last executing test programs:

29.086648113s ago: executing program 1 (id=247):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0)

27.980018765s ago: executing program 1 (id=251):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, 0x0, 0xdbc, 0xfffe, 0x0, 0x2}, {0x3, 0x4, 0x0, 0x2000000000000, 0x0, 0x0, 0x3}, {0x0, 0x3, 0x0, 0x1020000000000000}, 0x400, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x20000000, 0x32}, 0xa, @in=@empty, 0x3407, 0x4, 0x0, 0xb7, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x20)

26.630913051s ago: executing program 1 (id=255):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r1, &(0x7f0000000000)="a8", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c)
close(0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0xbdc4)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)

24.856737252s ago: executing program 1 (id=258):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
pread64(r0, &(0x7f0000000500)=""/190, 0xbe, 0x7fffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x810082, &(0x7f0000000080)={[{@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@numtail}]}, 0x0, 0x2db, &(0x7f0000000580)="$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")
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"})

21.386227832s ago: executing program 1 (id=268):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
fallocate(0xffffffffffffffff, 0x3, 0x36e, 0x10000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0)
getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=<r3=>0x0)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x7, 0x7fff, 0x7, 0x4000, 0xb, r3, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000100)='./file0\x00')
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

16.179293882s ago: executing program 1 (id=278):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x100)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r1, 0x3)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0)

9.50935585s ago: executing program 4 (id=294):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
clock_getres(0x7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
write$cgroup_int(r3, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

8.64711438s ago: executing program 4 (id=295):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
r4 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8044840}, 0x800)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x40000)

8.64643773s ago: executing program 3 (id=296):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
syz_clone(0x644c7080, 0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)

8.495009211s ago: executing program 2 (id=298):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = io_uring_setup(0x3eae, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1c, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})

8.099115076s ago: executing program 3 (id=299):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb70000", @ANYRES32, @ANYBLOB="0000000000000000b708"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0])
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x800100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x200042)
r3 = accept4(r2, 0x0, 0x0, 0x800)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7.961332148s ago: executing program 4 (id=300):
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
r2 = open(0x0, 0x145842, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f0000000140)='Q', 0x1, 0x200980)
read(r0, 0x0, 0x0)
pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

7.430673494s ago: executing program 3 (id=302):
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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")
syz_mount_image$fuse(&(0x7f0000000700), 0x0, 0x30c407a, 0x0, 0x1, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x200108cc, &(0x7f0000000840)=ANY=[@ANYBLOB=',errors=remount-ro,errors=continue,\x00', @ANYBLOB="8eee371aa4f77526fa8dd9b08d64127579dcb5500430e2d3b37ddcbf2e630f2b95d899d82386e933664e7ed6cc1cad9fe91d8c80206084e83221de248dd3e3921e1dc63fc02909340d4e032ad7e0546190e0531c6d5c6457edd791ed75894f680e9b34f2b8a235a0de9a0c661daec5aaa406bf692155b2a03fdfcc516b85cafc9ed8ffe209c785fbf2e4a50ee5fca2b4c63308cc469db59ce0666c66bcb303cf64d423f0aee683c3fc28fc18", @ANYRES16, @ANYRES64, @ANYBLOB='iocharset=iso8859-6,errors=continue,allow_utime=00000000000002000000006,uid=', @ANYRESHEX, @ANYRESOCT, @ANYRES32], 0x81, 0x1506, &(0x7f0000002a80)="$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")

7.237660566s ago: executing program 2 (id=303):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8040)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48c8}, 0x20004804)

7.049629378s ago: executing program 2 (id=304):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

6.263242187s ago: executing program 0 (id=305):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

6.123288179s ago: executing program 4 (id=306):
close(0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x100, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x400, 0x40000000, 0x7fffe, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x0, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$UI_DEV_CREATE(r2, 0x5501)

4.981703162s ago: executing program 2 (id=307):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
gettid()
close(0xffffffffffffffff)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r5, r0, 0x80000)

4.866857313s ago: executing program 0 (id=308):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000004c0)=[@acquire, @register_looper], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

3.304368082s ago: executing program 0 (id=309):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1")
chdir(&(0x7f0000000400)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000002c0), &(0x7f0000000300))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3.302871082s ago: executing program 2 (id=310):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x2000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000000c0)={0x1, @raw_data="8a6528fa2eba577bfa6b99723c0c1b5d143ec74480807edf8b5f010c46c1a6e9ec85449d34fbb88d5483106c6380e37c5e269951bebf29ed14e535fedd9e39d56748d2087da94ef0ee4b44d2815963aa6366ac844175dbe2a195662da79450b8c9a03c50e58f5cd5e570a4777c532b9e2fad1d7ea8572d23d9ce5e60f2eb0b2c4a009998961146866788869040839ff19b3bff10e091a365966500b03513d980d80f1c81f353e0ea0db47f040ae3750900c992d15d2d0c83847a9fb064598446f84f6157fef4e44b"})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x220000, 0x0)

3.055223165s ago: executing program 3 (id=311):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)

3.033298065s ago: executing program 4 (id=312):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x2000b, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x800000f5)
sendto$inet(r0, &(0x7f0000000140)="00f2", 0x2, 0x44040, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)

2.960155126s ago: executing program 0 (id=313):
r0 = open(0x0, 0x80000, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, 0x0, 0x78)
execveat(r0, 0x0, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x82081, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x10, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000000))
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)

2.883291016s ago: executing program 0 (id=314):
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fallocate(r0, 0x0, 0x10000, 0x20000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x6], 0x0, 0x0, 0x0}, 0x0)
fallocate(r0, 0x8, 0x0, 0x2000)

1.510377772s ago: executing program 3 (id=315):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

1.509013943s ago: executing program 2 (id=325):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x46)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe)
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0)

792.469811ms ago: executing program 32 (id=278):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x100)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r1, 0x3)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0)

778.352011ms ago: executing program 0 (id=317):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_setup(0x5229, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000100)={0x8000000000000005, 0x24000000, 0x40, 0x56b, 0x5, 0x7})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r4, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(0x0, r4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)=@getsa={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0xa, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008)

