last executing test programs:

11m55.278099438s ago: executing program 0 (id=1):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
sendto$inet6(r0, &(0x7f0000000200)='test', 0x4, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025"], 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000180)=""/40}, 0x20)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/ip6t_hashlimit/lo\x00', 0x0, 0x0)
read(r1, &(0x7f0000000400)=""/512, 0x200)

11m55.172546681s ago: executing program 0 (id=12):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x989816, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

11m55.075723053s ago: executing program 0 (id=14):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x254b, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x143102)
writev(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2)
shmctl$SHM_UNLOCK(0x0, 0xc)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)
kexec_load(0x0, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0x12008000, 0x1008000}], 0x0)

11m52.854815227s ago: executing program 0 (id=28):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

11m52.74754451s ago: executing program 32 (id=28):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)=r1}, 0x20)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

11m44.535340551s ago: executing program 4 (id=66):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x1000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x4, 0x8, 0x8, 0x2, 0x0, 0x8, 0x0, 0x6, 0x6, 0x1, 0x3], 0x1000, 0x8340})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m44.243527718s ago: executing program 4 (id=70):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x11, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd1c80a954e89b09}, @broadcast, @void, {@llc_tr={0x11, {@llc={0x42, 0xff, "fb"}}}}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xffea}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0)

11m43.997065934s ago: executing program 4 (id=72):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="796c9e04f4eb"], 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11m43.475672377s ago: executing program 4 (id=75):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

11m43.395817369s ago: executing program 4 (id=76):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x82000001, 0x4)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32, @ANYBLOB="1400060064756d6d79300000000000000000000014000400766574"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffe0, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
write(r0, &(0x7f0000000000)="01", 0x1)

11m43.042825947s ago: executing program 4 (id=77):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

11m42.613732798s ago: executing program 33 (id=77):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90841835ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7", 0x394}], 0x1}, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

10m48.55884029s ago: executing program 5 (id=313):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x4, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000)
write$tun(r0, &(0x7f0000000340)=ANY=[], 0x4a)

10m48.282908466s ago: executing program 5 (id=316):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000f00011f50b"], 0xfdef)

10m46.662372906s ago: executing program 5 (id=321):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000849311b7a1000000aaff020000000000013a0000000000000002009078"], 0x6e)

10m45.422882656s ago: executing program 5 (id=324):
add_key(&(0x7f0000000400)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x880)

10m45.350035118s ago: executing program 5 (id=325):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

10m44.403177291s ago: executing program 5 (id=327):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x7, 0x4)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000004c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r6, &(0x7f0000000580)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x47, &(0x7f0000019580)=0x7)
io_setup(0x5, &(0x7f00000195c0))
r7 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000019600)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r8 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x4098884, &(0x7f0000019a00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000019a80)=[{&(0x7f0000019ac0)="94", 0x1}], 0x1)
setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000042000000000000000000ea0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000fffffff07b9af8ff00000000b6090000000000117baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

10m28.588706578s ago: executing program 34 (id=327):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000280)=0x7, 0x4)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000004c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r6, &(0x7f0000000580)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x47, &(0x7f0000019580)=0x7)
io_setup(0x5, &(0x7f00000195c0))
r7 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000019600)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r8 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x4098884, &(0x7f0000019a00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000019a80)=[{&(0x7f0000019ac0)="94", 0x1}], 0x1)
setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000042000000000000000000ea0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000fffffff07b9af8ff00000000b6090000000000117baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

3.803296749s ago: executing program 6 (id=2468):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=00000000000000000770,mode=lfs,inline_data,fastboot,fsync_mode=strict,\x00iscard_unit=section,\x00'], 0x21, 0x5548, &(0x7f00000054c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000007c0)={@desc={0x1, 0x0, @desc4}})
openat(0xffffffffffffff9c, &(0x7f0000000800)='.\x00', 0x515001, 0x408)

3.562288025s ago: executing program 2 (id=2471):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
close(r0)

3.461110367s ago: executing program 2 (id=2474):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@discard_async}, {@max_inline={'max_inline', 0x3d, [0x78, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400})

2.037594281s ago: executing program 1 (id=2486):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x2c, "", [{{0x9, 0x4, 0x0, 0xd8, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x87, 0x81}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1"], 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

1.895252534s ago: executing program 6 (id=2487):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xd, 0x2, "e545"}, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

1.823678306s ago: executing program 2 (id=2488):
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="f788ff60e06314fd4c56f8"], 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

1.477296135s ago: executing program 1 (id=2492):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000200)='10', 0x2)
mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000540)=0x1000000007, 0x1009, 0x3bb80843a1300a)

1.420388256s ago: executing program 1 (id=2493):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}]}, &(0x7f0000000900)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000940), &(0x7f0000000980)=0x4)

1.318881549s ago: executing program 6 (id=2495):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0), 0x1, 0x5a8, &(0x7f0000000400)="$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")
syz_mount_image$vfat(&(0x7f00000009c0), &(0x7f0000000a00)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f0000000a40))
chdir(&(0x7f0000000a80)='./bus\x00')
mkdir(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142)
rename(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0\x00')

1.25807288s ago: executing program 2 (id=2496):
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0)

1.189978221s ago: executing program 6 (id=2497):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xc41f, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @random="4c7a185b4b8f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x6071, 0x0, 0xe7, {[@md5sig={0x13, 0x12, "50cadae785c1b2c95a0b2eb31dc97ef6"}]}}}}}}}, 0x0)

1.019944656s ago: executing program 2 (id=2498):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480))
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pause()
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)

735.373402ms ago: executing program 3 (id=2500):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@random="163e79baae36", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x28}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x4000, 0x0, 0x11, 0x0, @local, @local}, {0x4e22, 0x17c1, 0x20, 0x0, @wg=@initiation={0x1, 0x0, "fd6dc1818af3a927110300b97acecea200", "8c5d202652e2df149d194dcc2660c274207e8baba61ec5acf8d3e6c3c11619383d0e0665852ae093eaf82a8a64ecd063", "f1ccf8b5f79c6d395793813a32cffbed120f5cbfeaf18bba75a6e888", {"2dd8fdde25aff739608383c442b3ef7d", "48364471c4a345ec6dbef1564b299920"}}}}}}}}, 0x3e)

625.644775ms ago: executing program 3 (id=2501):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff8000018014000180"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001300050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a80100005800c"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

590.483236ms ago: executing program 3 (id=2502):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

556.590716ms ago: executing program 3 (id=2503):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = dup(r0)
write$FUSE_ENTRY(r1, &(0x7f0000000540)={0x90, 0x0, 0x0, {0x1, 0xf5fffffe, 0x81, 0x93ee, 0xd, 0x1ff, {0x2, 0x1ff, 0x80000001, 0x6, 0x1ff, 0x1ff, 0xa2c, 0x3, 0x5, 0x8000, 0x6, 0x0, 0x0, 0x9, 0x200}}}, 0x90)

503.024818ms ago: executing program 3 (id=2504):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
connect$inet(0xffffffffffffffff, 0x0, 0x0)

457.683299ms ago: executing program 1 (id=2505):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0', 0x1)
r1 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r1, 0x100000000)

280.283763ms ago: executing program 6 (id=2506):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200010, &(0x7f0000001040)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@utf8}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@dos1xfloppy}, {@utf8no}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@utf8no}]}, 0x3, 0x28e, &(0x7f0000000640)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

280.188953ms ago: executing program 1 (id=2507):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x881, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4000001f, 0x0, 0x1b2}]})

235.138874ms ago: executing program 1 (id=2508):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
syz_usb_connect(0x5, 0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x8e3e, 0x8001, 0x0, 0x0}, {0x0, 0x3201, 0x0, 0x0}, {0x7f, 0x4000, 0x0, 0x0}], 0x3})

129.102017ms ago: executing program 2 (id=2509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

72.886808ms ago: executing program 6 (id=2510):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=2511):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203)

kernel console output (not intermixed with test programs):

