176.805730][ T6680] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  176.807886][ T6680] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  178.851687][ T6744] kexec: Could not allocate control_code_buffer
[  178.868154][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'.
[  178.974909][ T6752] netlink: 156 bytes leftover after parsing attributes in process `syz.3.231'.
[  179.026937][ T6753] netlink: 156 bytes leftover after parsing attributes in process `syz.3.231'.
[  179.152875][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'.
[  179.597662][ T6746] gtp0: entered promiscuous mode
[  180.146171][ T6764] overlayfs: failed to clone upperpath
[  180.423723][ T6765] loop2: detected capacity change from 0 to 256
[  180.458819][ T6765] exfat: Deprecated parameter 'utf8'
[  180.678533][ T6765] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  181.091746][ T6782] loop1: detected capacity change from 0 to 1024
[  181.777349][   T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  181.874137][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.874241][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.874465][ T6576] bridge_slave_0: entered allmulticast mode
[  181.884643][ T6576] bridge_slave_0: entered promiscuous mode
[  182.034060][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.034170][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.034382][ T6576] bridge_slave_1: entered allmulticast mode
[  182.107196][ T6576] bridge_slave_1: entered promiscuous mode
[  182.278129][ T6782] hfsplus: failed to load extents file
[  182.642281][ T6576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.665316][  T154] hsr_slave_0: left promiscuous mode
[  183.708525][  T154] hsr_slave_1: left promiscuous mode
[  183.795292][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.795534][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.918449][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.918480][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.539468][  T154] veth1_macvtap: left promiscuous mode
[  184.539752][  T154] veth0_macvtap: left promiscuous mode
[  184.584744][  T154] veth1_vlan: left promiscuous mode
[  184.617525][  T154] veth0_vlan: left promiscuous mode
[  187.806007][  T154] team0 (unregistering): Port device team_slave_1 removed
[  187.867730][  T154] team0 (unregistering): Port device team_slave_0 removed
[  188.083807][ T6851] loop1: detected capacity change from 0 to 2048
[  188.350845][ T6851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.454456][ T6576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.571540][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1
[  188.837259][ T6831] bond1: left allmulticast mode
[  188.859254][ T1022] bond0: (slave bond_slave_0): interface is now down
[  188.859286][ T1022] bond0: (slave bond_slave_1): interface is now down
[  188.859298][ T1022] bond0: (slave wlan1): interface is now down
[  189.097007][   T44] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.154742][   T44] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.157534][   T44] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.158543][   T44] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.213004][ T6576] team0: Port device team_slave_0 added
[  189.237936][ T6576] team0: Port device team_slave_1 added
[  190.182635][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.182654][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.182683][ T6576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.232906][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.232947][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.232977][ T6576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.514961][ T6576] hsr_slave_0: entered promiscuous mode
[  190.532177][ T6576] hsr_slave_1: entered promiscuous mode
[  191.702690][   T37] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  191.884241][   T37] usb 2-1: config 0 has no interfaces?
[  191.884270][   T37] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  191.884288][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.121299][   T38] kauditd_printk_skb: 42 callbacks suppressed
[  192.121319][   T38] audit: type=1804 audit(1776188522.467:55): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.273" name="file1" dev="tmpfs" ino=348 res=1 errno=0
[  192.299096][   T37] usb 2-1: config 0 descriptor??
[  192.484592][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.499555][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.645820][ T5918] usb 2-1: USB disconnect, device number 2
[  193.605984][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.650321][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.650209][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  194.650262][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  194.800270][ T6887] syz.0.270 (6887) used greatest stack depth: 16632 bytes left
[  194.817009][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2
[  194.817282][   T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.846944][   T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.889062][   T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.911973][   T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.381573][ T6576] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  195.427079][ T6576] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  195.428089][ T6576] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  195.474734][ T6576] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  195.477412][ T6576] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  195.534163][ T6576] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  195.548709][ T6576] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  195.603133][ T6576] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  195.761919][ T6576] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.818254][ T6576] 8021q: adding VLAN 0 to HW filter on device team0
[  195.844981][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.875293][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.900942][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.901121][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.969074][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3
[  196.396073][ T6576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.888300][ T6576] veth0_vlan: entered promiscuous mode
[  196.910186][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4
[  196.923494][ T6576] veth1_vlan: entered promiscuous mode
[  197.018637][ T6576] veth0_macvtap: entered promiscuous mode
[  197.042320][ T6576] veth1_macvtap: entered promiscuous mode
[  197.074892][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.128958][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.152388][   T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.153168][   T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.154816][   T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.193010][   T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.076637][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.076659][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.184631][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.184654][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.406381][ T6922] libceph: connect (1)[c::]:6789 error -101
[  198.406584][ T6922] libceph: mon0 (1)[c::]:6789 connect error
[  198.517903][ T6991] ceph: No mds server is up or the cluster is laggy
[  199.434534][ T7023] fuse: Bad value for 'fd'
[  202.128048][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.294'.
[  203.443649][ T7036] bridge0: entered promiscuous mode
[  203.443680][ T7036] bridge0: entered allmulticast mode
[  205.774683][ T7130] binder: 7127:7130 ioctl c0306201 2000000003c0 returned -14
[  206.331595][ T7139] netlink: 'syz.2.321': attribute type 1 has an invalid length.
[  206.331622][ T7139] netlink: 'syz.2.321': attribute type 4 has an invalid length.
[  206.331636][ T7139] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.321'.
