last executing test programs:

14.664002094s ago: executing program 0 (id=586):
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x1ad, &(0x7f0000000180)="$eJzs282O0lAUwPFTWiigIooaY0wkcaEbKaCSuNNHQaiEUNSIGwgL9AV8Bt9vWExmM6th0kvbyRQKGQZoJ/3/FvTScz/ObbjJCUkFQGp9lqpooknG/fIyX/5X0eJOCcCRLLzrxQJA+ujny2s17kQAHNn8i6ja/+R02hE9F9QFfsuNz/x4xlypH+Z/RF4YXlzLSyFcX/wXeeOP14rh4WfunWIQvxcK59T8b1/769+XB1KSh1KWR/JYKt763WD8s5uWP6sbAgAgBTSpbYtHdMiqz4J86zt2XfUM+fpB9XLjjcj5cyre3BjXX0XnZ6rxtc4Pp7txHwBWZXY+/0t6cP7XM7acfwDxGY0ng7bj2L8S0Mhfz2dhihxwUXN96HlSnkbCG6aE7xh7mbkQGfor60Luj2af+5p6B+Owz3AWvuNW026j1HacbAyn0lCrD3QvDf4XA1LA+j38aY3Gk3f9Ybtn9+zvzXr9U+vj+0araanK3tpc3wO4u67KgLgzAQAAAAAAAAAAAAAAu3oiT+NOAQAAAMCRbH0xSIxlx1u8YBT3HgEASJzLAAAA///lzgxT")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"})
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f00000001c0))
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x2e0, 0x940c, 0x3002, 0x0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x2ba, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548)

14.594548088s ago: executing program 0 (id=587):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0xf, 0x6, "0d22ddeee93c"}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r1, 0x5b14, 0x0)

13.859858889s ago: executing program 0 (id=590):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000300))
io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18)

12.716007529s ago: executing program 3 (id=591):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ptrace$poke(0x4, r1, 0x0, 0x7)
r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, &(0x7f0000000000)={&(0x7f00003ae000/0x1000)=nil})

12.646190542s ago: executing program 0 (id=592):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000004000073119e00000000001600000000000000951574be1cc19000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$rxrpc(0x21, 0x2, 0x8)
r2 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x5c)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x4010586e, &(0x7f0000000180)={0x8, 0x6, 0x0, 0x8004, 0x716, 0x8})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0xfffffff3}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$inet6(0xa, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r7 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
kcmp(r0, r0, 0x1, r2, r7)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f2"], 0x10}, 0x0, 0x24040092})

12.389216203s ago: executing program 1 (id=593):
syz_create_resource$binfmt(0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001fc0)=@getchain={0x34, 0x66, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xb, 0x4}, {0x6, 0x1}}, [{0x8, 0xb, 0xb2}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = getpid()
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x5, 0x4002)
sched_setscheduler(r4, 0x5, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002000)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, 0x0)
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r6, &(0x7f0000000100))
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f00000001c0)={0x0, 0x20, 0x2})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)={[{@utf8}, {@discard}, {@umask={'umask', 0x3d, 0x8}}, {@zero_size_dir}, {@umask={'umask', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fmask={'fmask', 0x3d, 0x3c}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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")

11.883523695s ago: executing program 0 (id=594):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0)
getrlimit(0x5, 0x0)
fsopen(&(0x7f0000000140)='smb3\x00', 0x0)
close(0x3)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)

11.07606365s ago: executing program 3 (id=596):
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x7fffffff, 0x1, 0x4})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}})
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r2 = accept4(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r6 = socket$kcm(0x2b, 0x1, 0x0)
listen(r6, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r6)
sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x9, 0x207, 0x5, 0x691}, 0x10)
sendto$inet6(r2, 0x0, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

10.958348915s ago: executing program 1 (id=597):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10)
socketpair(0x26, 0x6, 0x0, &(0x7f0000000040))
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)

10.410539829s ago: executing program 2 (id=598):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000140)='./file2\x00', 0x810418, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x5, 0x1d6, &(0x7f0000000200)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0xb12f32a3cfd6d54f)

10.364112931s ago: executing program 3 (id=599):
socket$inet(0x2, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000104050000000000000000000300000005000100010000000800034000000c6208000440000000080800034000000067060006"], 0x3c}, 0x1, 0x0, 0x0, 0x24000830}, 0x20000888)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20000)

9.375141033s ago: executing program 3 (id=600):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x0}, 0x20)

7.666936458s ago: executing program 2 (id=601):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
ioprio_get$uid(0x3, 0x0)

7.535933054s ago: executing program 1 (id=602):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000004000073119e00000000001600000000000000951574be1cc19000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$rxrpc(0x21, 0x2, 0x8)
r2 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x5c)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x4010586e, &(0x7f0000000180)={0x8, 0x6, 0x0, 0x8004, 0x716, 0x8})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0xfffffff3}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = socket$inet6(0xa, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r7 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
kcmp(r0, r0, 0x1, r2, r7)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f2"], 0x10}, 0x0, 0x24040092})

7.455658397s ago: executing program 3 (id=603):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x21000})
r1 = socket$kcm(0x10, 0x400000002, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x16, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{0x0, 0x3, 0x9, 0x6}, {0x3, 0x4, 0xa, 0x7}, {0x2, 0x3, 0x0, 0x7}, {0x5, 0x1, 0x9, 0x2}], 0x10, 0x177}, 0x94)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)

7.37893389s ago: executing program 0 (id=604):
syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file2\x00', 0x8080, &(0x7f0000009600), 0x1, 0x95b5, &(0x7f0000012bc0)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, &(0x7f00000001c0))

2.944282183s ago: executing program 2 (id=605):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1)
recvmmsg$unix(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x10003, 0x0)

2.31599917s ago: executing program 1 (id=606):
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x1ad, &(0x7f0000000180)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"})
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f00000001c0))
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x2e0, 0x940c, 0x3002, 0x0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x2ba, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548)

2.065616131s ago: executing program 1 (id=607):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001fc0)=@getchain={0x34, 0x66, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xb, 0x4}, {0x6, 0x1}}, [{0x8, 0xb, 0xb2}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = getpid()
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x5, 0x4002)
sched_setscheduler(r4, 0x5, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002000)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, 0x0)
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f00000001c0)={0x0, 0x20, 0x2})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)={[{@utf8}, {@discard}, {@umask={'umask', 0x3d, 0x8}}, {@zero_size_dir}, {@umask={'umask', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fmask={'fmask', 0x3d, 0x3c}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==")

2.055876991s ago: executing program 2 (id=608):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

1.954291335s ago: executing program 3 (id=609):
syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
eventfd(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0)

1.527980984s ago: executing program 2 (id=610):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10)
socketpair(0x26, 0x6, 0x0, &(0x7f0000000040))
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)

1.486232506s ago: executing program 1 (id=611):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
unshare(0x20000400)
r0 = getpgrp(0x0)
syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646d61736b3d30300000303030303030d61500d351432574deb3d110bd44303031303030303030343230352c646973636172072c666d61736b3d30303030303030303030303030303030303030303030362c0008004b76c7"], 0x1, 0x14d4, &(0x7f00000015c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x14}, 0x21)