95.327759ms ago: executing program 4 (id=318):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0xe})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xff, 0x3, 0xd83f})
dup(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x20a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "3571ac", 0x1d4, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@hopopts={0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3b, 0x0, 0x4, 0x1, 0x0, 0x16, 0x64}, @hopopts={0xe7, 0xa, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x38, {0x0, 0xc, 0xb3, 0x4a, [0x8, 0x250, 0x1, 0x162, 0x8, 0x0]}}]}, @routing={0x2c, 0xa, 0x0, 0x3, 0x0, [@mcast1, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2]}, @srh={0x3c, 0x2, 0x4, 0x1, 0x6b, 0x10, 0x8, [@local]}], {0x4e20, 0x4e22, 0xe4, 0x0, @opaque="35cf985051c49386fa9dc2ea1e0fbf93f75d5a26b6281c3aba3ea484975d9a97a471450780912df63ef357c317e67856fa2ed509fb52f89a5cc4e060af82c22a5558c060921b36c5d7eba83ba689fbb40c443dfe9cdecc43d0fd11f6aa5b36adc8c57d2beba09ede5a862f8e18f37076f24dca5af6488325219c3a79d4c45a5393c642954eee49e3a1097a31374d9378817f3f048e9843ea2484bfd6bad6b97f31ee529cf0c6ac31e05a41a53b87f3fbbed6e82f746073437061a1042e274a9140d69d3fa297ca46b8cf0df023948c994ee90ac2933afc0c0b4048a3"}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
connect$rose(r2, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000760001"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20004050)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0x9db)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c0001800800", @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x20040814)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={<r6=>0x0, 0x9}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000140)={r6, 0x6}, 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts.
[   49.424723][ T4164] cgroup: Unknown subsys name 'net'
[   49.524229][ T4164] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.716041][ T4164] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   52.416425][ T4178] chnl_net:caif_netlink_parms(): no params data found
[   52.529118][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   52.557321][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.565613][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.574300][ T4178] device bridge_slave_0 entered promiscuous mode
[   52.586376][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.594263][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.602128][ T4178] device bridge_slave_1 entered promiscuous mode
[   52.645751][ T4174] chnl_net:caif_netlink_parms(): no params data found
[   52.654018][ T4183] chnl_net:caif_netlink_parms(): no params data found
[   52.706226][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.718310][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.764749][ T4182] chnl_net:caif_netlink_parms(): no params data found
[   52.796969][ T4178] team0: Port device team_slave_0 added
[   52.816860][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.824121][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.832446][ T4184] device bridge_slave_0 entered promiscuous mode
[   52.843978][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.851434][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.858971][ T4184] device bridge_slave_1 entered promiscuous mode
[   52.867296][ T4178] team0: Port device team_slave_1 added
[   52.916466][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.923771][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.931709][ T4174] device bridge_slave_0 entered promiscuous mode
[   52.951711][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.963738][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.977996][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.985112][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.993018][ T4174] device bridge_slave_1 entered promiscuous mode
[   53.004423][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.011488][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.037411][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.053647][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.060812][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.068407][ T4183] device bridge_slave_0 entered promiscuous mode
[   53.086691][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.093696][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.119826][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.145901][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.153049][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.160986][ T4183] device bridge_slave_1 entered promiscuous mode
[   53.181350][ T4184] team0: Port device team_slave_0 added
[   53.189626][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.212434][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.219533][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.228066][ T4182] device bridge_slave_0 entered promiscuous mode
[   53.236208][ T4184] team0: Port device team_slave_1 added
[   53.251749][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.265761][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.273816][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.282322][ T4182] device bridge_slave_1 entered promiscuous mode
[   53.309023][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.321188][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.345613][ T4178] device hsr_slave_0 entered promiscuous mode
[   53.352518][ T4178] device hsr_slave_1 entered promiscuous mode
[   53.383721][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.393540][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.400890][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.427536][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.444651][ T4174] team0: Port device team_slave_0 added
[   53.460674][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.470380][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.477326][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.503280][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.523257][ T4174] team0: Port device team_slave_1 added
[   53.535289][ T4183] team0: Port device team_slave_0 added
[   53.572861][ T4183] team0: Port device team_slave_1 added
[   53.586292][ T4182] team0: Port device team_slave_0 added
[   53.596684][ T4182] team0: Port device team_slave_1 added
[   53.603111][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.610918][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.637291][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.679644][ T4184] device hsr_slave_0 entered promiscuous mode
[   53.686665][ T4184] device hsr_slave_1 entered promiscuous mode
[   53.693392][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.701245][ T4184] Cannot create hsr debugfs directory
[   53.707047][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.714320][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.740256][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.767319][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.774407][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.800451][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.831722][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.838677][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.864685][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.877696][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.884823][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.910854][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.925737][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.932956][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.959051][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.013802][ T4174] device hsr_slave_0 entered promiscuous mode
[   54.020606][ T4174] device hsr_slave_1 entered promiscuous mode
[   54.026972][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.034713][ T4174] Cannot create hsr debugfs directory
[   54.101157][ T4182] device hsr_slave_0 entered promiscuous mode
[   54.110342][ T4182] device hsr_slave_1 entered promiscuous mode
[   54.116782][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.124721][ T4182] Cannot create hsr debugfs directory
[   54.160885][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[   54.167636][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[   54.174460][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   54.191997][ T4183] device hsr_slave_0 entered promiscuous mode
[   54.200678][ T4183] device hsr_slave_1 entered promiscuous mode
[   54.207108][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.214706][ T4183] Cannot create hsr debugfs directory
[   54.257209][ T1108] Bluetooth: hci4: command 0x0409 tx timeout
[   54.269889][ T1108] Bluetooth: hci3: command 0x0409 tx timeout
[   54.387496][ T4178] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.401458][ T4178] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.418730][ T4178] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.435674][ T4178] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.476202][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   54.493894][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   54.525144][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   54.533905][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   54.591239][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.600352][ T4174] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.610900][ T4174] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.631848][ T4174] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.650666][ T4174] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.666261][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.675892][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.694152][ T4178] 8021q: adding VLAN 0 to HW filter on device team0