[  210.143924][ T7190] binder: 7189:7190 ioctl c0306201 2000000003c0 returned -14
[  211.244361][ T7210] syz.0.348 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  211.328340][ T7208] binder: 7207:7208 ioctl c0306201 200000000680 returned -14
[  211.825383][ T6925] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  211.980940][ T6925] usb 6-1: Using ep0 maxpacket: 8
[  211.995381][ T6925] usb 6-1: config 0 has no interfaces?
[  211.995419][ T6925] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  211.995443][ T6925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.095958][ T6925] usb 6-1: config 0 descriptor??
[  212.757918][ T5838] Bluetooth: hci2: connection err: -111
[  212.773496][ T7244] loop1: detected capacity change from 0 to 512
[  212.887438][ T7244] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  212.956743][ T7244] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[  212.962514][ T7244] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.354: inode #15: comm syz.1.354: iget: illegal inode #
[  212.962777][ T7244] loop1: lost filesystem error report for type 5 error -117
[  212.972090][    C0] EXT4-fs (loop1): initial error at time 1776188543: ext4_orphan_get:1397
[  212.972139][    C0] EXT4-fs (loop1): last error at time 1776188543: ext4_orphan_get:1397
[  213.063492][ T7248] vlan2: entered promiscuous mode
[  213.063515][ T7248] syz_tun: entered promiscuous mode
[  213.089601][ T7244] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.354: couldn't read orphan inode 15 (err -117)
[  213.089637][ T7244] loop1: lost filesystem error report for type 5 error -117
[  213.118221][ T7244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.346993][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.715887][ T6932] usb 6-1: USB disconnect, device number 2
[  217.515713][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.516464][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.848727][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'.
[  218.201613][ T7317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  218.905219][ T5915] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  219.067274][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.109606][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.186107][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  219.217180][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.217230][ T5915] usb 3-1: config 0 has no interfaces?
[  219.217263][ T5915] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  219.217288][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.291586][ T5915] usb 3-1: config 0 descriptor??
[  219.705205][ T5915] usb 3-1: USB disconnect, device number 2
[  221.028072][ T7336] loop1: detected capacity change from 0 to 32768
[  221.070390][ T7336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.375 (7336)
[  221.153822][ T7336] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  221.153860][ T7336] BTRFS info (device loop1): using crc32c checksum algorithm
[  221.329040][ T7313] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  221.535327][ T7336] BTRFS info (device loop1): enabling ssd optimizations
[  221.535357][ T7336] BTRFS info (device loop1): turning on flush-on-commit
[  221.535374][ T7336] BTRFS info (device loop1): enabling free space tree
[  221.535391][ T7336] BTRFS info (device loop1): enabling auto defrag
[  221.535410][ T7336] BTRFS info (device loop1): use lzo compression, level 1
[  221.535431][ T7336] BTRFS info (device loop1): max_inline set to 4096
[  221.737644][ T1370] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.741183][ T1370] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.741497][ T1370] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.741536][ T1370] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.313620][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  222.313660][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  222.313685][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  222.313706][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  222.930796][ T7373] netlink: 'syz.3.380': attribute type 4 has an invalid length.
[  223.233245][ T7384] binder: 7382:7384 ioctl c0306201 2000000003c0 returned -14
[  228.547518][ T5826] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  230.191416][ T7446] loop2: detected capacity change from 0 to 32768
[  230.524634][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'.
[  231.105783][ T7446] read_mapping_page failed!
[  231.105844][ T7446] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  231.117211][ T7446] Mount JFS Failure: -5
[  231.117228][ T7446] jfs_mount failed w/return code = -5
[  231.565293][ T7472] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  231.823875][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'.
[  231.823903][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'.
[  231.848658][ T7483] loop1: detected capacity change from 0 to 512
[  232.437421][ T7483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.437560][ T7483] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.099154][   T38] audit: type=1800 audit(1776188563.497:56): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.411" name="file1" dev="loop1" ino=15 res=0 errno=0
[  233.491660][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.665461][ T7530] futex_wake_op: syz.2.425 tries to shift op by 144; fix this program
[  233.892954][ T7535] binder: 7532:7535 ioctl c0306201 2000000003c0 returned -14
[  234.352650][ T7540] loop2: detected capacity change from 0 to 4096
[  234.400582][ T7540] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  234.420972][ T7540] ntfs3(loop2): ino=3, mi_enum_attr
[  234.507401][ T7545] fuse: Bad value for 'fd'
[  234.854032][ T7540] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  234.854086][ T7540] ntfs3(loop2): Failed to load $AttrDef (-22)
[  235.227310][ T7540] loop2: detected capacity change from 0 to 4096
[  235.240033][ T7540] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  235.513783][ T7540] ntfs3(loop2): ino=1a, mi_enum_attr
[  235.513817][ T7540] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  235.734272][ T7540] ntfs3(loop2): ino=1a, mi_enum_attr
[  235.734300][ T7540] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  236.137494][ T7572] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  238.726440][ T7602] 8021q: adding VLAN 0 to HW filter on device bond2
[  238.986919][ T7602] bond2: (slave ip6gretap1): making interface the new active one
[  239.032004][ T7602] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  242.645452][ T7643] fuse: Bad value for 'fd'
[  243.220151][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'.