0s ago: executing program 2 (id=612):
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@nombcache}]}, 0x1, 0x45f, &(0x7f0000001200)="$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")
io_uring_setup(0x1a8, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000010200)=""/102400, 0x19000)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000000004)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400)
r3 = socket(0x200000000000011, 0x2, 0xd)
setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.215' (ED25519) to the list of known hosts.
syzkaller login: [   68.571808][ T5777] cgroup: Unknown subsys name 'net'
[   68.734200][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   70.409267][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.740644][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[   71.747242][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[   72.704191][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.718293][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.726293][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.735073][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.743142][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   72.750770][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.764204][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.772971][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.792991][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.801405][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.809716][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   72.817457][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.849336][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.865152][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.877263][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.886320][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.895286][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   72.907144][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.938998][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   72.947615][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.957663][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   72.968155][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.976538][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   72.984678][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.311873][ T5792] chnl_net:caif_netlink_parms(): no params data found
[   73.472294][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   73.513374][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.520702][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.528444][ T5792] bridge_slave_0: entered allmulticast mode
[   73.535706][ T5792] bridge_slave_0: entered promiscuous mode
[   73.549747][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.557856][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.565037][ T5792] bridge_slave_1: entered allmulticast mode
[   73.572091][ T5792] bridge_slave_1: entered promiscuous mode
[   73.593312][ T5796] chnl_net:caif_netlink_parms(): no params data found
[   73.676632][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.701676][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.723447][ T5799] chnl_net:caif_netlink_parms(): no params data found
[   73.785333][ T5792] team0: Port device team_slave_0 added
[   73.794721][ T5792] team0: Port device team_slave_1 added
[   73.820460][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.827748][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.834914][ T5796] bridge_slave_0: entered allmulticast mode
[   73.843031][ T5796] bridge_slave_0: entered promiscuous mode
[   73.886699][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.894050][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.902219][ T5796] bridge_slave_1: entered allmulticast mode
[   73.909284][ T5796] bridge_slave_1: entered promiscuous mode
[   73.915912][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.924382][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.931852][ T5787] bridge_slave_0: entered allmulticast mode
[   73.939485][ T5787] bridge_slave_0: entered promiscuous mode
[   73.947277][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.954573][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.961960][ T5787] bridge_slave_1: entered allmulticast mode
[   73.969463][ T5787] bridge_slave_1: entered promiscuous mode
[   74.024784][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.032100][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.058497][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.073135][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.080569][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.106769][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.172212][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.181565][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.190198][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.197596][ T5799] bridge_slave_0: entered allmulticast mode
[   74.204684][ T5799] bridge_slave_0: entered promiscuous mode
[   74.216058][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.233994][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.270766][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.278168][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.285363][ T5799] bridge_slave_1: entered allmulticast mode
[   74.292594][ T5799] bridge_slave_1: entered promiscuous mode
[   74.301591][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.325124][ T5787] team0: Port device team_slave_0 added
[   74.335966][ T5787] team0: Port device team_slave_1 added
[   74.419311][ T5796] team0: Port device team_slave_0 added
[   74.436336][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.443803][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.475513][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.488510][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.495849][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.521876][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.537918][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.549335][ T5796] team0: Port device team_slave_1 added
[   74.557366][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.571068][ T5792] hsr_slave_0: entered promiscuous mode
[   74.578055][ T5792] hsr_slave_1: entered promiscuous mode
[   74.628247][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.635244][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.661446][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.710467][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.717573][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.744673][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.772444][ T5799] team0: Port device team_slave_0 added
[   74.777577][   T51] Bluetooth: hci0: command tx timeout
[   74.781274][ T5799] team0: Port device team_slave_1 added
[   74.795699][ T5787] hsr_slave_0: entered promiscuous mode
[   74.802220][ T5787] hsr_slave_1: entered promiscuous mode
[   74.808909][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.817262][ T5787] Cannot create hsr debugfs directory
[   74.858876][   T51] Bluetooth: hci1: command tx timeout
[   74.907439][ T5796] hsr_slave_0: entered promiscuous mode
[   74.916298][ T5796] hsr_slave_1: entered promiscuous mode
[   74.922563][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.930619][ T5796] Cannot create hsr debugfs directory
[   74.936970][   T51] Bluetooth: hci2: command tx timeout
[   74.949822][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.956982][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.983042][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.000500][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.007645][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.033770][   T51] Bluetooth: hci3: command tx timeout
[   75.039565][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.248161][ T5799] hsr_slave_0: entered promiscuous mode
[   75.254644][ T5799] hsr_slave_1: entered promiscuous mode
[   75.261045][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.269860][ T5799] Cannot create hsr debugfs directory
[   75.410115][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.442990][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.475446][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.485397][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.606460][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.617916][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.640011][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.661125][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.738005][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.747809][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.772074][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.782146][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.881168][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.893173][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.904561][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.919464][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.035219][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.052907][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.102540][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[   76.119569][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   76.159655][  T992] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.167181][  T992] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.177674][  T992] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.184791][  T992] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.211837][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.219048][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.234566][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.241821][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.263497][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.337487][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.356542][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[   76.394652][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[   76.416050][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.423258][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.439196][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.446344][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.468252][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.475381][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.512561][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.519809][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.714346][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.857756][   T51] Bluetooth: hci0: command tx timeout