s an active interface with an up link
[  102.267187][ T6255] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  102.295476][ T6197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.347071][ T6255] F2FS-fs (loop2): Found nat_bits in checkpoint
[  102.400421][ T6197] team0: Port device team_slave_0 added
[  102.424860][ T6197] team0: Port device team_slave_1 added
[  102.510857][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.529624][ T6255] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  102.529630][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.529655][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.556826][ T6255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  102.594104][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.601084][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.626409][ T6286] loop3: detected capacity change from 0 to 128
[  102.695399][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.700492][ T6286] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  102.790522][ T6197] hsr_slave_0: entered promiscuous mode
[  102.797764][ T6197] hsr_slave_1: entered promiscuous mode
[  102.806368][ T6286] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.827744][ T6197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.842346][ T6197] Cannot create hsr debugfs directory
[  102.964459][ T5777] syz-executor: attempt to access beyond end of device
[  102.964459][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  103.134076][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  104.319437][ T6303] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  104.376666][ T5772] Bluetooth: hci0: command tx timeout
[  104.675345][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.835556][ T6306] loop3: detected capacity change from 0 to 128
[  104.864618][ T6197] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  104.910092][ T6306] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.986706][ T6197] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.023071][ T6306] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.084543][ T6197] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.119152][ T6197] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.805865][ T6319] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  106.094990][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.180602][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  106.196606][ T6197] 8021q: adding VLAN 0 to HW filter on device team0
[  106.239316][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.246519][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.329488][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.336685][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.488256][ T6197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.492671][ T5772] Bluetooth: hci0: command tx timeout
[  106.859501][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.625703][ T6197] veth0_vlan: entered promiscuous mode
[  107.660709][ T6197] veth1_vlan: entered promiscuous mode
[  107.689478][ T6380] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.745811][ T6197] veth0_macvtap: entered promiscuous mode
[  107.786201][ T6197] veth1_macvtap: entered promiscuous mode
[  107.834786][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.862324][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.892562][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.936566][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.952591][ T6389] binder: 6387:6389 ioctl c0306201 200000000240 returned -14
[  107.962237][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.970543][ T6389] binder: 6387:6389 ioctl c0306201 200000000380 returned -14
[  107.992230][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.023908][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.096002][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.131995][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.153879][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.172234][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.192327][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.212368][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.238441][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.284146][ T6197] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.312952][ T6197] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.336860][ T6197] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.350729][ T6400] FAULT_INJECTION: forcing a failure.
[  108.350729][ T6400] name failslab, interval 1, probability 0, space 0, times 1
[  108.352291][ T6197] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.363773][ T6400] CPU: 0 PID: 6400 Comm: syz.2.120 Not tainted syzkaller #0
[  108.363817][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  108.363836][ T6400] Call Trace:
[  108.363848][ T6400]  <TASK>
[  108.396101][ T6400]  dump_stack_lvl+0x18c/0x250
[  108.400826][ T6400]  ? show_regs_print_info+0x20/0x20
[  108.406042][ T6400]  ? load_image+0x420/0x420
[  108.410539][ T6400]  ? __local_bh_enable_ip+0x13a/0x1c0
[  108.415915][ T6400]  ? lockdep_hardirqs_on+0x98/0x150
[  108.421150][ T6400]  should_fail_ex+0x394/0x4c0
[  108.425876][ T6400]  should_failslab+0x9/0x20
[  108.430412][ T6400]  slab_pre_alloc_hook+0x59/0x300
[  108.435469][ T6400]  ? tipc_topsrv_queue_evt+0xeb/0x2a0
[  108.440873][ T6400]  __kmem_cache_alloc_node+0x53/0x250
[  108.446278][ T6400]  ? tipc_topsrv_queue_evt+0x2a0/0x2a0
[  108.451769][ T6400]  ? tipc_topsrv_queue_evt+0xeb/0x2a0
[  108.457178][ T6400]  kmalloc_trace+0x2a/0xe0
[  108.461635][ T6400]  tipc_topsrv_queue_evt+0xeb/0x2a0
[  108.466867][ T6400]  tipc_sub_report_overlap+0x4b8/0x8a0
[  108.472368][ T6400]  tipc_nametbl_insert_publ+0xe40/0x1380
[  108.478064][ T6400]  tipc_nametbl_publish+0x121/0x270
[  108.483306][ T6400]  tipc_sk_publish+0x1cc/0x430
[  108.488101][ T6400]  ? __lock_acquire+0x7eb0/0x7eb0
[  108.493163][ T6400]  ? tipc_sk_withdraw+0x640/0x640
[  108.498218][ T6400]  ? tipc_nametbl_build_group+0x2e/0x4c0
[  108.503887][ T6400]  ? tipc_nametbl_build_group+0x482/0x4c0
[  108.509638][ T6400]  ? tipc_nametbl_build_group+0x2e/0x4c0
[  108.515317][ T6400]  tipc_sk_join+0x3b0/0x6a0
[  108.519859][ T6400]  ? __tipc_sendstream+0x1290/0x1290
[  108.525191][ T6400]  tipc_setsockopt+0x73f/0x990
[  108.530002][ T6400]  ? tipc_shutdown+0x4d0/0x4d0
[  108.534799][ T6400]  ? __fget_files+0x28/0x460
[  108.539429][ T6400]  ? aa_sock_opt_perm+0x74/0x100
[  108.544401][ T6400]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  108.549982][ T6400]  ? security_socket_setsockopt+0x7e/0xa0
[  108.555731][ T6400]  ? tipc_shutdown+0x4d0/0x4d0
[  108.560521][ T6400]  do_sock_setsockopt+0x175/0x1a0
[  108.565575][ T6400]  ? __fdget+0x180/0x210
[  108.569852][ T6400]  __x64_sys_setsockopt+0x182/0x200
[  108.575116][ T6400]  do_syscall_64+0x55/0xb0
[  108.579560][ T6400]  ? clear_bhb_loop+0x40/0x90
[  108.584268][ T6400]  ? clear_bhb_loop+0x40/0x90
[  108.588979][ T6400]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  108.594914][ T6400] RIP: 0033:0x7ff1b939f559
[  108.599360][ T6400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.618988][ T6400] RSP: 002b:00007ff1ba21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  108.627429][ T6400] RAX: ffffffffffffffda RBX: 00007ff1b9625fa0 RCX: 00007ff1b939f559
[  108.635420][ T6400] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004
[  108.643410][ T6400] RBP: 00007ff1b9436b20 R08: 000000000000002e R09: 0000000000000000
[  108.651401][ T6400] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000000
[  108.659387][ T6400] R13: 00007ff1b9626038 R14: 00007ff1b9625fa0 R15: 00007ffd44e18368
[  108.667397][ T6400]  </TASK>
[  108.864494][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.897173][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.967295][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.981389][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.376702][ T6435] syzkaller1: entered promiscuous mode
[  109.398046][ T6435] syzkaller1: entered allmulticast mode
[  109.398460][ T6437] loop2: detected capacity change from 0 to 128
[  109.469414][ T6437] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.531662][ T6437] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.213617][ T6458] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  110.663318][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.049674][ T6483] loop2: detected capacity change from 0 to 128
[  111.063178][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'.
[  111.094247][ T6483] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  111.141087][ T6487] syz.3.139 uses obsolete (PF_INET,SOCK_PACKET)
[  111.151695][ T6483] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.523897][ T6497] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  111.998900][ T6498] loop3: detected capacity change from 0 to 512
[  112.127237][ T6498] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.142: iget: bad i_size value: 38620345925642
[  112.147518][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.159290][ T6498] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.142: couldn't read orphan inode 15 (err -117)
[  112.177860][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.302848][ T6506] tipc: Started in network mode
[  112.307912][ T6506] tipc: Node identity 8ed2cb34bde2, cluster identity 4711
[  112.333979][ T6506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.400857][ T6506] syzkaller0: entered promiscuous mode
[  112.411653][ T6506] syzkaller0: entered allmulticast mode
[  112.423657][ T6506] tipc: Resetting bearer <eth:syzkaller0>
[  112.429817][ T6513] process 'syz.2.144' launched './file0' with NULL argv: empty string added
[  112.491184][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.509282][ T6505] tipc: Resetting bearer <eth:syzkaller0>
[  112.974868][ T6529] FAULT_INJECTION: forcing a failure.
[  112.974868][ T6529] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  112.995262][ T6529] CPU: 1 PID: 6529 Comm: syz.2.148 Not tainted syzkaller #0
[  113.002604][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  113.012689][ T6529] Call Trace:
[  113.015997][ T6529]  <TASK>
[  113.018950][ T6529]  dump_stack_lvl+0x18c/0x250
[  113.023663][ T6529]  ? show_regs_print_info+0x20/0x20
[  113.028902][ T6529]  ? load_image+0x420/0x420
[  113.033442][ T6529]  ? __lock_acquire+0x7eb0/0x7eb0
[  113.038507][ T6529]  should_fail_ex+0x394/0x4c0
[  113.043232][ T6529]  prepare_alloc_pages+0x1e1/0x5b0
[  113.048369][ T6529]  __alloc_pages+0x134/0x460
[  113.052990][ T6529]  ? zone_statistics+0x170/0x170
[  113.057932][ T6529]  ? __virt_addr_valid+0x10c/0x380
[  113.063043][ T6529]  ? __check_object_size+0x4fc/0xa40
[  113.068327][ T6529]  af_alg_sendmsg+0x1303/0x1fa0
[  113.073199][ T6529]  ? af_alg_wait_for_data+0x6c0/0x6c0
[  113.078567][ T6529]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  113.084985][ T6529]  ? aa_sock_msg_perm+0x94/0x150
[  113.089924][ T6529]  ? apparmor_socket_sendmsg+0x8e/0x330
[  113.095469][ T6529]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  113.100759][ T6529]  ? skcipher_sendmsg+0x26/0xf0
[  113.105615][ T6529]  sock_write_iter+0x2dc/0x420
[  113.110385][ T6529]  ? sock_read_iter+0x3f0/0x3f0
[  113.115244][ T6529]  ? common_file_perm+0x198/0x1f0
[  113.120273][ T6529]  vfs_write+0x474/0x9a0
[  113.124524][ T6529]  ? file_end_write+0x250/0x250
[  113.129381][ T6529]  ? __fget_files+0x3fc/0x460
[  113.134065][ T6529]  ? __fdget_pos+0x1d8/0x330
[  113.138656][ T6529]  ? ksys_write+0x74/0x260
[  113.143077][ T6529]  ksys_write+0x151/0x260
[  113.147415][ T6529]  ? __ia32_sys_read+0x90/0x90
[  113.152181][ T6529]  ? lockdep_hardirqs_on+0x98/0x150
[  113.157389][ T6529]  do_syscall_64+0x55/0xb0
[  113.161797][ T6529]  ? clear_bhb_loop+0x40/0x90
[  113.166470][ T6529]  ? clear_bhb_loop+0x40/0x90
[  113.171143][ T6529]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  113.177038][ T6529] RIP: 0033:0x7ff1b939f559
[  113.181447][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.201049][ T6529] RSP: 002b:00007ff1ba21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  113.209461][ T6529] RAX: ffffffffffffffda RBX: 00007ff1b9625fa0 RCX: 00007ff1b939f559
[  113.217433][ T6529] RDX: 00000000fffffdef RSI: 0000200000000340 RDI: 0000000000000006
[  113.225403][ T6529] RBP: 00007ff1b9436b20 R08: 0000000000000000 R09: 0000000000000000
[  113.233372][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.241342][ T6529] R13: 00007ff1b9626038 R14: 00007ff1b9625fa0 R15: 00007ffd44e18368
[  113.249327][ T6529]  </TASK>
[  113.405788][ T5772] Bluetooth: hci2: unexpected cc 0x2003 length: 7 < 9
[  113.409600][ T6536] Bluetooth: MGMT ver 1.22
[  113.517203][ T6538] loop2: detected capacity change from 0 to 128
[  113.569350][ T6538] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.584020][ T6538] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.221654][ T6544] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  115.140960][ T6505] tipc: Disabling bearer <eth:syzkaller0>
[  115.205961][  T172] tipc: Node number set to 858835764
[  115.386435][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.849128][ T6559] rxe_eth0 speed is unknown, defaulting to 1000
[  116.069580][ T6562] loop2: detected capacity change from 0 to 128
[  116.361897][ T6562] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  116.436163][ T6562] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.812678][ T6569] ip_tables: iptables: counters copy to user failed while replacing table
[  117.083953][ T6572] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  117.585279][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.598537][ T6578] binder: 6577:6578 ioctl c0306201 0 returned -14
[  117.663974][ T6582] binder: 6577:6582 ioctl c0306201 0 returned -14
[  117.733140][ T6586] binder: 6577:6586 ioctl 1 0 returned -22
[  117.795437][ T6585] loop2: detected capacity change from 0 to 128
[  117.870079][ T6585] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.896623][ T6585] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.272556][ T6606] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  118.823153][   T27] audit: type=1326 audit(1792513327.719:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  118.918363][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.931918][   T27] audit: type=1326 audit(1792513327.719:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  118.976403][   T27] audit: type=1326 audit(1792513327.729:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  119.018011][   T27] audit: type=1326 audit(1792513327.729:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  119.079254][   T27] audit: type=1326 audit(1792513327.729:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  119.113464][   T27] audit: type=1326 audit(1792513327.729:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  119.161711][   T27] audit: type=1326 audit(1792513327.729:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  119.200068][   T27] audit: type=1326 audit(1792513327.729:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  119.230783][   T27] audit: type=1326 audit(1792513327.729:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  119.260792][ T6618] loop2: detected capacity change from 0 to 128
[  119.280304][   T27] audit: type=1326 audit(1792513327.739:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.1.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  119.315957][ T6618] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.382481][ T6618] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.672393][ T6632] FAULT_INJECTION: forcing a failure.
[  119.672393][ T6632] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  119.692578][ T6632] CPU: 1 PID: 6632 Comm: syz.3.170 Not tainted syzkaller #0
[  119.699915][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  119.710000][ T6632] Call Trace:
[  119.713298][ T6632]  <TASK>
[  119.716232][ T6632]  dump_stack_lvl+0x18c/0x250
[  119.720928][ T6632]  ? show_regs_print_info+0x20/0x20
[  119.726130][ T6632]  ? load_image+0x420/0x420
[  119.730640][ T6632]  ? __might_fault+0xaa/0x120
[  119.735317][ T6632]  ? __lock_acquire+0x7eb0/0x7eb0
[  119.740342][ T6632]  ? __local_bh_enable_ip+0x13a/0x1c0
[  119.745713][ T6632]  ? _local_bh_enable+0xa0/0xa0
[  119.750569][ T6632]  should_fail_ex+0x394/0x4c0
[  119.755253][ T6632]  copy_fpstate_to_sigframe+0xa0c/0xce0
[  119.760805][ T6632]  ? copy_fpstate_to_sigframe+0x188/0xce0
[  119.766530][ T6632]  ? fpregs_set+0x370/0x370