[   54.727451][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.736981][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.747046][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.754319][ T1996] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.768724][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.777478][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.786108][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.794661][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.801750][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.810308][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.820955][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.840675][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.861075][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.873849][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.887964][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   54.920628][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.931418][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.940793][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.949272][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.957906][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.994879][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.005912][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.015122][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.023936][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.036910][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.053593][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.075535][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.089507][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.104100][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.114135][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.130059][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.138090][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.173972][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.185156][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.194655][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.204228][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   55.227649][ T4174] 8021q: adding VLAN 0 to HW filter on device team0
[   55.239570][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.247750][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.256380][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.266303][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.274829][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.281926][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.301704][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.314388][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.323117][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.333097][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.341576][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.348618][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.356585][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.366474][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.375482][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.382577][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.390684][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.399178][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.407679][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.414754][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.453214][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.461281][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.469688][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.478982][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.488039][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.497900][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.506776][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.515818][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.524679][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.533639][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.542844][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.551742][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.577535][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.585867][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.605119][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.630854][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.643414][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.652736][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.661864][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.670909][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.679315][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.687937][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.707647][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.726301][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.735383][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.745287][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.754418][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.778300][ T4182] 8021q: adding VLAN 0 to HW filter on device team0
[   55.789688][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.798835][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.808043][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.818265][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.828700][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.837225][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.846700][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.855381][ T4178] device veth0_vlan entered promiscuous mode
[   55.894057][ T4178] device veth1_vlan entered promiscuous mode
[   55.927604][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.937323][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.946882][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.955833][ T1996] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.962996][ T1996] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.972130][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.981077][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.989407][ T1996] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.996494][ T1996] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.005627][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.051164][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.061666][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.071756][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.081795][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.092057][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.102154][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.109563][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.117109][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.125852][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.136489][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.151105][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.164884][ T4178] device veth0_macvtap entered promiscuous mode
[   56.179259][ T4178] device veth1_macvtap entered promiscuous mode
[   56.191620][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.205498][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.215994][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.233563][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.245812][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.254440][ T4215] Bluetooth: hci0: command 0x041b tx timeout
[   56.254590][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.260836][ T4215] Bluetooth: hci1: command 0x041b tx timeout
[   56.270134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.279662][ T4215] Bluetooth: hci2: command 0x041b tx timeout
[   56.298073][ T4183] 8021q: adding VLAN 0 to HW filter on device team0
[   56.309233][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.320302][   T13] Bluetooth: hci3: command 0x041b tx timeout
[   56.320744][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.326669][   T13] Bluetooth: hci4: command 0x041b tx timeout
[   56.341511][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.355422][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.368364][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.387412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.396615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.406274][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.413393][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.451198][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.463620][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.475843][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.489666][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.497653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.513065][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.521744][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.528773][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.537081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.546956][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.555986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.565659][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.584013][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.592424][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.601903][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.612419][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.662073][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.673603][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.683646][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.695381][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.704017][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.713118][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.722651][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.731363][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.739545][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.765927][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.775848][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.788389][ T4178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.799348][ T4178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.808360][ T4178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.819400][ T4178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.844858][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.863618][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.871867][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.882363][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.891766][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.899191][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.941276][ T4174] device veth0_vlan entered promiscuous mode
[   56.970727][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.982175][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.991249][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.999708][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.014499][ T4174] device veth1_vlan entered promiscuous mode
[   57.029623][ T4184] device veth0_vlan entered promiscuous mode
[   57.037010][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.045491][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.054408][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.062723][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.071038][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.078627][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.087450][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.139302][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   57.149379][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.163635][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.178841][ T4182] device veth0_vlan entered promiscuous mode