[   76.936952][   T51] Bluetooth: hci1: command tx timeout
[   76.939768][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.017455][   T51] Bluetooth: hci2: command tx timeout
[   77.097017][   T51] Bluetooth: hci3: command tx timeout
[   77.123233][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.163762][ T5792] veth0_vlan: entered promiscuous mode
[   77.180410][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.222569][ T5792] veth1_vlan: entered promiscuous mode
[   77.240410][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.299149][ T5787] veth0_vlan: entered promiscuous mode
[   77.329320][ T5792] veth0_macvtap: entered promiscuous mode
[   77.354036][ T5799] veth0_vlan: entered promiscuous mode
[   77.371689][ T5787] veth1_vlan: entered promiscuous mode
[   77.389015][ T5792] veth1_macvtap: entered promiscuous mode
[   77.433388][ T5799] veth1_vlan: entered promiscuous mode
[   77.449112][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.462672][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.482522][ T5796] veth0_vlan: entered promiscuous mode
[   77.503457][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.513217][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.523273][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.533644][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.565138][ T5796] veth1_vlan: entered promiscuous mode
[   77.592197][ T5787] veth0_macvtap: entered promiscuous mode
[   77.640594][ T5787] veth1_macvtap: entered promiscuous mode
[   77.691956][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.702987][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.714894][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.746024][ T5799] veth0_macvtap: entered promiscuous mode
[   77.761509][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.777180][  T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.781172][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.787763][  T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.798686][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.820782][ T5799] veth1_macvtap: entered promiscuous mode
[   77.850982][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.860518][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.870063][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.879305][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.903840][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.914649][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.925860][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.936605][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.949533][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.969717][ T5796] veth0_macvtap: entered promiscuous mode
[   77.981968][ T5796] veth1_macvtap: entered promiscuous mode
[   78.008058][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.018725][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.029791][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.040832][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.052496][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.069191][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.077940][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.080532][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.096069][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.106572][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.117213][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.127337][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.138014][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.150214][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.172026][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.182072][ T5799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.192112][ T5799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.201896][ T5799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.223048][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.239638][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.249986][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.260879][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.271570][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.282432][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.294743][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.356158][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.371519][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.383810][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.392753][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.493598][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.519361][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.640743][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.685764][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.848291][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.856191][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.057807][   T51] Bluetooth: hci0: command tx timeout
[   79.063885][   T51] Bluetooth: hci1: command tx timeout
[   79.104705][   T51] Bluetooth: hci2: command tx timeout
[   79.177714][ T5794] Bluetooth: hci3: command tx timeout
[   79.517831][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.571088][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.839591][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.865810][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.569277][  T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.637127][  T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.643800][ T5885] syz.2.5[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   80.763851][ T5885] loop2: detected capacity change from 0 to 2048
[   80.824974][ T5892] loop0: detected capacity change from 0 to 512
[   80.837812][ T5885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.877059][ T5885] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.097145][   T51] Bluetooth: hci0: command tx timeout
[   81.103111][ T5794] Bluetooth: hci1: command tx timeout
[   81.177581][ T5794] Bluetooth: hci2: command tx timeout
[   81.311029][ T5794] Bluetooth: hci3: command tx timeout
[   81.463184][ T5901] fs-verity: sha512 using implementation "sha512-avx2"
[   81.497028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   81.556778][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[   81.732436][   T28] audit: type=1326 audit(1764306782.891:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000
[   82.157034][   T28] audit: type=1326 audit(1764306782.901:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6e98f749 code=0x7ffc0000
[   82.218425][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   82.266363][ T5892] EXT4-fs (loop0): Test dummy encryption mode enabled
[   82.333701][ T5892] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   82.716850][ T5892] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   83.369736][ T5892] EXT4-fs (loop0): 1 truncate cleaned up
[   83.381743][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.397883][ T5892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.115316][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   84.217745][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   84.422595][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   84.524914][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   84.537080][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   85.017631][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   85.187746][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.238943][   T27] cfg80211: failed to load regulatory.db
[   88.590872][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.619838][ T5941] loop1: detected capacity change from 0 to 47
[   89.096837][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.019871][ T5950] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.614143][ T5972] loop3: detected capacity change from 0 to 512
[   92.672800][ T5972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.729187][ T5972] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.891196][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.939669][ T5982] syz.2.22: attempt to access beyond end of device
[   92.939669][ T5982] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0
[   92.957521][ T5982] vxfs: unable to read disk superblock at 1
[   93.033401][ T5982] syz.2.22: attempt to access beyond end of device
[   93.033401][ T5982] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0
[   93.061758][ T5982] vxfs: unable to read disk superblock at 8
[   93.097947][ T5982] vxfs: can't find superblock.
[   93.453850][ T5985] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET)
[   93.966075][ T5988] Zero length message leads to an empty skb
[   95.005784][ T6004] loop2: detected capacity change from 0 to 64
[   95.161733][ T5995] loop3: detected capacity change from 0 to 128
[   95.265282][ T6008] tipc: Started in network mode
[   95.303398][ T6008] tipc: Node identity 2e20ca99269f, cluster identity 4711
[   95.328394][ T6008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.356216][ T6009] syzkaller0: entered promiscuous mode
[   95.369411][ T6009] syzkaller0: entered allmulticast mode
[   95.843608][ T6009] tipc: Resetting bearer <eth:syzkaller0>
[   96.109054][ T6007] tipc: Resetting bearer <eth:syzkaller0>
[   96.284335][ T6007] tipc: Disabling bearer <eth:syzkaller0>
[   97.295578][ T6027] ipt_REJECT: ECHOREPLY no longer supported.
[   97.852846][ T6031] Bluetooth: MGMT ver 1.22
[   97.863939][ T6021] orangefs_mount: mount request failed with -4
[   98.489280][ T6046] kvm: kvm [6045]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff
[   98.577357][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   98.792755][   T23] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   98.837518][   T23] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[   99.796924][   T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   99.954718][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.142546][ T6053] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.178199][ T6053] syzkaller0: entered promiscuous mode
[  100.204487][ T6053] syzkaller0: entered allmulticast mode
[  100.350612][   T23] usb 3-1: USB disconnect, device number 2
[  100.386092][ T6055] tipc: Resetting bearer <eth:syzkaller0>
[  100.433189][ T6052] tipc: Resetting bearer <eth:syzkaller0>
[  100.612736][ T6052] tipc: Disabling bearer <eth:syzkaller0>
[  102.430926][ T6063] loop1: detected capacity change from 0 to 32768
[  102.543301][ T6063] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  102.771883][ T5832] XFS (loop1): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  102.847912][ T5832] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_inobt block 0x18 
[  103.012699][ T5832] XFS (loop1): Unmount and run xfs_repair