[  119.771051][ T6632]  ? fpu__alloc_mathframe+0xa7/0x120
[  119.776364][ T6632]  get_sigframe+0x5de/0x7d0
[  119.780896][ T6632]  ? load_gs_index+0x1a0/0x1a0
[  119.785671][ T6632]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  119.791662][ T6632]  ? get_signal+0x1197/0x1390
[  119.796352][ T6632]  x64_setup_rt_frame+0x164/0xc30
[  119.801387][ T6632]  ? lockdep_hardirqs_on+0x98/0x150
[  119.806594][ T6632]  ? _raw_spin_unlock_irq+0x2e/0x50
[  119.811824][ T6632]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  119.817809][ T6632]  ? sigaltstack_size_valid+0x1e0/0x1e0
[  119.823361][ T6632]  ? arch_do_signal_or_restart+0x39b/0x7b0
[  119.829171][ T6632]  arch_do_signal_or_restart+0x411/0x7b0
[  119.834808][ T6632]  ? get_sigframe_size+0x20/0x20
[  119.839762][ T6632]  ? exit_to_user_mode_loop+0x3b/0x110
[  119.845232][ T6632]  exit_to_user_mode_loop+0x70/0x110
[  119.850528][ T6632]  exit_to_user_mode_prepare+0xee/0x180
[  119.856077][ T6632]  syscall_exit_to_user_mode+0x1a/0x50
[  119.861540][ T6632]  do_syscall_64+0x61/0xb0
[  119.865952][ T6632]  ? clear_bhb_loop+0x40/0x90
[  119.870625][ T6632]  ? clear_bhb_loop+0x40/0x90
[  119.875298][ T6632]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  119.881206][ T6632] RIP: 0033:0x7f06e7d9f559
[  119.885626][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.905242][ T6632] RSP: 002b:00007f06e8cd1028 EFLAGS: 00000246
[  119.911330][ T6632] RAX: 0000000000000000 RBX: 00007f06e8025fa0 RCX: 00007f06e7d9f559
[  119.919299][ T6632] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000
[  119.927270][ T6632] RBP: 00007f06e7e36b20 R08: 0000000000000000 R09: 0000000000000000
[  119.935238][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.943223][ T6632] R13: 00007f06e8026038 R14: 00007f06e8025fa0 R15: 00007ffd4d3f6448
[  119.951209][ T6632]  </TASK>
[  120.031087][ T6633] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  120.551705][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.577337][ T6640] loop5: detected capacity change from 0 to 4096
[  120.611222][ T6640] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  120.690556][ T6640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.837462][ T6648] ip_tables: iptables: counters copy to user failed while replacing table
[  120.890873][ T6640] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  120.946350][ T6640] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  120.953031][ T6640] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  120.972801][ T6640] vhci_hcd vhci_hcd.0: Device attached
[  120.980541][ T6653] vhci_hcd: connection closed
[  121.002338][ T3518] vhci_hcd: stop threads
[  121.033213][ T3518] vhci_hcd: release socket
[  121.082717][ T3518] vhci_hcd: disconnect device
[  121.697161][ T6667] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  122.376314][ T6197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.001541][ T6679] kAFS: No cell specified
[  123.052588][ T5772] Bluetooth: hci0: command tx timeout
[  123.194278][ T6688] loop5: detected capacity change from 0 to 128
[  123.265794][ T6693] loop3: detected capacity change from 0 to 512
[  123.314773][ T6693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.355565][ T6688] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.420267][ T6688] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.757251][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'.
[  123.766479][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.112121][ T6717] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  124.565329][ T6720] loop3: detected capacity change from 0 to 128
[  124.590208][ T6197] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.641602][ T6720] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.734488][ T6720] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.055267][ T6731] netlink: 'syz.5.189': attribute type 1 has an invalid length.
[  125.426250][ T6742] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  125.820249][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  126.937381][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.196'.
[  127.028364][ T6762] vlan2: entered allmulticast mode
[  127.043783][ T6762] bond0: entered allmulticast mode
[  127.048953][ T6762] bond_slave_0: entered allmulticast mode
[  127.055156][ T6766] loop3: detected capacity change from 0 to 128
[  127.058691][ T6762] bond_slave_1: entered allmulticast mode
[  127.075093][ T6764] netlink: 14 bytes leftover after parsing attributes in process `syz.5.196'.
[  127.141888][ T6766] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  127.207115][ T6766] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.549866][ T6769] overlayfs: failed to clone upperpath
[  127.586343][ T6764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.641752][ T6764] bond_slave_0: left allmulticast mode
[  127.807093][ T6764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.954528][ T6775] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  128.317118][ T6764] bond_slave_1: left allmulticast mode
[  128.334588][ T6764] bond0 (unregistering): Released all slaves
[  128.578809][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.608446][ T6759] loop2: detected capacity change from 0 to 32768
[  128.690246][ T6759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.195 (6759)
[  128.914570][ T6759] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.000462][ T6759] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  129.081850][ T6759] BTRFS info (device loop2): setting nodatasum
[  129.122847][ T6759] BTRFS info (device loop2): force zlib compression, level 3
[  129.130621][ T6759] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  129.212492][ T6759] BTRFS info (device loop2): use lzo compression, level 0
[  129.261866][ T6759] BTRFS info (device loop2): turning on flush-on-commit
[  129.300690][ T6759] BTRFS info (device loop2): use zlib compression, level 3
[  129.344787][ T6759] BTRFS info (device loop2): max_inline at 7
[  129.357540][ T6808] overlayfs: failed to clone lowerpath
[  129.371815][ T6759] BTRFS info (device loop2): using free space tree
[  129.415595][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  129.454888][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  129.538866][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  129.575587][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  129.640616][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  129.706983][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  129.815635][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  129.899439][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  129.964641][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  130.051941][ T6837] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  130.199596][ T6759] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  130.735744][ T6759] BTRFS error (device loop2): open_ctree failed: -12
[  131.902640][ T6865] binder: 6864:6865 ioctl c0306201 200000000680 returned -14
[  132.233550][ T6870] FAULT_INJECTION: forcing a failure.
[  132.233550][ T6870] name failslab, interval 1, probability 0, space 0, times 0
[  132.325822][ T6870] CPU: 0 PID: 6870 Comm: syz.2.217 Not tainted syzkaller #0
[  132.333166][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  132.343238][ T6870] Call Trace:
[  132.346530][ T6870]  <TASK>
[  132.349474][ T6870]  dump_stack_lvl+0x18c/0x250
[  132.354177][ T6870]  ? show_regs_print_info+0x20/0x20
[  132.359393][ T6870]  ? load_image+0x420/0x420
[  132.363920][ T6870]  ? __might_sleep+0xe0/0xe0
[  132.368537][ T6870]  ? __lock_acquire+0x7eb0/0x7eb0
[  132.373579][ T6870]  ? get_random_u32+0x16f/0x930
[  132.378456][ T6870]  should_fail_ex+0x394/0x4c0
[  132.383164][ T6870]  should_failslab+0x9/0x20
[  132.387694][ T6870]  slab_pre_alloc_hook+0x59/0x300
[  132.392739][ T6870]  ? kvmalloc_node+0x70/0x180
[  132.397445][ T6870]  ? kvmalloc_node+0x70/0x180
[  132.402146][ T6870]  __kmem_cache_alloc_node+0x53/0x250
[  132.407540][ T6870]  ? pcpu_alloc+0x11e7/0x1880
[  132.412246][ T6870]  ? kvmalloc_node+0x70/0x180
[  132.416942][ T6870]  __kmalloc_node+0xa6/0x240
[  132.421561][ T6870]  kvmalloc_node+0x70/0x180
[  132.426088][ T6870]  sbitmap_init_node+0x2b5/0x620
[  132.431055][ T6870]  sbitmap_queue_init_node+0x3e/0x660
[  132.436447][ T6870]  ? blk_mq_init_tags+0xf0/0x280
[  132.441407][ T6870]  blk_mq_init_tags+0x116/0x280
[  132.446282][ T6870]  blk_mq_alloc_map_and_rqs+0xc5/0x910
[  132.451764][ T6870]  ? kasan_quarantine_put+0xd8/0x220
[  132.457071][ T6870]  ? lockdep_hardirqs_on+0x98/0x150
[  132.462307][ T6870]  blk_mq_alloc_set_map_and_rqs+0x1a0/0x800
[  132.468234][ T6870]  blk_mq_alloc_tag_set+0x868/0x1020
[  132.473550][ T6870]  loop_add+0x2eb/0x990
[  132.477733][ T6870]  loop_control_ioctl+0x128/0x590
[  132.482781][ T6870]  ? loop_set_hw_queue_depth+0x110/0x110
[  132.488441][ T6870]  ? bpf_lsm_file_ioctl+0x9/0x10
[  132.493398][ T6870]  ? security_file_ioctl+0x80/0xa0
[  132.498530][ T6870]  ? loop_set_hw_queue_depth+0x110/0x110
[  132.504182][ T6870]  __se_sys_ioctl+0xfd/0x170
[  132.508798][ T6870]  do_syscall_64+0x55/0xb0
[  132.513243][ T6870]  ? clear_bhb_loop+0x40/0x90
[  132.517940][ T6870]  ? clear_bhb_loop+0x40/0x90
[  132.522640][ T6870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.528558][ T6870] RIP: 0033:0x7ff1b939f559
[  132.532987][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.552611][ T6870] RSP: 002b:00007ff1ba21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  132.561045][ T6870] RAX: ffffffffffffffda RBX: 00007ff1b9625fa0 RCX: 00007ff1b939f559
[  132.569035][ T6870] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004
[  132.577028][ T6870] RBP: 00007ff1b9436b20 R08: 0000000000000000 R09: 0000000000000000
[  132.585030][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.593205][ T6870] R13: 00007ff1b9626038 R14: 00007ff1b9625fa0 R15: 00007ffd44e18368
[  132.601211][ T6870]  </TASK>
[  132.645472][ T6877] loop3: detected capacity change from 0 to 128
[  132.695974][ T6870] blk-mq: reduced tag depth (128 -> 64)
[  132.710433][ T6877] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.773903][ T6877] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.889880][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  132.902711][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  133.828393][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.053846][ T6911] ip_tables: iptables: counters copy to user failed while replacing table
[  134.265030][ T6926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.229'.
[  134.482364][ T5875] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  134.894785][ T5875] usb 6-1: Using ep0 maxpacket: 32
[  134.956814][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.185966][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024
[  135.475158][ T5875] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  135.526717][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.572012][ T5875] usb 6-1: config 0 descriptor??
[  135.613067][ T6924] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  135.634118][ T5875] hub 6-1:0.0: USB hub found
[  135.862652][ T5875] hub 6-1:0.0: 1 port detected
[  136.282574][ T6973] loop2: detected capacity change from 0 to 128
[  136.349432][ T6973] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  136.386440][ T6977] ip_tables: iptables: counters copy to user failed while replacing table
[  136.397723][ T6977] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  136.424923][ T6977] CIFS: Attempting to mount //127.0.0.1/share
[  136.442687][ T6973] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.471356][ T6978] CIFS: VFS: \\127.0.0.1 SMB response too long (28001 bytes)
[  136.760849][    T8] usb 6-1: USB disconnect, device number 2
[  136.822120][ T5875] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[  136.870331][ T6977] CIFS: VFS: cifs_mount failed w/return code = -112
[  137.547254][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  137.689470][ T6999] loop2: detected capacity change from 0 to 128
[  137.743747][ T6999] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  137.793974][ T6999] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.822295][    T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  137.884144][   T27] kauditd_printk_skb: 91 callbacks suppressed
[  137.884158][   T27] audit: type=1326 audit(1792513346.829:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.3.244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e7d9f559 code=0x0
[  138.033423][    T8] usb 6-1: Using ep0 maxpacket: 32
[  138.054909][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.096344][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024
[  138.159761][    T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  138.185774][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.849551][    T8] usb 6-1: config 0 descriptor??
[  138.855789][    T8] usb 6-1: can't set config #0, error -71
[  138.863292][    T8] usb 6-1: USB disconnect, device number 3
[  138.886883][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.020266][ T7023] FAULT_INJECTION: forcing a failure.
[  139.020266][ T7023] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  139.038472][ T7023] CPU: 0 PID: 7023 Comm: syz.2.246 Not tainted syzkaller #0
[  139.045805][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  139.055885][ T7023] Call Trace:
[  139.059188][ T7023]  <TASK>
[  139.062133][ T7023]  dump_stack_lvl+0x18c/0x250
[  139.066842][ T7023]  ? show_regs_print_info+0x20/0x20
[  139.072072][ T7023]  ? load_image+0x420/0x420
[  139.076615][ T7023]  ? __lock_acquire+0x7eb0/0x7eb0
[  139.081669][ T7023]  ? rds_conn_create_outgoing+0x43/0x60
[  139.087249][ T7023]  ? ____sys_sendmsg+0x61b/0x980
[  139.092214][ T7023]  ? ___sys_sendmsg+0x2a6/0x360
[  139.097082][ T7023]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  139.102117][ T7023]  should_fail_ex+0x394/0x4c0
[  139.106830][ T7023]  prepare_alloc_pages+0x1e1/0x5b0
[  139.111946][ T7023]  __alloc_pages+0x134/0x460
[  139.116533][ T7023]  ? zone_statistics+0x170/0x170
[  139.121470][ T7023]  ? alloc_pages+0x4e1/0x740
[  139.126060][ T7023]  ? __init_waitqueue_head+0xa8/0x140
[  139.131433][ T7023]  get_zeroed_page+0x17/0x40
[  139.136021][ T7023]  rds_cong_from_addr+0xd5/0x360
[  139.140964][ T7023]  ? rds_cong_get_maps+0x1f/0xb0
[  139.145915][ T7023]  rds_cong_get_maps+0x28/0xb0
[  139.150687][ T7023]  __rds_conn_create+0x987/0x1fe0
[  139.155717][ T7023]  ? __rds_conn_create+0x2f3/0x1fe0
[  139.160922][ T7023]  ? rds_conn_create+0x60/0x60
[  139.165698][ T7023]  rds_conn_create_outgoing+0x43/0x60
[  139.171074][ T7023]  rds_sendmsg+0xf98/0x1db0
[  139.175585][ T7023]  ? rds_send_sndbuf_remove+0x230/0x230
[  139.181135][ T7023]  ? aa_af_perm+0x330/0x330
[  139.185639][ T7023]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  139.192049][ T7023]  ? aa_sock_msg_perm+0x94/0x150
[  139.196990][ T7023]  ? apparmor_socket_sendmsg+0x8e/0x330
[  139.202534][ T7023]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  139.207819][ T7023]  ? security_socket_sendmsg+0x80/0xa0
[  139.213273][ T7023]  ? rds_send_sndbuf_remove+0x230/0x230
[  139.218814][ T7023]  ____sys_sendmsg+0x61b/0x980
[  139.223589][ T7023]  ? __sys_sendmsg_sock+0x30/0x30
[  139.228607][ T7023]  ? __import_iovec+0x3fa/0x850
[  139.233465][ T7023]  ? import_iovec+0x73/0xa0
[  139.237974][ T7023]  ___sys_sendmsg+0x2a6/0x360
[  139.242667][ T7023]  ? __sys_sendmsg+0x2b0/0x2b0
[  139.247461][ T7023]  ? rds_bind+0x391/0x870
[  139.251809][ T7023]  __se_sys_sendmsg+0x1d0/0x2c0
[  139.256667][ T7023]  ? __x64_sys_sendmsg+0x80/0x80
[  139.261613][ T7023]  ? lockdep_hardirqs_on+0x98/0x150
[  139.266813][ T7023]  do_syscall_64+0x55/0xb0
[  139.271221][ T7023]  ? clear_bhb_loop+0x40/0x90
[  139.275899][ T7023]  ? clear_bhb_loop+0x40/0x90
[  139.280574][ T7023]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.286468][ T7023] RIP: 0033:0x7ff1b939f559
[  139.290876][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.310486][ T7023] RSP: 002b:00007ff1ba21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  139.318900][ T7023] RAX: ffffffffffffffda RBX: 00007ff1b9625fa0 RCX: 00007ff1b939f559
[  139.326866][ T7023] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  139.334834][ T7023] RBP: 00007ff1b9436b20 R08: 0000000000000000 R09: 0000000000000000
[  139.342800][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.350771][ T7023] R13: 00007ff1b9626038 R14: 00007ff1b9625fa0 R15: 00007ffd44e18368
[  139.358756][ T7023]  </TASK>
[  139.752126][ T7035] tipc: Started in network mode