[   57.190318][ T4174] device veth0_macvtap entered promiscuous mode
[   57.198181][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.207703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.218104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.227066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.235818][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.249616][ T4184] device veth1_vlan entered promiscuous mode
[   57.261320][ T4174] device veth1_macvtap entered promiscuous mode
[   57.298601][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.306799][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.315427][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   57.323692][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.333615][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   57.341400][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   57.356239][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.367264][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.378600][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.390610][ T4182] device veth1_vlan entered promiscuous mode
[   57.421672][ T1996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.429662][ T1996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.437978][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.448222][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   57.457414][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.466026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.474548][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.485301][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.496653][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.507777][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.546236][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.555412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.564708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.574486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.583022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.592294][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.607802][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.616943][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.625987][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.635064][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.661677][ T4184] device veth0_macvtap entered promiscuous mode
[   57.673454][ T4184] device veth1_macvtap entered promiscuous mode
[   57.709176][ T4182] device veth0_macvtap entered promiscuous mode
[   57.722917][ T4182] device veth1_macvtap entered promiscuous mode
[   57.736011][ T1996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.750100][ T4183] device veth0_vlan entered promiscuous mode
[   57.753069][ T1996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.756787][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.782101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.790845][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.798670][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.808040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.816419][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.824602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.835408][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.843456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.874033][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.893104][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.903642][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.914241][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.927276][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.937904][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.951196][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.962628][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.973406][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.984769][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.000798][ T4183] device veth1_vlan entered promiscuous mode
[   58.008134][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   58.025637][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.035814][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.044731][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.056163][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.068835][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.077900][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.086830][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.096694][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.116622][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.140458][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.153972][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.168438][ T4247] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   58.173171][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.196729][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.207545][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.222001][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.257057][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   58.269065][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.281859][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.301856][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.314872][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.326952][ T4219] Bluetooth: hci2: command 0x040f tx timeout
[   58.333130][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.344729][ T4219] Bluetooth: hci1: command 0x040f tx timeout
[   58.351666][ T4219] Bluetooth: hci0: command 0x040f tx timeout
[   58.358139][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.373283][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.386056][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.398128][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.406054][ T4219] Bluetooth: hci4: command 0x040f tx timeout
[   58.413859][ T4219] Bluetooth: hci3: command 0x040f tx timeout
[   58.450919][ T4183] device veth0_macvtap entered promiscuous mode
[   58.469441][ T4183] device veth1_macvtap entered promiscuous mode
[   58.499859][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.517412][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.528428][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.547687][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.558343][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.572481][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.582663][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.593271][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.604641][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.620481][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.629175][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.638471][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.647610][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.656562][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.701674][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.541601][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.564640][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.613828][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.629921][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.648898][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.666110][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.687190][  T635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.709857][  T635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.821886][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.833088][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.844361][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.855464][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.865511][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.876227][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.886278][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   59.896942][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.917162][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.391836][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.416267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.478053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.576592][ T4219] Bluetooth: hci0: command 0x0419 tx timeout
[   60.582974][ T4219] Bluetooth: hci1: command 0x0419 tx timeout
[   60.589074][ T4219] Bluetooth: hci2: command 0x0419 tx timeout
[   60.595259][ T4219] Bluetooth: hci3: command 0x0419 tx timeout
[   60.658468][ T4219] Bluetooth: hci4: command 0x0419 tx timeout
[   60.667542][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.692901][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.702133][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.711193][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.778013][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.800245][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   60.809178][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   60.818163][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   60.827657][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!!
[   60.894105][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.946759][ T1996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.974706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.983131][ T1996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.021456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.200140][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   61.977769][  T635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.015140][  T635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.028176][  T635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.084851][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.108361][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.120761][  T635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.128929][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.139327][  T635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.139705][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.161051][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.175669][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.183854][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.225301][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.247115][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.289292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.299968][   T13] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   62.387846][ T4277] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   62.664664][ T4284] =======================================================
[   62.664664][ T4284] WARNING: The mand mount option has been deprecated and
[   62.664664][ T4284]          and is ignored by this kernel. Remove the mand