[  103.039240][ T5832] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  103.832614][ T5832] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  IAB3............
[  103.862524][ T5832] 00000010: 00 00 00 00 00 00 00 18 00 00 00 02 00 00 00 10  ................
[  103.951756][ T5832] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  103.964450][ T5832] 00000030: 00 00 00 00 f0 ea ad a5 00 00 11 40 00 00 40 37  ...........@..@7
[  104.186840][ T5922] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  104.845862][ T5832] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  104.889704][ T5832] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  104.916187][ T5832] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  104.928098][ T5832] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  104.944733][ T6063] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x18 len 8 error 74
[  104.956687][ T6063] XFS (loop1): Failed to read root inode 0x1140, error 117
[  105.046882][ T5922] usb 1-1: Using ep0 maxpacket: 8
[  105.061613][ T5922] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  105.072087][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  105.084009][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.094235][ T5922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.152516][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  105.171257][ T5922] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  105.190166][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.266006][ T5922] usb 1-1: config 0 descriptor??
[  105.572092][ T6098] ALSA: mixer_oss: invalid OSS volume ''
[  107.004995][ T6104] process 'syz.1.59' launched './file1' with NULL argv: empty string added
[  108.547728][ T5832] usb 1-1: USB disconnect, device number 2
[  109.488171][ T6117] mmap: syz.1.63 (6117) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  109.538733][ T6121] tipc: Started in network mode
[  109.546646][ T6121] tipc: Node identity 52f48af1eb77, cluster identity 4711
[  109.568771][ T6121] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.605209][ T6124] syzkaller0: entered promiscuous mode
[  109.656487][ T6124] syzkaller0: entered allmulticast mode
[  110.656571][  T787] tipc: Node number set to 3112405745
[  110.704218][ T6121] tipc: Resetting bearer <eth:syzkaller0>
[  110.769079][ T6120] tipc: Resetting bearer <eth:syzkaller0>
[  110.878773][ T6120] tipc: Disabling bearer <eth:syzkaller0>
[  113.805207][ T6146] loop3: detected capacity change from 0 to 8192
[  113.972410][ T6146] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  114.791659][ T6146] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  114.819696][ T6146] REISERFS (device loop3): using ordered data mode
[  114.826405][ T6146] reiserfs: using flush barriers
[  114.848043][ T6146] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  114.898258][ T6146] REISERFS (device loop3): checking transaction log (loop3)
[  114.934876][ T6156] loop0: detected capacity change from 0 to 64
[  115.201989][ T6146] REISERFS (device loop3): Using tea hash to sort names
[  115.232259][ T6146] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  116.433341][ T6167] fuse: Bad value for 'fd'
[  117.192874][ T6179] netlink: 64 bytes leftover after parsing attributes in process `syz.2.81'.
[  117.402102][ T6179] loop2: detected capacity change from 0 to 256
[  118.865564][ T6179] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  118.915083][ T6171] loop0: detected capacity change from 0 to 8192
[  119.098047][ T6175] sg_write: data in/out 13915/42 bytes for SCSI command 0x0-- guessing data in;
[  119.098047][ T6175]    program syz.3.78 not setting count and/or reply_len properly
[  119.131560][ T6171] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  119.187586][ T6175] sg_write: data in/out 92/98 bytes for SCSI command 0x0-- guessing data in;
[  119.187586][ T6175]    program syz.3.78 not setting count and/or reply_len properly
[  121.169913][ T6197] fuse: Bad value for 'fd'
[  123.023928][ T6207] loop2: detected capacity change from 0 to 512
[  123.114157][ T6207] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  124.641872][ T6207] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  124.673903][ T6207] EXT4-fs (loop2): 1 truncate cleaned up
[  124.748427][ T6207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.260161][ T6217] loop3: detected capacity change from 0 to 131072
[  126.317912][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.337389][ T6217] F2FS-fs (loop3): invalid crc value
[  126.358132][ T6217] F2FS-fs (loop3): Found nat_bits in checkpoint
[  126.409796][ T6217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  127.254943][ T6229] loop2: detected capacity change from 0 to 1024
[  127.358628][ T6229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.555479][ T6215] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  129.638077][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.933269][ T6248] loop0: detected capacity change from 0 to 512
[  131.059273][ T6248] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  131.549309][ T6248] EXT4-fs (loop0): orphan cleanup on readonly fs
[  131.696792][ T6248] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.94: bg 0: block 16: invalid block bitmap
[  131.743975][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[  131.752036][ T6248] EXT4-fs (loop0): 1 truncate cleaned up
[  131.765459][ T6248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  132.500533][ T6259] loop2: detected capacity change from 0 to 512
[  132.566921][ T6259] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  132.630224][ T6259] EXT4-fs (loop2): 1 truncate cleaned up
[  132.679196][ T6259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.348115][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  133.491111][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  133.591376][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.293921][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.865534][ T6278] loop2: detected capacity change from 0 to 4096
[  137.285190][ T6278] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  137.329976][ T6278] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  137.390076][ T6278] ntfs: (device loop2): map_mft_record(): Failed with error code 4.
[  137.436872][ T6278] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -4.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  137.450426][ T6278] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  137.475986][ T6278] ntfs: (device loop2): map_mft_record(): Failed with error code 4.
[  137.501150][ T6278] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -4.  Marking corrupt inode 0x4 as bad.  Run chkdsk.
[  137.531772][ T6278] ntfs: (device loop2): load_and_init_attrdef(): Failed to initialize attribute definition table.
[  137.596026][ T6278] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files.
[  137.672202][ T6288] loop0: detected capacity change from 0 to 1024
[  138.740101][ T6297] binder: Bad value for 'stats'
[  138.901457][ T6300] loop2: detected capacity change from 0 to 1024
[  139.016866][ T6298] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  139.036887][ T6298] hfsplus: xattr searching failed
[  139.075537][ T6300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.221209][ T5829] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  139.449651][ T6311] binder_alloc: 6304: binder_alloc_buf, no vma
[  140.172145][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.666855][ T5829] usb 4-1: Using ep0 maxpacket: 8
[  141.676455][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.696811][ T5829] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  141.705881][ T5829] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  141.733606][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.759197][ T5829] usb 4-1: config 0 descriptor??
[  142.035022][ T5829] usb 4-1: USB disconnect, device number 2
[  142.953365][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'.
[  143.675595][ T6331] loop2: detected capacity change from 0 to 131072
[  143.747672][ T6331] F2FS-fs (loop2): invalid crc value
[  143.833274][ T6331] F2FS-fs (loop2): Found nat_bits in checkpoint
[  143.895521][ T6331] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  144.779049][ T6344] loop0: detected capacity change from 0 to 16
[  144.823535][ T6344] erofs: (device loop0): mounted with root inode @ nid 36.
[  144.962275][ T6344] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  145.024819][ T6346] loop2: detected capacity change from 0 to 256
[  145.032449][ T6344] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  145.497904][ T6348] netlink: 'syz.2.124': attribute type 3 has an invalid length.
[  145.505633][ T6348] netlink: 'syz.2.124': attribute type 1 has an invalid length.
[  147.369331][ T6360] loop2: detected capacity change from 0 to 8192
[  147.382357][ T6360] =======================================================
[  147.382357][ T6360] WARNING: The mand mount option has been deprecated and
[  147.382357][ T6360]          and is ignored by this kernel. Remove the mand
[  147.382357][ T6360]          option from the mount to silence this warning.
[  147.382357][ T6360] =======================================================
[  148.316684][ T6367] loop3: detected capacity change from 0 to 131072
[  148.363830][ T6367] F2FS-fs (loop3): invalid crc value
[  148.412757][ T6367] F2FS-fs (loop3): Found nat_bits in checkpoint
[  148.447185][ T6367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  149.436942][ T6384] binder: Bad value for 'stats'
[  152.350125][ T6403] loop1: detected capacity change from 0 to 1024
[  152.880645][ T6413] binder: Bad value for 'stats'
[  156.868098][ T6432] loop1: detected capacity change from 0 to 47
[  157.011596][ T6423] loop0: detected capacity change from 0 to 32768
[  157.108888][ T6423] JBD2: Ignoring recovery information on journal
[  157.607550][ T6423] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  160.250642][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  162.848685][ T6458] loop3: detected capacity change from 0 to 1024
[  163.082531][ T6448] loop1: detected capacity change from 0 to 32768
[  163.158990][ T6448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.155 (6448)
[  163.256171][ T6448] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.293069][ T6448] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  163.341330][ T6448] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  163.388671][ T6448] BTRFS info (device loop1): force zstd compression, level 3
[  163.440686][ T6448] BTRFS info (device loop1): turning on sync discard
[  163.456378][ T6448] BTRFS info (device loop1): force clearing of disk cache
[  163.481875][ T6448] BTRFS info (device loop1): enabling disk space caching