[  139.772716][ T7035] tipc: Node identity ae3ecdd31d1c, cluster identity 4711
[  139.780019][ T7035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.915054][ T7039] syzkaller0: entered promiscuous mode
[  139.928791][ T7039] syzkaller0: entered allmulticast mode
[  139.940782][ T7039] tipc: Resetting bearer <eth:syzkaller0>
[  140.063466][ T7034] tipc: Resetting bearer <eth:syzkaller0>
[  141.167119][ T7051] ip_tables: iptables: counters copy to user failed while replacing table
[  141.414074][ T7055] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  141.429303][ T7055] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  142.255885][ T7034] tipc: Disabling bearer <eth:syzkaller0>
[  142.266643][ T7047] netlink: 'syz.2.255': attribute type 39 has an invalid length.
[  142.327220][ T2134] tipc: Node number set to 3005402579
[  142.521665][ T7075] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  142.783534][ T7083] netlink: 'syz.1.267': attribute type 39 has an invalid length.
[  143.114187][ T2134] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  143.174577][ T2134] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  143.342301][ T5843] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  143.556281][ T5843] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  143.580216][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.616741][ T5843] usb 6-1: Product: syz
[  143.643785][ T5843] usb 6-1: Manufacturer: syz
[  143.666324][ T5843] usb 6-1: SerialNumber: syz
[  143.693641][ T5843] usb 6-1: config 0 descriptor??
[  143.928735][ T5843] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  144.035522][ T7098] hid-generic 0000:0000:0000.0001: pid 7098 passed too short report
[  144.393585][  T172] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  144.594167][  T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.622354][  T172] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  144.646247][  T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.661545][  T172] usb 4-1: config 0 descriptor??
[  144.891862][  T172] usbhid 4-1:0.0: can't add hid device: -71
[  144.914396][  T172] usbhid: probe of 4-1:0.0 failed with error -71
[  144.951460][  T172] usb 4-1: USB disconnect, device number 3
[  145.482645][  T172] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  145.692622][  T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.727015][  T172] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  145.740248][  T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.770844][  T172] usb 4-1: config 0 descriptor??
[  145.775447][ T5843] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  145.786786][ T5843] usb 6-1: USB disconnect, device number 4
[  145.897576][ T7151] binder: 7150:7151 ioctl c0306201 200000000080 returned -14
[  145.900782][ T7149] overlayfs: failed to clone upperpath
[  145.908930][ T7151] binder: 7150:7151 ioctl c0306201 2000000003c0 returned -14
[  146.091825][ T7158] bridge2: entered allmulticast mode
[  146.239210][ T7158] bridge2: port 1(bond1) entered blocking state
[  146.246297][ T7158] bridge2: port 1(bond1) entered disabled state
[  146.253045][ T7158] bond1: entered allmulticast mode
[  146.260600][ T7158] bond1: entered promiscuous mode
[  146.277073][ T7167] loop5: detected capacity change from 0 to 1024
[  146.323645][ T7167] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  146.637727][ T7177] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  146.643280][  T172] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[  146.667469][  T172] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[  147.055196][ T2134] usb 4-1: USB disconnect, device number 4
[  147.055240][    C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  147.806038][ T7209] loop2: detected capacity change from 0 to 1024
[  147.851134][ T7209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  147.889129][ T7209] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.944541][ T7209] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.294: lblock 3 mapped to illegal pblock 3 (length 3)
[  147.989943][ T7209] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  148.033638][ T7209] EXT4-fs (loop2): This should not happen!! Data will be lost
[  148.033638][ T7209] 
[  148.064354][ T7222] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.294: Freeing blocks not in datazone - block = 3, count = 1
[  148.157288][   T48] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  148.205647][   T48] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  148.222230][   T48] EXT4-fs (loop2): This should not happen!! Data will be lost
[  148.222230][   T48] 
[  148.250105][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  148.890376][ T7231] kvm: pic: single mode not supported
[  148.971420][ T7251] overlayfs: failed to clone upperpath
[  149.311702][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[  149.858177][ T7293] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  150.020354][ T7304] FAULT_INJECTION: forcing a failure.
[  150.020354][ T7304] name failslab, interval 1, probability 0, space 0, times 0
[  150.054771][ T7304] CPU: 1 PID: 7304 Comm: syz.5.309 Not tainted syzkaller #0
[  150.062127][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  150.072252][ T7304] Call Trace:
[  150.075536][ T7304]  <TASK>
[  150.078471][ T7304]  dump_stack_lvl+0x18c/0x250
[  150.083160][ T7304]  ? show_regs_print_info+0x20/0x20
[  150.088364][ T7304]  ? load_image+0x420/0x420
[  150.092873][ T7304]  ? __might_sleep+0xe0/0xe0
[  150.097470][ T7304]  ? __lock_acquire+0x7eb0/0x7eb0
[  150.102523][ T7304]  should_fail_ex+0x394/0x4c0
[  150.107253][ T7304]  should_failslab+0x9/0x20
[  150.111780][ T7304]  slab_pre_alloc_hook+0x59/0x300
[  150.116820][ T7304]  ? x509_cert_parse+0x2d5/0x7b0
[  150.121869][ T7304]  ? x509_cert_parse+0x2d5/0x7b0
[  150.126816][ T7304]  __kmem_cache_alloc_node+0x53/0x250
[  150.132207][ T7304]  ? x509_cert_parse+0x2d5/0x7b0
[  150.137151][ T7304]  __kmalloc_node_track_caller+0xa4/0x230
[  150.142995][ T7304]  kmemdup+0x2b/0x70
[  150.146900][ T7304]  x509_cert_parse+0x2d5/0x7b0
[  150.151671][ T7304]  x509_key_preparse+0x64/0x6c0
[  150.156519][ T7304]  ? down_read+0x1ac/0x2e0
[  150.161116][ T7304]  asymmetric_key_preparse+0xa9/0x140
[  150.166501][ T7304]  __key_create_or_update+0x3a6/0xa60
[  150.171894][ T7304]  ? key_create_or_update+0x60/0x60
[  150.177098][ T7304]  ? bpf_lsm_key_permission+0x9/0x10
[  150.182397][ T7304]  ? lookup_user_key+0xb66/0x1140
[  150.187460][ T7304]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  150.193448][ T7304]  key_create_or_update+0x42/0x60
[  150.198489][ T7304]  __se_sys_add_key+0x34f/0x410
[  150.203353][ T7304]  ? __x64_sys_add_key+0xc0/0xc0
[  150.208339][ T7304]  ? lockdep_hardirqs_on+0x98/0x150
[  150.213540][ T7304]  ? __x64_sys_add_key+0x20/0xc0
[  150.218490][ T7304]  do_syscall_64+0x55/0xb0
[  150.222902][ T7304]  ? clear_bhb_loop+0x40/0x90
[  150.227578][ T7304]  ? clear_bhb_loop+0x40/0x90
[  150.232256][ T7304]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  150.238155][ T7304] RIP: 0033:0x7f7a9399f559
[  150.242580][ T7304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.262282][ T7304] RSP: 002b:00007f7a9490d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  150.270960][ T7304] RAX: ffffffffffffffda RBX: 00007f7a93c25fa0 RCX: 00007f7a9399f559
[  150.278932][ T7304] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  150.286903][ T7304] RBP: 00007f7a93a36b20 R08: ffffffffffffffff R09: 0000000000000000
[  150.294873][ T7304] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  150.302846][ T7304] R13: 00007f7a93c26038 R14: 00007f7a93c25fa0 R15: 00007ffcdaeed0f8
[  150.310834][ T7304]  </TASK>
[  150.331666][ T7307] binder: BINDER_SET_CONTEXT_MGR already set
[  150.338321][ T7307] binder: 7306:7307 ioctl 4018620d 200000000440 returned -16
[  150.582896][ T7320] tipc: Failed to remove unknown binding: 66,0,0/3005402579:3837356337/3837356338
[  150.593748][ T7320] tipc: Failed to remove unknown binding: 66,0,0/3005402579:3837356337/3837356338
[  151.498224][ T7338] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  153.180213][ T7358] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  153.621897][ T7362] loop2: detected capacity change from 0 to 128
[  153.711239][ T7362] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  153.784691][ T7367] Zero length message leads to an empty skb
[  153.793401][ T7362] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.315379][ T7381] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  154.814522][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  154.922623][ T7387] md/raid10:md0: active with 1 out of 2 devices
[  154.937833][ T7387] md0: detected capacity change from 0 to 2048
[  155.200056][ T7406] loop3: detected capacity change from 0 to 128
[  155.258039][ T7406] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  155.317618][ T7406] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.823355][ T7422] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  156.195233][ T7425] loop2: detected capacity change from 0 to 16
[  156.348594][ T7425] erofs: (device loop2): mounted with root inode @ nid 36.
[  156.385277][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  157.295258][ T7437] loop3: detected capacity change from 0 to 2048
[  157.312799][ T7435] syzkaller0: create flow: hash 1483784429 index 1
[  157.346548][ T7437] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.399474][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[  157.552691][ T7433] syzkaller0: delete flow: hash 1483784429 index 1
[  159.328362][ T7472] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  159.888607][ T7452] netlink: 'syz.1.338': attribute type 4 has an invalid length.
[  160.061113][   T27] audit: type=1326 audit(1792513368.999:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.3.345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e7d9f559 code=0x0
[  160.134360][ T7482] binder: 7481:7482 ioctl c0306201 200000000180 returned -14
[  161.709915][ T7546] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  162.893762][ T7569] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  163.634871][ T7576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.642713][ T7576] IPv6: NLM_F_CREATE should be set when creating new route
[  163.969227][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.978595][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.405354][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.497027][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.276026][ T7609] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  165.640552][ T7576] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.655474][ T7576] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.668123][ T7576] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.691240][ T7576] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.928300][ T7576] syz.2.363 (7576) used greatest stack depth: 20552 bytes left
[  165.979039][ T7624] overlayfs: failed to clone upperpath
[  166.456107][ T7643] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  167.668380][ T7666] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  168.650372][ T7678] overlayfs: failed to clone upperpath
[  168.858616][ T7682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.892991][ T7682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.919119][ T7682] bond0 (unregistering): Released all slaves
[  169.158932][ T7699] warning: `syz.1.385' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  169.885764][ T7729] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  172.134718][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  172.146392][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  172.168473][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  172.177508][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  172.192481][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  172.199839][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.343974][ T7755] rxe_eth0 speed is unknown, defaulting to 1000
[  172.849518][ T7755] chnl_net:caif_netlink_parms(): no params data found
[  173.680651][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.753924][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.761143][ T7755] bridge_slave_0: entered allmulticast mode
[  173.784043][ T7755] bridge_slave_0: entered promiscuous mode
[  173.808744][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.816081][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.829853][ T7755] bridge_slave_1: entered allmulticast mode
[  173.837261][ T7755] bridge_slave_1: entered promiscuous mode
[  173.876063][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.895794][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.954008][ T7755] team0: Port device team_slave_0 added
[  173.966514][ T7755] team0: Port device team_slave_1 added
[  174.005249][ T7795] sch_tbf: burst 19872 is lower than device lo mtu (591563026) !
[  174.030497][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.045183][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.081451][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.106292][ T7799] loop2: detected capacity change from 0 to 64
[  174.109171][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.119585][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.155149][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.182746][ T7799] Trying to free block not in datazone
[  174.188982][ T7799] Trying to free block not in datazone
[  174.233892][ T7799] Trying to free block not in datazone
[  174.239399][ T7799] Trying to free block not in datazone
[  174.249229][ T7755] hsr_slave_0: entered promiscuous mode
[  174.257685][ T5772] Bluetooth: hci0: command tx timeout
[  174.262104][ T7799] Trying to free block not in datazone
[  174.271799][ T7799] minix_free_block (loop2:6): bit already cleared
[  174.279757][ T7799] Trying to free block not in datazone
[  174.285797][ T7799] Trying to free block not in datazone
[  174.286060][ T7755] hsr_slave_1: entered promiscuous mode
[  174.304876][ T7755] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.313371][ T7755] Cannot create hsr debugfs directory
[  175.409718][ T7755] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  175.427962][   T27] audit: type=1326 audit(1792513384.369:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7818 comm="syz.1.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcee719f559 code=0x0
[  175.460912][ T7755] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  175.480244][ T7755] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  175.495830][ T7755] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  175.625957][ T7755] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.656863][ T7755] 8021q: adding VLAN 0 to HW filter on device team0
[  175.671268][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.678451][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.696163][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.703337][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.898878][ T7755] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.156715][ T7755] veth0_vlan: entered promiscuous mode
[  176.175562][ T7755] veth1_vlan: entered promiscuous mode
[  176.228228][ T7755] veth0_macvtap: entered promiscuous mode
[  176.248184][ T7755] veth1_macvtap: entered promiscuous mode
[  176.271151][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.281670][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.292266][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.302931][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.313228][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.323954][ T5772] Bluetooth: hci0: command tx timeout
[  176.329444][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.340862][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.354488][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.365139][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.375067][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.385707][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.395707][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.407089][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.418733][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.430595][ T7755] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.439515][ T7755] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.448295][ T7755] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.457283][ T7755] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.531581][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.545120][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.571707][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.580355][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.246390][ T7862] loop6: detected capacity change from 0 to 512