[   62.664664][ T4284]          option from the mount to silence this warning.
[   62.664664][ T4284] =======================================================
[   62.764585][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   62.880422][   T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   62.895291][   T13] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0
[   62.910718][   T13] usb 1-1: Manufacturer: syz
[   62.944097][   T13] usb 1-1: config 0 descriptor??
[   63.153396][   T13] hub 1-1:0.0: USB hub found
[   63.284511][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   63.372002][   T13] hub 1-1:0.0: 1 port detected
[   63.386583][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   63.488950][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   63.591315][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   63.911661][   T13] usb 1-1: USB disconnect, device number 2
[   63.952466][ T4258] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   63.984515][ T4258] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   64.235891][ T4293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'.
[   64.549997][ T4258] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   64.738327][ T4324] syz.1.23[4324] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.738447][ T4324] syz.1.23[4324] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.920513][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.966379][ T4258] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   64.975723][ T4258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.986180][ T4258] usb 5-1: config 0 descriptor??
[   65.032865][ T4258] pwc: Askey VC010 type 2 USB webcam detected.
[   65.160371][ T4328] loop1: detected capacity change from 0 to 4096
[   65.316896][ T4336] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   65.463765][ T4328] syz.1.24 (4328) used greatest stack depth: 20048 bytes left
[   65.479926][ T4258] pwc: recv_control_msg error -32 req 02 val 2b00
[   65.519932][ T4258] pwc: recv_control_msg error -32 req 02 val 2700
[   65.563308][ T4258] pwc: recv_control_msg error -32 req 02 val 2c00
[   65.620676][ T4258] pwc: recv_control_msg error -32 req 04 val 1000
[   65.660228][ T4258] pwc: recv_control_msg error -32 req 04 val 1300
[   65.728821][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   65.830003][ T4258] pwc: recv_control_msg error -32 req 04 val 1400
[   65.870853][ T4258] pwc: recv_control_msg error -32 req 02 val 2000
[   65.929432][ T4258] pwc: recv_control_msg error -32 req 02 val 2100
[   67.149979][ T4258] pwc: recv_control_msg error -32 req 04 val 1500
[   67.183253][ T4343] loop2: detected capacity change from 0 to 2048
[   67.189971][ T4258] pwc: recv_control_msg error -32 req 02 val 2500
[   67.250226][ T4258] pwc: recv_control_msg error -32 req 02 val 2400
[   67.303160][ T4335] loop3: detected capacity change from 0 to 40427
[   67.416328][ T4343] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   67.510078][ T4258] pwc: recv_control_msg error -71 req 02 val 2900
[   67.767142][ T4258] pwc: recv_control_msg error -71 req 02 val 2800
[   68.289389][ T4343] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.320085][ T4258] pwc: recv_control_msg error -71 req 04 val 1100
[   68.343190][ T4258] pwc: recv_control_msg error -71 req 04 val 1200
[   68.372364][ T4361] loop1: detected capacity change from 0 to 128
[   68.403406][ T4258] pwc: Registered as video103.
[   68.561602][ T4258] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[   68.589711][ T4258] usb 5-1: USB disconnect, device number 2
[   68.625108][ T4361] EXT4-fs (loop1): Ignoring removed nobh option
[   69.136975][ T4355] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 192: padding at end of block bitmap is not set
[   69.695086][ T4361] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none.
[   69.723502][ T4361] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   69.913232][ T4382] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   69.950012][   T26] audit: type=1800 audit(1746195526.041:2): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.32" name="file1" dev="loop1" ino=15 res=0 errno=0
[   70.212141][ T4400] loop4: detected capacity change from 0 to 1024
[   70.310171][ T4258] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   70.536600][ T4400] hfsplus: xattr searching failed
[   70.584742][ T4400] hfsplus: xattr searching failed
[   70.602945][ T4408] loop1: detected capacity change from 0 to 64
[   70.740146][ T4258] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   70.784113][ T4258] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00
[   70.828953][ T4258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.058684][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.067636][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.395237][ T4415] loop2: detected capacity change from 0 to 32768
[   71.447779][ T4258] snd-usb-audio: probe of 1-1:27.0 failed with error -22
[   71.467594][    T9] hfs: request for non-existent node 1317 in B*Tree
[   71.495137][ T4415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.46 (4415)
[   71.502256][    T9] hfs: request for non-existent node 1317 in B*Tree
[   71.559791][ T4371] udevd[4371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   71.591812][ T4415] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   71.600955][ T4415] BTRFS info (device loop2): max_inline at 0
[   71.606971][ T4415] BTRFS info (device loop2): enabling disk space caching
[   71.614158][ T4415] BTRFS info (device loop2): setting nodatasum
[   71.620563][ T4415] BTRFS info (device loop2): turning on flush-on-commit
[   71.627532][ T4415] BTRFS info (device loop2): doing ref verification
[   71.634254][ T4415] BTRFS info (device loop2): force clearing of disk cache
[   71.641476][ T4415] BTRFS info (device loop2): enabling ssd optimizations
[   71.648442][ T4415] BTRFS info (device loop2): turning off barriers
[   71.654391][ T4418] loop3: detected capacity change from 0 to 64
[   71.655001][ T4415] BTRFS info (device loop2): max_inline at 4096
[   71.667346][ T4415] BTRFS info (device loop2): disk space caching is enabled
[   71.674719][ T4415] BTRFS info (device loop2): has skinny extents
[   71.771525][ T4296] usb 1-1: USB disconnect, device number 3
[   73.320374][ T4415] BTRFS info (device loop2): clearing free space tree
[   73.327725][ T4415] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   73.337699][ T4415] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   73.415072][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'.
[   74.606789][ T4474] loop4: detected capacity change from 0 to 512
[   74.787742][ T4474] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   74.809834][ T4218] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   74.860080][ T4474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   75.194893][ T4474] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   75.747925][ T4474] EXT4-fs (loop4): 1 truncate cleaned up
[   75.753710][ T4474] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[   75.961658][   T26] audit: type=1804 audit(1746195532.061:3): pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.57" name="/newroot/7/file2/bus" dev="loop4" ino=18 res=1 errno=0
[   75.983646][ T4218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.002781][ T4218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.060017][ T4218] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[   76.071773][   T26] audit: type=1800 audit(1746195532.091:4): pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.57" name="bus" dev="loop4" ino=18 res=0 errno=0
[   76.084945][ T4218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.152211][ T4218] usb 4-1: config 0 descriptor??
[   76.172612][   T21] cfg80211: failed to load regulatory.db
[   76.179158][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'.
[   76.292491][ T4492] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.441033][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.587579][ T4492] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.659873][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.675610][ T4218] uclogic 0003:5543:0003.0002: item fetching failed at offset 5/7
[   76.693061][ T4218] uclogic 0003:5543:0003.0002: parse failed
[   76.710583][ T4218] uclogic: probe of 0003:5543:0003.0002 failed with error -22
[   76.722248][ T4512] loop1: detected capacity change from 0 to 256
[   76.983128][ T4218] usb 4-1: USB disconnect, device number 2
[   80.093945][ T4545] loop1: detected capacity change from 0 to 64
[   81.559251][ T4560] syz.3.76[4560] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   81.559789][ T4560] syz.3.76[4560] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   81.624548][ T4560] loop3: detected capacity change from 0 to 128
[   82.779736][    C0] sched: RT throttling activated
[   83.165822][ T4560] EXT4-fs (loop3): Test dummy encryption mode enabled
[   83.173985][ T4560] EXT4-fs (loop3): Test dummy encryption mode enabled
[   83.808494][ T4560] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none.
[   83.823639][ T4560] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   85.166191][ T4572] loop1: detected capacity change from 0 to 512
[   85.344737][ T4572] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.79: invalid indirect mapped block 32768 (level 0)
[   85.357562][ T4573] loop4: detected capacity change from 0 to 512
[   85.361787][ T4572] EXT4-fs (loop1): Remounting filesystem read-only
[   85.374031][ T4572] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.79: attempt to clear invalid blocks 1024 len 1
[   85.388464][ T4572] EXT4-fs (loop1): Remounting filesystem read-only
[   85.395704][ T4572] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[   85.414880][ T4572] EXT4-fs (loop1): Remounting filesystem read-only
[   85.422185][ T4572] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.79: invalid indirect mapped block 1819213824 (level 0)
[   85.441322][ T4572] EXT4-fs (loop1): Remounting filesystem read-only
[   85.448000][ T4572] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.79: invalid indirect mapped block 33554432 (level 2)
[   85.462990][ T4572] EXT4-fs (loop1): Remounting filesystem read-only
[   85.470894][ T4572] EXT4-fs (loop1): 1 truncate cleaned up
[   85.476685][ T4572] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,max_batch_time=0x0000000000000030,nodelalloc,bsdgroups,noblock_validity,inode_readahead_blks=0x0000000000000004,. Quota mode: none.
[   85.575797][ T4573] EXT4-fs (loop4): Ignoring removed nobh option
[   85.588247][ T4573] EXT4-fs (loop4): Unrecognized mount option "fscontext=system_u" or missing value
[   85.710912][ T4588] loop2: detected capacity change from 0 to 256
[   86.938751][ T4588] FAT-fs (loop2): Directory bread(block 64) failed
[   86.946142][ T4588] FAT-fs (loop2): Directory bread(block 65) failed
[   86.953370][ T4588] FAT-fs (loop2): Directory bread(block 66) failed