[  163.513898][ T6448] BTRFS info (device loop1): turning off discard
[  163.530775][ T6448] BTRFS info (device loop1): disk space caching is enabled
[  163.557095][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  163.567924][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  163.597612][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  163.633191][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  163.647366][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  163.659231][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  163.675464][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  163.692188][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  163.702676][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  163.715210][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  163.726766][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  163.737834][ T6448] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  164.182405][ T6448] BTRFS error (device loop1): open_ctree failed: -12
[  164.287451][ T6458] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  164.366419][ T6458] hfsplus: xattr searching failed
[  165.208654][ T6484] loop1: detected capacity change from 0 to 47
[  165.553065][ T6492] loop0: detected capacity change from 0 to 512
[  165.717563][ T6492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  166.156001][ T6492] EXT4-fs (loop0): 1 truncate cleaned up
[  166.171183][ T6492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.596702][    C0] sched: RT throttling activated
[  167.674493][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.280525][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  171.677436][    T9] usb 3-1: config 0 has no interfaces?
[  171.723176][    T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  171.852654][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.861275][    T9] usb 3-1: Product: syz
[  171.865493][    T9] usb 3-1: Manufacturer: syz
[  171.870651][    T9] usb 3-1: SerialNumber: syz
[  171.880035][    T9] usb 3-1: config 0 descriptor??
[  174.792428][ T6530] fuse: Bad value for 'user_id'
[  175.042398][ T6536] loop1: detected capacity change from 0 to 47
[  175.071890][ T6534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.113927][ T6534] syzkaller0: entered promiscuous mode
[  175.140334][ T6534] syzkaller0: entered allmulticast mode
[  175.244393][ T6534] tipc: Resetting bearer <eth:syzkaller0>
[  175.305379][ T6533] tipc: Resetting bearer <eth:syzkaller0>
[  175.409719][ T6540] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached
[  175.439496][ T6533] tipc: Disabling bearer <eth:syzkaller0>
[  175.551792][  T787] usb 3-1: USB disconnect, device number 3
[  176.851519][ T6550] loop0: detected capacity change from 0 to 131072
[  176.930964][ T6542] ax25_connect(): syz.3.174 uses autobind, please contact jreuter@yaina.de
[  176.978976][ T6550] F2FS-fs (loop0): invalid crc value
[  177.029816][ T6550] F2FS-fs (loop0): Found nat_bits in checkpoint
[  177.059421][ T6550] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  178.429611][ T6567] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  178.815991][ T6575] tipc: Started in network mode
[  178.827012][ T6575] tipc: Node identity bed64d92de23, cluster identity 4711
[  178.884505][ T6575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.944804][ T6575] tipc: Resetting bearer <eth:syzkaller0>
[  178.980022][ T6581] syzkaller0: entered promiscuous mode
[  179.021103][ T6573] tipc: Resetting bearer <eth:syzkaller0>
[  179.342119][ T6573] tipc: Disabling bearer <eth:syzkaller0>
[  180.064168][ T6591] loop1: detected capacity change from 0 to 47
[  181.099669][   T28] audit: type=1326 audit(1764306885.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  181.196779][   T28] audit: type=1326 audit(1764306885.270:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  181.219509][   T28] audit: type=1326 audit(1764306885.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  181.241981][   T28] audit: type=1326 audit(1764306885.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  181.265190][   T28] audit: type=1326 audit(1764306885.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  181.326359][   T28] audit: type=1326 audit(1764306885.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  181.402923][ T6602] loop2: detected capacity change from 0 to 512
[  181.519911][ T6602] EXT4-fs (loop2): 1 orphan inode deleted
[  181.542898][ T6602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.577022][ T6602] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.962475][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.153932][ T6609] loop2: detected capacity change from 0 to 16
[  182.193954][ T6609] erofs: (device loop2): mounted with root inode @ nid 36.
[  183.053504][ T6616] loop2: detected capacity change from 0 to 2048
[  183.694776][ T6616] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  183.726315][ T6616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.799888][ T6615] UDF-fs: unknown compression code (0)
[  183.812589][ T6615] UDF-fs: unknown compression code (0)
[  183.820880][ T6615] UDF-fs: unknown compression code (0)
[  183.827434][ T6615] UDF-fs: unknown compression code (0)
[  184.398650][ T6621] syz.2.201: attempt to access beyond end of device
[  184.398650][ T6621] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0
[  184.412525][ T6621] vxfs: unable to read disk superblock at 1
[  184.447687][ T6621] syz.2.201: attempt to access beyond end of device
[  184.447687][ T6621] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0
[  184.477156][ T6621] vxfs: unable to read disk superblock at 8
[  184.483208][ T6621] vxfs: can't find superblock.
[  185.014678][ T6629] loop3: detected capacity change from 0 to 1024
[  186.686916][ T6636] loop0: detected capacity change from 0 to 16
[  186.762726][ T6636] erofs: (device loop0): mounted with root inode @ nid 36.
[  186.825886][ T6629] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  186.839398][ T6629] hfsplus: xattr searching failed
[  187.024581][ T6642] loop1: detected capacity change from 0 to 47
[  187.419468][ T6647] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached
[  188.122301][ T6650] loop3: detected capacity change from 0 to 131072
[  188.188093][ T6650] F2FS-fs (loop3): invalid crc value
[  188.221229][ T6650] F2FS-fs (loop3): Found nat_bits in checkpoint
[  188.249663][ T6650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  189.656393][   T28] audit: type=1326 audit(1764306893.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c72b8f749 code=0x7ffc0000
[  189.731688][   T28] audit: type=1326 audit(1764306893.810:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c72b8f749 code=0x7ffc0000
[  189.796377][   T28] audit: type=1326 audit(1764306893.840:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c72b8f749 code=0x7ffc0000
[  190.016850][   T28] audit: type=1326 audit(1764306893.850:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c72b8f749 code=0x7ffc0000
[  190.052653][   T28] audit: type=1326 audit(1764306893.850:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c72b8f749 code=0x7ffc0000
[  190.079866][   T28] audit: type=1326 audit(1764306893.850:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c72b8df90 code=0x7ffc0000
[  190.103122][   T28] audit: type=1326 audit(1764306893.850:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c72b8f749 code=0x7ffc0000
[  190.137285][   T28] audit: type=1326 audit(1764306893.850:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5c72b8e3aa code=0x7ffc0000
[  190.187853][   T28] audit: type=1326 audit(1764306893.880:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5c72bc2005 code=0x7ffc0000
[  190.251675][   T28] audit: type=1326 audit(1764306894.100:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c72b8f749 code=0x7ffc0000
[  190.564562][ T6680] syz.1.218: attempt to access beyond end of device
[  190.564562][ T6680] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0
[  190.590744][ T6680] vxfs: unable to read disk superblock at 1
[  190.621573][ T6680] syz.1.218: attempt to access beyond end of device
[  190.621573][ T6680] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0
[  190.647463][ T6682] loop0: detected capacity change from 0 to 1024
[  190.674837][ T6680] vxfs: unable to read disk superblock at 8
[  190.697803][ T6680] vxfs: can't find superblock.
[  190.735707][ T6682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.683146][ T6685] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  191.726574][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.121207][ T6694] loop0: detected capacity change from 0 to 32768
[  192.155029][ T6694] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  192.277877][ T6694] XFS (loop0): Ending clean mount
[  193.346606][ T6708] loop3: detected capacity change from 0 to 131072
[  193.387988][ T6708] F2FS-fs (loop3): invalid crc value
[  193.749770][ T6708] F2FS-fs (loop3): Found nat_bits in checkpoint
[  193.798100][ T6708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  194.133712][ T5787] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  194.146837][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  194.813555][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  194.827038][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  195.205678][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.241926][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.277077][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.286333][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.298562][ T5922] usb 2-1: Product: syz
[  195.314455][ T5922] usb 2-1: Manufacturer: syz
[  195.322687][ T5922] usb 2-1: SerialNumber: syz
[  195.394015][ T5922] cdc_ncm 2-1:1.0: skipping garbage
[  195.436856][ T5922] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  195.444166][ T5922] cdc_ncm 2-1:1.0: bind() failure
[  195.955680][ T6727] tipc: Started in network mode
[  195.977572][ T6727] tipc: Node identity ea40bf76b6ad, cluster identity 4711
[  195.984914][ T6727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.028320][ T6727] syzkaller0: entered promiscuous mode
[  196.033863][ T6727] syzkaller0: entered allmulticast mode
[  196.187755][ T6727] tipc: Resetting bearer <eth:syzkaller0>
[  196.223598][ T6726] tipc: Resetting bearer <eth:syzkaller0>
[  196.320717][ T6726] tipc: Disabling bearer <eth:syzkaller0>
[  196.866825][ T6724] Bluetooth: hci0: command 0x0406 tx timeout
[  196.872961][ T5795] Bluetooth: hci1: command 0x0406 tx timeout
[  196.876095][ T6736] loop1: detected capacity change from 0 to 128
[  196.879213][ T5795] Bluetooth: hci2: command 0x0406 tx timeout
[  199.361419][ T6755] syz.2.233: attempt to access beyond end of device
[  199.361419][ T6755] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0