[  178.280540][ T7862] EXT4-fs: Ignoring removed mblk_io_submit option
[  178.350680][ T7862] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.424: corrupted in-inode xattr: e_value size too large
[  178.378741][ T7862] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.424: couldn't read orphan inode 15 (err -117)
[  178.415651][ T5772] Bluetooth: hci0: command tx timeout
[  178.431971][ T7862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.729351][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'.
[  178.798889][ T7755] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.261798][ T7891] loop6: detected capacity change from 0 to 256
[  180.483228][ T5772] Bluetooth: hci0: command tx timeout
[  183.066370][ T7941] 9pnet_fd: Insufficient options for proto=fd
[  183.088885][ T7944] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  184.151176][ T7974] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  184.261021][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'.
[  185.503620][ T8005] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  187.312487][ T5760] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  187.494821][ T5760] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.519745][ T5760] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  187.533647][ T5760] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  187.554827][ T5760] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  187.569867][ T5760] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  187.580831][ T5760] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  187.589959][ T5760] usb 7-1: Manufacturer: syz
[  187.598351][ T5760] usb 7-1: config 0 descriptor??
[  187.604900][ T8047] ip_tables: iptables: counters copy to user failed while replacing table
[  187.912300][ T5760] rc_core: IR keymap rc-hauppauge not found
[  187.922076][ T5760] Registered IR keymap rc-empty
[  187.937697][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  187.974138][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.018683][ T5760] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  188.036318][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.058562][ T5760] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input6
[  188.072770][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.109510][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.151905][ T8060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'.
[  188.162410][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.203821][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.242485][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.276166][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.318177][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.353449][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.412623][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.452847][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.472918][ T8072] 9pnet_fd: Insufficient options for proto=fd
[  188.482864][ T5760] mceusb 7-1:0.0: Error: mce write urb status = -71
[  188.530294][ T5760] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  188.542295][ T5760] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  188.574821][ T5760] usb 7-1: USB disconnect, device number 2
[  189.555240][ T8112] loop6: detected capacity change from 0 to 256
[  190.248911][ T8130] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  191.921738][ T8167] Bluetooth: MGMT ver 1.22
[  191.926543][ T5772] Bluetooth: hci0: unexpected cc 0x2003 length: 7 < 9
[  191.964277][ T8168] overlayfs: failed to clone upperpath
[  192.126111][ T8174] binder: 8173:8174 ioctl c0306201 200000000240 returned -14
[  192.169442][ T8174] binder: 8173:8174 ioctl c0306201 200000000380 returned -14
[  192.340588][ T8180] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  193.872578][    T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  194.083929][    T8] usb 7-1: Using ep0 maxpacket: 32
[  194.098250][    T8] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  194.108007][    T8] usb 7-1: config 0 has no interface number 0
[  194.124909][    T8] usb 7-1: config 0 interface 184 has no altsetting 0
[  194.137094][    T8] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  194.146999][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.155271][    T8] usb 7-1: Product: syz
[  194.159445][    T8] usb 7-1: Manufacturer: syz
[  194.164538][    T8] usb 7-1: SerialNumber: syz
[  194.170780][    T8] usb 7-1: config 0 descriptor??
[  194.179026][    T8] smsc75xx v1.0.0
[  194.280855][ T5772] Bluetooth: hci3: unexpected cc 0x2003 length: 7 < 9
[  194.328847][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  194.339917][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.343623][ T8214] fuse: Bad value for 'fd'
[  194.408043][ T8179] loop6: detected capacity change from 0 to 1024
[  194.427905][ T8179] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  194.440683][ T8179] EXT4-fs (loop6): group descriptors corrupted!
[  194.592395][    T8] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  194.610867][    T8] smsc75xx: probe of 7-1:0.184 failed with error -71
[  194.636997][    T8] usb 7-1: USB disconnect, device number 3
[  196.040699][ T8240] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  196.917188][ T8250] rxe_eth0 speed is unknown, defaulting to 1000
[  197.577799][ T8259] FAULT_INJECTION: forcing a failure.
[  197.577799][ T8259] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  197.670473][ T8259] CPU: 1 PID: 8259 Comm: syz.6.556 Not tainted syzkaller #0
[  197.677825][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  197.687902][ T8259] Call Trace:
[  197.691200][ T8259]  <TASK>
[  197.694143][ T8259]  dump_stack_lvl+0x18c/0x250
[  197.698849][ T8259]  ? show_regs_print_info+0x20/0x20
[  197.704066][ T8259]  ? load_image+0x420/0x420
[  197.708601][ T8259]  ? __lock_acquire+0x7eb0/0x7eb0
[  197.713658][ T8259]  should_fail_ex+0x394/0x4c0
[  197.718372][ T8259]  prepare_alloc_pages+0x1e1/0x5b0
[  197.723523][ T8259]  __alloc_pages+0x134/0x460
[  197.728135][ T8259]  ? zone_statistics+0x170/0x170
[  197.733094][ T8259]  ? __virt_addr_valid+0x10c/0x380
[  197.738235][ T8259]  ? __check_object_size+0x4fc/0xa40
[  197.743544][ T8259]  af_alg_sendmsg+0x1303/0x1fa0
[  197.748457][ T8259]  ? af_alg_wait_for_data+0x6c0/0x6c0
[  197.753850][ T8259]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  197.760292][ T8259]  ? aa_sock_msg_perm+0x94/0x150
[  197.765255][ T8259]  ? apparmor_socket_sendmsg+0x8e/0x330
[  197.770827][ T8259]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  197.776134][ T8259]  ? skcipher_sendmsg+0x26/0xf0
[  197.781008][ T8259]  sock_write_iter+0x2dc/0x420
[  197.785814][ T8259]  ? sock_read_iter+0x3f0/0x3f0
[  197.790710][ T8259]  ? common_file_perm+0x198/0x1f0
[  197.795770][ T8259]  vfs_write+0x474/0x9a0
[  197.800046][ T8259]  ? file_end_write+0x250/0x250
[  197.804931][ T8259]  ? __fget_files+0x3fc/0x460
[  197.809644][ T8259]  ? __fdget_pos+0x1d8/0x330
[  197.814257][ T8259]  ? ksys_write+0x74/0x260
[  197.818792][ T8259]  ksys_write+0x151/0x260
[  197.823157][ T8259]  ? __ia32_sys_read+0x90/0x90
[  197.827952][ T8259]  ? lockdep_hardirqs_on+0x98/0x150
[  197.833175][ T8259]  do_syscall_64+0x55/0xb0
[  197.837609][ T8259]  ? clear_bhb_loop+0x40/0x90
[  197.842300][ T8259]  ? clear_bhb_loop+0x40/0x90
[  197.846993][ T8259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  197.852920][ T8259] RIP: 0033:0x7f648a59f559
[  197.857350][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.876974][ T8259] RSP: 002b:00007f64887f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  197.885410][ T8259] RAX: ffffffffffffffda RBX: 00007f648a825fa0 RCX: 00007f648a59f559
[  197.893400][ T8259] RDX: 00000000fffffdef RSI: 0000200000000340 RDI: 0000000000000006
[  197.901385][ T8259] RBP: 00007f648a636b20 R08: 0000000000000000 R09: 0000000000000000
[  197.909370][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.917355][ T8259] R13: 00007f648a826038 R14: 00007f648a825fa0 R15: 00007fffd697c048
[  197.925363][ T8259]  </TASK>
[  198.608182][ T8280] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  198.991483][ T8274] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  199.498544][ T5087] Bluetooth: hci3: unexpected event for opcode 0x0c23
[  200.038887][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.230183][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.523168][ T8290] Bluetooth: hci2: command 0x0406 tx timeout
[  201.529246][ T5775] Bluetooth: hci1: command 0x0406 tx timeout
[  202.477830][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'.
[  203.422541][   T27] audit: type=1326 audit(1792513412.349:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8326 comm="syz.2.580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b939f559 code=0x7fc00000
[  203.573258][   T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  203.583664][   T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0
[  203.591072][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  203.601164][   T51] Workqueue: hci1 hci_rx_work
[  203.605889][   T51] Call Trace:
[  203.609184][   T51]  <TASK>
[  203.612134][   T51]  dump_stack_lvl+0x18c/0x250
[  203.616842][   T51]  ? show_regs_print_info+0x20/0x20
[  203.622064][   T51]  ? load_image+0x420/0x420
[  203.626618][   T51]  sysfs_create_dir_ns+0x26e/0x2a0
[  203.631757][   T51]  ? __lock_acquire+0x7eb0/0x7eb0
[  203.636811][   T51]  ? sysfs_warn_dup+0xa0/0xa0
[  203.641515][   T51]  ? do_raw_spin_unlock+0x121/0x230
[  203.646747][   T51]  kobject_add_internal+0x617/0xc90
[  203.651962][   T51]  kobject_add+0x164/0x240
[  203.656389][   T51]  ? kobject_init+0x1d0/0x1d0
[  203.661073][   T51]  ? get_device_parent+0x366/0x390
[  203.666192][   T51]  device_add+0x3fa/0xc40
[  203.670529][   T51]  hci_conn_add_sysfs+0xd5/0x1e0
[  203.675472][   T51]  le_conn_complete_evt+0xe9a/0x1480
[  203.680770][   T51]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  203.687019][   T51]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  203.692674][   T51]  ? mutex_unlock+0x10/0x10
[  203.697177][   T51]  ? skb_pull_data+0xf0/0x1f0
[  203.701858][   T51]  hci_le_conn_complete_evt+0x187/0x440
[  203.707410][   T51]  ? hci_remote_host_features_evt+0x150/0x150
[  203.713475][   T51]  hci_event_packet+0x7b4/0x1280
[  203.718411][   T51]  ? __lock_acquire+0x7eb0/0x7eb0
[  203.723436][   T51]  ? lock_chain_count+0x20/0x20
[  203.728285][   T51]  ? bis_list+0x290/0x290
[  203.732614][   T51]  ? kcov_remote_start+0x513/0x810
[  203.737722][   T51]  ? lockdep_hardirqs_on+0x98/0x150
[  203.742925][   T51]  ? hci_send_to_monitor+0xd7/0x4f0
[  203.748122][   T51]  hci_rx_work+0x43a/0xd60
[  203.752550][   T51]  ? process_scheduled_works+0x975/0x1600
[  203.758281][   T51]  process_scheduled_works+0xa60/0x1600
[  203.763851][   T51]  ? worker_attach_to_pool+0x370/0x370
[  203.769316][   T51]  ? assign_work+0x3cc/0x5d0
[  203.773927][   T51]  worker_thread+0xa5e/0xfe0
[  203.778552][   T51]  kthread+0x2fa/0x390
[  203.782628][   T51]  ? pr_cont_work+0x550/0x550
[  203.787318][   T51]  ? kthread_blkcg+0xd0/0xd0
[  203.791917][   T51]  ret_from_fork+0x48/0x80
[  203.796342][   T51]  ? kthread_blkcg+0xd0/0xd0
[  203.800941][   T51]  ret_from_fork_asm+0x11/0x20
[  203.805724][   T51]  </TASK>
[  203.819802][   T51] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  203.834384][   T51] Bluetooth: hci1: failed to register connection device
[  203.999628][   T27] audit: type=1326 audit(1792513412.939:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e7d9f559 code=0x0
[  205.557864][ T8356] syzkaller0: entered promiscuous mode
[  205.585287][ T8356] syzkaller0: entered allmulticast mode
[  205.672669][ T8364] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  207.579126][ T8396] FAULT_INJECTION: forcing a failure.
[  207.579126][ T8396] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.597456][ T8396] CPU: 0 PID: 8396 Comm: syz.6.599 Not tainted syzkaller #0
[  207.604796][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  207.614874][ T8396] Call Trace:
[  207.618168][ T8396]  <TASK>
[  207.621107][ T8396]  dump_stack_lvl+0x18c/0x250
[  207.625811][ T8396]  ? show_regs_print_info+0x20/0x20
[  207.631039][ T8396]  ? load_image+0x420/0x420
[  207.635575][ T8396]  ? __might_fault+0xaa/0x120
[  207.640268][ T8396]  ? __lock_acquire+0x7eb0/0x7eb0
[  207.645321][ T8396]  should_fail_ex+0x394/0x4c0
[  207.650043][ T8396]  fpu__restore_sig+0x221/0x1210
[  207.655012][ T8396]  ? copy_fpstate_to_sigframe+0xce0/0xce0
[  207.660734][ T8396]  ? __lock_acquire+0x7eb0/0x7eb0
[  207.665750][ T8396]  ? __might_fault+0xc6/0x120
[  207.670417][ T8396]  ? __might_fault+0xaa/0x120
[  207.675103][ T8396]  __ia32_sys_rt_sigreturn+0x6d1/0x850
[  207.680597][ T8396]  ? x64_setup_rt_frame+0xc30/0xc30
[  207.685840][ T8396]  ? lock_chain_count+0x20/0x20
[  207.690724][ T8396]  ? lockdep_hardirqs_on+0x98/0x150
[  207.695951][ T8396]  do_syscall_64+0x55/0xb0
[  207.700393][ T8396]  ? clear_bhb_loop+0x40/0x90
[  207.705092][ T8396]  ? clear_bhb_loop+0x40/0x90
[  207.709793][ T8396]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.715719][ T8396] RIP: 0033:0x7f648a59f559
[  207.720147][ T8396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.739771][ T8396] RSP: 002b:00007f64887f6028 EFLAGS: 00000246
[  207.745862][ T8396] RAX: 0000000000000000 RBX: 00007f648a825fa0 RCX: 00007f648a59f559
[  207.753856][ T8396] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000
[  207.761847][ T8396] RBP: 00007f648a636b20 R08: 0000000000000000 R09: 0000000000000000
[  207.769836][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  207.777805][ T8396] R13: 00007f648a826038 R14: 00007f648a825fa0 R15: 00007fffd697c048
[  207.785846][ T8396]  </TASK>
[  207.854150][   T27] audit: type=1326 audit(1792513416.789:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.2.600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b939f559 code=0x7ffc0000
[  207.912899][   T27] audit: type=1326 audit(1792513416.839:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.2.600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b939f559 code=0x7ffc0000
[  208.003290][   T27] audit: type=1326 audit(1792513416.849:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.2.600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff1b939f559 code=0x7ffc0000
[  208.068537][   T27] audit: type=1326 audit(1792513416.849:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.2.600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b939f559 code=0x7ffc0000
[  208.140303][   T27] audit: type=1326 audit(1792513416.849:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.2.600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff1b939f559 code=0x7ffc0000
[  208.196205][   T27] audit: type=1326 audit(1792513416.849:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.2.600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b939f559 code=0x7ffc0000
[  208.301114][   T27] audit: type=1326 audit(1792513416.859:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.2.600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b939f559 code=0x7ffc0000
[  208.354467][   T27] audit: type=1326 audit(1792513416.859:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.2.600" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff1b939f559 code=0x7ffc0000
[  208.477797][ T8407] netlink: 'syz.6.605': attribute type 1 has an invalid length.
[  210.757094][ T8459] batman_adv: batadv0: Adding interface: veth0
[  210.867503][ T8459] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.904988][ T8459] batman_adv: batadv0: Interface activated: veth0
[  210.971126][ T8466] batman_adv: batadv0: Interface deactivated: veth0
[  211.031399][ T8466] batman_adv: batadv0: Removing interface: veth0
[  212.829181][ T8526] rxe_eth0 speed is unknown, defaulting to 1000
[  213.139487][ T8545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.642'.
[  215.073373][   T51] Bluetooth: hci3: unexpected event for opcode 0x0c47
[  216.395146][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.6.653'.
[  221.508456][ T8630] ip_tables: iptables: counters copy to user failed while replacing table
[  221.533774][ T8630] CIFS: Attempting to mount //127.0.0.1/share