[  243.962157][ T7683] fuse: Bad value for 'fd'
[  251.424824][ T7746] fuse: Bad value for 'fd'
[  252.034338][ T7737] loop1: detected capacity change from 0 to 32768
[  252.083741][ T7737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.492 (7737)
[  253.197646][ T7737] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  253.197684][ T7737] BTRFS info (device loop1): using crc32c checksum algorithm
[  253.257012][ T5143] Bluetooth: hci3: unexpected event for opcode 0x080f
[  253.298847][ T7774] fuse: Bad value for 'fd'
[  253.348706][ T7737] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  253.358253][ T7737] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  253.597352][ T7737] BTRFS error (device loop1): open_ctree failed: -12
[  253.698299][ T7786] fuse: fd is not a fuse device
[  254.660050][   T38] audit: type=1804 audit(1776188585.117:57): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.508" name="file0" dev="tmpfs" ino=713 res=1 errno=0
[  254.802275][ T7797] ref_ctr increment failed for inode: 0x2c9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88805ba79a00
[  254.896366][ T7793] uprobe: syz.3.508:7793 failed to unregister, leaking uprobe
[  255.060381][ T7805] loop1: detected capacity change from 0 to 2048
[  255.321982][ T7805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.419168][ T7805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.920999][ T7819] loop1: detected capacity change from 0 to 1024
[  255.960321][ T7819] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  255.960462][ T7819] System zones: 0-1, 3-36
[  255.964492][ T7819] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.515: bad orphan inode 134217728
[  255.964531][ T7819] loop1: lost filesystem error report for type 5 error -117
[  255.965095][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  255.965116][    C0] EXT4-fs (loop1): initial error at time 1776188586: ext4_orphan_get:1423
[  255.965177][    C0] EXT4-fs (loop1): last error at time 1776188586: ext4_orphan_get:1423
[  256.049992][ T7819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.079858][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  256.080087][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  256.181744][   T38] audit: type=1800 audit(1776188586.647:58): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="bus" dev="loop1" ino=18 res=0 errno=0
[  256.453687][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.813696][ T7840] loop1: detected capacity change from 0 to 512
[  256.833545][ T7840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  256.833609][ T7840] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  257.069392][   T38] audit: type=1326 audit(1776188587.497:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c4dfc819 code=0x7fc00000
[  257.069448][   T38] audit: type=1326 audit(1776188587.537:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f82c4dfc819 code=0x7fc00000
[  257.259521][ T5143] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  257.259746][ T5143] Bluetooth: hci3: Injecting HCI hardware error event
[  257.262621][ T5143] Bluetooth: hci3: hardware error 0x00
[  257.444345][ T7840] EXT4-fs (loop1): 1 truncate cleaned up
[  257.453910][ T7840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.940943][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.329001][ T7875] fuse: fd is not a fuse device
[  258.530990][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.534'.
[  258.604914][ T7884] tipc: Failed to remove unknown binding: 66,0,0/0:1359908333/1359908334
[  258.614898][ T7884] tipc: Failed to remove unknown binding: 66,0,0/0:1359908333/1359908334
[  260.837786][ T7889] loop1: detected capacity change from 0 to 1024
[  260.838740][ T7889] EXT4-fs: Ignoring removed orlov option
[  260.838771][ T7889] EXT4-fs: inline encryption not supported
[  260.838939][ T7889] ext3: Unknown parameter 'hash'
[  260.863646][ T5143] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  261.723867][ T7910] openvswitch: netlink: Message has 1 unknown bytes.
[  261.723912][ T7910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.730105][ T7910] openvswitch: netlink: Message has 1 unknown bytes.
[  261.730143][ T7910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.725197][ T5210] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  262.967916][ T5210] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  262.967957][ T5210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.014674][ T5210] usb 3-1: config 0 descriptor??
[  265.565765][ T5210] usb 3-1: Cannot set autoneg
[  265.605657][ T5210] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  265.610868][ T7943] netlink: 52 bytes leftover after parsing attributes in process `syz.5.554'.
[  265.836437][ T5210] usb 3-1: USB disconnect, device number 3
[  266.092704][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.557'.
[  266.927501][ T7960] loop1: detected capacity change from 0 to 512
[  266.942206][ T7960] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  267.049198][ T6921] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  267.152151][ T7960] EXT4-fs (loop1): 1 truncate cleaned up
[  267.173488][ T7960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.212012][ T6921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.212037][ T6921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.212065][ T6921] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  267.212082][ T6921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.338545][ T6921] usb 3-1: config 0 descriptor??
[  268.042354][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.904973][ T6921] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[  270.118455][ T6921] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5
[  270.802970][ T8020] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.576'.
[  272.910600][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'.
[  274.660392][ T8058] fuse: fd is not a fuse device
[  275.093591][ T6921] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  275.321965][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'.
[  275.776958][ T6921] usb 3-1: USB disconnect, device number 4
[  277.420065][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'.
[  277.542130][ T8097] netlink: 'syz.5.603': attribute type 4 has an invalid length.
[  277.619629][ T8101] netlink: 'syz.5.603': attribute type 4 has an invalid length.
[  281.687607][   T38] audit: type=1804 audit(1776188612.157:61): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.622" name="file0" dev="tmpfs" ino=732 res=1 errno=0
[  283.434303][ T8173] 9p: Bad value for 'rfdno'
[  283.446251][ T6920] IPVS: starting estimator thread 0...
[  283.657544][ T8174] IPVS: using max 11 ests per chain, 26400 per kthread
[  287.010524][ T8224] overlayfs: failed to clone upperpath
[  287.915465][ T8237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.014003][ T8229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.078824][ T8229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.855284][ T5833] Bluetooth: hci4: command 0x0406 tx timeout
[  292.331250][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'.
