last executing test programs:

1m39.083005805s ago: executing program 3 (id=199):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r2, 0x100, 0x0)
getdents(r2, 0x0, 0x0)

1m38.910560802s ago: executing program 3 (id=201):
socket(0x28, 0x801, 0x0)
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x1db}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d10, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2b3, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

1m37.871048629s ago: executing program 3 (id=214):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002980)=@vmx={0x0, 0x0, 0x2080, {0x10000, 0x3000, {0x1}, 0x1, 0x52609b27}, {"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", "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"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m37.56755114s ago: executing program 3 (id=215):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
io_setup(0x200, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0, 0x53, 0x0, 0x0, 0x0, r0}])

1m37.239914953s ago: executing program 3 (id=216):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./mysys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000440)={0x8004000, 0x0, 0x0, 0xfffffffffffffffd, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m36.723784496s ago: executing program 3 (id=223):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000200)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013df000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004600"}})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000022c0)=[@text16={0x10, &(0x7f0000002300)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m33.938325062s ago: executing program 0 (id=249):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r0, &(0x7f0000000440)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000001a00)=0x7, 0x4)

1m33.706843255s ago: executing program 0 (id=252):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x2940, 0x2, 0x10}, 0x18)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000003d40)='./file0\x00', &(0x7f0000003d80), 0x10499, &(0x7f0000003dc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r2)

1m33.424358234s ago: executing program 0 (id=257):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f00000005c0)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000300)=<r6=>0x0)
syz_ublk_setup_queues(r1, r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3f4, 0x40}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x80000, 0x3, 0xffffffff, 0x0, r1}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbe, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)

1m32.086118431s ago: executing program 0 (id=265):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="61636c2c6e6f61636c2c6e6f61636c2c757365725f78617474722c6e6f757365725f78617474722c63616368655f73747261746567793d7265616461686561642c00fecc7fc2093271a7673d5b886b1fe81e2b7fbafb139d20c1e055e58cdda20264d746e65e4e180fc9adfb6132b24173b3cb1a8a51955fcb93d089261e9aafbb8f8fa1db5d78bc"], 0x1, 0x192, &(0x7f0000000540)="$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")
execve(&(0x7f0000000100)='./file2\x00', 0x0, 0x0)

1m31.038393048s ago: executing program 0 (id=271):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000005c0)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="ec", 0xfdef}], 0x1)
close(r0)

1m30.252052909s ago: executing program 0 (id=275):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1)

1m29.798695726s ago: executing program 32 (id=275):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000240)=0x1)

1m21.591555296s ago: executing program 33 (id=223):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000200)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013df000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004600"}})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000022c0)=[@text16={0x10, &(0x7f0000002300)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

50.931040375s ago: executing program 6 (id=507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100039040200"/20, @ANYRES32=r2, @ANYBLOB="40100000004104002c00128008000100677265002000028008000700ac1414aa060003008100000008000100", @ANYRES32=r2, @ANYBLOB="040c1200080004"], 0x54}}, 0x4040000)

50.416636378s ago: executing program 6 (id=513):
r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = socket(0xa, 0x3, 0x87)
sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x2)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

50.209195279s ago: executing program 6 (id=514):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000140))
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x32}, 0xa, @in6=@local, 0x3500, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}}, 0x2000800)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

49.919086249s ago: executing program 6 (id=516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41})
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
write(r0, &(0x7f00000002c0)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000101000002004946a1c3bd5ccb075079432d167892", 0x36)

49.348470867s ago: executing program 6 (id=523):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mmap$IORING_OFF_SQ_RING(0x0, 0x101, 0x3000008, 0x11, r0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone3(&(0x7f0000000e40)={0x800000, &(0x7f0000000c00), 0x0, 0x0, {0x30}, &(0x7f0000000cc0)=""/98, 0x62, &(0x7f0000000d40)=""/67, &(0x7f0000000e00)}, 0x58)

48.93297467s ago: executing program 6 (id=529):
r0 = memfd_create(&(0x7f0000000100)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
creat(&(0x7f0000000340)='./trace/error_log\x00', 0x118)
close_range(r0, 0xffffffffffffffff, 0x0)

33.778867301s ago: executing program 34 (id=529):
r0 = memfd_create(&(0x7f0000000100)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
creat(&(0x7f0000000340)='./trace/error_log\x00', 0x118)
close_range(r0, 0xffffffffffffffff, 0x0)

5.525405914s ago: executing program 1 (id=807):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

4.805610758s ago: executing program 1 (id=809):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

4.500045299s ago: executing program 1 (id=813):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
unshare(0x2a020400)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0)
read$FUSE(r0, &(0x7f0000004000)={0x2020}, 0x2020)

4.074647603s ago: executing program 7 (id=815):
syz_mount_image$hfsplus(&(0x7f00000027c0), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000002a00)=ANY=[], 0x1, 0x6d0, &(0x7f0000002a40)="$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")
mknod$loop(&(0x7f0000003140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
creat(&(0x7f0000003240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80)
rename(&(0x7f0000003340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003440)='./file0\x00')
syz_mount_image$vfat(&(0x7f00000034c0), &(0x7f0000003500)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000003540))
syz_mount_image$vfat(&(0x7f0000003580), &(0x7f0000000240)='./file1\x00', 0x1010000, &(0x7f0000003780)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x369, &(0x7f0000002440)="$eJzs3U1oY1UbAOA3vfnpDHxfuxMFIboTtMzMTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0na6QxWKT4PNDk957znvPeH5PaSnD63GJ2Ltbh07drVmJ2tRHXxkcW4Xon5yKKwG5PqU+oAgJPhekrxe8odMaRyzCkBAMes//7/QkQ0Yz6vef3Lw/on7/4AcOIN/v4/dVif2YMaXjmWlACAYzZx///efc31/k+1+LVa+lQAAHBSPfH0M48urUQ83mzORqy9udnabMVDo/alS/FSdGM1zsRc3IjILxR6D5X+4/kLK8tnms3mTvw0H62ImBkEtvIrhaWsH9+IszEX84P4VIve1UZKKTv/ycry2WZfROzu9OePtcpmqxanB/N/fzpWRxcexSD9p4gLK8vnmoMBWmtF/E7E3ui+RS//hZiLb58fDpNS8QnGleXLZ4ukR/GbrUZcHO6FA++AAAAAAAAAAAAAAAAAAAAAAADAbVloDs0P189Jved8pZyFhSnt/fVx8vjB+kB7+fpAqZEipd9ee6D1Vhb71gcaX59n00KCAAAAAAAAAAAAAAAAAAAAMLSxVY92t7u6vrG13SkXdtY3tmYiolfz8tcffXEqJvvcpFDNp2hEDKdoDqbd7rRTVnROWcRkeNabvKj54NNhxuU+jeFWTE2jcXBTt/u/e358d1Rzd1aM/OeoTxbTNzArpfHw2Mhr/89TGouql3bCwXvsXLmmMTn7lZRSqeaNcvjlZycHjEpE9dYP3HZnJg7uk3qFr66+eGex99ufp9x99889eeWd93/ptLu9maN/BOvrGzdSp10pOt9KGr1DMDo3KpEXKuUzoXpY+N7+mnb23a9P3fX2N0ebPZVrXu2dz2N9snxzPh4Pr+eFXppjTadG4bXBRnRXa1NO/psVbuOY3vHeZx+m9MPPR55iZGbiZaPy97z6AAAAAAAAAAAAAAAAAAAAZaXvig8MvuxbOyzqwceOPzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+OeM/v9/qbC3G2M1Ryn8sTMlqrG6vhFR/7c3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7i/AgAA//99cVbM")
r0 = open(&(0x7f0000002800)='.\x00', 0x8000, 0x50)
getdents(r0, 0x0, 0x0)

4.063148894s ago: executing program 1 (id=816):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000001640), 0x318, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001680)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000016c0)={0xa0000013})
ppoll(&(0x7f0000001700)=[{r2, 0xe2f5}], 0x1, 0x0, 0x0, 0x0)
close_range(r0, r1, 0x0)

3.298533362s ago: executing program 7 (id=819):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000a80)='\x00', 0x1, 0x0, &(0x7f0000000ac0)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/xt_recent/syz0\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000b40)={0x2020}, 0x2020)

3.009901282s ago: executing program 1 (id=823):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80002, 0xffffffff, 0x2})
mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0)

2.979747855s ago: executing program 5 (id=824):
unshare(0x22020600)
r0 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_settime(r1, 0x1, &(0x7f0000000680)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000840))

2.739231949s ago: executing program 5 (id=826):
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x1)

2.709772862s ago: executing program 2 (id=827):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
rmdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f0000000000)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

2.516986982s ago: executing program 1 (id=829):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x17a, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000002c0)={0x20000014})
epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x400)
pselect6(0x40, &(0x7f0000000340)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0)

2.360366038s ago: executing program 2 (id=830):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x8, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x7f})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, 0x0)

2.333607201s ago: executing program 4 (id=831):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x39)
listen(r1, 0x0)
shutdown(r0, 0x0)
connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x44b63840b66f75f6, 0x8884, 0x0, 0x0)

2.176495477s ago: executing program 7 (id=832):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
creat(0x0, 0x102)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
rt_sigtimedwait(&(0x7f0000000740)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)

2.027510602s ago: executing program 2 (id=833):
r0 = syz_open_procfs(0x0, &(0x7f0000002480)='net/tcp\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f00000024c0)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002500)={0x1, &(0x7f0000002540)=[{0x6, 0x6, 0x4, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000002580)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002640)="9d797ad7d7ba242c878cb3fc40536c2c40bf76aee03df07fdf434103ac00ec676562e55f8aaf824dfd22453e41234d3a4d76eb5386daec464fd533ae42b94f0d512ce067e7f970037f084f297f44248101a616cb5669a18fad17b33f1f40937e8ca97c5337760cac38d57e00000100c36e43eaf92345be7d126e12766e816dac69c39f95858ab7cbd567eebb875bdcba0573d2b300"/167, 0xa7}, {&(0x7f0000002700)="ccff7e1e098269106dce69f3373d0db5fd7ec5b6fb968c4ad3dbb4adfa01", 0x1e}], 0x2}}], 0x1, 0x4004000)
preadv(r0, &(0x7f0000002980)=[{&(0x7f00000029c0)=""/13, 0xd}], 0x1, 0x3ff, 0x101)

1.962910639s ago: executing program 4 (id=834):
r0 = epoll_create(0x7)
r1 = epoll_create1(0x0)
r2 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001040)={0xc0002015})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100))
r3 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2})

1.632051223s ago: executing program 2 (id=835):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.631893483s ago: executing program 7 (id=836):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@noextend}]}})
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

1.631701913s ago: executing program 4 (id=837):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x3}}, 0x44)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000300)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@local, 0x4e23, 0x10000, 0x0, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000380)={&(0x7f00000003c0)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.495926406s ago: executing program 7 (id=838):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="3df9", 0x2}], 0x1}}], 0x1, 0x24040014)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000600), 0x4)

1.425367984s ago: executing program 4 (id=839):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setrlimit(0x1, &(0x7f0000003100)={0xffffffffffffffff, 0xffffffffffffffff})

1.271049879s ago: executing program 7 (id=840):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004})
write(0xffffffffffffffff, 0x0, 0x0)
poll(&(0x7f0000000140)=[{r2, 0x8}, {r1, 0x84}, {0xffffffffffffffff, 0xa8}, {0xffffffffffffffff, 0xf102}], 0x4, 0x8000007)