[  222.693733][ T8630] CIFS: VFS: Error connecting to socket. Aborting operation.
[  222.875200][ T8630] CIFS: VFS: cifs_mount failed w/return code = -4
[  225.572192][ T8673] ip_tables: iptables: counters copy to user failed while replacing table
[  226.677098][ T8691] overlayfs: failed to clone upperpath
[  226.707468][ T8691] overlayfs: failed to clone upperpath
[  229.147594][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[  229.172863][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'.
[  229.918968][ T8727] overlayfs: failed to clone upperpath
[  230.483512][ T8745] bridge3: entered allmulticast mode
[  232.411455][ T8748] bridge3: port 1(bond1) entered blocking state
[  232.453864][ T8748] bridge3: port 1(bond1) entered disabled state
[  232.460263][ T8748] bond1: entered allmulticast mode
[  232.516504][ T8748] bond1: entered promiscuous mode
[  234.444160][ T8786] bridge2: entered allmulticast mode
[  234.590864][ T8786] bridge2: port 1(bond0) entered blocking state
[  234.605383][ T8786] bridge2: port 1(bond0) entered disabled state
[  234.642548][ T8786] bond0: entered allmulticast mode
[  234.649071][ T8786] bond0: entered promiscuous mode
[  236.592830][ T8815] fuse: Bad value for 'fd'
[  238.659233][   T27] kauditd_printk_skb: 20 callbacks suppressed
[  238.659246][   T27] audit: type=1326 audit(1792513447.602:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.2.736" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1b939f559 code=0x0
[  239.006908][ T8846] fuse: Bad value for 'fd'
[  240.412931][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'.
[  240.441983][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'.
[  240.462684][ T8867] bond0: left allmulticast mode
[  240.467660][   T27] audit: type=1326 audit(1792513449.412:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.6.753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f648a59f559 code=0x0
[  240.491390][ T8867] bond0: left promiscuous mode
[  240.497597][ T8867] bridge2: port 1(bond0) entered disabled state
[  243.263739][   T27] audit: type=1326 audit(1792513452.212:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.1.762" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x0
[  244.770273][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.773'.
[  244.798331][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.773'.
[  244.864693][  T172] IPVS: starting estimator thread 0...
[  244.963130][ T8994] IPVS: using max 18 ests per chain, 43200 per kthread
[  246.527737][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'.
[  246.650850][   T51] Bluetooth: hci3: unexpected event for opcode 0x1804
[  250.617618][ T9146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  250.624921][ T9146] IPv6: NLM_F_CREATE should be set when creating new route
[  250.928397][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.936196][ T9146] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.263787][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.301568][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.614913][ T9146] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.623877][ T9146] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.633629][ T9146] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.642634][ T9146] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.738063][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.826'.
[  251.991990][ T9167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.999336][ T9167] IPv6: NLM_F_CREATE should be set when creating new route
[  252.505420][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.513344][ T9167] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.851433][ T9167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.916427][ T9167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.291179][ T9167] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.300632][ T9167] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.309566][ T9167] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.318476][ T9167] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.464225][ T9204] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  255.986187][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  255.993033][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.458078][   T51] Bluetooth: hci1: unexpected event for opcode 0x1804
[  256.737671][ T9245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  256.745010][ T9245] IPv6: NLM_F_CREATE should be set when creating new route
[  256.931816][   T51] Bluetooth: hci2: unexpected event for opcode 0x1804
[  257.198635][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.207396][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.517723][ T9245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.557763][ T9245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.874607][ T9245] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.883606][ T9245] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.893066][ T9245] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.901949][ T9245] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.016889][ T9252] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  259.798481][ T9268] netlink: 14 bytes leftover after parsing attributes in process `syz.2.876'.
[  273.164555][ T9405] netlink: 14 bytes leftover after parsing attributes in process `syz.3.907'.
[  276.727302][ T9453] netlink: 14 bytes leftover after parsing attributes in process `syz.1.927'.
[  277.318114][ T9359] syz.2.893 (9359) used greatest stack depth: 17608 bytes left
[  279.582693][ T9490] netlink: 14 bytes leftover after parsing attributes in process `syz.6.940'.
[  282.353552][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'.
[  283.333079][ T9578] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  283.510126][   T51] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  285.642837][ T9606] futex_wake_op: syz.6.982 tries to shift op by 144; fix this program
[  288.011404][ T9635] capability: warning: `syz.2.990' uses 32-bit capabilities (legacy support in use)
[  288.100762][ T9638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.991'.
[  288.118822][ T9638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.991'.
[  288.322361][ T9651] netlink: 'syz.1.995': attribute type 1 has an invalid length.
[  288.434656][ T9651] veth3: entered allmulticast mode
[  288.459093][ T9651] bond2: (slave veth3): Enslaving as an active interface with a down link
[  288.501548][ T9659] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  289.022748][ T9642] ceph: No mds server is up or the cluster is laggy
[  290.478538][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'.
[  290.489035][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'.
[  290.498142][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'.
[  290.507234][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'.
[  292.750625][ T9752] rxe_eth0 speed is unknown, defaulting to 1000
[  295.939776][ T9796] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1032'.
[  298.802045][ T5774] Bluetooth: hci0: command 0x0406 tx timeout
[  301.314226][   T51] Bluetooth: hci3: unexpected event for opcode 0x080d
[  301.625305][ T9876] netlink: 'syz.2.1057': attribute type 2 has an invalid length.
[  304.796976][ T9919] netlink: 'syz.1.1068': attribute type 1 has an invalid length.
[  304.920361][ T9919] 8021q: adding VLAN 0 to HW filter on device bond3
[  304.963010][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  305.278171][ T9924] bond3: (slave bridge4): making interface the new active one
[  305.370216][ T9924] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  307.201875][ T9955] kAFS: No cell specified
[  308.461736][ T9968] fuse: Bad value for 'fd'
[  310.669979][ T9998] syz_tun: entered allmulticast mode
[  310.808132][ T9994] syz_tun: left allmulticast mode
[  311.432127][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'.
[  313.001396][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'.
[  313.852074][   T27] audit: type=1326 audit(1800902386.783:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.1.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x0
[  314.213691][ T7617] IPVS: starting estimator thread 0...
[  314.260340][T10043] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  314.322570][T10046] IPVS: using max 18 ests per chain, 43200 per kthread
[  314.444247][    C0] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  317.307735][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  317.314198][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  318.217075][T10088] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  318.744469][T10079] ceph: No mds server is up or the cluster is laggy
[  320.834561][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'.
[  324.313430][T10132] ceph: No mds server is up or the cluster is laggy
[  324.953835][T10149] netlink: 'syz.6.1133': attribute type 1 has an invalid length.
[  325.199582][T10149] 8021q: adding VLAN 0 to HW filter on device bond1
[  325.230590][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1133'.
[  325.385037][T10149] bond1: (slave bridge1): making interface the new active one
[  325.399941][T10149] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  328.972472][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'.
[  329.145853][T10190] vlan2: entered allmulticast mode
[  329.151018][T10190] bridge3: entered allmulticast mode
[  329.232938][T10187] bridge3: port 1(erspan0) entered blocking state
[  329.259854][T10187] bridge3: port 1(erspan0) entered disabled state
[  329.272263][T10187] erspan0: entered allmulticast mode
[  329.279072][T10187] erspan0: entered promiscuous mode
[  331.550620][T10215] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  336.124868][T10264] mmap: syz.3.1164 (10264) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  341.776153][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'.
[  341.788795][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'.
[  348.351657][   T51] Bluetooth: hci2: unexpected event for opcode 0x2003
[  348.732206][ T5774] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  349.137772][T10390] ip_tables: iptables: counters copy to user failed while replacing table
[  349.178725][T10390] lo: entered allmulticast mode
[  350.754141][   T51] Bluetooth: hci2: unexpected event for opcode 0x0000
[  354.805126][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  354.819637][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[  354.829336][   T51] Bluetooth: hci2: hardware error 0x00
[  355.689897][T10455] tipc: Started in network mode
[  355.694957][T10455] tipc: Node identity 080211, cluster identity 4711
[  355.701716][T10455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.912960][T10464] "syz.1.1216" (10464) uses obsolete ecb(arc4) skcipher
[  356.869282][ T7610] tipc: Node number set to 134353152
[  356.962148][   T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  357.002849][   T27] audit: type=1326 audit(1800902429.953:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  357.089385][   T27] audit: type=1326 audit(1800902429.953:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  357.164932][   T27] audit: type=1326 audit(1800902429.983:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  357.245355][   T27] audit: type=1326 audit(1800902429.983:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  357.320962][   T27] audit: type=1326 audit(1800902429.983:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  357.362813][   T27] audit: type=1326 audit(1800902430.073:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  357.400735][   T27] audit: type=1326 audit(1800902430.073:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcee719f2c2 code=0x7ffc0000
[  357.429589][   T27] audit: type=1326 audit(1800902430.073:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcee719f357 code=0x7ffc0000
[  357.485370][   T27] audit: type=1326 audit(1800902430.073:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcee715c251 code=0x7ffc0000
[  357.538911][   T27] audit: type=1326 audit(1800902430.073:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.1.1225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcee71a0349 code=0x7ffc0000
[  358.517928][T10500] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  358.526284][T10500] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  358.535162][T10500] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  358.545345][T10500] Error parsing options; rc = [-22]
[  362.858064][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1242'.
[  365.163501][T10553] netlink: 'syz.1.1246': attribute type 1 has an invalid length.
[  365.333011][T10553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  365.342694][T10553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  365.351506][T10553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  365.360902][T10553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  365.372673][T10553] bond4: (slave geneve2): making interface the new active one
[  365.383125][T10553] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  365.436675][T10553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1246'.
[  366.271313][T10553] 8021q: adding VLAN 0 to HW filter on device bond4
[  367.902020][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  370.201086][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1256'.
[  370.273333][T10593] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  370.315398][T10593] bond2: (slave ip_vti0): Error -95 calling set_mac_address
[  370.350880][T10589] bond2 (unregistering): Released all slaves
[  370.554499][T10600] rxe_eth0 speed is unknown, defaulting to 1000
[  378.139857][T10656] CIFS: Attempting to mount //127.0.0.1/share
[  378.657227][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.663681][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  378.972536][T10656] CIFS: VFS: Error connecting to socket. Aborting operation.
[  378.980012][T10656] CIFS: VFS: cifs_mount failed w/return code = -4
[  379.620306][T10675] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  379.745841][ T7615] IPVS: starting estimator thread 0...
[  379.872734][T10676] IPVS: using max 19 ests per chain, 45600 per kthread
[  383.572737][T10699] Could not find key with description: [0123456789abcdef]
[  383.579978][T10699] process_request_key_err: No key
[  383.585260][T10699] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef]
[  383.596582][T10699] One or more global auth toks could not properly register; rc = [-2]
[  383.605239][T10699] Error parsing options; rc = [-2]
[  385.699217][T10714] fuse: Bad value for 'fd'
[  395.433540][T10815] netlink: 'syz.6.1308': attribute type 1 has an invalid length.
[  395.489411][T10816] syz.3.1309 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  395.680770][T10815] bridge2: entered promiscuous mode
[  395.701668][T10815] bond2: (slave bridge2): making interface the new active one
[  395.718896][T10815] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  395.747842][T10818] bridge3: entered promiscuous mode
[  395.774600][T10818] bond2: (slave bridge3): Enslaving as a backup interface with an up link
[  397.197793][   T27] kauditd_printk_skb: 43 callbacks suppressed
[  397.197808][   T27] audit: type=1326 audit(1800902470.143:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10833 comm="syz.3.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e7d9f559 code=0x7fc00000
[  397.273324][   T27] audit: type=1326 audit(1800902470.223:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10833 comm="syz.3.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f06e7d9f559 code=0x7fc00000
[  397.350829][   T27] audit: type=1326 audit(1800902470.273:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10833 comm="syz.3.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e7d9f559 code=0x7fc00000
[  399.539697][T10871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1322'.
[  401.663410][   T27] audit: type=1326 audit(1800902474.613:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.6.1327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648a59f559 code=0x7fc00000
[  401.715409][   T27] audit: type=1326 audit(1800902474.663:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.6.1327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f648a59f559 code=0x7fc00000
[  401.755029][   T27] audit: type=1326 audit(1800902474.703:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.6.1327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648a59f559 code=0x7fc00000