[  292.331281][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'.
[  295.397497][ T8338] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  299.112395][ T8361] IPVS: sed: FWM 3 0x00000003 - no destination available
[  299.292616][ T5210] IPVS: starting estimator thread 0...
[  299.395307][ T8362] IPVS: using max 8 ests per chain, 19200 per kthread
[  301.716932][ T8388] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -26339, delta: 1
[  301.717006][ T8388] ref_ctr increment failed for inode: 0x340 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803ed58d00
[  303.122166][ T8403] syz_tun: entered allmulticast mode
[  303.198491][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  303.840298][ T8405] syz_tun (unregistering): left allmulticast mode
[  306.641635][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.641723][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.641798][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.641870][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.759786][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.759888][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.759963][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760060][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760133][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760214][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760307][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760380][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760451][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760520][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760589][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760658][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760729][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760816][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760889][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.760961][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.761032][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.761103][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.761175][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.761254][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.761325][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.761398][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.763006][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.763086][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  306.763309][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.677950][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678056][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678289][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678365][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678437][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678508][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678581][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678652][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678723][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678794][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.678959][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.679059][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.681661][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.681746][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.681825][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.681897][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.681967][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682037][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682107][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682183][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682252][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682322][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682391][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682460][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682551][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682736][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682817][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682888][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.682970][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.683040][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.683109][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.686475][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.686565][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.686644][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.686723][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.686801][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.686890][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.686973][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687059][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687136][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687342][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687421][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687499][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687577][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687655][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687732][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687809][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687887][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.687984][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.688067][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.688145][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.688221][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.733005][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.733131][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.733202][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.733272][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.733340][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.733408][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.733475][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.733543][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  307.733611][ T8447] uprobe: syz.2.716:8447 failed to unregister, leaking uprobe
[  310.002132][ T8482] netlink: 'syz.2.727': attribute type 3 has an invalid length.
[  310.611638][ T8502] overlayfs: failed to clone upperpath
[  313.855970][ T6920] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  314.061995][ T6920] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  314.062047][ T6920] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  314.096198][ T6920] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  314.096231][ T6920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.096277][ T6920] usb 2-1: Product: syz
[  314.096293][ T6920] usb 2-1: Manufacturer: syz
[  314.096308][ T6920] usb 2-1: SerialNumber: syz
[  314.272229][ T8536] overlayfs: failed to clone upperpath
[  317.586702][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  317.588339][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  318.601289][ T8562] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  318.813466][ T8567] bond2: option mode: unable to set because the bond device has slaves
[  318.951946][ T8567] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  318.990405][ T6920] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  319.041168][ T6920] usb 2-1: unit 4 not found!
[  319.251205][ T8567] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  321.384651][ T8590] fuse: Bad value for 'fd'
[  325.098905][ T6920] usb 2-1: USB disconnect, device number 3
[  325.947949][ T8364] udevd[8364]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  326.842587][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.843355][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.144869][ T8651] fuse: fd is not a fuse device
[  327.151207][ T8651] capability: warning: `syz.3.787' uses 32-bit capabilities (legacy support in use)
[  327.679636][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.890233][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.117498][ T8669] fuse: fd is not a fuse device
[  329.206370][ T8671] overlayfs: failed to clone upperpath
[  329.633109][   T44] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.826519][   T44] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.882105][   T44] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.883608][   T44] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.940131][ T8676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.796'.
[  330.110688][ T8686] fuse: fd is not a fuse device
[  330.250596][ T8678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.796'.
[  331.783815][ T5143] Bluetooth: hci4: unknown advertising packet type: 0x75
[  331.783870][ T5143] Bluetooth: hci4: Dropping invalid advertising data
[  331.783887][ T5143] Bluetooth: hci4: Malformed LE Event: 0x02
[  331.857902][ T8708] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size.
[  335.966765][ T8734] tipc: Started in network mode
[  335.966811][ T8734] tipc: Node identity 2d65202020202020002e, cluster identity 4711
[  336.242542][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'.
[  340.983503][ T8802] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  340.988023][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'.
[  341.119171][   T38] audit: type=1804 audit(1776188671.487:62): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.835" name="bus" dev="ramfs" ino=17796 res=1 errno=0
[  341.122633][   T38] audit: type=1804 audit(1776188671.587:63): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.835" name="bus" dev="ramfs" ino=17796 res=1 errno=0
[  343.094502][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'.
[  343.931991][ T8847] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.844'.
[  344.042005][ T8828] loop1: detected capacity change from 0 to 32768
[  344.071291][ T8828] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.840 (8828)
[  344.288173][ T8828] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  344.288223][ T8828] BTRFS info (device loop1): using crc32c checksum algorithm
[  344.456797][ T8828] BTRFS info (device loop1): enabling ssd optimizations
[  344.456826][ T8828] BTRFS info (device loop1): turning on flush-on-commit
[  344.456845][ T8828] BTRFS info (device loop1): enabling free space tree
[  344.456863][ T8828] BTRFS info (device loop1): enabling auto defrag
[  344.456883][ T8828] BTRFS info (device loop1): use lzo compression, level 1
[  344.456905][ T8828] BTRFS info (device loop1): max_inline set to 4096
[  347.711148][ T8894] fuse: fd is not a fuse device
[  348.854260][ T5826] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  351.388640][ T8938] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  351.697688][ T8945] trusted_key: syz.3.873 sent an empty control message without MSG_MORE.