1.177244699s ago: executing program 5 (id=841):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
rmdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f0000000000)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1.139485853s ago: executing program 4 (id=842):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500b7e2affa5068", 0x69}, {&(0x7f0000002780)="21acaf08334a264ef994c92e7de95d40305bdfc3621e2fe6ff27e203fd", 0x1d}], 0x2}, 0x200440c4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x1, 0xcf, &(0x7f00000003c0)=""/207, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38)

1.079836569s ago: executing program 2 (id=843):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$can_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004)
sendmmsg$inet6(r1, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}}], 0x4000000000002ce, 0x4cd02)
write(r1, &(0x7f0000000280)="55ef39c7af74f444ea9c268d3e1b515a166c1fcc0d6f9f1c7036445b943891950737cae4a580", 0x26)

914.839486ms ago: executing program 5 (id=844):
socket$inet(0x2, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000)
readv(r0, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x21)

690.207109ms ago: executing program 2 (id=845):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000500)=0x6a, 0x4)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto(r0, &(0x7f0000000700)="50fbdf12a30d7a4cb2c5c84948f3426077a9f0ca14972a603b3e78adff5905b22bae1b24430134d801251bcef8f165533a1edc5a0000d40000000000002944de604d849a1e83a8c86f66470ae2e4c639a500"/94, 0x5e, 0x4008044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='nv', 0x2)
sendto$inet(r0, &(0x7f00000007c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)

609.887697ms ago: executing program 4 (id=846):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x19f, &(0x7f0000000240)={[{@sysvgroups}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@barrier_val}, {@resuid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x556, &(0x7f0000000540)="$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")
syz_mount_image$msdos(&(0x7f0000000ac0), &(0x7f0000000b00)='.\x00', 0x1a6a038, &(0x7f0000000b40)=ANY=[], 0xb, 0x0, &(0x7f0000000b80))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file7\x00', 0x21081e, &(0x7f0000000380)={[{@noinit_itable}, {@errors_remount}, {@noauto_da_alloc}]}, 0x1, 0x51f, &(0x7f0000000d00)="$eJzs3c9vI1cdAPDvzK6T7G7abEsPgKBd2sKCVutsvO2q6gHKCSFUCdEjSNuQeKNV7DiKndKElUjPXJGoxAmO/AGce+LOBcGNSzkg8SMCNUgcBs14kvUmduL94TiKPx9p5Pfmjf19b73z3syz4xfAxLoWETsRMRUR70fEXLk/Kbd4p7vlx322+2Bpb/fBUhJZ9t4/k6I83xc9z8ldKV9zJiJ+8J2IHydH47a3tlcXG436Rpmf7zTX59tb2zfvNxdX6iv1tVrtzsKdW2/dfrP2GK2ZObb0leZUmfryp3/Y+cZP82rNlnt62/EsdZteOYiTuxgR3xtFsDG4ULZn6smefvwbxsilEfFiRLxanP9zcaF4NwGA8yzL5iKb680DAOddWsyBJWm1nAuYjTStVrtzeC/F5bTRandu3Gttri1358quRiW9d79Rv1XOFV6NSpLnF4r0w3ztUP52RLwQEb+YvlTkq0utxvI4L3wAYIJdOTT+/2e6O/4DAOecb2EAwOQx/gPA5DH+A8DkMf4DwOTpjv+XHvdpWZb9bBTVAQBOgft/AJg8xn8AmCjff/fdfMv2yt+/Xv5ga3O19cHN5Xp7tdrcXKoutTbWqyut1krxmz3Nk16v0WqtL7wRmx9e/eZ6uzPf3tq+22xtrnXuFr/rfbdeKY7aOYWWAQCDvPDKJ39O8hH57UvFFj1rOVTGWjNg1NJxVwAYmwvjrgAwNlb7gsn18B7/sb8EYHoAzok+S/Q+YqbfHwhlWZaNrkrAiF3/gvl/mFQ98/++BQwT5qT5/2JtYB8Swrlk/h8mV5Ylw675H8MeCACcbcfM8V89zesQYHwGfP7/Yvn42/LDgR8tHz7i41HWCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM62/fV/q+Uyv7ORptVqxHPFAkCV5N79Rv1WRDwfEX+arkzn+YUx1xkAeFrp35Jy/a/rc6/PPlL08pWD5FRE/ORX7/3yw8VOZ+OPEVPJv6b393c+LvfXTgw2M4oWAADH2x+ni8eeG/nPdh8s7W+nWZ+/f7t7VZDH3dudir2D+BfjYvE4E5WIuPzvpMx3JT1zF09j56OI+Hy/9icxW8yBdC9ZDsfPYz93qvHTR+Kn5QLNaflv8blnUBeYNJ/k/c87/c6/NK4Vj/3P/5mih3p6Zf+Xv9TSXtEHPoy/3/9dGND/XRs2xhu//243delo2UcRX7wYsR97r6f/2Y+fDIj/+pDx//Kll18dVJb9OuJ69I/fG2u+01yfb29t37zfXFypr9TXarU7C3duvXX7zdp8MUc9P3g0+MfbN54fVJa3//KA+DMntP+rQ7b/N/97/4dfOSb+11/rFz+Nl46Jn4+JXxsy/uLl3w28787jLx9tfzLM+39jyPif/nX7yLLhAMD4tLe2VxcbjfqGhMTZT+T/Zc9ANfomvnVasaaif9HPX+ue04eKsuyJYg3qMZ7FrBtwFhyc9BHx33FXBgAAAAAAAAAAAAAA6Os0/mJp3G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Pp/AAAA//8TpdPg")
r1 = openat(0xffffffffffffff9c, &(0x7f0000001240)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000001280)={@id={0x2, 0x0, @d}})
listxattr(&(0x7f00000012c0)='./file1\x00', 0x0, 0x0)

511.653788ms ago: executing program 5 (id=847):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
fchdir(r0)
open(0x0, 0x0, 0x112)
setresuid(0x0, 0xee00, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1)

0s ago: executing program 5 (id=848):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100002000"})

kernel console output (not intermixed with test programs):