[  199.376873][ T6755] vxfs: unable to read disk superblock at 1
[  199.578677][ T6755] syz.2.233: attempt to access beyond end of device
[  199.578677][ T6755] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0
[  199.591711][ T6755] vxfs: unable to read disk superblock at 8
[  199.597757][ T6755] vxfs: can't find superblock.
[  201.334675][ T5869] usb 2-1: USB disconnect, device number 2
[  201.846852][ T6766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  201.946468][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'.
[  204.077045][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'.
[  205.312075][ T6803] loop2: detected capacity change from 0 to 128
[  205.445251][ T6803] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  205.607870][ T6803] hpfs: filesystem error: improperly stopped
[  205.627049][ T6803] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  205.686971][ T6803] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  206.588222][ T6808] syz.0.248: attempt to access beyond end of device
[  206.588222][ T6808] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0
[  206.603958][ T6808] vxfs: unable to read disk superblock at 1
[  206.617584][ T6803] hpfs: You really don't want any checks? You are crazy...
[  206.630498][ T6808] syz.0.248: attempt to access beyond end of device
[  206.630498][ T6808] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0
[  206.645489][ T6808] vxfs: unable to read disk superblock at 8
[  206.666824][ T6803] hpfs: hpfs_map_sector(): read error
[  206.693284][ T6808] vxfs: can't find superblock.
[  206.705243][ T6803] hpfs: code page support is disabled
[  206.771657][ T6803] hpfs: hpfs_map_4sectors(): unaligned read
[  206.827203][ T6803] hpfs: hpfs_map_4sectors(): unaligned read
[  206.833321][ T6803] hpfs: filesystem error: unable to find root dir
[  206.868029][ T6803] hpfs: hpfs_map_4sectors(): unaligned read
[  210.769556][ T6837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.820078][ T6837] syzkaller0: entered promiscuous mode
[  210.830704][ T6837] syzkaller0: entered allmulticast mode
[  210.877695][ T6837] tipc: Resetting bearer <eth:syzkaller0>
[  211.467448][ T6836] tipc: Resetting bearer <eth:syzkaller0>
[  211.527690][ T6836] tipc: Disabling bearer <eth:syzkaller0>
[  214.343084][ T6858] IPVS: sh: FWM 3 0x00000003 - no destination available
[  214.351105][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  214.607087][ T5832] IPVS: starting estimator thread 0...
[  214.737223][ T6860] IPVS: using max 18 ests per chain, 43200 per kthread
[  216.408157][ T6875] loop1: detected capacity change from 0 to 1024
[  216.437491][ T6875] EXT4-fs: Ignoring removed nomblk_io_submit option
[  216.995454][ T6875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.291155][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.588490][ T6882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.654783][ T6882] syzkaller0: entered promiscuous mode
[  217.670783][ T6882] syzkaller0: entered allmulticast mode
[  217.785173][ T6881] tipc: Resetting bearer <eth:syzkaller0>
[  217.853982][ T6881] tipc: Disabling bearer <eth:syzkaller0>
[  218.406371][ T6893] loop2: detected capacity change from 0 to 16
[  218.818451][ T6889] loop1: detected capacity change from 0 to 2048
[  218.825778][ T6893] erofs: (device loop2): mounted with root inode @ nid 36.
[  218.980080][ T6893] overlayfs: missing 'lowerdir'
[  218.990356][ T6889]  loop1: p1 < > p4
[  218.998546][ T6889] loop1: p4 size 8388608 extends beyond EOD, truncated
[  219.077060][ T5159]  loop1: p1 < > p4
[  219.087503][ T5159] loop1: p4 size 8388608 extends beyond EOD, truncated
[  219.421067][ T6900] vxfs: WRONG superblock magic 00000000 at 1
[  219.427558][ T6900] vxfs: WRONG superblock magic 00000000 at 8
[  219.433572][ T6900] vxfs: can't find superblock.
[  219.463207][ T6900] loop0: detected capacity change from 0 to 2048
[  220.374065][ T6900] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  220.722697][ T6901] loop1: detected capacity change from 0 to 2048
[  220.868152][ T6901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.931747][ T6764] udevd[6764]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  220.952834][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  220.970555][ T6901] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.767530][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  221.849433][ T6764] udevd[6764]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  222.080749][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.001472][ T6923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.041206][ T6921] syzkaller0: entered promiscuous mode
[  223.066919][ T6921] syzkaller0: entered allmulticast mode
[  223.269546][ T6920] tipc: Resetting bearer <eth:syzkaller0>
[  223.713652][ T6920] tipc: Disabling bearer <eth:syzkaller0>
[  224.191381][ T6935] loop0: detected capacity change from 0 to 1024
[  225.010199][ T6938] loop1: detected capacity change from 0 to 16
[  225.025713][ T6938] erofs: (device loop1): mounted with root inode @ nid 36.
[  225.052556][ T6938] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  225.061447][ T6938] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  225.798310][ T6946] binder: Bad value for 'stats'
[  226.130762][ T6945] loop1: detected capacity change from 0 to 2048
[  226.274690][ T6945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.293909][ T6945] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.812540][ T6950] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  226.859637][ T6950] hfsplus: xattr searching failed
[  227.033685][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.233269][ T6965] netlink: 56 bytes leftover after parsing attributes in process `syz.1.294'.
[  229.086633][ T6969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.130151][ T6969] syzkaller0: entered promiscuous mode
[  229.598359][ T6969] syzkaller0: entered allmulticast mode
[  229.840424][ T6968] tipc: Resetting bearer <eth:syzkaller0>
[  230.285217][ T6968] tipc: Disabling bearer <eth:syzkaller0>
[  231.740664][ T6975] loop2: detected capacity change from 0 to 262144
[  231.754821][ T6975] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.297 (6975)
[  231.775019][ T6975] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  231.786059][ T6975] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  231.795375][ T6975] BTRFS info (device loop2): using free space tree
[  232.127122][ T6975] BTRFS info (device loop2): enabling ssd optimizations
[  232.312796][ T6975] BTRFS info (device loop2): balance: start -dlimit=0 -mlimit=0 -slimit=0
[  232.353702][ T6975] BTRFS info (device loop2): relocating block group 30408704 flags metadata|dup
[  232.499708][ T6975] BTRFS info (device loop2): found 3 extents, stage: move data extents
[  232.628403][ T6975] BTRFS info (device loop2): relocating block group 22020096 flags system|dup
[  232.728393][ T6975] BTRFS info (device loop2): balance: canceled
[  232.847974][ T5792] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  232.950311][ T7000] loop1: detected capacity change from 0 to 16
[  232.982661][ T7000] erofs: (device loop1): mounted with root inode @ nid 36.
[  233.080863][ T7000] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  233.115929][ T7000] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  233.865497][ T7004] loop3: detected capacity change from 0 to 2048
[  233.968209][ T7004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.132459][ T7004] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.848679][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.918586][ T7024] binder: Bad value for 'stats'
[  237.799198][ T7028] fuse: Bad value for 'rootmode'
[  241.235883][ T7040] loop3: detected capacity change from 0 to 128
[  242.430550][ T7056] loop1: detected capacity change from 0 to 47
[  245.774801][ T7071] loop2: detected capacity change from 0 to 1024
[  247.897914][ T7076] binder: Bad value for 'stats'
[  249.149130][ T7091] netlink: 'syz.3.320': attribute type 21 has an invalid length.
[  249.157071][ T7091] netlink: 128 bytes leftover after parsing attributes in process `syz.3.320'.
[  249.166285][ T7091] netlink: 'syz.3.320': attribute type 6 has an invalid length.
[  249.174066][ T7091] netlink: 3 bytes leftover after parsing attributes in process `syz.3.320'.
[  249.614795][ T7090] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[  253.302593][ T7117] binder: Bad value for 'stats'
[  254.790946][ T7135] fuse: Unknown parameter '0x0000000000000007'
[  256.402739][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  256.410006][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  256.857497][ T7149] binder: Bad value for 'stats'
[  257.143016][  T992] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[  257.235566][  T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.256542][  T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.662872][ T7156] loop2: detected capacity change from 0 to 47
[  257.802197][ T7154] 8021q: adding VLAN 0 to HW filter on device batadv1
[  257.993213][ T7154] team0: Port device batadv1 added
[  259.137046][ T7173] binder: Bad value for 'stats'
[  261.990546][ T7182] loop2: detected capacity change from 0 to 512
[  262.045149][ T7182] EXT4-fs (loop2): Test dummy encryption mode enabled
[  262.071804][ T7182] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  262.127556][ T7182] EXT4-fs (loop2): 1 truncate cleaned up
[  262.147838][ T7182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.637877][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.884236][ T7202] loop2: detected capacity change from 0 to 512
[  263.045999][ T7202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.107754][ T7202] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  263.460277][ T7208] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #2: comm syz.2.360: corrupted inode contents
[  263.765089][ T7208] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #2: comm syz.2.360: mark_inode_dirty error
[  263.794522][ T7208] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #2: comm syz.2.360: corrupted inode contents
[  263.810991][ T7208] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.360: mark_inode_dirty error
[  265.248708][ T7218] binder: Bad value for 'stats'
[  265.926443][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.988134][ T7232] fuse: Bad value for 'fd'
[  268.251530][ T7234] loop3: detected capacity change from 0 to 512
[  268.336911][ T7234] EXT4-fs (loop3): Test dummy encryption mode enabled
[  269.556865][ T7234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  269.656822][ T7234] EXT4-fs (loop3): 1 truncate cleaned up
[  269.692022][ T7234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.709196][ T7243] loop1: detected capacity change from 0 to 47
[  270.683192][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.301011][ T7250] loop3: detected capacity change from 0 to 32768