[  404.328160][T10914] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  406.735732][T10950] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  414.033616][T11011] IPVS: Error connecting to the multicast addr
[  414.060311][T11011] IPVS: sed: FWM 3 0x00000003 - no destination available
[  415.416538][T11021] netlink: 'syz.6.1360': attribute type 1 has an invalid length.
[  422.021577][T11104] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  422.447382][T11111] bridge_slave_0: left allmulticast mode
[  422.456559][T11111] bridge_slave_0: left promiscuous mode
[  422.462506][T11111] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.474730][T11111] bridge_slave_1: left allmulticast mode
[  422.481443][T11111] bridge_slave_1: left promiscuous mode
[  422.494549][T11111] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.547480][T11111] bond0: (slave bond_slave_0): Releasing backup interface
[  422.564308][T11111] bond0: (slave bond_slave_1): Releasing backup interface
[  422.599974][T11111] team0: Port device team_slave_0 removed
[  422.643290][T11111] team0: Port device team_slave_1 removed
[  422.649454][T11111] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.662587][T11111] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.497747][T11111] bond1: (slave bridge1): Releasing active interface
[  423.581447][T11111] bond2: (slave bridge2): Releasing backup interface
[  423.591358][T11111] bond2: (slave bridge2): the permanent HWaddr of slave - 56:56:46:4c:aa:72 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  423.611788][T11111] bond2: (slave bridge3): making interface the new active one
[  424.119350][T11111] bond2: (slave bridge3): Releasing backup interface
[  424.232528][T11112] netlink: 'syz.6.1377': attribute type 10 has an invalid length.
[  428.932303][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  435.192035][T11198] trusted_key: encrypted_key: insufficient parameters specified
[  440.089926][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  440.097520][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  441.580942][T11235] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1410'.
[  441.629452][T11235] fuse: Unknown parameter '0xffffffffffffffff'
[  443.124001][T11241] netlink: 'syz.2.1404': attribute type 10 has an invalid length.
[  443.184395][T11241] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  452.153591][T11295] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  452.253295][   T48] rpcbind: server 127.0.0.1 not responding, timed out
[  452.381939][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  453.955645][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'.
[  455.917535][T11327] bridge0: entered promiscuous mode
[  456.552026][T11327] vlan2: entered promiscuous mode
[  457.058735][ T7610] IPVS: starting estimator thread 0...
[  457.070410][T11334] IPVS: Error connecting to the multicast addr
[  457.932845][T11335] IPVS: using max 26 ests per chain, 62400 per kthread
[  457.941330][T11334] IPVS: lc: FWM 3 0x00000003 - no destination available
[  460.061936][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  464.167690][T11375] netlink: 'syz.1.1446': attribute type 10 has an invalid length.
[  464.179749][T11375] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  464.391035][T11379] bridge0: entered promiscuous mode
[  464.396472][T11379] vlan3: entered promiscuous mode
[  470.573483][T11428] ip_tables: iptables: counters copy to user failed while replacing table
[  475.012309][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  483.652676][T11518] fuse: Bad value for 'fd'
[  484.451263][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'.
[  485.930627][T11540] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[  485.938544][T11540] Error parsing options; rc = [-22]
[  485.946492][T11540] vlan0: entered promiscuous mode
[  493.543936][   T51] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  500.706638][T11641] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.718019][T11641] 8021q: adding VLAN 0 to HW filter on device team0
[  500.741668][T11641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  501.567526][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  501.574096][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  510.223789][T11727] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11727]
[  514.479953][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1548'.
[  514.592610][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1548'.
[  515.343990][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'.
[  515.369689][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'.
[  515.381267][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'.
[  515.392975][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'.
[  517.149275][T11771] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  526.496827][T11827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1563'.
[  532.341762][T11868] overlayfs: failed to clone upperpath
[  533.770361][T11881] veth1_to_bond: entered allmulticast mode
[  533.778882][T11881] veth1_to_bond: entered promiscuous mode
[  533.939656][T11880] veth1_to_bond: left promiscuous mode
[  533.951301][T11880] veth1_to_bond: left allmulticast mode
[  534.482045][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  534.571948][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  536.983144][T11899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1582'.
[  537.044215][T11899] sctp: [Deprecated]: syz.2.1582 (pid 11899) Use of int in max_burst socket option.
[  537.044215][T11899] Use struct sctp_assoc_value instead
[  537.355835][T11906] overlayfs: failed to clone upperpath
[  539.350348][T11918] 
: renamed from bond_slave_0
[  540.344080][   T51] Bluetooth: Frame is too long (len 16, expected len 4)
[  541.792581][T11930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1589'.
[  547.044924][T11954] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  547.061604][T11955] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1597'.
[  547.071174][T11955] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1597'.
[  547.080360][T11955] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[  556.694770][T12028] trusted_key: encrypted_key: keylen parameter is missing
[  557.285808][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1615'.
[  562.235779][T12066] netlink: 'syz.2.1624': attribute type 1 has an invalid length.
[  563.018923][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  563.025451][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  563.348987][T12072] capability: warning: `syz.6.1626' uses deprecated v2 capabilities in a way that may be insecure
[  563.463446][T12066] 8021q: adding VLAN 0 to HW filter on device bond2
[  564.327999][T12074] bond2: (slave gretap1): making interface the new active one
[  565.284595][T12074] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  579.285758][T12187] 9pnet_virtio: no channels available for device syz
[  582.611797][T12226] bridge0: entered allmulticast mode
[  586.590800][T12251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1667'.
[  586.609664][T12251] sctp: [Deprecated]: syz.1.1667 (pid 12251) Use of int in max_burst socket option.
[  586.609664][T12251] Use struct sctp_assoc_value instead
[  589.998233][T12277] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  590.007704][T12277] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  590.017451][T12277] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  590.169474][   T27] audit: type=1800 audit(1800902662.943:201): pid=12277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1673" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  602.611211][T12370] infiniband rxe0: set active
[  602.639126][ T5864] rxe_eth0 speed is unknown, defaulting to 1000
[  602.704917][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1698'.
[  606.370715][T12395] overlayfs: failed to clone lowerpath
[  614.490874][T12436] trusted_key: encrypted_key: insufficient parameters specified
[  617.989127][T12460] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1718'.
[  618.012562][T12460] overlayfs: failed to clone upperpath
[  624.718478][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  624.724905][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  625.482023][T12507] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  625.524858][   T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  625.538800][   T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0
[  625.546218][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  625.556288][   T51] Workqueue: hci0 hci_rx_work
[  625.561014][   T51] Call Trace:
[  625.564310][   T51]  <TASK>
[  625.567253][   T51]  dump_stack_lvl+0x18c/0x250
[  625.571983][   T51]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  625.577645][   T51]  ? show_regs_print_info+0x20/0x20
[  625.582860][   T51]  ? load_image+0x420/0x420
[  625.587387][   T51]  ? sysfs_create_dir_ns+0x243/0x2a0
[  625.592700][   T51]  sysfs_create_dir_ns+0x26e/0x2a0
[  625.597827][   T51]  ? __lock_acquire+0x7eb0/0x7eb0
[  625.602868][   T51]  ? sysfs_warn_dup+0xa0/0xa0
[  625.607568][   T51]  ? do_raw_spin_unlock+0x121/0x230
[  625.612796][   T51]  kobject_add_internal+0x617/0xc90
[  625.618025][   T51]  kobject_add+0x164/0x240
[  625.622460][   T51]  ? preempt_schedule_thunk+0x1a/0x30
[  625.627840][   T51]  ? kobject_init+0x1d0/0x1d0
[  625.632524][   T51]  ? get_device_parent+0x366/0x390
[  625.637640][   T51]  device_add+0x3fa/0xc40
[  625.641981][   T51]  hci_conn_add_sysfs+0xd5/0x1e0
[  625.646927][   T51]  le_conn_complete_evt+0xe9a/0x1480
[  625.652235][   T51]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  625.658480][   T51]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  625.664112][   T51]  ? lockdep_hardirqs_on+0x98/0x150
[  625.669311][   T51]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  625.674962][   T51]  hci_le_enh_conn_complete_evt+0x189/0x460
[  625.680865][   T51]  ? hci_remote_host_features_evt+0x150/0x150
[  625.686933][   T51]  hci_event_packet+0x7b4/0x1280
[  625.691880][   T51]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  625.697520][   T51]  ? bis_list+0x290/0x290
[  625.701853][   T51]  ? kcov_remote_start+0x1b7/0x810
[  625.706967][   T51]  ? hci_send_to_monitor+0xd7/0x4f0
[  625.712164][   T51]  hci_rx_work+0x43a/0xd60
[  625.716604][   T51]  ? process_scheduled_works+0x975/0x1600
[  625.722351][   T51]  process_scheduled_works+0xa60/0x1600
[  625.727940][   T51]  ? worker_attach_to_pool+0x370/0x370
[  625.733416][   T51]  ? assign_work+0x3cc/0x5d0
[  625.738015][   T51]  worker_thread+0xa5e/0xfe0
[  625.742647][   T51]  kthread+0x2fa/0x390
[  625.746725][   T51]  ? pr_cont_work+0x550/0x550
[  625.751403][   T51]  ? kthread_blkcg+0xd0/0xd0
[  625.755991][   T51]  ret_from_fork+0x48/0x80
[  625.760424][   T51]  ? kthread_blkcg+0xd0/0xd0
[  625.765013][   T51]  ret_from_fork_asm+0x11/0x20
[  625.769793][   T51]  </TASK>
[  625.784221][   T51] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  625.798330][   T51] Bluetooth: hci0: failed to register connection device
[  627.967903][T12521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1733'.
[  635.173910][T12584] Invalid ELF header magic: != ELF
[  637.693865][T12607] atomic_op ffff888031511198 conn xmit_atomic 0000000000000000
[  638.483711][T12623] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1759'.
[  645.692421][T12670] kAFS: unable to lookup cell '.'
[  647.554216][T12693] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  648.558911][T12694] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  656.478447][T12753] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  660.235562][T12783] ipt_rpfilter: unknown options
[  660.341377][T12787] overlayfs: overlapping lowerdir path
[  663.763095][T12816] lo: entered allmulticast mode
[  664.307500][T12808] lo: left allmulticast mode
[  666.341142][T12815] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1808'.
[  670.897800][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[  671.284719][T12863] unsupported nlmsg_type 40
[  683.046454][ T5774] Bluetooth: to_multiplier 8192 > 3200
[  683.426984][T12949] SET target dimension over the limit!
[  685.625993][ T5774] Bluetooth: hci0: command 0x0406 tx timeout
[  685.845929][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  685.852981][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  687.349185][T12974] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1846'.
[  688.095075][T12978] netlink: 'syz.2.1851': attribute type 3 has an invalid length.
[  689.291680][T12982] UBIFS error (pid: 12982): cannot open "./file0", error -22
[  689.809567][T12991] netlink: 'syz.1.1855': attribute type 10 has an invalid length.
[  692.786961][T13024] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  692.796305][T13024] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  695.998095][T13049] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13050] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13049]
[  697.557040][T13067] overlayfs: failed to clone lowerpath
[  697.803928][T13070] rxe_eth0 speed is unknown, defaulting to 1000
[  704.648404][T13121] netlink: 'syz.6.1888': attribute type 2 has an invalid length.
[  709.781344][T13160] netlink: 'syz.6.1897': attribute type 10 has an invalid length.
[  709.789607][T13160] bond0: (slave caif0): The slave device specified does not support setting the MAC address
[  709.800368][T13160] bond0: (slave caif0): Error -95 calling set_mac_address
[  711.989653][T13174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1905'.
[  713.759648][T13193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1906'.
[  714.327326][ T5774] Bluetooth: hci3: unknown advertising packet type: 0x05
[  720.174366][T13238] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1911'.
[  720.238368][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'.
[  720.554464][T13238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1911'.
[  723.313761][T13268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1923'.
[  723.741926][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[  723.962384][ T7610] IPVS: starting estimator thread 0...
[  724.132059][T13269] IPVS: using max 34 ests per chain, 81600 per kthread
[  726.360662][T13297] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1930'.
[  726.801740][T13277] netlink: 'syz.2.1927': attribute type 9 has an invalid length.
[  728.327287][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'.
[  728.336311][T13318] bridge_slave_1: left allmulticast mode
[  728.342069][T13318] bridge_slave_1: left promiscuous mode
[  728.347856][T13318] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.726715][T13318] bridge_slave_0: left allmulticast mode
[  728.732494][T13318] bridge_slave_0: left promiscuous mode
[  728.738424][T13318] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.787864][T13318] bond0: (slave bridge0): Releasing backup interface
[  730.105528][T13339] bridge2: left promiscuous mode
[  730.111241][T13339] bridge3: left promiscuous mode
[  730.232807][T13339] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13340] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13339]
[  732.279218][T13356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1941'.
[  734.317803][T13373] syz_tun: entered allmulticast mode
[  736.357618][T13388] sctp: [Deprecated]: syz.2.1946 (pid 13388) Use of int in max_burst socket option deprecated.
[  736.357618][T13388] Use struct sctp_assoc_value instead
[  736.651117][T13389] netlink: 'syz.2.1946': attribute type 8 has an invalid length.
[  737.519629][T13371] syz_tun: left allmulticast mode
[  739.797097][T13425] ip_tables: iptables: counters copy to user failed while replacing table
[  741.166294][T13438] IPVS: Error connecting to the multicast addr
[  742.347884][T13447] netlink: 'syz.2.1962': attribute type 10 has an invalid length.
[  742.493205][T13456] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  742.493205][T13456] 
[  742.507141][T13456] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  742.519810][T13456] CIFS: Attempting to mount //172.20.20.170/share
[  742.610165][T13461] netlink: 'syz.6.1966': attribute type 10 has an invalid length.
[  743.526719][T13456] CIFS: VFS: Error connecting to socket. Aborting operation.
[  743.534442][T13456] CIFS: VFS: cifs_mount failed w/return code = -4
[  744.772503][T13477] veth1_to_bond: entered promiscuous mode
[  744.814437][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1969'.
[  744.855058][T13475] veth1_to_bond (unregistering): left promiscuous mode