CHANGE): veth1_to_hsr: link becomes ready
[   83.308183][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.322001][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.343020][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.412975][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.429401][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.446722][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.472402][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.497461][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.579243][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.609112][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.646331][ T4276] device veth0_vlan entered promiscuous mode
[   83.673905][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.682643][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.717131][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.751261][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.808466][ T4276] device veth1_vlan entered promiscuous mode
[   83.858969][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.872971][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.895943][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.911343][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.922342][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.939982][ T4283] device veth0_vlan entered promiscuous mode
[   83.967068][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.977113][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.985257][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.992922][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.008447][ T4283] device veth1_vlan entered promiscuous mode
[   84.017292][ T4275] 8021q: adding VLAN 0 to HW filter on device team0
[   84.056987][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.066135][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.074780][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.082474][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.090419][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.103136][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.116563][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.127047][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.139338][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.158499][ T4283] device veth0_macvtap entered promiscuous mode
[   84.169214][ T4276] device veth0_macvtap entered promiscuous mode
[   84.184459][ T4288] Bluetooth: hci1: command 0x040f tx timeout
[   84.184660][ T4294] Bluetooth: hci0: command 0x040f tx timeout
[   84.190885][ T4288] Bluetooth: hci2: command 0x040f tx timeout
[   84.208297][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.221102][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.230825][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.239535][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.250977][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.259680][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.266847][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.274640][ T4288] Bluetooth: hci3: command 0x040f tx timeout
[   84.274650][ T4294] Bluetooth: hci4: command 0x040f tx timeout
[   84.278911][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.296058][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.304928][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.312107][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.326891][ T4276] device veth1_macvtap entered promiscuous mode
[   84.355509][ T4283] device veth1_macvtap entered promiscuous mode
[   84.362891][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.386741][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.395624][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.403665][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.413581][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.422652][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.432601][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.466708][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.475400][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.485590][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.514180][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.522528][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.535253][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.545439][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.554488][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.563073][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.572372][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.592114][ T4286] device veth0_vlan entered promiscuous mode
[   84.605815][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.630819][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.639733][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.648596][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.658604][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.668223][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.676941][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.686000][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.695223][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.703871][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.715742][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.728576][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.738151][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.747753][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.757160][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.770197][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.788076][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.800276][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.821782][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.835701][ T4286] device veth1_vlan entered promiscuous mode
[   84.846547][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.859790][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.869336][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.880121][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.888905][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.900322][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.910228][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.928815][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.948321][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.962171][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.976858][ T4274] device veth0_vlan entered promiscuous mode
[   84.995762][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.012316][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.038721][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.056048][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.066308][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.076850][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.093906][ T4274] device veth1_vlan entered promiscuous mode
[   85.209028][ T4286] device veth0_macvtap entered promiscuous mode
[   85.219979][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.243321][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.252355][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.281382][ T4286] device veth1_macvtap entered promiscuous mode
[   85.295473][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.303620][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.315227][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.324643][ T4274] device veth0_macvtap entered promiscuous mode
[   85.348769][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.377032][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.394836][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.402386][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.427490][ T4274] device veth1_macvtap entered promiscuous mode
[   85.476401][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.487300][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.508939][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.520058][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.532072][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.546139][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.565802][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.579133][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.587560][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.597189][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.606601][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.618231][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.633803][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.644146][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.655348][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.666822][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.694851][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.715375][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.741375][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.759787][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.770520][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.788086][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.799562][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.816792][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.829088][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.847783][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.858091][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.869414][ T4286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.878366][ T4286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.887465][ T4286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.896997][ T4286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.912796][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.924842][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.936963][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.948828][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.966181][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.977337][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.989738][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.014111][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.022330][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.034959][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.045043][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.053855][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.062867][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.072372][ T2936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.089078][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.106873][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.117725][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.128026][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.160095][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.189813][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.198965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.224811][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.234955][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.243465][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.251913][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.264520][ T4282] Bluetooth: hci0: command 0x0419 tx timeout
[   86.270954][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[   86.274481][ T4288] Bluetooth: hci2: command 0x0419 tx timeout
[   86.306399][ T4275] device veth0_vlan entered promiscuous mode
[   86.344856][ T4294] Bluetooth: hci4: command 0x0419 tx timeout
[   86.350920][ T4294] Bluetooth: hci3: command 0x0419 tx timeout
[   86.403632][ T4275] device veth1_vlan entered promiscuous mode
[   86.433807][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.453195][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.461364][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.469714][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.485533][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.503163][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.512960][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.528971][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.592812][ T4275] device veth0_macvtap entered promiscuous mode
[   86.621335][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.640598][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.651289][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.681407][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.700614][ T4275] device veth1_macvtap entered promiscuous mode
[   86.706459][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.717678][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.732388][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.748922][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.762464][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.772270][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.818766][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.843719][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.855099][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.867540][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.878181][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   86.894818][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.905912][  T129] cfg80211: failed to load regulatory.db
[   86.918914][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.931246][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.948233][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.961276][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.977794][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.983331][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.998310][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.007035][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.009109][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.027658][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.038104][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.049626][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.060798][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.072667][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.088258][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.100872][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.120496][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.139937][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.173812][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.199701][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.235573][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.256973][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.271978][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.281337][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.497183][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.516419][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.562994][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.635151][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.658969][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.710506][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.441262][   T26] audit: type=1326 audit(1792792694.577:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   88.527811][   T26] audit: type=1326 audit(1792792694.577:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   88.619047][   T26] audit: type=1326 audit(1792792694.607:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   88.714247][   T26] audit: type=1326 audit(1792792694.607:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   88.778495][ T4421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14'.
[   88.822776][   T26] audit: type=1326 audit(1792792694.607:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   88.946649][   T26] audit: type=1326 audit(1792792694.607:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   89.040312][   T26] audit: type=1326 audit(1792792694.607:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   89.115459][   T26] audit: type=1326 audit(1792792694.627:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   89.155111][ T4431] capability: warning: `syz.4.18' uses 32-bit capabilities (legacy support in use)
[   89.183594][   T26] audit: type=1326 audit(1792792694.627:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   89.251529][   T26] audit: type=1326 audit(1792792694.627:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.4.12" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd78559f559 code=0x7ffc0000
[   89.721002][ T4450] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure
[   90.285939][    T7] rxe_eth0 speed is unknown, defaulting to 1000
[   90.601230][ T4478] loop3: detected capacity change from 0 to 2048
[   90.680325][ T4478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.438972][ T4542] loop0: detected capacity change from 0 to 164
[   92.564400][ T4524] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [16]
[   92.679564][ T4524] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[   92.789408][ T4524] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[   92.935316][ T4524] One or more global auth toks could not properly register; rc = [-22]
[   93.079115][ T4524] Error parsing options; rc = [-22]
[   93.264070][ T4562] netlink: 'syz.2.56': attribute type 4 has an invalid length.
[   93.368840][ T4562] netlink: 'syz.2.56': attribute type 17 has an invalid length.
[   95.117571][ T4604] Bluetooth: MGMT ver 1.22
[   95.409565][ T4615] loop1: detected capacity change from 0 to 2048
[   95.445888][ T4615] ext4: Unknown parameter 'obj_type'
[   95.719432][ T4631] device-mapper: table: 248:0: mirror: Too few mirror arguments (-EINVAL)
[   95.744080][ T4631] device-mapper: ioctl: error adding target to table
[   95.992741][ T4639] netlink: 'syz.2.79': attribute type 4 has an invalid length.
[   96.059900][ T4642] netlink: 'syz.2.79': attribute type 4 has an invalid length.
[   96.109545][ T4641] device vlan0 entered promiscuous mode
[   96.125569][ T4641] device eth0 entered promiscuous mode
[   96.373882][ T4648] FAULT_INJECTION: forcing a failure.
[   96.373882][ T4648] name failslab, interval 1, probability 0, space 0, times 1
[   96.411371][ T4648] CPU: 0 PID: 4648 Comm: syz.2.82 Not tainted syzkaller #0
[   96.418712][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   96.429348][ T4648] Call Trace:
[   96.432731][ T4648]  <TASK>
[   96.435688][ T4648]  dump_stack_lvl+0x188/0x24e
[   96.440388][ T4648]  ? show_regs_print_info+0x12/0x12
[   96.445597][ T4648]  ? load_image+0x410/0x410
[   96.450118][ T4648]  ? __lock_acquire+0x7ea0/0x7ea0
[   96.455259][ T4648]  should_fail_ex+0x390/0x4c0
[   96.459958][ T4648]  should_failslab+0x5/0x20
[   96.464556][ T4648]  slab_pre_alloc_hook+0x59/0x300
[   96.469702][ T4648]  kmem_cache_alloc+0x56/0x2f0
[   96.474565][ T4648]  ? op_alloc+0x26/0x4f0
[   96.478829][ T4648]  op_alloc+0x26/0x4f0
[   96.482960][ T4648]  orangefs_mount+0xdc/0xed0
[   96.487655][ T4648]  ? aa_get_newest_label+0xf9/0x5b0
[   96.492991][ T4648]  ? fsid_key_table_finalize+0x10/0x10
[   96.498482][ T4648]  ? __mutex_lock+0x1ab/0xae0
[   96.503181][ T4648]  ? file_end_write+0x156/0x250
[   96.508056][ T4648]  legacy_get_tree+0xe6/0x180
[   96.513093][ T4648]  ? fsid_key_table_finalize+0x10/0x10
[   96.518920][ T4648]  vfs_get_tree+0x88/0x270
[   96.523463][ T4648]  vfs_fsconfig_locked+0x22f/0x400
[   96.528597][ T4648]  __se_sys_fsconfig+0x69e/0x7e0
[   96.533559][ T4648]  ? __x64_sys_fsconfig+0xc0/0xc0
[   96.538620][ T4648]  ? lockdep_hardirqs_on+0x94/0x140
[   96.543882][ T4648]  ? __x64_sys_fsconfig+0x1c/0xc0
[   96.549019][ T4648]  do_syscall_64+0x4c/0xa0
[   96.553634][ T4648]  ? clear_bhb_loop+0x60/0xb0
[   96.558439][ T4648]  ? clear_bhb_loop+0x60/0xb0
[   96.563503][ T4648]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.569685][ T4648] RIP: 0033:0x7f238899f559
[   96.574117][ T4648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.593948][ T4648] RSP: 002b:00007f23898c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[   96.602387][ T4648] RAX: ffffffffffffffda RBX: 00007f2388c25fa0 RCX: 00007f238899f559
[   96.610634][ T4648] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[   96.618620][ T4648] RBP: 00007f2388a36b20 R08: 0000000000000000 R09: 0000000000000000
[   96.626626][ T4648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   96.634622][ T4648] R13: 00007f2388c26038 R14: 00007f2388c25fa0 R15: 00007fff31731998
[   96.642723][ T4648]  </TASK>
[   96.666976][ T4648] op_alloc: kmem_cache_zalloc failed!
[   96.883600][ T4654] FAULT_INJECTION: forcing a failure.
[   96.883600][ T4654] name failslab, interval 1, probability 0, space 0, times 0
[   96.919185][ T4654] CPU: 1 PID: 4654 Comm: syz.2.84 Not tainted syzkaller #0
[   96.926474][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   96.936750][ T4654] Call Trace:
[   96.940159][ T4654]  <TASK>
[   96.943230][ T4654]  dump_stack_lvl+0x188/0x24e
[   96.948140][ T4654]  ? show_regs_print_info+0x12/0x12
[   96.953402][ T4654]  ? load_image+0x410/0x410
[   96.958058][ T4654]  ? __might_sleep+0xd0/0xd0
[   96.962795][ T4654]  ? __lock_acquire+0x7ea0/0x7ea0
[   96.967893][ T4654]  should_fail_ex+0x390/0x4c0
[   96.972657][ T4654]  should_failslab+0x5/0x20
[   96.977285][ T4654]  slab_pre_alloc_hook+0x59/0x300
[   96.982421][ T4654]  kmem_cache_alloc+0x56/0x2f0
[   96.987206][ T4654]  ? security_inode_alloc+0x30/0x110
[   96.992697][ T4654]  security_inode_alloc+0x30/0x110
[   96.997945][ T4654]  inode_init_always+0x910/0xc90
[   97.003397][ T4654]  new_inode_pseudo+0x91/0x1c0
[   97.008455][ T4654]  new_inode+0x25/0x1d0
[   97.012756][ T4654]  proc_pid_make_inode+0x20/0x1a0
[   97.017835][ T4654]  proc_pident_instantiate+0x69/0x2a0
[   97.023245][ T4654]  proc_pident_lookup+0x1b8/0x260
[   97.028295][ T4654]  __lookup_slow+0x29d/0x3f0
[   97.032906][ T4654]  ? lookup_one_len+0x2d0/0x2d0
[   97.037992][ T4654]  ? down_read+0x1a8/0x2d0
[   97.042518][ T4654]  lookup_slow+0x53/0x70
[   97.046802][ T4654]  link_path_walk+0x976/0xea0
[   97.051511][ T4654]  ? handle_lookup_down+0x130/0x130
[   97.057170][ T4654]  path_openat+0x285/0x2f10
[   97.061808][ T4654]  ? kasan_set_track+0x60/0x70
[   97.066609][ T4654]  ? verify_lock_unused+0x140/0x140
[   97.071916][ T4654]  ? do_sys_openat2+0xdd/0x4f0
[   97.076811][ T4654]  ? do_filp_open+0x420/0x420
[   97.081627][ T4654]  do_filp_open+0x1ee/0x420
[   97.086158][ T4654]  ? vfs_tmpfile+0x470/0x470
[   97.090878][ T4654]  ? noop_direct_IO+0x10/0x10
[   97.095581][ T4654]  ? _raw_spin_unlock+0x24/0x40
[   97.100450][ T4654]  ? alloc_fd+0x590/0x640
[   97.104899][ T4654]  do_sys_openat2+0x14b/0x4f0
[   97.110421][ T4654]  ? do_sys_open+0xe0/0xe0
[   97.115144][ T4654]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   97.121244][ T4654]  ? lock_chain_count+0x20/0x20
[   97.126117][ T4654]  __x64_sys_openat+0x135/0x160
[   97.131144][ T4654]  do_syscall_64+0x4c/0xa0
[   97.135576][ T4654]  ? clear_bhb_loop+0x60/0xb0
[   97.140369][ T4654]  ? clear_bhb_loop+0x60/0xb0
[   97.145081][ T4654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   97.151199][ T4654] RIP: 0033:0x7f238895fd8e
[   97.155636][ T4654] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   97.175435][ T4654] RSP: 002b:00007f23898c0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   97.183880][ T4654] RAX: ffffffffffffffda RBX: 00007f23898c16c0 RCX: 00007f238895fd8e
[   97.191870][ T4654] RDX: 0000000000000002 RSI: 00007f23898c0f90 RDI: ffffffffffffff9c
[   97.199883][ T4654] RBP: 00007f2388a36b20 R08: 0000000000000000 R09: 0000000000000000
[   97.207882][ T4654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.215870][ T4654] R13: 00007f2388c26038 R14: 00007f2388c25fa0 R15: 00007fff31731998
[   97.223958][ T4654]  </TASK>
[   97.235459][ T4288] Bluetooth: hci0: command 0x0c24 tx timeout
[   97.240904][ T4294] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[   97.478207][ T4667] IPv4: Oversized IP packet from 127.202.26.0
[   97.583184][ T4671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'.
[   97.764298][    T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   97.840811][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[   97.871202][ T4683] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.880639][ T4683] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.889438][ T4683] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.898440][ T4683] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.930964][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[   97.971244][ T4683] Zero length message leads to an empty skb
[   97.982053][    T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7
[   97.993505][ T4689] loop0: detected capacity change from 0 to 512
[   98.024218][    T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[   98.091723][    T7] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[   98.121675][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.152589][    T7] usb 4-1: Product: syz
[   98.166169][    T7] usb 4-1: Manufacturer: syz
[   98.181067][    T7] usb 4-1: SerialNumber: syz
[   98.389848][ T4689] ext4: Unknown parameter 'noacl'
[   98.483992][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   98.556250][    T7] disable ehci-hcd to run US-144
[   98.574607][    T7] disable ehci-hcd to run US-144
[   98.654218][    T7] usb 4-1: USB disconnect, device number 2
[   98.727901][ T4279] udevd[4279]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  100.115332][  T129] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  100.341331][  T129] usb 4-1: unable to get BOS descriptor or descriptor too short
[  100.371274][  T129] usb 4-1: unable to read config index 0 descriptor/start: -71
[  100.389509][  T129] usb 4-1: can't read configurations, error -71
[  100.677269][ T4763] device gre1 entered promiscuous mode
[  100.804929][ T4766] process 'syz.1.126' launched '/dev/fd/5' with NULL argv: empty string added
[  101.182172][ T4776] tipc: Started in network mode
[  101.204120][ T4776] tipc: Node identity 7f000001, cluster identity 4711
[  101.211706][ T4776] tipc: New replicast peer: 172.20.20.12
[  101.276567][ T4776] tipc: Enabled bearer <udp:syz2>, priority 10
[  101.291114][ T4780] syz.2.132 uses obsolete (PF_INET,SOCK_PACKET)
[  102.134931][ T4811] bridge0: port 3(vlan2) entered blocking state
[  102.151513][ T4811] bridge0: port 3(vlan2) entered disabled state
[  102.169284][ T4811] device vlan2 entered promiscuous mode
[  102.176811][ T4811] device dummy0 entered promiscuous mode
[  102.285603][    T7] tipc: Node number set to 2130706433
[  102.674305][ T4831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'.
[  103.395268][ T4858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'.
[  103.481540][ T4863] netlink: 32 bytes leftover after parsing attributes in process `syz.4.157'.
[  103.748466][ T4870] netlink: 'syz.0.146': attribute type 1 has an invalid length.
[  104.118691][ T4870] device wlan1 entered promiscuous mode
[  105.330601][ T4931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'.
[  105.441515][ T4931] netlink: 'syz.4.186': attribute type 1 has an invalid length.
[  105.455468][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  105.455484][   T26] audit: type=1326 audit(1792792711.597:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  105.540943][   T26] audit: type=1326 audit(1792792711.637:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  105.650473][   T26] audit: type=1326 audit(1792792711.637:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  105.704120][ T4943] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[
[  105.704120][ T4943] Q&|xù6�

[  105.724659][   T26] audit: type=1326 audit(1792792711.637:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  105.782232][   T26] audit: type=1326 audit(1792792711.637:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  105.844335][   T26] audit: type=1326 audit(1792792711.637:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  105.900950][   T26] audit: type=1326 audit(1792792711.637:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  105.964040][   T26] audit: type=1326 audit(1792792711.637:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  106.030406][   T26] audit: type=1326 audit(1792792711.637:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  106.114056][   T26] audit: type=1326 audit(1792792711.637:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4936 comm="syz.1.188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5ac3f9f559 code=0x7ffc0000
[  108.362583][ T5030] netlink: 'syz.2.218': attribute type 1 has an invalid length.
[  108.433619][ T5030] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.612461][ T5037] x86/PAT: syz.3.216:5037 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[  108.626714][ T5030] device wlan1 entered promiscuous mode
[  108.682851][ T5030] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  109.154298][ T5058] loop4: detected capacity change from 0 to 2048
[  109.285311][ T5058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  109.346552][ T5058] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  109.378828][ T5067] =======================================================
[  109.378828][ T5067] WARNING: The mand mount option has been deprecated and
[  109.378828][ T5067]          and is ignored by this kernel. Remove the mand
[  109.378828][ T5067]          option from the mount to silence this warning.
[  109.378828][ T5067] =======================================================
[  109.445903][ T5058] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  109.473047][ T5058] EXT4-fs (loop4): This should not happen!! Data will be lost
[  109.473047][ T5058] 
[  109.493649][ T5058] EXT4-fs (loop4): Total free blocks count 0
[  109.507062][ T5058] EXT4-fs (loop4): Free/Dirty block details
[  109.520694][ T5058] EXT4-fs (loop4): free_blocks=4096
[  109.535636][ T5058] EXT4-fs (loop4): dirty_blocks=64
[  109.549704][ T5058] EXT4-fs (loop4): Block reservation details
[  109.564737][ T5058] EXT4-fs (loop4): i_reserved_data_blocks=4
[  109.609046][ T5057] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  110.076596][ T5080] loop1: detected capacity change from 0 to 2048
[  110.122928][ T5080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  110.182092][ T5080] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  110.273083][ T5080] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  110.288863][ T5080] EXT4-fs (loop1): This should not happen!! Data will be lost
[  110.288863][ T5080] 
[  110.299292][ T5080] EXT4-fs (loop1): Total free blocks count 0
[  110.312376][ T5080] EXT4-fs (loop1): Free/Dirty block details
[  110.335214][ T5080] EXT4-fs (loop1): free_blocks=2415919504
[  110.371312][ T5080] EXT4-fs (loop1): dirty_blocks=32
[  110.404108][ T5080] EXT4-fs (loop1): Block reservation details
[  110.410221][ T5080] EXT4-fs (loop1): i_reserved_data_blocks=2
[  110.479093][ T5085] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  110.948242][ T5099] rxe_eth0 speed is unknown, defaulting to 1000
[  111.913105][ T5126] loop4: detected capacity change from 0 to 128
[  111.987526][ T5126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  112.005182][ T5126] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.305263][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  112.326755][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'.
[  113.484562][ T5162] loop0: detected capacity change from 0 to 2048
[  113.532580][ T5162] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.303166][ T4283] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  114.340168][ T4283] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  114.927597][ T5196] rxe_eth0 speed is unknown, defaulting to 1000
[  115.145349][   T26] kauditd_printk_skb: 350 callbacks suppressed
[  115.145364][   T26] audit: type=1326 audit(1792792721.287:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5197 comm="syz.4.274" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd78559f559 code=0x0
[  115.180729][   T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.281776][ T5180] loop1: detected capacity change from 0 to 40427
[  115.318991][ T5180] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  115.372722][ T5180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  115.405092][   T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.476006][ T5180] F2FS-fs (loop1): Found nat_bits in checkpoint
[  115.627711][ T5180] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  115.639842][ T5180] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  115.683216][   T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.880573][   T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.496607][ T4294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  116.508278][ T4294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  116.516989][ T4294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  116.526540][ T4294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  116.564335][ T4294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  116.574257][ T4294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  116.734123][ T5199] netlink: 'syz.2.273': attribute type 4 has an invalid length.
[  116.805518][ T5213] rxe_eth0 speed is unknown, defaulting to 1000
[  117.968951][ T5213] chnl_net:caif_netlink_parms(): no params data found
[  118.262314][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.283368][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.325573][ T5213] device bridge_slave_0 entered promiscuous mode
[  118.361975][ T5213] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.369777][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.398799][ T5213] device bridge_slave_1 entered promiscuous mode
[  118.535304][ T5213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.607339][ T5213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.631214][   T48] device hsr_slave_0 left promiscuous mode
[  118.647117][   T48] device hsr_slave_1 left promiscuous mode
[  118.659569][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.667337][ T4282] Bluetooth: hci2: command 0x0409 tx timeout
[  118.694194][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.718237][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.744486][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.773142][   T48] device bridge_slave_1 left promiscuous mode
[  118.802065][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.864806][   T48] device bridge_slave_0 left promiscuous mode
[  118.871138][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.002651][   T48] device veth1_macvtap left promiscuous mode
[  119.023298][   T48] device veth0_macvtap left promiscuous mode
[  119.053795][   T48] device veth1_vlan left promiscuous mode
[  119.069366][   T48] device veth0_vlan left promiscuous mode
[  119.634109][ T4294] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  119.634705][ T4282] Bluetooth: hci5: command 0x1003 tx timeout
[  120.703466][   T48] team0 (unregistering): Port device team_slave_1 removed
[  120.754398][ T4294] Bluetooth: hci2: command 0x041b tx timeout
[  120.761472][   T48] team0 (unregistering): Port device team_slave_0 removed
[  120.814740][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.869970][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.463880][   T48] bond0 (unregistering): Released all slaves
[  121.624074][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'.
[  121.633059][ T5288] netlink: 52 bytes leftover after parsing attributes in process `syz.2.294'.
[  121.684185][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.692989][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.759204][ T5289] netlink: 52 bytes leftover after parsing attributes in process `syz.2.294'.
[  121.881446][ T5213] team0: Port device team_slave_0 added
[  121.907207][ T5213] team0: Port device team_slave_1 added
[  122.033540][ T5296] netlink: 'syz.2.296': attribute type 39 has an invalid length.
[  122.155108][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.162127][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.215335][ T5213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.270610][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.304281][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.465781][ T5213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.645104][ T5213] device hsr_slave_0 entered promiscuous mode
[  122.684458][ T5213] device hsr_slave_1 entered promiscuous mode
[  122.714167][ T5213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.724095][ T5213] Cannot create hsr debugfs directory
[  122.824843][ T4294] Bluetooth: hci2: command 0x040f tx timeout
[  123.227979][ T5333] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.242963][ T5333] bond2: (slave bond0): making interface the new active one
[  123.254800][ T5333] bond2: (slave bond0): Enslaving as an active interface with an up link
[  123.272790][ T5213] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  123.335095][ T5213] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  123.391097][ T5213] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  123.421386][ T5335] netlink: 7 bytes leftover after parsing attributes in process `syz.4.304'.
[  123.453051][ T5213] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  123.780902][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.849844][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.905568][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.944822][ T5213] 8021q: adding VLAN 0 to HW filter on device team0
[  124.015487][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  124.074591][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  124.104487][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.111732][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.218700][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  124.244834][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  124.283541][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  124.314668][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.322745][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.344925][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  124.355093][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  124.427895][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.445448][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.464991][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.481640][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.515084][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  124.564435][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  124.573007][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  124.717383][ T5213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  124.741304][ T5213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  124.766698][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  124.785141][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  124.798018][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  124.803556][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  124.820308][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  124.847899][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  124.857388][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  124.865866][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.904359][ T4294] Bluetooth: hci2: command 0x0419 tx timeout
[  124.977616][ T5367] rxe_eth0 speed is unknown, defaulting to 1000
[  125.278689][   T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.511445][   T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.682643][   T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.866406][   T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.946860][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  126.012231][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  126.053791][ T5213] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.081089][ T5367] chnl_net:caif_netlink_parms(): no params data found
[  126.117667][ T5399] loop2: detected capacity change from 0 to 4096
[  126.462320][ T5399] ntfs3: loop2: Failed to load $Extend.
[  126.511595][ T5399] ntfs3: loop2: Failed to load root.
[  126.530754][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.583893][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.605543][ T5367] device bridge_slave_0 entered promiscuous mode
[  126.659169][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.709325][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.730851][ T5367] device bridge_slave_1 entered promiscuous mode
[  126.909099][ T4282] Bluetooth: hci3: command 0x0409 tx timeout
[  127.090847][ T5367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.146371][ T5367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.261377][ T5367] team0: Port device team_slave_0 added
[  127.345795][ T5367] team0: Port device team_slave_1 added
[  127.401919][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.419282][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.492980][ T5367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.597432][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.617705][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.684102][ T5367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.728633][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  127.754950][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  127.959143][ T5367] device hsr_slave_0 entered promiscuous mode
[  127.994561][ T5367] device hsr_slave_1 entered promiscuous mode
[  128.014371][ T5367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.022412][ T5367] Cannot create hsr debugfs directory
[  128.047330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  128.086300][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  128.206805][ T5213] device veth0_vlan entered promiscuous mode
[  128.227164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  128.262805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  128.349338][ T5213] device veth1_vlan entered promiscuous mode
[  128.537478][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  128.554402][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  128.597676][ T5213] device veth0_macvtap entered promiscuous mode
[  128.796458][ T5213] device veth1_macvtap entered promiscuous mode
[  128.886069][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.915115][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.936713][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.958097][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.973591][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.993786][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.994132][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[  129.011243][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.056522][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.093560][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.139696][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  129.169131][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  129.185119][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  129.211987][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.287981][ T5461] loop4: detected capacity change from 0 to 32768