[  273.231273][ T7250] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  274.163315][ T7273] loop1: detected capacity change from 0 to 131072
[  274.194342][ T7273] F2FS-fs (loop1): invalid crc value
[  274.219481][ T7273] F2FS-fs (loop1): Found nat_bits in checkpoint
[  274.277328][ T7273] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  274.870740][ T7250] XFS (loop3): Ending clean mount
[  274.893224][ T7279] binder: Bad value for 'stats'
[  274.921164][ T7250] XFS (loop3): Quotacheck needed: Please wait.
[  275.161961][ T7250] XFS (loop3): Quotacheck: Done.
[  275.252068][ T5796] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  276.673581][ T7290] loop2: detected capacity change from 0 to 1024
[  277.757690][ T7290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  277.788039][ T7290] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.995871][ T7303] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: comm syz.2.382: lblock 0 mapped to illegal pblock 0 (length 1)
[  278.025961][ T7303] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  278.042609][ T7303] EXT4-fs (loop2): This should not happen!! Data will be lost
[  278.042609][ T7303] 
[  278.112824][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  278.471122][ T7307] loop2: detected capacity change from 0 to 764
[  278.651452][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  278.651469][   T28] audit: type=1800 audit(1764306994.792:22): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.384" name="/" dev="fuse" ino=9 res=0 errno=0
[  279.797646][ T7317] loop2: detected capacity change from 0 to 1024
[  280.186515][ T7319] binder: Bad value for 'stats'
[  280.581023][ T7317] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  280.614265][ T7317] hfsplus: xattr searching failed
[  284.157193][ T5791] Bluetooth: hci3: command 0x0406 tx timeout
[  285.025032][ T7348] xt_CT: No such helper "pptp"
[  285.385202][ T7356] binder: Bad value for 'stats'
[  290.096440][ T7380] loop3: detected capacity change from 0 to 2048
[  290.313053][ T7380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.408875][ T7380] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.679174][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.387186][ T7402] binder: Bad value for 'stats'
[  295.449027][ T7421] fuse: Bad value for 'fd'
[  298.372797][ T7450] binder: Bad value for 'stats'
[  298.498833][ T7452] loop3: detected capacity change from 0 to 2048
[  298.545555][ T7452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.659585][ T7452] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.832248][ T7458] fuse: Bad value for 'fd'
[  298.972818][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.318428][ T7479] binder: Bad value for 'stats'
[  300.427044][ T7483] tipc: Enabled bearer <eth:netdevsim0>, priority 10
[  300.532770][ T7485] fuse: Unknown parameter '0x0000000000000003'
[  301.165992][ T7490] loop1: detected capacity change from 0 to 2048
[  302.232747][ T7490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.320455][ T7490] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.517387][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.071155][ T7506] binder: Bad value for 'stats'
[  303.634761][ T7508] fuse: Unknown parameter '0x0000000000000003'
[  310.768846][ T7549] fuse: Unknown parameter '0x0000000000000003'
[  317.527404][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  317.533805][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  317.600164][ T7589] fuse: Unknown parameter '0x0000000000000003'
[  319.903485][   T28] audit: type=1326 audit(1764307039.272:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  319.976500][   T28] audit: type=1326 audit(1764307039.272:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  320.027914][   T28] audit: type=1326 audit(1764307039.272:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  320.150895][   T28] audit: type=1326 audit(1764307039.272:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4178f749 code=0x7ffc0000
[  320.822623][ T7602] binder: Bad value for 'stats'
[  321.447747][ T7610] loop3: detected capacity change from 0 to 1024
[  322.342305][ T7613] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  322.351396][ T7600] loop1: detected capacity change from 0 to 32768
[  322.358176][ T7613] hfsplus: xattr searching failed
[  322.413733][ T7600] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.472 (7600)
[  322.716809][ T7600] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  322.836833][ T7600] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  322.917314][ T7600] BTRFS info (device loop1): using free space tree
[  323.362853][ T7600] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  324.025751][ T7600] BTRFS error (device loop1): open_ctree failed: -12
[  324.218953][ T5797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5797)
[  324.923756][ T7637] loop3: detected capacity change from 0 to 2048
[  324.974166][ T7637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.012431][ T7637] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.227055][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.244499][ T7648] fuse: Unknown parameter '0x0000000000000003'
[  330.573230][ T7726] overlayfs: failed to clone upperpath
[  331.310987][ T7731] fuse: Unknown parameter 'fd0x0000000000000003'
[  332.843428][ T7742] binder: Bad value for 'stats'
[  336.302534][ T7756] loop3: detected capacity change from 0 to 256
[  337.990736][ T7765] fuse: Unknown parameter 'fd0x0000000000000003'
[  338.413458][ T7769] serio: Serial port ptm0
[  339.648974][ T7767] loop3: detected capacity change from 0 to 32768
[  339.874439][ T7767] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.502 (7767)
[  340.690095][ T7767] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  340.751647][ T7767] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  340.796844][ T7767] BTRFS info (device loop3): using free space tree
[  340.932904][ T7790] binder: Bad value for 'stats'
[  341.160543][ T7767] BTRFS info (device loop3): enabling ssd optimizations
[  341.172222][ T7767] BTRFS info (device loop3): auto enabling async discard
[  342.613257][ T5796] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  347.766290][ T7842] binder: Bad value for 'stats'
[  351.746835][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  351.841732][ T7869] binder: Bad value for 'stats'
[  352.006783][ T5922] usb 3-1: Using ep0 maxpacket: 8
[  352.027768][ T5922] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  352.056734][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.098747][ T5922] usb 3-1: Product: syz
[  352.138160][ T5922] usb 3-1: Manufacturer: syz
[  352.180618][ T5922] usb 3-1: SerialNumber: syz
[  352.209111][ T5922] usb 3-1: config 0 descriptor??
[  353.764959][ T7879] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0
[  354.184012][ T7881] overlayfs: failed to clone upperpath
[  354.969727][ T5922] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  355.014330][ T5922] gspca_sunplus: reg_w_riv err -71
[  355.037223][ T5922] sunplus: probe of 3-1:0.0 failed with error -71
[  355.063707][ T5922] usb 3-1: USB disconnect, device number 4
[  355.335599][ T7890] loop2: detected capacity change from 0 to 1024
[  355.525596][ T7890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.943803][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.300737][ T7926] loop2: detected capacity change from 0 to 4096
[  359.311611][ T7926] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  361.120625][ T7937] loop1: detected capacity change from 0 to 47
[  362.602700][ T7945] loop3: detected capacity change from 0 to 8192
[  367.543369][ T7968] loop3: detected capacity change from 0 to 512
[  367.674808][ T7968] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.553: inode has both inline data and extents flags
[  367.792646][ T7968] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.553: couldn't read orphan inode 15 (err -117)
[  368.220105][ T7968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.707525][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.217405][ T8004] netlink: 84 bytes leftover after parsing attributes in process `syz.1.561'.
[  378.901188][ T8029] loop3: detected capacity change from 0 to 4096
[  378.940702][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  378.947338][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  378.967212][ T8029] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  379.082572][ T8029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.152828][ T8033] netlink: 'syz.1.571': attribute type 29 has an invalid length.
[  379.227199][ T8033] netlink: 'syz.1.571': attribute type 29 has an invalid length.
[  379.460103][ T8029] EXT4-fs (loop3): shut down requested (0)
[  381.286265][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.618673][  T992] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2
[  382.984133][ T8058] loop2: detected capacity change from 0 to 64
[  383.164884][ T8058] MINIX-fs: file system does not have enough zmap blocks allocated.  Refusing to mount.
[  383.216567][ T8058] MINIX-fs: bad superblock or unable to read bitmaps
[  383.223028][ T8060] loop3: detected capacity change from 0 to 512
[  383.266918][ T8060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  383.745776][ T8060] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.577: invalid indirect mapped block 4294967295 (level 0)
[  383.768061][ T8060] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.577: invalid indirect mapped block 4294967295 (level 1)
[  384.191378][ T8060] EXT4-fs (loop3): 1 orphan inode deleted
[  384.404589][ T8060] EXT4-fs (loop3): 1 truncate cleaned up
[  384.442535][ T8060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.695125][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.572508][ T8085] tipc: Enabling of bearer <eth:netdevsim0> rejected, already enabled
[  389.657605][ T8109] fuse: Bad value for 'fd'
[  391.206049][ T8123] loop1: detected capacity change from 0 to 256
[  391.213788][ T8123] exfat: Deprecated parameter 'utf8'
[  391.219282][ T8123] exfat: Unknown parameter 'zero_size_dir'
[  391.270503][ T8099] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  391.525020][ T8132] loop2: detected capacity change from 0 to 47
[  392.108630][ T8140] loop2: detected capacity change from 0 to 16
[  392.927426][ T8140] erofs: (device loop2): mounted with root inode @ nid 36.
[  393.238413][ T5791] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000]
[  393.383050][ T8143] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  393.399417][ T8143] syz.2.598 (8143) used greatest stack depth: 19336 bytes left
[  393.407337][   T28] audit: type=1800 audit(1764307118.548:27): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.598" name="file2" dev="loop2" ino=89 res=0 errno=0