[  351.897500][ T8943] ref_ctr increment failed for inode: 0x339 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803249ce00
[  353.757911][ T8943] uprobe: syz.1.857:8943 failed to unregister, leaking uprobe
[  360.244869][ T9017] team0: entered promiscuous mode
[  360.244895][ T9017] team_slave_0: entered promiscuous mode
[  360.245214][ T9017] team_slave_1: entered promiscuous mode
[  360.246474][ T9017] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  360.249485][ T9017] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  360.757379][ T9043] netlink: 'syz.3.904': attribute type 1 has an invalid length.
[  360.818405][ T9043] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.117546][ T9043] bond1: (slave ip6gretap1): making interface the new active one
[  361.163101][ T9043] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  361.163255][ T9046] bond1: up delay (607) is not a multiple of miimon (100), value rounded to 600 ms
[  361.189923][   T38] audit: type=1800 audit(1776188691.637:64): pid=9040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.905" name="bus" dev="tmpfs" ino=679 res=0 errno=0
[  361.484253][ T9046] bond1: entered allmulticast mode
[  361.484278][ T9046] ip6gretap1: entered allmulticast mode
[  368.239859][ T5143] Bluetooth: hci1: unexpected event for opcode 0x080d
[  370.006828][ T5143] Bluetooth: hci4: Unable to find connection for big 0x00
[  370.747128][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  370.945445][ T5897] usb 2-1: Using ep0 maxpacket: 16
[  370.981220][ T9184] netlink: 'syz.2.947': attribute type 27 has an invalid length.
[  370.981245][ T9184] netlink: 'syz.2.947': attribute type 4 has an invalid length.
[  370.981261][ T9184] netlink: 144 bytes leftover after parsing attributes in process `syz.2.947'.
[  371.059124][ T5897] usb 2-1: config 0 has an invalid interface number: 183 but max is 0
[  371.059157][ T5897] usb 2-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config
[  371.059178][ T5897] usb 2-1: config 0 has no interface number 0
[  371.059211][ T5897] usb 2-1: too many endpoints for config 0 interface 183 altsetting 228: 64, using maximum allowed: 30
[  371.059252][ T5897] usb 2-1: config 0 interface 183 altsetting 228 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[  371.059282][ T5897] usb 2-1: config 0 interface 183 has no altsetting 0
[  371.059323][ T5897] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  371.059348][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.150728][ T5897] usb 2-1: config 0 descriptor??
[  371.393327][   T38] audit: type=1326 audit(1776188957.857:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9185 comm="syz.5.949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc535aec819 code=0x0
[  371.618258][ T9191] netlink: 'syz.0.951': attribute type 39 has an invalid length.
[  371.872851][ T9172] loop1: detected capacity change from 0 to 40427
[  371.902819][ T9172] F2FS-fs (loop1): invalid crc value
[  372.061805][ T9172] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  372.080058][ T9172] F2FS-fs (loop1): Start checkpoint disabled!
[  372.116624][ T9172] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  372.144923][ T9172] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  372.310029][ T5143] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  372.318957][ T5143] Bluetooth: hci1: Injecting HCI hardware error event
[  372.321929][ T5833] Bluetooth: hci1: hardware error 0x00
[  373.209477][ T5897] usb 2-1: string descriptor 0 read error: -71
[  373.264878][ T5897] usb 2-1: USB disconnect, device number 4
[  373.801949][ T9210] mmap: syz.3.956 (9210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  375.102350][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  375.879474][ T9224] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  375.977107][ T9228] syz_tun: entered allmulticast mode
[  375.994603][ T1414] kworker/u8:11: attempt to access beyond end of device
[  375.994603][ T1414] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  376.052604][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'.
[  376.204513][ T9228] syz_tun (unregistering): left allmulticast mode
[  376.209083][ T1414] CPU: 1 UID: 0 PID: 1414 Comm: kworker/u8:11 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  376.209155][ T1414] Tainted: [L]=SOFTLOCKUP
[  376.209163][ T1414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  376.209178][ T1414] Workqueue: writeback wb_workfn (flush-7:1)
[  376.209244][ T1414] Call Trace:
[  376.209279][ T1414]  <TASK>
[  376.209303][ T1414]  dump_stack_lvl+0xe8/0x150
[  376.209389][ T1414]  f2fs_stop_checkpoint+0x383/0x540
[  376.209492][ T1414]  f2fs_write_end_io+0x1274/0x1740
[  376.209642][ T1414]  __submit_merged_bio+0x256/0x6a0
[  376.209776][ T1414]  __submit_merged_write_cond+0x3c9/0x4e0
[  376.209923][ T1414]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  376.210093][ T1414]  f2fs_write_data_pages+0x287e/0x34f0
[  376.210277][ T1414]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  376.210316][ T1414]  ? __lock_acquire+0x6b5/0x2cf0
[  376.210409][ T1414]  ? __lock_acquire+0x6b5/0x2cf0
[  376.210595][ T1414]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  376.210662][ T1414]  do_writepages+0x32e/0x550
[  376.210746][ T1414]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  376.210822][ T1414]  ? reacquire_held_locks+0x104/0x190
[  376.210934][ T1414]  ? rt_spin_lock+0x1e0/0x400
[  376.211054][ T1414]  __writeback_single_inode+0x133/0x10e0
[  376.211157][ T1414]  ? rt_spin_unlock+0x160/0x200
[  376.211235][ T1414]  writeback_sb_inodes+0x97f/0x1980
[  376.211367][ T1414]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  376.211436][ T1414]  ? __pfx_rt_spin_lock+0x10/0x10
[  376.211497][ T1414]  ? rt_spin_unlock+0x14f/0x200
[  376.211597][ T1414]  wb_writeback+0x445/0xb00
[  376.211683][ T1414]  ? queue_io+0x2a1/0x440
[  376.211763][ T1414]  ? __pfx_wb_writeback+0x10/0x10
[  376.211892][ T1414]  wb_workfn+0x3fd/0xf20
[  376.211946][ T1414]  ? __lock_acquire+0x6b5/0x2cf0
[  376.212009][ T1414]  ? look_up_lock_class+0x57/0x110
[  376.212145][ T1414]  ? __pfx_wb_workfn+0x10/0x10
[  376.212264][ T1414]  ? do_raw_spin_lock+0x12b/0x2f0
[  376.212322][ T1414]  ? lock_acquire+0x106/0x350
[  376.212416][ T1414]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  376.212458][ T1414]  ? process_scheduled_works+0xa69/0x1910
[  376.212485][ T1414]  ? process_scheduled_works+0xa69/0x1910
[  376.212518][ T1414]  ? process_scheduled_works+0xa69/0x1910