[  129.346963][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.363050][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.379363][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.385281][ T5461] XFS (loop4): Mounting V5 Filesystem
[  129.396556][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.409013][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.419884][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.430734][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.443228][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.462379][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.508412][ T5461] XFS (loop4): Ending clean mount
[  129.518315][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  129.553405][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  129.588660][ T5461] XFS (loop4): Quotacheck needed: Please wait.
[  129.611606][ T5213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.631363][ T5213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.648746][ T5213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.664178][ T5213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.724387][ T5367] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  129.782047][ T5367] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  129.820529][ T5461] XFS (loop4): Quotacheck: Done.
[  129.881051][ T5367] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  129.940156][   T48] device hsr_slave_0 left promiscuous mode
[  129.984613][   T48] device hsr_slave_1 left promiscuous mode
[  129.990908][   T26] audit: type=1804 audit(1792792736.127:392): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.339" name="/newroot/83/file0/bus" dev="loop4" ino=9290 res=1 errno=0
[  130.035335][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.042825][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.125689][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.153825][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.172626][   T26] audit: type=1326 audit(1792792736.307:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.2.345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  130.214719][   T48] device vlan2 left promiscuous mode
[  130.224146][   T48] device dummy0 left promiscuous mode
[  130.229847][   T48] bridge0: port 3(vlan2) entered disabled state
[  130.249061][ T4275] XFS (loop4): Unmounting Filesystem
[  130.263442][   T26] audit: type=1326 audit(1792792736.317:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.2.345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  130.292645][   T26] audit: type=1326 audit(1792792736.317:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.2.345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  130.318297][   T48] device bridge_slave_1 left promiscuous mode
[  130.325097][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.333433][   T26] audit: type=1326 audit(1792792736.327:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.2.345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  130.359946][   T48] device bridge_slave_0 left promiscuous mode
[  130.366382][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.392107][   T26] audit: type=1326 audit(1792792736.327:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.2.345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f238899f2c2 code=0x7ffc0000
[  130.428601][   T26] audit: type=1326 audit(1792792736.327:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.2.345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f238899f2c2 code=0x7ffc0000
[  130.455272][   T48] device veth1_macvtap left promiscuous mode
[  130.461384][   T48] device veth0_macvtap left promiscuous mode
[  130.468012][   T48] device veth1_vlan left promiscuous mode
[  130.474332][   T48] device veth0_vlan left promiscuous mode
[  130.481832][   T26] audit: type=1326 audit(1792792736.327:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.2.345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  130.518043][   T26] audit: type=1326 audit(1792792736.327:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.2.345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  130.551937][   T26] audit: type=1326 audit(1792792736.337:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5492 comm="syz.2.345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  131.065646][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[  131.985559][   T48] team0 (unregistering): Port device team_slave_1 removed
[  132.105524][ T5513] vxcan0: tx drop: invalid da for name 0x0000000000000001
[  132.136770][   T48] team0 (unregistering): Port device team_slave_0 removed
[  132.191588][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.244867][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.348167][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888055759800: rx timeout, send abort
[  132.671563][   T48] bond0 (unregistering): Released all slaves
[  132.772334][ T5367] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  132.848274][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805575a000: rx timeout, send abort
[  132.861151][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888055759800: abort rx timeout. Force session deactivation
[  132.973033][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.993292][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  133.000450][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  133.011855][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.122660][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  133.144278][ T4282] Bluetooth: hci3: command 0x0419 tx timeout
[  133.162633][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.252964][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.268832][ T5530] loop4: detected capacity change from 0 to 512
[  133.277161][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  133.313437][ T5530] EXT4-fs (loop4): Test dummy encryption mode enabled
[  133.344079][ T5530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  133.356735][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805575a000: abort rx timeout. Force session deactivation
[  133.384222][ T5367] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.391973][ T5530] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  133.469008][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  133.469846][ T5530] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.356: bad orphan inode 131083
[  133.503550][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  133.545340][ T5530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  133.586882][ T5367] 8021q: adding VLAN 0 to HW filter on device team0
[  133.609620][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  133.662269][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  133.720795][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.728018][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.763231][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  133.824675][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  133.834537][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  133.857855][ T5021] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.865181][ T5021] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.937361][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  133.955762][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  133.973173][ T5543] loop5: detected capacity change from 0 to 1024
[  133.991407][ T5543] EXT4-fs: quotafile must be on filesystem root
[  134.011513][ T5551] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  134.011513][ T5551] The task syz.1.359 (5551) triggered the difference, watch for misbehavior.
[  134.033772][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  134.061691][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  134.075423][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  134.092756][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  134.130434][ T5367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  134.192577][ T5367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.254308][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  134.272895][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  134.305064][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  134.319422][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  134.339375][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  134.362254][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  134.597601][ T5530] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  134.791605][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  134.927822][ T5580] netlink: 'syz.1.365': attribute type 4 has an invalid length.
[  135.142491][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  135.182365][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.212342][ T5367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.246412][ T5619] loop1: detected capacity change from 0 to 16
[  136.321351][ T5619] erofs: (device loop1): mounted with root inode @ nid 36.
[  136.407888][ T5623] raw_sendmsg: syz.4.375 forgot to set AF_INET. Fix it!
[  136.438163][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  136.457807][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.512334][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  136.578589][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.606108][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.644917][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  136.676085][ T5367] device veth0_vlan entered promiscuous mode
[  136.722903][   T26] kauditd_printk_skb: 1128 callbacks suppressed
[  136.722919][   T26] audit: type=1326 audit(1792792742.850:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.4.379" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd78559f559 code=0x0
[  136.723102][ T5367] device veth1_vlan entered promiscuous mode
[  136.851848][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  136.875425][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  136.905613][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  136.951005][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.991374][ T5367] device veth0_macvtap entered promiscuous mode
[  137.015318][ T5367] device veth1_macvtap entered promiscuous mode
[  137.060420][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.085220][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.103943][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.135892][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.163812][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.204016][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.219185][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.273968][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.292805][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.301889][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  137.327619][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  137.372135][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  137.385802][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  137.409881][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.433852][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.454215][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.471002][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.481013][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.510366][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.520685][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.531806][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.565323][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.573155][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  137.603524][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  137.635906][ T5367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.655572][ T5367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.684070][ T5367] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.693202][ T5367] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.949703][ T5021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.988628][ T5021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.019696][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  138.065119][ T5021] wlan1: Trigger new scan to find an IBSS to join
[  138.116841][ T5021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.157778][ T5021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.176730][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.181392][ T5663] loop4: detected capacity change from 0 to 8192
[  138.310607][ T5663] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  138.426223][ T5663] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  138.430515][ T5673] netlink: 'syz.6.308': attribute type 8 has an invalid length.
[  138.455027][ T5663] REISERFS (device loop4): using ordered data mode
[  138.461601][ T5663] reiserfs: using flush barriers
[  138.494199][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.308'.
[  138.520864][ T5673] device veth1_to_team entered promiscuous mode
[  138.527815][ T5663] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  138.566897][ T5663] REISERFS (device loop4): checking transaction log (loop4)
[  138.579431][ T5673] device gretap0 entered promiscuous mode
[  138.599642][ T5673] device veth1_to_team left promiscuous mode
[  138.638566][ T5673] device gretap0 left promiscuous mode
[  138.911799][ T5663] REISERFS (device loop4): Using tea hash to sort names
[  138.980412][ T5663] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  140.451365][ T5732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.405'.
[  140.723706][ T5746] netlink: 'syz.5.407': attribute type 12 has an invalid length.
[  140.770149][ T5746] netlink: 'syz.5.407': attribute type 29 has an invalid length.
[  140.795974][ T5746] netlink: 148 bytes leftover after parsing attributes in process `syz.5.407'.
[  140.855200][ T5746] netlink: 'syz.5.407': attribute type 1 has an invalid length.
[  140.884250][ T5746] netlink: 'syz.5.407': attribute type 2 has an invalid length.
[  140.891966][ T5746] netlink: 11 bytes leftover after parsing attributes in process `syz.5.407'.
[  141.535831][ T5778] tipc: Started in network mode
[  141.557224][ T5778] tipc: Node identity 9aeb496a0587, cluster identity 4711
[  141.581142][ T5778] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  141.613775][ T5775] tipc: Resetting bearer <eth:syzkaller0>
[  141.714624][ T5775] tipc: Disabling bearer <eth:syzkaller0>
[  142.025683][   T55] wlan1: Trigger new scan to find an IBSS to join
[  143.479712][ T5830] rxe_eth0 speed is unknown, defaulting to 1000
[  144.035178][ T2936] wlan1: Creating new IBSS network, BSSID ae:53:95:5d:54:7a
[  144.336466][   T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  144.538403][   T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  144.562974][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.812698][   T14] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  144.965824][ T5867] loop4: detected capacity change from 0 to 2048
[  145.198687][ T5873] netlink: 24 bytes leftover after parsing attributes in process `syz.5.445'.
[  145.547117][ T4282] Bluetooth: hci3: command 0x2016 tx timeout
[  145.703744][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.6.449'.
[  146.003307][ T5895] loop2: detected capacity change from 0 to 512