[   86.960126][ T4588] FAT-fs (loop2): Directory bread(block 67) failed
[   86.966954][ T4588] FAT-fs (loop2): Directory bread(block 68) failed
[   86.973645][ T4588] FAT-fs (loop2): Directory bread(block 69) failed
[   86.980597][ T4588] FAT-fs (loop2): Directory bread(block 70) failed
[   86.987277][ T4588] FAT-fs (loop2): Directory bread(block 71) failed
[   86.994218][ T4588] FAT-fs (loop2): Directory bread(block 72) failed
[   87.000954][ T4588] FAT-fs (loop2): Directory bread(block 73) failed
[   89.196134][ T4371] udevd[4371]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   89.213317][ T4600] binder: BINDER_SET_CONTEXT_MGR already set
[   89.226043][ T4599] program syz.1.87 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.271180][ T4600] binder: 4598:4600 ioctl 4018620d 200000000040 returned -16
[   89.280260][  T154] attempt to access beyond end of device
[   89.280260][  T154] loop2: rw=1, want=1256, limit=256
[   89.323689][  T154] attempt to access beyond end of device
[   89.323689][  T154] loop2: rw=1, want=1356, limit=256
[   89.358446][ T4215] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[   89.358883][ T4603] loop3: detected capacity change from 0 to 1024
[   89.398009][ T4215] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[   89.406106][ T4600] syz.4.86 (4600): drop_caches: 2
[   89.429395][ T4375] udevd[4375]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   89.481910][ T4215] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[   89.510466][ T4603] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.617951][ T4215] hid-generic 0000:0004:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   89.649490][ T4610] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   91.763786][ T4510] Bluetooth: hci3: command 0x0405 tx timeout
[   92.818371][ T4638] loop2: detected capacity change from 0 to 512
[   92.999900][ T4638] EXT4-fs (loop2): Ignoring removed oldalloc option
[   93.046811][ T4648] loop4: detected capacity change from 0 to 4096
[   94.335486][ T4638] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.97: error while reading EA inode 32 err=-116
[   94.403680][ T4648] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.407725][ T4638] EXT4-fs (loop2): Remounting filesystem read-only
[   94.425904][ T4638] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.97: error while reading EA inode 32 err=-116
[   94.432345][ T4656] input: syz1 as /devices/virtual/input/input6
[   94.515347][ T4215] kernel read not supported for file /bus/input/devices (pid: 4215 comm: kworker/0:4)
[   94.763700][ T4638] EXT4-fs (loop2): Remounting filesystem read-only
[   94.872601][ T4638] EXT4-fs (loop2): 1 orphan inode deleted
[   95.262799][ T4648] fs-verity: sha256 using implementation "sha256-avx2"
[   95.272324][ T4638] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,nojournal_checksum,. Quota mode: none.
[   96.959700][ T4684] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   96.982366][ T4684] device syzkaller0 entered promiscuous mode
[   97.786587][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'.
[   97.824807][ T4693] loop2: detected capacity change from 0 to 256
[   98.127098][ T4693] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   98.134750][ T4699] loop4: detected capacity change from 0 to 8
[  101.396288][ T4733] binder: BINDER_SET_CONTEXT_MGR already set
[  101.405514][ T4733] binder: 4730:4733 ioctl 4018620d 200000000040 returned -16
[  102.734941][ T4753] loop2: detected capacity change from 0 to 2048
[  102.825325][ T4748] loop4: detected capacity change from 0 to 8192
[  102.831910][ T4760] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.003774][ T4748] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  103.052664][ T4748] REISERFS (device loop4): using ordered data mode
[  103.059216][ T4748] reiserfs: using flush barriers
[  103.894962][ T4748] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  103.906864][ T4770] Zero length message leads to an empty skb
[  103.926774][ T4748] REISERFS (device loop4): checking transaction log (loop4)
[  103.990724][ T4773] ubi31: attaching mtd0
[  104.008968][ T4770] loop3: detected capacity change from 0 to 512
[  104.026153][ T4773] ubi31: scanning is finished
[  104.055505][ T4773] ubi31: empty MTD device detected
[  104.088164][ T4770] EXT4-fs (loop3): Mount option "data=writeback" incompatible with ext2
[  104.326418][ T4748] REISERFS (device loop4): Using tea hash to sort names
[  104.340941][ T4780] netlink: 'syz.3.139': attribute type 1 has an invalid length.
[  104.351857][ T4773] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  104.354177][ T4748] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  104.399089][ T4773] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3753 bytes
[  104.429284][   T26] audit: type=1800 audit(1746195560.521:5): pid=4753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.132" name="file2" dev="loop2" ino=16 res=0 errno=0
[  104.434068][ T4773] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  104.457408][ T4773] ubi31: VID header offset: 279 (aligned 279), data offset: 343
[  104.467166][ T4773] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  104.475023][ T4773] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 21
[  104.483282][ T4773] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 276685002
[  104.494291][ T4773] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  104.498547][ T4753] NILFS error (device loop2): nilfs_sufile_mark_dirty: active segment 3 is erroneous
[  104.524209][ T4779] ubi31: background thread "ubi_bgt31d" started, PID 4779
[  104.532675][ T4782] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  104.562077][ T4753] Remounting filesystem read-only
[  104.643602][ T4780] device veth3 entered promiscuous mode
[  104.652173][ T4780] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  104.995751][ T4789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.140'.
[  105.185318][ T4183] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  105.669400][ T4794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'.
[  105.876327][ T4798] loop3: detected capacity change from 0 to 1024
[  106.016895][ T4798] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  106.092708][ T4808] loop4: detected capacity change from 0 to 512
[  106.256977][ T4814] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  106.265724][ T4814] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  106.300141][ T4808] EXT4-fs (loop4): Ignoring removed nobh option
[  106.329553][ T4808] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.143: invalid indirect mapped block 256 (level 2)
[  107.410839][ T4808] EXT4-fs (loop4): 2 truncates cleaned up
[  107.416738][ T4808] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  109.050658][   T26] audit: type=1800 audit(1746195565.151:6): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.143" name="file1" dev="loop4" ino=15 res=0 errno=0
[  110.180066][ T4805] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  110.195375][ T4807] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.143: bg 0: block 5: invalid block bitmap
[  111.771617][   T26] audit: type=1800 audit(1746195567.871:7): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.143" name="file1" dev="loop4" ino=15 res=0 errno=0
[  112.320143][ T4866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'.
[  112.340665][ T4861] tipc: Started in network mode
[  112.353571][ T4861] tipc: Node identity ae25d6d93f13, cluster identity 4711
[  112.375004][ T4861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.273724][ T4871] loop3: detected capacity change from 0 to 2048
[  113.551522][ T4219] tipc: Node number set to 2436290265
[  114.394218][ T4871] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,journal_dev=0x000000000000009b,nobarrier,,errors=continue. Quota mode: none.
[  114.443138][ T4875] device syzkaller0 entered promiscuous mode
[  114.514365][ T4858] tipc: Resetting bearer <eth:syzkaller0>
[  114.548038][ T4871] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  114.569830][ T4858] tipc: Disabling bearer <eth:syzkaller0>
[  114.596390][ T4871] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  114.614928][ T4871] EXT4-fs (loop3): This should not happen!! Data will be lost
[  114.614928][ T4871] 
[  114.625025][ T4871] EXT4-fs (loop3): Total free blocks count 0
[  114.653968][ T4871] EXT4-fs (loop3): Free/Dirty block details
[  114.681409][ T4871] EXT4-fs (loop3): free_blocks=2415919104
[  114.687234][ T4871] EXT4-fs (loop3): dirty_blocks=48
[  114.781239][ T4871] EXT4-fs (loop3): Block reservation details
[  114.799986][ T4871] EXT4-fs (loop3): i_reserved_data_blocks=3
[  114.817493][ T4888] loop1: detected capacity change from 0 to 2048
[  114.883032][ T4371]  loop1: p1 < > p3
[  114.912166][ T4371] loop1: p3 size 134217728 extends beyond EOD, truncated
[  114.946060][ T4888]  loop1: p1 < > p3
[  114.955957][ T4888] loop1: p3 size 134217728 extends beyond EOD, truncated
[  115.916726][ T4871] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 796 with error 28
[  115.936104][ T4871] EXT4-fs (loop3): This should not happen!! Data will be lost
[  115.936104][ T4871] 
[  115.954711][ T3548]  loop1: p1 < > p3
[  115.992035][ T3548] loop1: p3 size 134217728 extends beyond EOD, truncated
[  116.002284][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  116.307011][ T4371] udevd[4371]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  116.332991][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  117.701894][ T4902] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.804283][ T4902] bond0: (slave rose0): Enslaving as an active interface with an up link
[  117.814294][ T1996] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  117.897145][ T4371] udevd[4371]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  117.933827][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  119.703440][ T4929] loop1: detected capacity change from 0 to 128
[  122.988686][ T4962] loop2: detected capacity change from 0 to 128
[  123.189876][ T4971] loop1: detected capacity change from 0 to 16
[  123.247071][ T4956] sctp: failed to load transform for md5: -2
[  123.273288][ T4971] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  123.968007][ T4962] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  123.991501][ T4962] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  124.153734][   T26] audit: type=1804 audit(1746195580.251:8): pid=4962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.183" name="/newroot/28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop2" ino=12 res=1 errno=0
[  124.471433][ T4990] loop4: detected capacity change from 0 to 512
[  124.797060][ T4990] EXT4-fs (loop4): Ignoring removed orlov option
[  125.112809][ T4990] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.189: casefold flag without casefold feature
[  125.168725][ T4990] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.189: couldn't read orphan inode 15 (err -117)