[  376.212566][ T1414]  ? process_scheduled_works+0xa69/0x1910
[  376.212634][ T1414]  process_scheduled_works+0xb68/0x1910
[  376.212789][ T1414]  ? __pfx_process_scheduled_works+0x10/0x10
[  376.212887][ T1414]  ? assign_work+0x3d5/0x5e0
[  376.212965][ T1414]  worker_thread+0xa90/0x1040
[  376.213117][ T1414]  kthread+0x388/0x470
[  376.213184][ T1414]  ? __pfx_worker_thread+0x10/0x10
[  376.213205][ T1414]  ? __pfx_kthread+0x10/0x10
[  376.213296][ T1414]  ret_from_fork+0x514/0xb70
[  376.213406][ T1414]  ? __pfx_ret_from_fork+0x10/0x10
[  376.213474][ T1414]  ? __switch_to+0xc79/0x1410
[  376.213566][ T1414]  ? __pfx_kthread+0x10/0x10
[  376.213598][ T1414]  ret_from_fork_asm+0x1a/0x30
[  376.213652][ T1414]  </TASK>
[  376.283929][ T1414] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  378.977177][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  378.977228][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  379.940312][ T9263] netlink: 'syz.5.974': attribute type 4 has an invalid length.
[  379.975732][ T9262] netlink: 'syz.5.974': attribute type 4 has an invalid length.
[  381.450894][ T9288] tmpfs: Unsupported parameter 'huge'
[  383.066925][ T9302] ref_ctr increment failed for inode: 0x3df offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803831c100
[  383.191544][ T9309] overlayfs: failed to clone upperpath
[  383.310193][ T9312] ip6erspan1: entered allmulticast mode
[  385.625061][ T9325] overlayfs: failed to resolve './file0': -2
[  385.712465][ T9335] loop1: detected capacity change from 0 to 64
[  392.977888][ T9407] overlayfs: failed to clone upperpath
[  393.247960][   T38] audit: type=1800 audit(1776188979.617:66): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1020" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  393.415161][ T5897] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  393.615147][ T5897] usb 2-1: Using ep0 maxpacket: 8
[  393.618886][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short
[  393.618948][ T5897] usb 2-1: too many configurations: 141, using maximum allowed: 8
[  393.619981][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.620016][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.674113][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.674156][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.725027][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.725086][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.729828][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.729886][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.737412][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.737480][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.843653][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.843736][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.883425][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.883504][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.892245][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.892302][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.933456][ T5897] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  393.933480][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.933495][ T5897] usb 2-1: Product: syz
[  393.933505][ T5897] usb 2-1: Manufacturer: syz
[  393.933515][ T5897] usb 2-1: SerialNumber: syz
[  396.014382][ T5897] usb 2-1: USB disconnect, device number 5
[  396.542768][ T9449] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1030'.
[  396.806740][ T9454] fuse: fd is not a fuse device
[  397.038696][   T38] audit: type=1326 audit(1776188983.507:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  397.038754][   T38] audit: type=1326 audit(1776188983.507:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  397.105328][   T38] audit: type=1326 audit(1776188983.567:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  397.109551][   T38] audit: type=1326 audit(1776188983.577:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  397.109896][   T38] audit: type=1326 audit(1776188983.577:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  397.114320][   T38] audit: type=1326 audit(1776188983.577:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  397.114655][   T38] audit: type=1326 audit(1776188983.577:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  397.234829][   T38] audit: type=1326 audit(1776188983.577:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  397.234889][   T38] audit: type=1326 audit(1776188983.697:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9459 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  399.369381][ T9488] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  399.778783][ T9500] overlayfs: failed to clone lowerpath
[  399.969281][   T38] kauditd_printk_skb: 7 callbacks suppressed
[  399.969303][   T38] audit: type=1800 audit(1776188986.437:83): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1049" name="nullb0" dev="tmpfs" ino=830 res=0 errno=0
[  404.493891][   T38] audit: type=1326 audit(1776188990.937:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  404.493955][   T38] audit: type=1326 audit(1776188990.937:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  404.494002][   T38] audit: type=1326 audit(1776188990.937:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  404.494050][   T38] audit: type=1326 audit(1776188990.937:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  404.494097][   T38] audit: type=1326 audit(1776188990.937:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5183c819 code=0x7ffc0000
[  410.600309][ T9613] fuse: fd is not a fuse device
[  410.601276][ T9613] 9p: Bad value for 'wfdno'
[  413.441085][ T9661] overlayfs: failed to clone upperpath
[  413.530246][   T38] audit: type=1804 audit(1776188999.997:89): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1087" name="/newroot/184/file0" dev="tmpfs" ino=985 res=1 errno=0
[  413.552489][ T9665] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1
[  413.552516][ T9665] ref_ctr increment failed for inode: 0x3d9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880388a0d00
[  413.692198][ T9665] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1
[  413.692226][ T9665] ref_ctr decrement failed for inode: 0x3d9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880388a0d00
[  413.692284][ T9665] uprobe: syz.1.1087:9665 failed to unregister, leaking uprobe
[  415.563105][ T9678] binder_alloc: 9677: binder_alloc_buf, no vma
[  417.499746][ T9707] netlink: 'syz.3.1098': attribute type 8 has an invalid length.