[  146.340286][ T5895] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  146.414109][ T5895] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.717960][ T5906] loop5: detected capacity change from 0 to 8192
[  146.772751][ T5906] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  146.847457][ T5906] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  146.886464][ T5906] REISERFS (device loop5): using ordered data mode
[  146.897173][ T5906] reiserfs: using flush barriers
[  146.924157][ T5906] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.949072][ T4286] EXT4-fs (loop2): unmounting filesystem.
[  146.954722][ T5906] REISERFS (device loop5): checking transaction log (loop5)
[  147.362398][ T5906] REISERFS (device loop5): Using tea hash to sort names
[  147.389370][ T5906] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  147.634166][ T4282] Bluetooth: hci3: command 0x0406 tx timeout
[  147.737757][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.457'.
[  148.018881][ T5933] loop6: detected capacity change from 0 to 1024
[  148.074691][ T5933] EXT4-fs: Ignoring removed bh option
[  148.169869][ T5933] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  148.359375][ T5933] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  148.698719][ T5367] EXT4-fs (loop6): unmounting filesystem.
[  148.782318][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  148.790085][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  148.797668][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  148.805375][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  148.812970][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  148.820308][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  148.828457][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  148.835808][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  148.843147][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  148.850533][ T5957] lwtunnel_input(): recursion limit reached on datapath
[  149.085403][ T5960] loop6: detected capacity change from 0 to 1024
[  150.595887][ T4340] usb 2-1: USB disconnect, device number 2
[  150.788543][ T6015] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96
[  151.295311][ T6030] rxe_eth0 speed is unknown, defaulting to 1000
[  151.441610][ T6036] loop5: detected capacity change from 0 to 512
[  151.515396][ T6036] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.484: iget: bad i_size value: 38620345925642
[  151.624710][ T6036] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.484: couldn't read orphan inode 15 (err -117)
[  151.659137][ T6038] rxe_eth0 speed is unknown, defaulting to 1000
[  151.687683][ T6036] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  151.782855][ T6036] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.484: bg 0: block 5: invalid block bitmap
[  151.823135][ T6036] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  151.869008][ T6036] EXT4-fs (loop5): This should not happen!! Data will be lost
[  151.869008][ T6036] 
[  151.899558][ T6036] EXT4-fs (loop5): Total free blocks count 0
[  151.932719][ T6036] EXT4-fs (loop5): Free/Dirty block details
[  151.950471][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  151.970616][ T6036] EXT4-fs (loop5): free_blocks=0
[  151.985220][ T6036] EXT4-fs (loop5): dirty_blocks=65
[  151.998950][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  152.014175][ T6036] EXT4-fs (loop5): Block reservation details
[  152.034152][ T6036] EXT4-fs (loop5): i_reserved_data_blocks=65
[  152.075424][    T9] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 319 with max blocks 1 with error 28
[  152.123412][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  152.164457][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  152.208230][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  152.263065][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  152.386021][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  152.431577][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  152.470543][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  152.510711][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  152.695137][ T6077] loop6: detected capacity change from 0 to 8
[  153.184477][ T6090] netlink: 'syz.2.497': attribute type 1 has an invalid length.
[  153.300220][ T6090] device bond3 entered promiscuous mode
[  153.354913][ T6090] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.517259][ T6095] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.546120][ T6095] bond3: (slave gre2): The slave device specified does not support setting the MAC address
[  153.589694][ T6095] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  153.612490][ T6095] bond3: (slave gre2): making interface the new active one
[  153.654096][ T6095] device gre2 entered promiscuous mode
[  153.666389][ T6095] bond3: (slave gre2): Enslaving as an active interface with an up link
[  153.698598][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  153.716416][ T4282] Bluetooth: hci4: command 0x2016 tx timeout
[  154.071174][ T6123] loop4: detected capacity change from 0 to 2048
[  154.129663][ T6123] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.449728][ T6123] UDF-fs: bad mount option "xœìÝËk[Ù" or missing value
[  154.763324][ T6133] net_ratelimit: 374 callbacks suppressed
[  154.763342][ T6133] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  155.637089][ T6163] tipc: Started in network mode
[  155.664536][ T6163] tipc: Node identity f66b92b3a2a5, cluster identity 4711
[  155.672270][ T6163] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  155.740130][ T6161] tipc: Resetting bearer <eth:syzkaller0>
[  155.785709][ T4282] Bluetooth: hci4: command 0x0406 tx timeout
[  155.833092][ T6161] tipc: Disabling bearer <eth:syzkaller0>
[  156.753405][ T6206] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  156.825495][   T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  157.016686][   T14] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  157.022732][ T6211] rxe_eth0 speed is unknown, defaulting to 1000
[  157.036467][   T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.053969][   T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  157.092792][   T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.108392][ T6215] __nla_validate_parse: 33 callbacks suppressed
[  157.108410][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[  157.125442][   T14] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  157.153969][   T14] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  157.172271][   T14] usb 5-1: Product: syz
[  157.175229][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[  157.182405][   T14] usb 5-1: Manufacturer: syz
[  157.204128][   T14] cdc_wdm 5-1:1.0: skipping garbage
[  157.209399][   T14] cdc_wdm 5-1:1.0: skipping garbage
[  157.277964][   T14] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  157.295179][   T14] cdc_wdm 5-1:1.0: Unknown control protocol
[  157.421684][ T4353] usb 5-1: USB disconnect, device number 2
[  158.064037][ T4353] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  158.285765][ T4353] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  158.312011][ T4353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.354083][ T4353] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  158.373443][ T4353] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.425709][ T4353] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  158.442105][ T4353] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  158.459844][ T4353] usb 5-1: Product: syz
[  158.484113][ T4353] usb 5-1: Manufacturer: syz
[  158.532082][ T4353] cdc_wdm 5-1:1.0: skipping garbage
[  158.545649][ T4353] cdc_wdm 5-1:1.0: skipping garbage
[  158.572794][ T4353] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  158.592395][ T4353] cdc_wdm 5-1:1.0: Unknown control protocol
[  159.649443][   T27] usb 5-1: USB disconnect, device number 3
[  160.339093][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  160.346649][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  160.354027][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  160.361340][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  160.368751][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  160.376127][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  160.383556][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  160.391043][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  160.398453][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  160.405788][ T6285] lwtunnel_input(): recursion limit reached on datapath
[  161.391453][ T6306] loop5: detected capacity change from 0 to 1024
[  161.454384][ T6306] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  161.554696][ T6306] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  161.624984][ T6306] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  161.805061][ T6306] syz.5.549 (pid 6306) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  162.021956][ T5213] EXT4-fs (loop5): unmounting filesystem.
[  162.549934][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  162.592610][ T6338] bond2: (slave bond0): Releasing backup interface
[  162.680638][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  162.738847][ T6338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  162.786910][ T6338] device bridge_slave_0 left promiscuous mode
[  162.828913][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.874888][ T6338] device bridge_slave_1 left promiscuous mode
[  162.881908][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.958578][ T6338] bond0: (slave bond_slave_0): Releasing backup interface
[  163.052406][ T6338] bond0: (slave bond_slave_1): Releasing backup interface
[  163.141279][ T6362] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  163.180646][ T6338] team0: Port device team_slave_0 removed
[  163.236826][ T6338] team0: Port device team_slave_1 removed
[  163.243466][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.271801][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.292649][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.313757][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.387043][ T6338] bond3: (slave gre2): Releasing backup interface
[  163.415088][ T6338] device gre2 left promiscuous mode
[  163.516112][ T6343] team0: Mode changed to "broadcast"
[  163.648631][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.566'.
[  163.848422][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.567'.
[  164.031781][ T6378] netlink: 'syz.4.568': attribute type 18 has an invalid length.
[  164.070266][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'.
[  164.146529][ T6378] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.155659][ T6378] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.164750][ T6378] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.173487][ T6378] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.344343][ T6378] netlink: 'syz.4.568': attribute type 18 has an invalid length.
[  164.360130][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'.
[  165.451462][ T6422] Driver unsupported XDP return value 0 on prog  (id 82) dev N/A, expect packet loss!
[  166.230132][ T6441] loop1: detected capacity change from 0 to 4096
[  166.399275][ T6447] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.421826][ T6441] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  166.476778][ T6441] NILFS (loop1): mounting fs with errors
[  167.135347][ T6463] loop2: detected capacity change from 0 to 128
[  167.217728][ T6463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  167.298976][ T6463] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  167.579194][ T6475] loop1: detected capacity change from 0 to 256
[  167.637158][ T6475] exfat: Deprecated parameter 'namecase'
[  167.653154][ T6475] exfat: Deprecated parameter 'namecase'
[  167.659871][ T4286] EXT4-fs (loop2): unmounting filesystem.
[  167.686571][ T6475] exfat: Deprecated parameter 'utf8'
[  167.825822][ T6475] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  168.280065][ T6490] netlink: 9 bytes leftover after parsing attributes in process `syz.4.601'.
[  168.335525][ T6490] device gretap0 entered promiscuous mode
[  168.426183][ T6497] netlink: 5 bytes leftover after parsing attributes in process `syz.4.601'.
[  168.444316][ T6497] 0ªî{X¹¦: renamed from gretap0
[  168.485880][ T6497] device 
30ªî{X¹¦ left promiscuous mode
[  168.542884][ T6497] net_ratelimit: 758 callbacks suppressed
[  168.542904][ T6497] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  169.215688][ T6522] netlink: 72 bytes leftover after parsing attributes in process `syz.2.609'.
[  169.380817][ T6498] loop5: detected capacity change from 0 to 32768
[  169.438833][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'.
[  169.450747][ T6498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.602 (6498)
[  169.584350][ T6498] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.627311][ T6498] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  169.654092][ T6498] BTRFS info (device loop5): setting nodatasum
[  169.684188][ T6498] BTRFS info (device loop5): force zlib compression, level 3
[  169.722582][ T6498] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  169.763201][ T6498] BTRFS info (device loop5): use lzo compression, level 0
[  169.785476][ T6498] BTRFS info (device loop5): turning on flush-on-commit
[  169.814936][ T6498] BTRFS info (device loop5): enabling auto defrag
[  169.842322][ T6498] BTRFS info (device loop5): max_inline at 4096
[  169.873621][ T6498] BTRFS info (device loop5): using free space tree
[  170.154642][ T6498] BTRFS info (device loop5): enabling ssd optimizations
[  170.402945][   T26] audit: type=1800 audit(1792792776.530:1531): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.602" name="file1" dev="loop5" ino=260 res=0 errno=0
[  170.472571][   T26] audit: type=1800 audit(1792792776.590:1532): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.602" name="file1" dev="loop5" ino=260 res=0 errno=0
[  170.789805][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  170.851860][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  170.911144][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  171.073706][ T6570] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  171.223193][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  171.327360][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  171.412751][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  171.511155][ T6571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  171.829601][ T5213] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.540689][ T4294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  172.551187][ T4294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  172.560485][ T4294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  172.569047][ T4294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  172.578002][ T4294] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  172.587152][ T4294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.637898][ T6580] loop4: detected capacity change from 0 to 32768
[  172.782986][ T6580] XFS (loop4): Mounting V5 Filesystem
[  172.808440][ T6606] rxe_eth0 speed is unknown, defaulting to 1000
[  172.920437][ T6580] XFS (loop4): Ending clean mount
[  172.982588][   T26] audit: type=1800 audit(1792792779.110:1533): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.617" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  173.078133][ T5570] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.286040][ T5570] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.327328][ T6632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.626'.