[  125.185470][ T4990] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback.
[  125.817166][ T4990] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  128.948431][ T5041] syz.3.200 uses obsolete (PF_INET,SOCK_PACKET)
[  129.638721][ T5044] loop1: detected capacity change from 0 to 256
[  130.038741][ T5044] loop1: detected capacity change from 0 to 512
[  130.783244][ T5056] kvm: pic: single mode not supported
[  130.783411][ T5056] kvm: pic: level sensitive irq not supported
[  130.968732][ T5063] tipc: New replicast peer: 255.255.255.255
[  131.024892][ T5037] loop2: detected capacity change from 0 to 32768
[  131.061771][ T5063] tipc: Enabled bearer <udp:syz2>, priority 10
[  131.078239][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'.
[  131.094586][ T5068] tipc: Disabling bearer <udp:syz2>
[  131.103713][ T5037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.199 (5037)
[  131.128115][ T5070] loop4: detected capacity change from 0 to 1024
[  131.248343][ T5037] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  131.271728][ T5037] BTRFS info (device loop2): force clearing of disk cache
[  131.300039][ T5037] BTRFS info (device loop2): force zlib compression, level 3
[  131.313405][ T5070] EXT4-fs (loop4): Ignoring removed bh option
[  131.338549][ T5037] BTRFS info (device loop2): enabling auto defrag
[  131.355702][ T5070] EXT4-fs (loop4): inline encryption not supported
[  131.363190][ T5037] BTRFS info (device loop2): max_inline at 0
[  131.432325][ T5037] BTRFS info (device loop2): using free space tree
[  131.522872][ T5070] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  131.568527][ T5037] BTRFS info (device loop2): has skinny extents
[  131.665904][ T5070] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.207: lblock 2 mapped to illegal pblock 2 (length 1)
[  131.795009][ T5070] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  131.803822][ T5070] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.207: lblock 0 mapped to illegal pblock 48 (length 1)
[  131.829897][ T5070] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  131.841717][ T5070] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.207: Failed to acquire dquot type 0
[  131.870210][ T5037] BTRFS error (device loop2): open_ctree failed: -12
[  131.878363][ T5070] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  131.982346][ T5070] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.207: mark_inode_dirty error
[  132.235781][ T5070] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  132.438308][ T5070] EXT4-fs (loop4): 1 orphan inode deleted
[  132.452822][ T4357] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  132.494680][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.501146][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.554899][ T5070] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback.
[  132.652250][ T4357] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  132.787696][ T4357] EXT4-fs error (device loop4): ext4_release_dquot:6240: comm kworker/u4:9: Failed to release dquot type 0
[  133.348483][ T5070] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[  135.474296][ T5122] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  135.524436][ T5122] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  135.787975][ T5136] loop3: detected capacity change from 0 to 32768
[  137.765278][ T5153] loop1: detected capacity change from 0 to 512
[  137.904877][ T5155] loop2: detected capacity change from 0 to 1024
[  137.960075][ T5155] EXT4-fs (loop2): Ignoring removed orlov option
[  138.013040][ T5152] loop4: detected capacity change from 0 to 40427
[  138.094927][ T5152] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  138.103197][ T5152] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  138.139420][ T5152] F2FS-fs (loop4): invalid crc value
[  138.146947][ T5155] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  138.259246][ T5152] F2FS-fs (loop4): Found nat_bits in checkpoint
[  138.497023][ T5152] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  138.504445][ T5152] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  141.031632][ T5171] attempt to access beyond end of device
[  141.031632][ T5171] loop4: rw=2049, want=78344, limit=40427
[  143.307846][ T4296] Bluetooth: hci3: command 0x0405 tx timeout
[  146.083195][ T5209] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  146.152484][ T5209] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  146.244687][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'.
[  148.395174][ T5223] device syzkaller1 entered promiscuous mode
[  149.739916][ T4510] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  150.084063][ T5245] loop3: detected capacity change from 0 to 32768
[  150.100201][ T4510] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  150.146738][ T4510] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.169139][ T5245] XFS (loop3): Mounting V5 Filesystem
[  150.257455][ T5245] XFS (loop3): Ending clean mount
[  150.290365][ T5245] XFS (loop3): Quotacheck needed: Please wait.
[  150.325735][ T4510] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  150.334913][ T4510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.390911][ T5245] XFS (loop3): Quotacheck: Done.
[  150.391685][ T4510] hub 2-1:4.0: USB hub found
[  150.659940][ T4510] hub 2-1:4.0: 26 ports detected
[  150.664984][ T4510] usb 2-1: selecting invalid altsetting 1
[  151.489960][ T4510] hub 2-1:4.0: Using single TT (err -22)
[  151.520155][ T4510] hub 2-1:4.0: config failed, can't get hub status (err -5)
[  152.485470][   T26] audit: type=1804 audit(1746195608.581:9): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.242" name="/newroot/54/file2/bus" dev="loop3" ino=9292 res=1 errno=0
[  152.510637][ T4510] usb 2-1: USB disconnect, device number 2
[  152.595288][ T4182] XFS (loop3): Unmounting Filesystem
[  153.847337][    C1] ODEBUG: Out of memory. ODEBUG disabled
[  157.368223][ T5321] rdma_op ffff88807d7a41f0 conn xmit_rdma 0000000000000000
[  157.812073][ T5335] loop4: detected capacity change from 0 to 256
[  157.830998][ T5333] loop1: detected capacity change from 0 to 256
[  157.938263][ T5333] FAT-fs (loop1): bogus number of directory entries (4)
[  157.971675][ T5333] FAT-fs (loop1): Can't find a valid FAT filesystem
[  159.164820][ T5345] loop2: detected capacity change from 0 to 256
[  159.219490][ T5347] loop1: detected capacity change from 0 to 512
[  160.937610][ T5347] EXT4-fs (loop1): 1 orphan inode deleted
[  160.955712][ T5347] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.015309][ T5347] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.305361][ T5386] tipc: Started in network mode
[  164.352302][ T5386] tipc: Node identity 4, cluster identity 4711
[  164.359144][ T5386] tipc: Node number set to 4
[  164.362680][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  164.435226][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  164.473505][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  164.488339][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  164.789050][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  167.737858][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  167.770716][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  167.847920][ T5408] loop4: detected capacity change from 0 to 64
[  167.868039][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  167.898355][ T5410] loop3: detected capacity change from 0 to 128
[  167.923249][ T5412] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  167.971298][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  168.011080][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  168.088554][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  168.113484][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  168.128375][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  168.156282][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  168.181105][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  168.265019][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  168.277848][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  168.447004][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  169.323544][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  169.385204][ T4178] EXT4-fs error: 8 callbacks suppressed
[  169.385227][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  169.408598][ T5423] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.431114][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  169.459590][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  169.525639][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  169.528779][ T5429] No such timeout policy "syz1"
[  169.564087][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  169.623011][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  169.635105][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  169.667090][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  169.726509][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  169.748125][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  169.816580][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  169.841273][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  169.886557][ T4178] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /63/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  169.913718][ T4178] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1
[  170.926945][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  170.958819][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  171.080631][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  171.208375][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  171.473570][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  171.644465][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  171.716107][ T5444] device wg2 entered promiscuous mode
[  171.824999][ T4178] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  172.842635][ T5463] loop4: detected capacity change from 0 to 128
[  173.267386][ T5463] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback.
[  173.313778][ T5470] loop3: detected capacity change from 0 to 256
[  173.346910][ T5463] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.586019][    T7] Bluetooth: hci0: command 0x0406 tx timeout
[  175.621071][    T7] Bluetooth: hci1: command 0x0406 tx timeout
[  175.869766][    T7] Bluetooth: hci2: command 0x0406 tx timeout
[  175.891326][    T7] Bluetooth: hci4: command 0x0406 tx timeout
[  177.294425][ T5498] input: syz1 as /devices/virtual/input/input7
[  177.335957][ T5501] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  177.349503][ T4219] kernel read not supported for file /bus/input/devices (pid: 4219 comm: kworker/0:7)
[  177.576409][ T5508] loop4: detected capacity change from 0 to 256