[  418.617887][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'.
[  418.686372][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'.
[  419.330251][ T6919] libceph: connect (1)[c::]:6789 error -101
[  419.330478][ T6919] libceph: mon0 (1)[c::]:6789 connect error
[  419.330945][ T6919] libceph: connect (1)[c::]:6789 error -101
[  419.331138][ T6919] libceph: mon0 (1)[c::]:6789 connect error
[  419.377046][ T9732] ceph: No mds server is up or the cluster is laggy
[  419.587624][ T6919] libceph: connect (1)[c::]:6789 error -101
[  419.587844][ T6919] libceph: mon0 (1)[c::]:6789 connect error
[  420.312931][ T6919] libceph: connect (1)[c::]:6789 error -101
[  420.313159][ T6919] libceph: mon0 (1)[c::]:6789 connect error
[  423.655988][ T9766] bridge0: port 3(erspan0) entered blocking state
[  423.656206][ T9766] bridge0: port 3(erspan0) entered disabled state
[  423.656428][ T9766] erspan0: entered allmulticast mode
[  423.942714][ T9766] erspan0: entered promiscuous mode
[  426.870523][ T9795] sctp: [Deprecated]: syz.0.1123 (pid 9795) Use of int in maxseg socket option.
[  426.870523][ T9795] Use struct sctp_assoc_value instead
[  433.704128][ T9845] input: syz0 as /devices/virtual/input/input6
[  434.215417][ T9853] fuse: fd is not a fuse device
[  439.946633][ T9891] 
: renamed from bond_slave_0
[  440.016425][ T9895] macvlan2: entered allmulticast mode
[  440.016449][ T9895] team0: entered allmulticast mode
[  440.016464][ T9895] team_slave_0: entered allmulticast mode
[  440.016484][ T9895] team_slave_1: entered allmulticast mode
[  440.016976][ T9895] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  440.077188][ T9895] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  440.198763][ T9899] loop1: detected capacity change from 0 to 64
[  440.300504][ T9895] team0: left allmulticast mode
[  440.300529][ T9895] team_slave_0: left allmulticast mode
[  440.300550][ T9895] team_slave_1: left allmulticast mode
[  440.300576][ T9895] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  440.388398][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  440.397219][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  441.533331][ T9899] loop2: detected capacity change from 0 to 7
[  441.582495][ T9899] Dev loop2: unable to read RDB block 7
[  441.582541][ T9899]  loop2: AHDI p1 p2 p3
[  441.582580][ T9899] loop2: partition table partially beyond EOD, truncated
[  441.584090][ T9899] loop2: p1 start 1818582900 is beyond EOD, truncated
[  441.584115][ T9899] loop2: p3 start 335544320 is beyond EOD, truncated
[  444.395774][ T9949] netlink: 'syz.3.1163': attribute type 10 has an invalid length.