[  173.361269][ T6632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.626'.
[  173.381186][ T6632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.626'.
[  173.412546][ T4275] XFS (loop4): Unmounting Filesystem
[  173.423688][ T6632] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  173.527479][ T5570] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.718519][ T5570] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.128018][ T6606] chnl_net:caif_netlink_parms(): no params data found
[  174.296314][ T6651] rxe_eth0 speed is unknown, defaulting to 1000
[  174.373187][ T5570] tipc: Left network mode
[  174.674211][ T4294] Bluetooth: hci3: command 0x0409 tx timeout
[  174.894564][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.901904][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.919189][ T6606] device bridge_slave_0 entered promiscuous mode
[  175.042651][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.054668][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.083387][ T6606] device bridge_slave_1 entered promiscuous mode
[  175.287330][ T6685] netlink: 'syz.2.638': attribute type 8 has an invalid length.
[  175.298981][ T6685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'.
[  175.318863][ T6685] netlink: 'syz.2.638': attribute type 8 has an invalid length.
[  175.343076][ T6685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'.
[  175.361377][ T6685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'.
[  175.401351][ T6685] netlink: 'syz.2.638': attribute type 8 has an invalid length.
[  175.429738][ T6685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'.
[  175.468787][ T6685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'.
[  175.499997][ T6685] netlink: 'syz.2.638': attribute type 8 has an invalid length.
[  175.519580][ T6685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'.
[  175.539786][ T6685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.638'.
[  175.567010][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.721435][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.901158][ T6606] team0: Port device team_slave_0 added
[  176.009030][ T6606] team0: Port device team_slave_1 added
[  176.047220][ T6705] ip_tables: iptables: counters copy to user failed while replacing table
[  176.331355][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.343451][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.429590][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.500428][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.513669][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.558390][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.754375][ T4294] Bluetooth: hci3: command 0x041b tx timeout
[  176.823700][ T6711] Invalid option length (1048488) for dns_resolver key
[  176.858976][ T6606] device hsr_slave_0 entered promiscuous mode
[  176.948441][ T6606] device hsr_slave_1 entered promiscuous mode
[  177.813535][ T5570] device hsr_slave_0 left promiscuous mode
[  177.835013][ T5570] device hsr_slave_1 left promiscuous mode
[  177.864656][ T5570] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.872148][ T5570] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.925804][ T5570] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.933675][ T5570] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.976184][ T5570] device bridge_slave_1 left promiscuous mode
[  177.983811][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.018681][ T5570] device bridge_slave_0 left promiscuous mode
[  178.060951][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.183311][ T5570] device veth1_macvtap left promiscuous mode
[  178.199808][ T5570] device veth0_macvtap left promiscuous mode
[  178.215214][ T5570] device veth1_vlan left promiscuous mode
[  178.240655][ T5570] device veth0_vlan left promiscuous mode
[  178.830759][ T4294] Bluetooth: hci3: command 0x040f tx timeout
[  179.660171][ T5570] team0 (unregistering): Port device team_slave_1 removed
[  179.756266][ T5570] team0 (unregistering): Port device team_slave_0 removed
[  179.837285][ T5570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.921680][ T5570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.941314][ T6794] loop5: detected capacity change from 0 to 128
[  180.047522][ T6794] hpfs: Bad version 183,140. Mount readonly to go around
[  180.057233][ T6794] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz
[  180.104508][ T6794] device-mapper: ioctl: The device has no table.
[  180.500075][ T5570] bond0 (unregistering): Released all slaves
[  180.646856][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  180.668014][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.686907][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.748253][ T6800] device bridge_slave_0 left promiscuous mode
[  180.762308][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.785013][ T6800] device bridge_slave_1 left promiscuous mode
[  180.791608][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.821298][ T6800] bond0: (slave bond_slave_0): Releasing backup interface
[  180.866797][ T6800] bond0: (slave bond_slave_1): Releasing backup interface
[  180.910923][ T4294] Bluetooth: hci3: command 0x0419 tx timeout
[  181.005963][ T6800] team0: Port device team_slave_0 removed
[  181.055654][ T6800] team0: Port device team_slave_1 removed
[  181.061970][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.084008][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.102456][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.113067][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.408438][ T6606] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  181.438051][ T6606] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  181.470388][ T6606] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  181.508851][ T6606] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  181.579005][   T26] audit: type=1326 audit(1792792787.710:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  181.644044][   T26] audit: type=1326 audit(1792792787.740:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  181.775600][   T26] audit: type=1326 audit(1792792787.740:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  181.884855][   T26] audit: type=1326 audit(1792792787.740:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  182.000643][   T26] audit: type=1326 audit(1792792787.740:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  182.047129][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.226619][   T26] audit: type=1326 audit(1792792787.740:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  182.341170][ T6606] 8021q: adding VLAN 0 to HW filter on device team0
[  182.442398][   T26] audit: type=1326 audit(1792792787.740:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  182.572978][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  182.722727][ T6896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  182.826137][ T6905] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.686'.
[  182.856772][   T26] audit: type=1326 audit(1792792787.740:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  183.005199][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  183.045533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  183.058222][   T26] audit: type=1326 audit(1792792787.740:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  183.158290][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.165537][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.172989][   T26] audit: type=1326 audit(1792792787.740:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.5.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f60e539f559 code=0x7ffc0000
[  183.194373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  183.246584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  183.294639][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.301818][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.351151][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  183.378918][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  183.408046][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  183.461277][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  183.503501][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  183.566856][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  183.597407][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  183.610874][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  183.640513][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  183.686174][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  183.719619][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  183.746884][ T6889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  183.789154][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  184.861517][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  184.899080][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  184.935107][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.081824][ T6982] rxe_eth0 speed is unknown, defaulting to 1000
[  186.214766][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  186.243581][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  186.312300][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  186.333849][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  186.365473][ T6606] device veth0_vlan entered promiscuous mode
[  186.375353][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  186.402404][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  186.439204][ T6606] device veth1_vlan entered promiscuous mode
[  186.537772][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  186.556504][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  186.594978][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  186.624854][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  186.659199][ T6606] device veth0_macvtap entered promiscuous mode
[  186.712162][ T6606] device veth1_macvtap entered promiscuous mode
[  186.791346][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.827584][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.869651][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.908359][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.960688][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.992422][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  187.015046][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  187.043222][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  187.076533][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  187.125251][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.143399][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.184039][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.206496][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.252431][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.305041][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  187.342634][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  187.385405][ T6606] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.398255][ T6606] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.434064][ T6606] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.436452][ T7020] ip_tables: iptables: counters copy to user failed while replacing table
[  187.463261][ T6606] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.776864][ T6889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.813125][ T6889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.857276][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  187.915477][ T6882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.937150][ T6882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.991185][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  188.098646][ T7036] FAULT_INJECTION: forcing a failure.
[  188.098646][ T7036] name failslab, interval 1, probability 0, space 0, times 0
[  188.167316][ T7036] CPU: 0 PID: 7036 Comm: syz.2.716 Not tainted syzkaller #0
[  188.174770][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  188.184891][ T7036] Call Trace:
[  188.188201][ T7036]  <TASK>
[  188.191175][ T7036]  dump_stack_lvl+0x188/0x24e
[  188.195988][ T7036]  ? show_regs_print_info+0x12/0x12
[  188.201228][ T7036]  ? load_image+0x410/0x410
[  188.205877][ T7036]  ? __might_sleep+0xd0/0xd0
[  188.210526][ T7036]  ? __lock_acquire+0x7ea0/0x7ea0
[  188.215602][ T7036]  should_fail_ex+0x390/0x4c0
[  188.220337][ T7036]  should_failslab+0x5/0x20
[  188.224925][ T7036]  slab_pre_alloc_hook+0x59/0x300
[  188.230086][ T7036]  ? iter_file_splice_write+0x1a0/0xcf0
[  188.235685][ T7036]  __kmem_cache_alloc_node+0x4f/0x270
[  188.241103][ T7036]  ? iter_file_splice_write+0x1a0/0xcf0
[  188.246711][ T7036]  __kmalloc+0xa3/0x240
[  188.250918][ T7036]  iter_file_splice_write+0x1a0/0xcf0
[  188.256434][ T7036]  ? current_time+0x2c0/0x2c0
[  188.261264][ T7036]  ? generic_file_splice_read+0x23c/0x510
[  188.267058][ T7036]  ? splice_from_pipe+0x180/0x180
[  188.272192][ T7036]  ? splice_shrink_spd+0xc0/0xc0
[  188.277210][ T7036]  ? splice_from_pipe+0x180/0x180
[  188.282289][ T7036]  direct_splice_actor+0xe1/0x130
[  188.287379][ T7036]  splice_direct_to_actor+0x4b8/0xbd0
[  188.292914][ T7036]  ? direct_file_splice_eof+0xa0/0xa0
[  188.298348][ T7036]  ? pipe_to_sendpage+0x320/0x320
[  188.303435][ T7036]  ? common_file_perm+0x171/0x1c0
[  188.308535][ T7036]  ? fsnotify_perm+0x5a/0x550
[  188.313358][ T7036]  ? security_file_permission+0x75/0xa0
[  188.318977][ T7036]  do_splice_direct+0x1ce/0x2f0
[  188.323992][ T7036]  ? splice_direct_to_actor+0xbd0/0xbd0
[  188.329698][ T7036]  ? rcu_read_lock_any_held+0xb0/0x130
[  188.335207][ T7036]  ? do_splice_direct+0x2f0/0x2f0
[  188.340369][ T7036]  ? common_file_perm+0x171/0x1c0
[  188.345464][ T7036]  do_sendfile+0x51b/0xe20
[  188.349940][ T7036]  ? __ia32_sys_get_robust_list+0x100/0x100
[  188.355883][ T7036]  ? do_pwritev+0x3a0/0x3a0
[  188.360440][ T7036]  ? __might_fault+0xa6/0x120
[  188.365172][ T7036]  ? __might_fault+0xc2/0x120
[  188.369888][ T7036]  ? __might_fault+0xa6/0x120
[  188.374614][ T7036]  __se_sys_sendfile64+0xdc/0x1a0
[  188.379678][ T7036]  ? lock_chain_count+0x20/0x20
[  188.384582][ T7036]  ? __x64_sys_sendfile64+0xa0/0xa0
[  188.389827][ T7036]  ? lockdep_hardirqs_on+0x94/0x140
[  188.395075][ T7036]  do_syscall_64+0x4c/0xa0
[  188.399558][ T7036]  ? clear_bhb_loop+0x60/0xb0
[  188.404360][ T7036]  ? clear_bhb_loop+0x60/0xb0
[  188.409434][ T7036]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  188.415380][ T7036] RIP: 0033:0x7f238899f559
[  188.419835][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  188.439491][ T7036] RSP: 002b:00007f23898c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  188.447951][ T7036] RAX: ffffffffffffffda RBX: 00007f2388c25fa0 RCX: 00007f238899f559
[  188.455943][ T7036] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003
[  188.463966][ T7036] RBP: 00007f2388a36b20 R08: 0000000000000000 R09: 0000000000000000
[  188.471976][ T7036] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000
[  188.479966][ T7036] R13: 00007f2388c26038 R14: 00007f2388c25fa0 R15: 00007fff31731998
[  188.487980][ T7036]  </TASK>
[  188.774651][ T7058] loop7: detected capacity change from 0 to 256
[  189.052263][ T7064] netlink: 'syz.1.724': attribute type 3 has an invalid length.
[  189.278564][ T7077] syz.7.727 sent an empty control message without MSG_MORE.