[  395.184240][ T8149] loop1: detected capacity change from 0 to 2048
[  399.200229][ T8149] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1.
[  399.462025][ T8160] netlink: 44 bytes leftover after parsing attributes in process `syz.3.603'.
[  400.380346][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.608'.
[  400.423839][ T8166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.608'.
[  400.452991][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.608'.
[  400.483996][ T8166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.608'.
[  400.733726][ T8168] loop1: detected capacity change from 0 to 256
[  400.741355][ T8168] exfat: Deprecated parameter 'utf8'
[  400.746783][ T8168] exfat: Unknown parameter 'zero_size_dir'
[  400.807811][ T8099] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  402.530210][ T8181] syz.3.609: attempt to access beyond end of device
[  402.530210][ T8181] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0
[  402.574018][ T8177] loop1: detected capacity change from 0 to 256
[  402.682558][ T8183] loop2: detected capacity change from 0 to 512
[  402.740766][ T8183] EXT4-fs (loop2): Test dummy encryption mode enabled
[  402.765960][ T8177] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 256)
[  402.816066][ T8183] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  403.105885][ T8183] EXT4-fs (loop2): 1 truncate cleaned up
[  403.143115][ T8183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.496957][    C0] ------------[ cut here ]------------
[  445.502911][    C0] ODEBUG: free active (active state 0) object: ffff888025e59890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  445.516261][    C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540
[  445.526063][    C0] Modules linked in:
[  445.530024][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
[  445.537110][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  445.547254][    C0] RIP: 0010:debug_check_no_obj_freed+0x446/0x540
[  445.553845][    C0] Code: 4c 8b 4d 00 48 c7 c7 00 79 fc 8a 48 c7 c6 60 75 fc 8a 48 c7 c2 80 7a fc 8a 8b 0c 24 4d 89 f8 41 55 e8 9e b9 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a3 5f 24
[  445.573613][    C0] RSP: 0018:ffffc90000007a50 EFLAGS: 00010296
[  445.579749][    C0] RAX: 9d8f2d9d978c2900 RBX: ffffffff970c1688 RCX: ffffffff8ca93440
[  445.587870][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  445.595960][    C0] RBP: ffffffff8aac9f00 R08: ffffc90000007647 R09: 1ffff92000000ec8
[  445.603986][    C0] R10: dffffc0000000000 R11: fffff52000000ec9 R12: ffff888025e59a00
[  445.612158][    C0] R13: ffffffff8967e2e0 R14: ffff888025e59000 R15: ffff888025e59890
[  445.620209][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  445.629315][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  445.635954][    C0] CR2: 00007f5c68cbd000 CR3: 000000001e29a000 CR4: 00000000003506f0
[  445.644010][    C0] Call Trace:
[  445.647353][    C0]  <IRQ>
[  445.650238][    C0]  slab_free_freelist_hook+0xd2/0x1b0
[  445.655753][    C0]  ? rose_timer_expiry+0x4c6/0x5f0
[  445.660938][    C0]  __kmem_cache_free+0xba/0x1f0
[  445.665837][    C0]  rose_timer_expiry+0x4c6/0x5f0
[  445.670961][    C0]  ? call_timer_fn+0x15a/0x530
[  445.675760][    C0]  call_timer_fn+0x16e/0x530
[  445.680403][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  445.685462][    C0]  ? call_timer_fn+0xbf/0x530
[  445.690310][    C0]  ? __run_timers+0x7d0/0x7d0
[  445.695123][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  445.700377][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  445.705608][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  445.710695][    C0]  __run_timers+0x52d/0x7d0
[  445.715242][    C0]  ? detach_timer+0x2b0/0x2b0
[  445.719986][    C0]  ? lock_chain_count+0x20/0x20
[  445.724875][    C0]  run_timer_softirq+0x67/0xf0
[  445.729706][    C0]  handle_softirqs+0x280/0x820
[  445.734504][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  445.739325][    C0]  ? do_softirq+0x180/0x180
[  445.743863][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  445.749122][    C0]  __irq_exit_rcu+0xc7/0x190
[  445.753838][    C0]  ? irq_exit_rcu+0x20/0x20
[  445.758415][    C0]  irq_exit_rcu+0x9/0x20
[  445.762688][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  445.768373][    C0]  </IRQ>
[  445.771328][    C0]  <TASK>
[  445.774375][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  445.780500][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  445.786250][    C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 f4 38 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
[  445.805917][    C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2
[  445.812042][    C0] RAX: 9d8f2d9d978c2900 RBX: ffffffff8161981b RCX: 9d8f2d9d978c2900
[  445.820074][    C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f40
[  445.828100][    C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65
[  445.836097][    C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a8e28
[  445.844131][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688
[  445.852159][    C0]  ? do_idle+0x1eb/0x510
[  445.856447][    C0]  default_idle+0x13/0x20
[  445.860839][    C0]  default_idle_call+0x6c/0xa0
[  445.865662][    C0]  do_idle+0x1eb/0x510
[  445.869825][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  445.875090][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  445.880805][    C0]  cpu_startup_entry+0x43/0x60
[  445.885609][    C0]  rest_init+0x2e2/0x300
[  445.889914][    C0]  ? time_init+0x40/0x40
[  445.894196][    C0]  arch_call_rest_init+0xe/0x10
[  445.899292][    C0]  start_kernel+0x459/0x4e0
[  445.903832][    C0]  x86_64_start_reservations+0x2a/0x30
[  445.909355][    C0]  x86_64_start_kernel+0x60/0x60
[  445.914334][    C0]  secondary_startup_64_no_verify+0x179/0x17b
[  445.920489][    C0]  </TASK>
[  445.923533][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  445.930834][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
[  445.937887][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  445.947975][    C0] Call Trace:
[  445.951276][    C0]  <IRQ>
[  445.954143][    C0]  dump_stack_lvl+0x16c/0x230
[  445.958866][    C0]  ? show_regs_print_info+0x20/0x20
[  445.964096][    C0]  ? load_image+0x3b0/0x3b0
[  445.968637][    C0]  panic+0x2c0/0x710
[  445.972566][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  445.977106][    C0]  ? secondary_startup_64_no_verify+0x179/0x17b
[  445.983378][    C0]  __warn+0x2e0/0x470
[  445.987389][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[  445.993139][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[  445.998888][    C0]  report_bug+0x2be/0x4f0
[  446.003246][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[  446.008999][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[  446.014750][    C0]  ? debug_check_no_obj_freed+0x448/0x540
[  446.020497][    C0]  handle_bug+0xcf/0x120
[  446.024778][    C0]  exc_invalid_op+0x1a/0x50
[  446.029313][    C0]  asm_exc_invalid_op+0x1a/0x20
[  446.034207][    C0] RIP: 0010:debug_check_no_obj_freed+0x446/0x540
[  446.040586][    C0] Code: 4c 8b 4d 00 48 c7 c7 00 79 fc 8a 48 c7 c6 60 75 fc 8a 48 c7 c2 80 7a fc 8a 8b 0c 24 4d 89 f8 41 55 e8 9e b9 29 fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 a3 5f 24
[  446.060240][    C0] RSP: 0018:ffffc90000007a50 EFLAGS: 00010296
[  446.066335][    C0] RAX: 9d8f2d9d978c2900 RBX: ffffffff970c1688 RCX: ffffffff8ca93440
[  446.074420][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  446.082415][    C0] RBP: ffffffff8aac9f00 R08: ffffc90000007647 R09: 1ffff92000000ec8
[  446.090498][    C0] R10: dffffc0000000000 R11: fffff52000000ec9 R12: ffff888025e59a00
[  446.098490][    C0] R13: ffffffff8967e2e0 R14: ffff888025e59000 R15: ffff888025e59890
[  446.106494][    C0]  ? rose_transmit_link+0x740/0x740
[  446.111865][    C0]  slab_free_freelist_hook+0xd2/0x1b0
[  446.117372][    C0]  ? rose_timer_expiry+0x4c6/0x5f0
[  446.122518][    C0]  __kmem_cache_free+0xba/0x1f0
[  446.127404][    C0]  rose_timer_expiry+0x4c6/0x5f0
[  446.132375][    C0]  ? call_timer_fn+0x15a/0x530
[  446.137169][    C0]  call_timer_fn+0x16e/0x530
[  446.141797][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  446.146863][    C0]  ? call_timer_fn+0xbf/0x530
[  446.151572][    C0]  ? __run_timers+0x7d0/0x7d0
[  446.156366][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  446.161594][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  446.166814][    C0]  ? rose_start_t1timer+0xd0/0xd0
[  446.171885][    C0]  __run_timers+0x52d/0x7d0
[  446.176440][    C0]  ? detach_timer+0x2b0/0x2b0
[  446.181148][    C0]  ? lock_chain_count+0x20/0x20
[  446.186118][    C0]  run_timer_softirq+0x67/0xf0
[  446.190948][    C0]  handle_softirqs+0x280/0x820
[  446.195771][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  446.200575][    C0]  ? do_softirq+0x180/0x180
[  446.205549][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  446.210818][    C0]  __irq_exit_rcu+0xc7/0x190
[  446.215437][    C0]  ? irq_exit_rcu+0x20/0x20
[  446.219985][    C0]  irq_exit_rcu+0x9/0x20
[  446.224250][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  446.229932][    C0]  </IRQ>
[  446.232900][    C0]  <TASK>
[  446.235878][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  446.241906][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  446.247659][    C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 f4 38 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
[  446.267469][    C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2
[  446.273665][    C0] RAX: 9d8f2d9d978c2900 RBX: ffffffff8161981b RCX: 9d8f2d9d978c2900
[  446.281664][    C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f40
[  446.289665][    C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65
[  446.297665][    C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a8e28
[  446.305745][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688
[  446.313744][    C0]  ? do_idle+0x1eb/0x510
[  446.318026][    C0]  default_idle+0x13/0x20
[  446.322378][    C0]  default_idle_call+0x6c/0xa0
[  446.327202][    C0]  do_idle+0x1eb/0x510
[  446.331391][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  446.336622][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  446.342568][    C0]  cpu_startup_entry+0x43/0x60
[  446.347366][    C0]  rest_init+0x2e2/0x300
[  446.351635][    C0]  ? time_init+0x40/0x40
[  446.355906][    C0]  arch_call_rest_init+0xe/0x10
[  446.360791][    C0]  start_kernel+0x459/0x4e0
[  446.365329][    C0]  x86_64_start_reservations+0x2a/0x30
[  446.370819][    C0]  x86_64_start_kernel+0x60/0x60
[  446.375783][    C0]  secondary_startup_64_no_verify+0x179/0x17b
[  446.381904][    C0]  </TASK>
[  446.385220][    C0] Kernel Offset: disabled
[  446.389635][    C0] Rebooting in 86400 seconds..