[  444.623643][ T6926] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  444.623671][ T6926] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  444.625077][    C1] ------------[ cut here ]------------
[  444.625087][    C1] workqueue: cannot queue hci_cmd_timeout on wq hci0
[  444.625115][    C1] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd5c/0x1010, CPU#1: ktimers/1/30
[  444.625149][    C1] Modules linked in:
[  444.625169][    C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  444.625197][    C1] Tainted: [L]=SOFTLOCKUP
[  444.625203][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  444.625214][    C1] RIP: 0010:__queue_work+0xd87/0x1010
[  444.625236][    C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 3a b8 a0 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 03
[  444.625250][    C1] RSP: 0018:ffffc90000a4f9b0 EFLAGS: 00010082
[  444.625264][    C1] RAX: 1ffff1100b09f153 RBX: 0000000000000008 RCX: ffff88801da89ec0
[  444.625277][    C1] RDX: ffff8880387cd168 RSI: ffffffff8a2544a0 RDI: ffffffff8f8fe3f0
[  444.625290][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[  444.625300][    C1] R10: dffffc0000000000 R11: ffffffff818d4aa0 R12: dffffc0000000000
[  444.625313][    C1] R13: ffff8880584f8a98 R14: ffffffff8f8fe3f0 R15: ffff8880387cd168
[  444.625326][    C1] FS:  0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000
[  444.625340][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  444.625352][    C1] CR2: 00007f39ccfea774 CR3: 0000000041d72000 CR4: 00000000003526f0
[  444.625368][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  444.625379][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  444.625390][    C1] Call Trace:
[  444.625397][    C1]  <TASK>
[  444.625405][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  444.625435][    C1]  call_timer_fn+0x192/0x5e0
[  444.625461][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  444.625480][    C1]  ? call_timer_fn+0xd4/0x5e0
[  444.625503][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  444.625536][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  444.625555][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  444.625576][    C1]  __run_timer_base+0x764/0x9f0
[  444.625610][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  444.625637][    C1]  ? __local_bh_disable_ip+0x3c/0x420
[  444.625662][    C1]  run_timer_softirq+0xb7/0x170
[  444.625685][    C1]  handle_softirqs+0x1de/0x6d0
[  444.625711][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  444.625730][    C1]  run_ktimerd+0x69/0x100
[  444.625751][    C1]  smpboot_thread_fn+0x541/0xa50
[  444.625772][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  444.625799][    C1]  kthread+0x388/0x470
[  444.625822][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  444.625841][    C1]  ? __pfx_kthread+0x10/0x10
[  444.625864][    C1]  ret_from_fork+0x514/0xb70
[  444.625886][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  444.625904][    C1]  ? __switch_to+0xc79/0x1410
[  444.625932][    C1]  ? __pfx_kthread+0x10/0x10
[  444.625956][    C1]  ret_from_fork_asm+0x1a/0x30
[  444.626007][    C1]  </TASK>
[  444.626026][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  444.626041][    C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  444.626064][    C1] Tainted: [L]=SOFTLOCKUP
[  444.626071][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  444.626081][    C1] Call Trace:
[  444.626088][    C1]  <TASK>
[  444.626094][    C1]  vpanic+0x56c/0xa60
[  444.626115][    C1]  ? __pfx__printk+0x10/0x10
[  444.626139][    C1]  ? __pfx_vpanic+0x10/0x10
[  444.626157][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  444.626181][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  444.626211][    C1]  panic+0xc5/0xd0
[  444.626232][    C1]  ? __pfx_panic+0x10/0x10
[  444.626259][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  444.626285][    C1]  __warn+0x315/0x4c0
[  444.626304][    C1]  ? __queue_work+0xd5c/0x1010
[  444.626325][    C1]  ? __queue_work+0xd5c/0x1010
[  444.626345][    C1]  __report_bug+0x29a/0x540
[  444.626376][    C1]  ? __queue_work+0xd5c/0x1010
[  444.626396][    C1]  ? __pfx___report_bug+0x10/0x10
[  444.626420][    C1]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  444.626440][    C1]  ? register_lock_class+0x31/0x2e0
[  444.626463][    C1]  ? rtlock_slowlock_locked+0xfb/0x3c80
[  444.626489][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  444.626514][    C1]  report_bug_entry+0x19a/0x290
[  444.626539][    C1]  ? __queue_work+0xd87/0x1010
[  444.626557][    C1]  ? __queue_work+0xd8c/0x1010
[  444.626574][    C1]  handle_bug+0xce/0x200
[  444.626592][    C1]  exc_invalid_op+0x1a/0x50
[  444.626610][    C1]  asm_exc_invalid_op+0x1a/0x20
[  444.626628][    C1] RIP: 0010:__queue_work+0xd87/0x1010
[  444.626647][    C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 3a b8 a0 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 03
[  444.626661][    C1] RSP: 0018:ffffc90000a4f9b0 EFLAGS: 00010082
[  444.626677][    C1] RAX: 1ffff1100b09f153 RBX: 0000000000000008 RCX: ffff88801da89ec0
[  444.626689][    C1] RDX: ffff8880387cd168 RSI: ffffffff8a2544a0 RDI: ffffffff8f8fe3f0
[  444.626702][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[  444.626712][    C1] R10: dffffc0000000000 R11: ffffffff818d4aa0 R12: dffffc0000000000
[  444.626725][    C1] R13: ffff8880584f8a98 R14: ffffffff8f8fe3f0 R15: ffff8880387cd168
[  444.626742][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  444.626765][    C1]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  444.626787][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  444.626815][    C1]  call_timer_fn+0x192/0x5e0
[  444.626840][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  444.626858][    C1]  ? call_timer_fn+0xd4/0x5e0
[  444.626884][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  444.626925][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  444.626950][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  444.626984][    C1]  __run_timer_base+0x764/0x9f0
[  444.627023][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  444.627049][    C1]  ? __local_bh_disable_ip+0x3c/0x420
[  444.627076][    C1]  run_timer_softirq+0xb7/0x170
[  444.627099][    C1]  handle_softirqs+0x1de/0x6d0
[  444.627126][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  444.627146][    C1]  run_ktimerd+0x69/0x100
[  444.627166][    C1]  smpboot_thread_fn+0x541/0xa50
[  444.627188][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  444.627216][    C1]  kthread+0x388/0x470
[  444.627242][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  444.627262][    C1]  ? __pfx_kthread+0x10/0x10
[  444.627287][    C1]  ret_from_fork+0x514/0xb70
[  444.627310][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  444.627330][    C1]  ? __switch_to+0xc79/0x1410
[  444.627360][    C1]  ? __pfx_kthread+0x10/0x10
[  444.627392][    C1]  ret_from_fork_asm+0x1a/0x30
[  444.627432][    C1]  </TASK>
[  444.628979][    C1] Kernel Offset: disabled