[  179.140403][ T5508] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  179.176274][ T5508] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  179.188718][ T5508] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  179.748966][ T5522] loop2: detected capacity change from 0 to 256
[  180.436391][ T5522] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  180.605895][  T635] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.624873][ T5532] ==================================================================
[  180.633416][ T5532] BUG: KASAN: use-after-free in rose_get_neigh+0x17e/0x550
[  180.640648][ T5532] Read of size 1 at addr ffff8880175f4c30 by task syz.3.319/5532
[  180.648386][ T5532] 
[  180.650730][ T5532] CPU: 0 PID: 5532 Comm: syz.3.319 Not tainted 5.15.181-syzkaller #0
[  180.658839][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  180.668912][ T5532] Call Trace:
[  180.672210][ T5532]  <TASK>
[  180.675154][ T5532]  dump_stack_lvl+0x168/0x230
[  180.679863][ T5532]  ? show_regs_print_info+0x20/0x20
[  180.685087][ T5532]  ? load_image+0x3b0/0x3b0
[  180.689619][ T5532]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  180.695019][ T5532]  ? __local_bh_disable_ip+0xfb/0x190
[  180.700416][ T5532]  print_address_description+0x60/0x2d0
[  180.705987][ T5532]  ? rose_get_neigh+0x17e/0x550
[  180.710860][ T5532]  kasan_report+0xdf/0x130
[  180.715393][ T5532]  ? rose_get_neigh+0x17e/0x550
[  180.720269][ T5532]  rose_get_neigh+0x17e/0x550
[  180.725063][ T5532]  rose_connect+0x412/0x1370
[  180.729681][ T5532]  ? aa_sk_perm+0x7b4/0x8f0
[  180.734205][ T5532]  ? rose_bind+0xa00/0xa00
[  180.738641][ T5532]  ? aa_af_perm+0x270/0x2b0
[  180.743161][ T5532]  ? tomoyo_socket_connect_permission+0x195/0x280
[  180.749604][ T5532]  ? bpf_lsm_socket_connect+0x5/0x10
[  180.754908][ T5532]  ? security_socket_connect+0x7c/0xa0
[  180.760400][ T5532]  ? rose_bind+0xa00/0xa00
[  180.764850][ T5532]  __sys_connect+0x389/0x410
[  180.769470][ T5532]  ? __sys_connect_file+0x170/0x170
[  180.774708][ T5532]  ? vtime_user_exit+0x2dc/0x400
[  180.779684][ T5532]  __x64_sys_connect+0x76/0x80
[  180.784478][ T5532]  do_syscall_64+0x4c/0xa0
[  180.788918][ T5532]  ? clear_bhb_loop+0x15/0x70
[  180.793615][ T5532]  ? clear_bhb_loop+0x15/0x70
[  180.798313][ T5532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  180.804229][ T5532] RIP: 0033:0x7f9a362e4969
[  180.808657][ T5532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.828306][ T5532] RSP: 002b:00007f9a3414c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  180.836797][ T5532] RAX: ffffffffffffffda RBX: 00007f9a3650bfa0 RCX: 00007f9a362e4969
[  180.844804][ T5532] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000005
[  180.852807][ T5532] RBP: 00007f9a36366ab1 R08: 0000000000000000 R09: 0000000000000000
[  180.860808][ T5532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.868905][ T5532] R13: 0000000000000000 R14: 00007f9a3650bfa0 R15: 00007ffe2d4308c8
[  180.876937][ T5532]  </TASK>
[  180.880137][ T5532] 
[  180.882474][ T5532] Allocated by task 5357:
[  180.886818][ T5532]  __kasan_kmalloc+0xb5/0xf0
[  180.891432][ T5532]  __alloc_skb+0x22c/0x750
[  180.895871][ T5532]  alloc_skb_with_frags+0xa7/0x730
[  180.901008][ T5532]  sock_alloc_send_pskb+0x853/0x980
[  180.906231][ T5532]  __ip6_append_data+0x257b/0x3810
[  180.911363][ T5532]  ip6_make_skb+0x3af/0x4c0
[  180.915886][ T5532]  udpv6_sendmsg+0x1aa6/0x2670
[  180.920675][ T5532]  ____sys_sendmsg+0x5a2/0x8c0
[  180.921991][ T5537] loop4: detected capacity change from 0 to 256
[  180.925465][ T5532]  ___sys_sendmsg+0x1f0/0x260
[  180.936438][ T5532]  __sys_sendmmsg+0x27c/0x4a0
[  180.941139][ T5532]  __x64_sys_sendmmsg+0x9c/0xb0
[  180.946018][ T5532]  do_syscall_64+0x4c/0xa0
[  180.950462][ T5532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  180.956382][ T5532] 
[  180.958705][ T5532] Freed by task 5357:
[  180.962679][ T5532]  kasan_set_track+0x4b/0x70
[  180.967274][ T5532]  kasan_set_free_info+0x1f/0x40
[  180.972209][ T5532]  ____kasan_slab_free+0xd5/0x110
[  180.977408][ T5532]  slab_free_freelist_hook+0xea/0x170
[  180.982779][ T5532]  kfree+0xef/0x2a0
[  180.986586][ T5532]  skb_release_data+0x6fe/0x850
[  180.991436][ T5532]  kfree_skb_reason+0xaf/0x110
[  180.996227][ T5532]  ip6_pkt_discard_out+0xee/0x110
[  181.001248][ T5532]  ip6_send_skb+0x1b9/0x360
[  181.005771][ T5532]  udp_v6_send_skb+0xa28/0x1680
[  181.010615][ T5532]  udpv6_sendmsg+0x1ae8/0x2670
[  181.015377][ T5532]  ____sys_sendmsg+0x5a2/0x8c0
[  181.020139][ T5532]  ___sys_sendmsg+0x1f0/0x260
[  181.024816][ T5532]  __sys_sendmmsg+0x27c/0x4a0
[  181.029489][ T5532]  __x64_sys_sendmmsg+0x9c/0xb0
[  181.034337][ T5532]  do_syscall_64+0x4c/0xa0
[  181.038753][ T5532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  181.044645][ T5532] 
[  181.046962][ T5532] The buggy address belongs to the object at ffff8880175f4c00
[  181.046962][ T5532]  which belongs to the cache kmalloc-512 of size 512
[  181.061007][ T5532] The buggy address is located 48 bytes inside of
[  181.061007][ T5532]  512-byte region [ffff8880175f4c00, ffff8880175f4e00)
[  181.074193][ T5532] The buggy address belongs to the page:
[  181.079816][ T5532] page:ffffea00005d7d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880175f6c00 pfn:0x175f4
[  181.091265][ T5532] head:ffffea00005d7d00 order:2 compound_mapcount:0 compound_pincount:0
[  181.099582][ T5532] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  181.107565][ T5532] raw: 00fff00000010200 ffffea0001891a08 ffffea000082ef08 ffff888016841c80
[  181.116143][ T5532] raw: ffff8880175f6c00 000000000010000c 00000001ffffffff 0000000000000000
[  181.124718][ T5532] page dumped because: kasan: bad access detected
[  181.131126][ T5532] page_owner tracks the page as allocated
[  181.136831][ T5532] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2159390686, free_ts 1920329746
[  181.155668][ T5532]  get_page_from_freelist+0x1b77/0x1c60
[  181.161216][ T5532]  __alloc_pages+0x1e1/0x470
[  181.165804][ T5532]  alloc_page_interleave+0x24/0x1e0
[  181.171001][ T5532]  new_slab+0xc0/0x4b0
[  181.175074][ T5532]  ___slab_alloc+0x81e/0xdf0
[  181.179970][ T5532]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  181.185356][ T5532]  cryptomgr_notify+0x87/0x940
[  181.190122][ T5532]  blocking_notifier_call_chain+0x103/0x1b0
[  181.196011][ T5532]  crypto_probing_notify+0x21/0x70
[  181.201122][ T5532]  crypto_wait_for_test+0x3f/0xd0
[  181.206145][ T5532]  crypto_register_alg+0x263/0x340
[  181.211248][ T5532]  do_one_initcall+0x1ee/0x680
[  181.216007][ T5532]  do_initcall_level+0x137/0x1f0
[  181.220942][ T5532]  do_initcalls+0x4b/0x90
[  181.225270][ T5532]  kernel_init_freeable+0x3ce/0x560
[  181.230465][ T5532]  kernel_init+0x19/0x1b0
[  181.234791][ T5532] page last free stack trace:
[  181.239456][ T5532]  free_unref_page_prepare+0x637/0x6c0
[  181.244914][ T5532]  free_unref_page+0x94/0x280
[  181.249584][ T5532]  stack_depot_save+0x418/0x440
[  181.254430][ T5532]  __kasan_slab_alloc+0xb3/0xd0
[  181.259282][ T5532]  slab_post_alloc_hook+0x4c/0x380
[  181.264385][ T5532]  kmem_cache_alloc+0x100/0x290
[  181.269230][ T5532]  sock_alloc_inode+0x17/0xb0
[  181.273904][ T5532]  new_inode_pseudo+0x5f/0x210
[  181.278667][ T5532]  sock_create_lite+0x87/0x500
[  181.283428][ T5532]  __netlink_kernel_create+0xf4/0x7d0
[  181.288798][ T5532]  rtnetlink_net_init+0x9b/0x120
[  181.293732][ T5532]  ops_init+0x357/0x600
[  181.297887][ T5532]  register_pernet_operations+0x2a3/0x5f0
[  181.303602][ T5532]  register_pernet_subsys+0x24/0x40
[  181.308794][ T5532]  rtnetlink_init+0x12/0x1f0
[  181.313377][ T5532]  netlink_proto_init+0xf9/0x180
[  181.318311][ T5532] 
[  181.320629][ T5532] Memory state around the buggy address:
[  181.326249][ T5532]  ffff8880175f4b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  181.334304][ T5532]  ffff8880175f4b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  181.342360][ T5532] >ffff8880175f4c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.350413][ T5532]                                      ^
[  181.356033][ T5532]  ffff8880175f4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.364085][ T5532]  ffff8880175f4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.372150][ T5532] ==================================================================
[  181.380211][ T5532] Disabling lock debugging due to kernel taint
[  181.386523][ T5532] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  181.393731][ T5532] CPU: 0 PID: 5532 Comm: syz.3.319 Tainted: G    B             5.15.181-syzkaller #0
[  181.403198][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  181.413232][ T5532] Call Trace:
[  181.416497][ T5532]  <TASK>
[  181.419420][ T5532]  dump_stack_lvl+0x168/0x230
[  181.424078][ T5532]  ? show_regs_print_info+0x20/0x20
[  181.429253][ T5532]  ? load_image+0x3b0/0x3b0
[  181.433736][ T5532]  panic+0x2c9/0x7f0
[  181.437622][ T5532]  ? bpf_jit_dump+0xd0/0xd0
[  181.442107][ T5532]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[  181.447998][ T5532]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  181.453911][ T5532]  ? _raw_spin_unlock+0x40/0x40
[  181.458771][ T5532]  ? rose_get_neigh+0x17e/0x550
[  181.463630][ T5532]  check_panic_on_warn+0x80/0xa0
[  181.468574][ T5532]  ? rose_get_neigh+0x17e/0x550
[  181.473427][ T5532]  end_report+0x6d/0xf0
[  181.477584][ T5532]  kasan_report+0x102/0x130
[  181.482085][ T5532]  ? rose_get_neigh+0x17e/0x550
[  181.486934][ T5532]  rose_get_neigh+0x17e/0x550
[  181.491611][ T5532]  rose_connect+0x412/0x1370
[  181.496201][ T5532]  ? aa_sk_perm+0x7b4/0x8f0
[  181.500704][ T5532]  ? rose_bind+0xa00/0xa00
[  181.505119][ T5532]  ? aa_af_perm+0x270/0x2b0
[  181.509614][ T5532]  ? tomoyo_socket_connect_permission+0x195/0x280
[  181.516024][ T5532]  ? bpf_lsm_socket_connect+0x5/0x10
[  181.521304][ T5532]  ? security_socket_connect+0x7c/0xa0
[  181.526755][ T5532]  ? rose_bind+0xa00/0xa00
[  181.531168][ T5532]  __sys_connect+0x389/0x410
[  181.535757][ T5532]  ? __sys_connect_file+0x170/0x170
[  181.540951][ T5532]  ? vtime_user_exit+0x2dc/0x400
[  181.545888][ T5532]  __x64_sys_connect+0x76/0x80
[  181.550648][ T5532]  do_syscall_64+0x4c/0xa0
[  181.555059][ T5532]  ? clear_bhb_loop+0x15/0x70
[  181.559731][ T5532]  ? clear_bhb_loop+0x15/0x70
[  181.564404][ T5532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  181.570292][ T5532] RIP: 0033:0x7f9a362e4969
[  181.574705][ T5532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.594310][ T5532] RSP: 002b:00007f9a3414c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  181.602721][ T5532] RAX: ffffffffffffffda RBX: 00007f9a3650bfa0 RCX: 00007f9a362e4969
[  181.610686][ T5532] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000005
[  181.618652][ T5532] RBP: 00007f9a36366ab1 R08: 0000000000000000 R09: 0000000000000000
[  181.626618][ T5532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.634583][ T5532] R13: 0000000000000000 R14: 00007f9a3650bfa0 R15: 00007ffe2d4308c8
[  181.642553][ T5532]  </TASK>
[  181.645642][ T5532] Kernel Offset: disabled
[  181.649957][ T5532] Rebooting in 86400 seconds..