[  189.429013][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  189.472300][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  189.498520][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  189.536937][ T7082] device bridge_slave_0 left promiscuous mode
[  189.562017][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.603325][ T7082] device bridge_slave_1 left promiscuous mode
[  189.626175][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.669386][ T7082] bond0: (slave bond_slave_0): Releasing backup interface
[  189.728970][ T7082] bond0: (slave bond_slave_1): Releasing backup interface
[  189.933049][ T7082] team0: Port device team_slave_0 removed
[  189.993415][ T7082] team0: Port device team_slave_1 removed
[  190.017857][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.042630][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.061105][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.071709][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.405899][ T7116] device netdevsim0 entered promiscuous mode
[  190.444317][ T7116] device netdevsim0 left promiscuous mode
[  190.551459][ T7126] ip_tables: iptables: counters copy to user failed while replacing table
[  191.596002][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  191.650511][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.669146][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.684464][ T7159] device bridge_slave_0 left promiscuous mode
[  191.698885][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.760027][ T7159] device bridge_slave_1 left promiscuous mode
[  191.770112][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.811080][ T7159] bond0: (slave bond_slave_0): Releasing backup interface
[  191.870387][ T7159] bond0: (slave bond_slave_1): Releasing backup interface
[  192.032673][ T7159] team0: Port device team_slave_0 removed
[  192.097201][ T7159] team0: Port device team_slave_1 removed
[  192.119632][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.137119][ T7159] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.159507][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.178982][ T7159] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.427876][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  194.434510][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  194.544600][ T7238] ip_tables: iptables: counters copy to user failed while replacing table
[  194.818474][ T7220] loop1: detected capacity change from 0 to 32768
[  195.600379][ T7267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'.
[  196.663662][ T7304] xt_hashlimit: size too large, truncated to 1048576
[  198.180337][ T7329] ip_tables: iptables: counters copy to user failed while replacing table
[  198.307793][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  198.307812][   T26] audit: type=1326 audit(1792792804.440:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  198.463860][   T26] audit: type=1326 audit(1792792804.440:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  198.545755][   T26] audit: type=1326 audit(1792792804.440:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  198.654021][   T26] audit: type=1326 audit(1792792804.460:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  198.746551][   T26] audit: type=1326 audit(1792792804.460:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  198.856420][   T26] audit: type=1326 audit(1792792804.460:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  198.962882][   T26] audit: type=1326 audit(1792792804.460:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  199.074699][   T26] audit: type=1326 audit(1792792804.460:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  199.117257][ T7351] null_blk: disk nullb1 created
[  199.173434][   T26] audit: type=1326 audit(1792792804.460:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  199.249749][   T26] audit: type=1326 audit(1792792804.460:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.796" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238899f559 code=0x7ffc0000
[  199.476788][ T7364] loop1: detected capacity change from 0 to 256
[  199.588022][ T7364] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  199.632561][ T7364] exFAT-fs (loop1): failed to load alloc-bitmap
[  199.657624][ T7364] exFAT-fs (loop1): failed to recognize exfat type
[  199.942074][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.949664][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.041631][ T7372] device bridge_slave_1 left promiscuous mode
[  200.062212][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.112011][ T7372] device bridge_slave_0 left promiscuous mode
[  200.125570][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.871437][ T7389] loop7: detected capacity change from 0 to 1024
[  201.014813][ T7389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  201.046863][ T7389] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.184465][ T7401] loop4: detected capacity change from 0 to 2048
[  201.259168][ T6606] EXT4-fs (loop7): unmounting filesystem.
[  201.514845][ T7407] loop7: detected capacity change from 0 to 1024
[  201.634054][ T4282] Bluetooth: hci1: command 0x0406 tx timeout
[  201.640153][ T4282] Bluetooth: hci0: command 0x0406 tx timeout
[  201.648801][ T4294] Bluetooth: hci4: command 0x0406 tx timeout
[  201.815633][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'.
[  201.927856][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'.
[  202.035389][ T6882] hfsplus: b-tree write err: -5, ino 3
[  202.057384][ T6606] hfsplus: node 4:3 still has 2 user(s)!
[  202.229982][ T7421] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  202.695995][ T7441] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  202.703302][ T7441] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.735592][ T7441] vhci_hcd vhci_hcd.0: Device attached
[  202.755939][ T7446] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6)
[  202.762661][ T7446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.805902][ T7446] vhci_hcd vhci_hcd.0: Device attached
[  202.850957][ T7441] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5)
[  202.857657][ T7441] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  202.881935][ T7441] vhci_hcd vhci_hcd.0: Device attached
[  202.946416][ T7446] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(8)
[  202.953238][ T7446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.982896][ T7441] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(12)
[  202.989582][ T7441] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  203.014139][ T4344] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  203.047162][ T7441] vhci_hcd vhci_hcd.0: Device attached
[  203.083727][ T7446] vhci_hcd vhci_hcd.0: Device attached
[  203.113164][ T7464] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(15)
[  203.119840][ T7464] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  203.204175][ T7464] vhci_hcd vhci_hcd.0: Device attached
[  203.243439][ T7473] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(21)
[  203.250323][ T7473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  203.258026][ T7468] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(18)
[  203.264670][ T7468] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  203.343707][ T7473] vhci_hcd vhci_hcd.0: Device attached
[  203.463055][ T7468] vhci_hcd vhci_hcd.0: Device attached
[  203.480385][ T7474] vhci_hcd: connection closed
[  203.484357][ T7465] vhci_hcd: connection closed
[  203.489851][ T7461] vhci_hcd: connection closed
[  203.495134][ T7456] vhci_hcd: connection closed
[  203.500324][ T7451] vhci_hcd: connection closed
[  203.505903][ T7448] vhci_hcd: connection closed
[  203.511079][ T7442] vhci_hcd: connection reset by peer
[  203.527951][ T6889] vhci_hcd: stop threads
[  203.553493][ T6889] vhci_hcd: release socket
[  203.560970][ T7475] vhci_hcd: connection closed
[  203.589816][ T6889] vhci_hcd: disconnect device
[  203.602605][ T6889] vhci_hcd: stop threads
[  203.618602][ T6889] vhci_hcd: release socket
[  203.652845][ T6889] vhci_hcd: disconnect device
[  203.671431][ T6889] vhci_hcd: stop threads
[  203.678871][ T6889] vhci_hcd: release socket
[  203.691523][ T6889] vhci_hcd: disconnect device
[  203.719771][ T6889] vhci_hcd: stop threads
[  203.733967][ T6889] vhci_hcd: release socket
[  203.746816][ T6889] vhci_hcd: disconnect device
[  203.769867][ T6889] vhci_hcd: stop threads
[  203.790664][ T6889] vhci_hcd: release socket
[  203.805270][ T6889] vhci_hcd: disconnect device
[  203.820047][ T7495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  203.837775][ T6889] vhci_hcd: stop threads
[  203.842634][ T6889] vhci_hcd: release socket
[  203.855807][ T7495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  203.869111][ T6889] vhci_hcd: disconnect device
[  203.887017][ T7495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  203.899978][ T6889] vhci_hcd: stop threads
[  203.920200][ T6889] vhci_hcd: release socket
[  203.934021][ T6889] vhci_hcd: disconnect device
[  203.947591][ T6889] vhci_hcd: stop threads
[  203.967748][ T6889] vhci_hcd: release socket
[  203.979275][ T6889] vhci_hcd: disconnect device
[  204.865837][ T7525] loop4: detected capacity change from 0 to 512
[  204.935472][ T7525] EXT4-fs (loop4): orphan cleanup on readonly fs
[  204.957091][ T7525] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  204.995853][ T7525] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  205.011791][ T7525] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.846: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  205.057935][ T7525] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.846: couldn't read orphan inode 13 (err -117)
[  205.081017][ T7525] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  205.202259][ T7525] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  205.265717][ T7525] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  205.480285][ T6882] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  205.486812][ T7525] EXT4-fs (loop4): shut down requested (2)
[  205.508877][ T6882] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  205.553432][ T6882] wlan1: Created IBSS using preconfigured BSSID 00:20:00:00:00:00
[  205.593958][ T6882] wlan1: Creating new IBSS network, BSSID 00:20:00:00:00:00
[  205.604193][ T6889] ------------[ cut here ]------------
[  205.610374][ T6889] WARNING: CPU: 0 PID: 6889 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0
[  205.620452][ T6889] Modules linked in:
[  205.624497][ T6889] CPU: 0 PID: 6889 Comm: kworker/u4:22 Not tainted syzkaller #0
[  205.632168][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  205.642427][ T6889] Workqueue: cfg80211 cfg80211_event_work
[  205.648299][ T6889] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[  205.654805][ T6889] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 8c e0 f7 0f 0b eb bf e8 d7 8c e0 f7 <0f> 0b eb b6 e8 ce 8c e0 f7 0f 0b e9 82 fd ff ff e8 c2 8c e0 f7 0f
[  205.674765][ T6889] RSP: 0000:ffffc9000478fac0 EFLAGS: 00010293
[  205.680891][ T6889] RAX: ffffffff89a1b9a9 RBX: 1ffff920008f1f5c RCX: ffff888051615a00
[  205.688956][ T6889] RDX: 0000000000000000 RSI: ffffffff8aac19a0 RDI: ffffffff8aff71e0
[  205.696993][ T6889] RBP: ffffc9000478fb70 R08: ffffffff91b702af R09: 1ffffffff236e055
[  205.705133][ T6889] R10: dffffc0000000000 R11: fffffbfff236e056 R12: ffff8880255cb638
[  205.713239][ T6889] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888058880c90
[  205.721309][ T6889] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  205.730337][ T6889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  205.737012][ T6889] CR2: 00007fd070b2acb8 CR3: 000000005cac7000 CR4: 00000000003506f0
[  205.745279][ T6889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  205.753380][ T6889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  205.761553][ T6889] Call Trace:
[  205.764897][ T6889]  <TASK>
[  205.767957][ T6889]  ? trace_rdev_return_void+0x240/0x240
[  205.773562][ T6889]  cfg80211_process_wdev_events+0x359/0x4d0
[  205.779569][ T6889]  ? process_one_work+0x7b4/0x1160
[  205.784763][ T6889]  cfg80211_process_rdev_events+0x9d/0x110
[  205.790636][ T6889]  cfg80211_event_work+0x2b/0x40
[  205.795689][ T6889]  process_one_work+0x8ab/0x1160
[  205.800692][ T6889]  ? worker_detach_from_pool+0x240/0x240
[  205.806452][ T6889]  ? _raw_spin_lock_irq+0xb7/0xf0
[  205.811547][ T6889]  ? _raw_spin_lock_irqsave+0x100/0x100
[  205.817200][ T6889]  ? wq_worker_running+0x97/0x190
[  205.822273][ T6889]  worker_thread+0xaf5/0x12a0
[  205.827086][ T6889]  kthread+0x29d/0x330
[  205.831187][ T6889]  ? worker_clr_flags+0x1a0/0x1a0
[  205.836304][ T6889]  ? kthread_blkcg+0xd0/0xd0
[  205.840935][ T6889]  ret_from_fork+0x1f/0x30
[  205.845482][ T6889]  </TASK>
[  205.848532][ T6889] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  205.856278][ T6889] CPU: 0 PID: 6889 Comm: kworker/u4:22 Not tainted syzkaller #0
[  205.863944][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  205.874030][ T6889] Workqueue: cfg80211 cfg80211_event_work
[  205.879800][ T6889] Call Trace:
[  205.883096][ T6889]  <TASK>
[  205.886043][ T6889]  dump_stack_lvl+0x188/0x24e
[  205.890834][ T6889]  ? memcpy+0x3c/0x60
[  205.894835][ T6889]  ? show_regs_print_info+0x12/0x12
[  205.900048][ T6889]  ? load_image+0x410/0x410
[  205.904573][ T6889]  panic+0x2d3/0x710
[  205.908491][ T6889]  ? bpf_jit_dump+0xd0/0xd0
[  205.913014][ T6889]  ? ret_from_fork+0x1f/0x30
[  205.917621][ T6889]  __warn+0x2f8/0x4f0
[  205.921610][ T6889]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  205.927166][ T6889]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  205.932753][ T6889]  report_bug+0x2ba/0x4f0
[  205.937238][ T6889]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  205.942814][ T6889]  handle_bug+0x3a/0x70
[  205.946985][ T6889]  exc_invalid_op+0x16/0x40
[  205.951498][ T6889]  asm_exc_invalid_op+0x16/0x20
[  205.956352][ T6889] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0
[  205.962541][ T6889] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 8c e0 f7 0f 0b eb bf e8 d7 8c e0 f7 <0f> 0b eb b6 e8 ce 8c e0 f7 0f 0b e9 82 fd ff ff e8 c2 8c e0 f7 0f
[  205.982336][ T6889] RSP: 0000:ffffc9000478fac0 EFLAGS: 00010293
[  205.988421][ T6889] RAX: ffffffff89a1b9a9 RBX: 1ffff920008f1f5c RCX: ffff888051615a00
[  205.996492][ T6889] RDX: 0000000000000000 RSI: ffffffff8aac19a0 RDI: ffffffff8aff71e0
[  206.004495][ T6889] RBP: ffffc9000478fb70 R08: ffffffff91b702af R09: 1ffffffff236e055
[  206.012485][ T6889] R10: dffffc0000000000 R11: fffffbfff236e056 R12: ffff8880255cb638
[  206.020464][ T6889] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888058880c90
[  206.028811][ T6889]  ? __cfg80211_ibss_joined+0x419/0x4a0
[  206.034382][ T6889]  ? trace_rdev_return_void+0x240/0x240
[  206.039961][ T6889]  cfg80211_process_wdev_events+0x359/0x4d0
[  206.045869][ T6889]  ? process_one_work+0x7b4/0x1160
[  206.051017][ T6889]  cfg80211_process_rdev_events+0x9d/0x110
[  206.056921][ T6889]  cfg80211_event_work+0x2b/0x40
[  206.061896][ T6889]  process_one_work+0x8ab/0x1160
[  206.066857][ T6889]  ? worker_detach_from_pool+0x240/0x240
[  206.072549][ T6889]  ? _raw_spin_lock_irq+0xb7/0xf0
[  206.077591][ T6889]  ? _raw_spin_lock_irqsave+0x100/0x100
[  206.083152][ T6889]  ? wq_worker_running+0x97/0x190
[  206.088289][ T6889]  worker_thread+0xaf5/0x12a0
[  206.093088][ T6889]  kthread+0x29d/0x330
[  206.097249][ T6889]  ? worker_clr_flags+0x1a0/0x1a0
[  206.102290][ T6889]  ? kthread_blkcg+0xd0/0xd0
[  206.106997][ T6889]  ret_from_fork+0x1f/0x30
[  206.111435][ T6889]  </TASK>
[  206.114908][ T6889] Kernel Offset: disabled
[  206.119348][ T6889] Rebooting in 86400 seconds..