[  747.683446][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  747.705073][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  748.064808][T13513] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  749.331815][   T27] audit: type=1326 audit(1800902823.252:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  749.401920][   T27] audit: type=1326 audit(1800902823.252:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  749.463574][   T27] audit: type=1326 audit(1800902823.262:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  749.508224][   T27] audit: type=1326 audit(1800902823.262:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  749.581896][   T27] audit: type=1326 audit(1800902823.262:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  749.734913][   T27] audit: type=1326 audit(1800902823.262:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  749.761045][   T27] audit: type=1326 audit(1800902823.262:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  749.786669][   T27] audit: type=1326 audit(1800902823.262:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  749.827776][T13526] lo: left allmulticast mode
[  749.906591][   T27] audit: type=1326 audit(1800902823.262:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  750.057164][   T27] audit: type=1326 audit(1800902823.262:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.1.1979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fcee719f559 code=0x7ffc0000
[  750.614430][    T8] libceph: connect (1)[c::]:6789 error -101
[  750.621209][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  750.655183][T13529] ceph: No mds server is up or the cluster is laggy
[  750.972154][ T5774] Bluetooth: hci3: unexpected event for opcode 0x0c03
[  751.138424][ T5774] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10
[  751.138459][ T5774] Bluetooth: unknown link type 96
[  751.151997][ T5774] Bluetooth: hci1: connection err: -111
[  751.180273][ T5774] Bluetooth: hci0: unexpected event for opcode 0x1408
[  751.566696][ T5774] Bluetooth: Wrong link type (-71)
[  752.967213][ T5774] Bluetooth: hci3: ACL packet too small
[  753.099805][ T5774] Bluetooth: hci1: unexpected event for opcode 0x2002
[  754.653052][ T5774] Bluetooth: hci1: hcon ffff888031180000 sent 1 < count 15
[  754.916015][ T5774] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  755.793547][T13615] veth1_to_bond: entered promiscuous mode
[  755.809274][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'.
[  755.839159][T13615] veth1_to_bond (unregistering): left promiscuous mode
[  755.882392][T13615] bond0: (slave bond_slave_1): Releasing backup interface
[  756.944951][ T5774] Bluetooth: hci1: unexpected event for opcode 0x2029
[  757.943579][ T5774] Bluetooth: hci0: unexpected event for opcode 0x0035
[  758.720277][T13638] netlink: 'syz.1.2022': attribute type 10 has an invalid length.
[  759.316395][T13638] team0 (unregistering): Port device team_slave_0 removed
[  759.359455][T13638] team0 (unregistering): Port device team_slave_1 removed
[  759.513024][ T5774] Bluetooth: hci1: unexpected event for opcode 0x0c1b
[  759.884036][ T5774] Bluetooth: hci3: unexpected event for opcode 0x0c5a
[  761.958064][T13666] netlink: 'syz.3.2032': attribute type 3 has an invalid length.
[  761.966071][T13666] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2032'.
[  762.085209][T13657] netlink: 'syz.1.2030': attribute type 9 has an invalid length.
[  762.115664][ T5774] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7
[  762.123953][ T5774] Bluetooth: hci0: unexpected event for opcode 0x042d
[  762.840250][ T5774] Bluetooth: hci1: Malformed Event: 0x2f
[  762.866199][ T5774] Bluetooth: hci0: unexpected cc 0x1405 length: 11 > 4
[  762.873529][ T5774] Bluetooth: hci0: unexpected event for opcode 0x1405
[  764.608952][ T5774] Bluetooth: hci3: unexpected event for opcode 0x0c1c
[  765.231862][ T5774] Bluetooth: hci0: unexpected event for opcode 0x0c6d
[  767.312537][T13737] netlink: 'syz.3.2062': attribute type 10 has an invalid length.
[  767.378957][T13737] team0 (unregistering): Port device team_slave_0 removed
[  767.389613][T13737] team0 (unregistering): Port device team_slave_1 removed
[  767.626401][ T5774] Bluetooth: hci1: unknown advertising packet type: 0x74
[  768.863975][ T5774] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10
[  769.047528][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2077'.
[  769.327368][ T5774] Bluetooth: hci3: unexpected event for opcode 0x080c
[  769.566871][T13784] jffs2: notice: (13784) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  769.926269][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'.
[  770.075408][ T5774] Bluetooth: hci0: unexpected event for opcode 0x1005
[  771.071132][T13840] ebt_limit: overflow, try lower: 0/0
[  771.312839][ T5774] Bluetooth: hci0: unexpected event for opcode 0x2039
[  772.121234][ T5774] Bluetooth: hci0: unexpected event for opcode 0x203c
[  772.305755][T13896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2140'.
[  772.408975][T13901] netlink: 'syz.1.2143': attribute type 10 has an invalid length.
[  772.424835][T13901] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  772.891892][ T5774] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  772.900868][ T5774] Bluetooth: hci1: Injecting HCI hardware error event
[  772.912363][   T51] Bluetooth: hci1: hardware error 0x00
[  774.693700][T14002] Could not find key with description: [0123456789abcdef]
[  774.700865][T14002] process_request_key_err: No key
[  774.799356][T14002] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef]
[  774.840431][T14002] One or more global auth toks could not properly register; rc = [-2]
[  774.860085][T14002] Error parsing options; rc = [-2]
[  774.965387][   T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  775.206096][T14034] Cannot find map_set index 2 as target
[  776.320879][   T51] Bluetooth: hci3: unexpected event for opcode 0x0809
[  779.319878][T14183] xt_connbytes: Forcing CT accounting to be enabled
[  779.599763][T14200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2281'.
[  780.729843][T14237] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2298'.
[  781.708067][   T51] Bluetooth: hci0: unexpected event for opcode 0x0c25
[  784.827720][T14334] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  785.183223][T14353] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  794.140725][T14597] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  794.158956][T14597] netlink: 'syz.1.2449': attribute type 12 has an invalid length.
[  794.901259][T14632] rxe_eth0 speed is unknown, defaulting to 1000
[  796.738445][T14670] jffs2: notice: (14670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  799.144348][T14741] ------------[ cut here ]------------
[  799.150662][T14741] WARNING: CPU: 1 PID: 14741 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180
[  799.157170][T14745] overlayfs: failed to clone upperpath
[  799.161620][T14741] Modules linked in:
[  799.170958][T14741] CPU: 1 PID: 14741 Comm: syz.2.2509 Not tainted syzkaller #0
[  799.179210][T14741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  799.189686][T14741] RIP: 0010:ieee80211_link_release_channel+0x154/0x180
[  799.196802][T14741] Code: 7c 2d 00 00 74 08 48 89 df e8 28 f2 ca f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 2f 86 00 e8 dc 10 72 f7 <0f> 0b eb c5 48 c7 c1 ac 8f 6c 8f 80 e1 07 80 c1 03 38 c1 0f 8c 51
[  799.216779][T14741] RSP: 0018:ffffc9000322f108 EFLAGS: 00010287
[  799.223532][T14741] RAX: ffffffff8a157fd4 RBX: ffff88805bdd9618 RCX: 0000000000080000
[  799.231844][T14741] RDX: ffffc9000d682000 RSI: 000000000005afe3 RDI: 000000000005afe4
[  799.240225][T14741] RBP: 0000000000000000 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d
[  799.248677][T14741] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: ffff88805bddac88
[  799.257361][T14741] R13: 1ffff1100b7bb2c3 R14: ffff88805bdda440 R15: dffffc0000000000
[  799.265772][T14741] FS:  00007ff1ba21b6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  799.275395][T14741] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  799.282565][T14741] CR2: 00007ff1b93ecc40 CR3: 0000000040c3b000 CR4: 00000000003506e0
[  799.290568][T14741] Call Trace:
[  799.294024][T14741]  <TASK>
[  799.296983][T14741]  ? trace_drv_return_void+0x1c0/0x1c0
[  799.302570][T14741]  unregister_netdevice_many_notify+0x1357/0x1910
[  799.309047][T14741]  ? unregister_netdevice_many+0x20/0x20
[  799.314848][T14741]  ? kernfs_remove_by_name_ns+0x117/0x150
[  799.320602][T14741]  ? __lock_acquire+0x7eb0/0x7eb0
[  799.325768][T14741]  unregister_netdevice_queue+0x2e9/0x330
[  799.331529][T14741]  ? list_netdevice+0x730/0x730
[  799.336486][T14741]  ? kernfs_remove_by_name_ns+0x117/0x150
[  799.342283][T14741]  _cfg80211_unregister_wdev+0x16d/0x580
[  799.347946][T14741]  ieee80211_if_remove+0x1b1/0x2b0
[  799.353164][T14741]  ieee80211_del_iface+0x19/0x20
[  799.358121][T14741]  cfg80211_remove_virtual_intf+0x21b/0x3b0
[  799.364129][T14741]  genl_family_rcv_msg_doit+0x21a/0x310
[  799.369704][T14741]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  799.375670][T14741]  ? bpf_lsm_capable+0x9/0x10
[  799.380384][T14741]  ? security_capable+0x89/0xb0
[  799.385336][T14741]  genl_rcv_msg+0x611/0x7a0
[  799.389869][T14741]  ? genl_bind+0x360/0x360
[  799.394332][T14741]  ? nl80211_exit+0x30/0x30
[  799.398871][T14741]  ? nl80211_new_interface+0xec0/0xec0
[  799.404418][T14741]  ? nl80211_pre_doit+0x890/0x890
[  799.409487][T14741]  ? ref_tracker_free+0x686/0x830
[  799.414599][T14741]  netlink_rcv_skb+0x235/0x4c0
[  799.419405][T14741]  ? genl_bind+0x360/0x360
[  799.423913][T14741]  ? netlink_ack+0x1160/0x1160
[  799.428705][T14741]  ? __lock_acquire+0x7eb0/0x7eb0
[  799.433815][T14741]  ? down_read+0x1ac/0x2e0
[  799.438257][T14741]  genl_rcv+0x28/0x40
[  799.442343][T14741]  netlink_unicast+0x7b1/0x930
[  799.447193][T14741]  netlink_sendmsg+0x8d0/0xbf0
[  799.452068][T14741]  ? netlink_getsockopt+0x590/0x590
[  799.457298][T14741]  ? apparmor_socket_sendmsg+0x8e/0x330
[  799.463007][T14741]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  799.468326][T14741]  ? security_socket_sendmsg+0x80/0xa0
[  799.473842][T14741]  ? netlink_getsockopt+0x590/0x590
[  799.479061][T14741]  ____sys_sendmsg+0x61b/0x980
[  799.483929][T14741]  ? __asan_memset+0x22/0x40
[  799.488549][T14741]  ? __sys_sendmsg_sock+0x30/0x30
[  799.493665][T14741]  ? __import_iovec+0x5f2/0x850
[  799.498567][T14741]  ? import_iovec+0x73/0xa0
[  799.503167][T14741]  ___sys_sendmsg+0x2a6/0x360
[  799.507889][T14741]  ? __sys_sendmsg+0x2b0/0x2b0
[  799.512806][T14741]  __se_sys_sendmsg+0x1d0/0x2c0
[  799.517725][T14741]  ? __x64_sys_sendmsg+0x80/0x80
[  799.522784][T14741]  ? lockdep_hardirqs_on+0x98/0x150
[  799.528031][T14741]  do_syscall_64+0x55/0xb0
[  799.532536][T14741]  ? clear_bhb_loop+0x40/0x90
[  799.537232][T14741]  ? clear_bhb_loop+0x40/0x90
[  799.541962][T14741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  799.547893][T14741] RIP: 0033:0x7ff1b939f559
[  799.552432][T14741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  799.572168][T14741] RSP: 002b:00007ff1ba21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  799.580631][T14741] RAX: ffffffffffffffda RBX: 00007ff1b9625fa0 RCX: 00007ff1b939f559
[  799.588662][T14741] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  799.596738][T14741] RBP: 00007ff1b9436b20 R08: 0000000000000000 R09: 0000000000000000
[  799.605228][T14741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  799.613399][T14741] R13: 00007ff1b9626038 R14: 00007ff1b9625fa0 R15: 00007ffd44e18368
[  799.621475][T14741]  </TASK>
[  799.624585][T14741] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  799.631879][T14741] CPU: 1 PID: 14741 Comm: syz.2.2509 Not tainted syzkaller #0
[  799.639343][T14741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  799.649388][T14741] Call Trace:
[  799.652673][T14741]  <TASK>
[  799.655609][T14741]  dump_stack_lvl+0x18c/0x250
[  799.660293][T14741]  ? show_regs_print_info+0x20/0x20
[  799.665480][T14741]  ? load_image+0x420/0x420
[  799.670012][T14741]  panic+0x2ca/0x720
[  799.673943][T14741]  ? bpf_jit_dump+0xd0/0xd0
[  799.678465][T14741]  __warn+0x2e0/0x470
[  799.682450][T14741]  ? ieee80211_link_release_channel+0x154/0x180
[  799.688719][T14741]  ? ieee80211_link_release_channel+0x154/0x180
[  799.694979][T14741]  report_bug+0x2be/0x4f0
[  799.699305][T14741]  ? ieee80211_link_release_channel+0x154/0x180
[  799.705550][T14741]  ? ieee80211_link_release_channel+0x154/0x180
[  799.711796][T14741]  ? ieee80211_link_release_channel+0x156/0x180
[  799.718030][T14741]  handle_bug+0xcf/0x120
[  799.722273][T14741]  exc_invalid_op+0x1a/0x50
[  799.726787][T14741]  asm_exc_invalid_op+0x1a/0x20
[  799.731637][T14741] RIP: 0010:ieee80211_link_release_channel+0x154/0x180
[  799.738495][T14741] Code: 7c 2d 00 00 74 08 48 89 df e8 28 f2 ca f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 2f 86 00 e8 dc 10 72 f7 <0f> 0b eb c5 48 c7 c1 ac 8f 6c 8f 80 e1 07 80 c1 03 38 c1 0f 8c 51
[  799.758112][T14741] RSP: 0018:ffffc9000322f108 EFLAGS: 00010287
[  799.764183][T14741] RAX: ffffffff8a157fd4 RBX: ffff88805bdd9618 RCX: 0000000000080000
[  799.772152][T14741] RDX: ffffc9000d682000 RSI: 000000000005afe3 RDI: 000000000005afe4
[  799.780120][T14741] RBP: 0000000000000000 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d
[  799.788094][T14741] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: ffff88805bddac88
[  799.796066][T14741] R13: 1ffff1100b7bb2c3 R14: ffff88805bdda440 R15: dffffc0000000000
[  799.804053][T14741]  ? ieee80211_link_release_channel+0x154/0x180
[  799.810308][T14741]  ? ieee80211_link_release_channel+0x154/0x180
[  799.816547][T14741]  ? trace_drv_return_void+0x1c0/0x1c0
[  799.822003][T14741]  unregister_netdevice_many_notify+0x1357/0x1910
[  799.828437][T14741]  ? unregister_netdevice_many+0x20/0x20
[  799.834106][T14741]  ? kernfs_remove_by_name_ns+0x117/0x150
[  799.839834][T14741]  ? __lock_acquire+0x7eb0/0x7eb0
[  799.844861][T14741]  unregister_netdevice_queue+0x2e9/0x330
[  799.850584][T14741]  ? list_netdevice+0x730/0x730
[  799.855438][T14741]  ? kernfs_remove_by_name_ns+0x117/0x150
[  799.861160][T14741]  _cfg80211_unregister_wdev+0x16d/0x580
[  799.866795][T14741]  ieee80211_if_remove+0x1b1/0x2b0
[  799.871904][T14741]  ieee80211_del_iface+0x19/0x20
[  799.876837][T14741]  cfg80211_remove_virtual_intf+0x21b/0x3b0
[  799.882734][T14741]  genl_family_rcv_msg_doit+0x21a/0x310
[  799.888293][T14741]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  799.894191][T14741]  ? bpf_lsm_capable+0x9/0x10
[  799.898859][T14741]  ? security_capable+0x89/0xb0
[  799.903712][T14741]  genl_rcv_msg+0x611/0x7a0
[  799.908219][T14741]  ? genl_bind+0x360/0x360
[  799.912630][T14741]  ? nl80211_exit+0x30/0x30
[  799.917126][T14741]  ? nl80211_new_interface+0xec0/0xec0
[  799.922581][T14741]  ? nl80211_pre_doit+0x890/0x890
[  799.927604][T14741]  ? ref_tracker_free+0x686/0x830
[  799.932637][T14741]  netlink_rcv_skb+0x235/0x4c0
[  799.937403][T14741]  ? genl_bind+0x360/0x360
[  799.941822][T14741]  ? netlink_ack+0x1160/0x1160
[  799.946591][T14741]  ? __lock_acquire+0x7eb0/0x7eb0
[  799.951623][T14741]  ? down_read+0x1ac/0x2e0
[  799.956041][T14741]  genl_rcv+0x28/0x40
[  799.960021][T14741]  netlink_unicast+0x7b1/0x930
[  799.964790][T14741]  netlink_sendmsg+0x8d0/0xbf0
[  799.969560][T14741]  ? netlink_getsockopt+0x590/0x590
[  799.974759][T14741]  ? apparmor_socket_sendmsg+0x8e/0x330
[  799.980305][T14741]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  799.985589][T14741]  ? security_socket_sendmsg+0x80/0xa0
[  799.991041][T14741]  ? netlink_getsockopt+0x590/0x590
[  799.996243][T14741]  ____sys_sendmsg+0x61b/0x980
[  800.001013][T14741]  ? __asan_memset+0x22/0x40
[  800.005603][T14741]  ? __sys_sendmsg_sock+0x30/0x30
[  800.010626][T14741]  ? __import_iovec+0x5f2/0x850
[  800.015483][T14741]  ? import_iovec+0x73/0xa0
[  800.019993][T14741]  ___sys_sendmsg+0x2a6/0x360
[  800.024675][T14741]  ? __sys_sendmsg+0x2b0/0x2b0
[  800.029498][T14741]  __se_sys_sendmsg+0x1d0/0x2c0
[  800.034372][T14741]  ? __x64_sys_sendmsg+0x80/0x80
[  800.039323][T14741]  ? lockdep_hardirqs_on+0x98/0x150
[  800.044526][T14741]  do_syscall_64+0x55/0xb0
[  800.048939][T14741]  ? clear_bhb_loop+0x40/0x90
[  800.053610][T14741]  ? clear_bhb_loop+0x40/0x90
[  800.058288][T14741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  800.064182][T14741] RIP: 0033:0x7ff1b939f559
[  800.068600][T14741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  800.088222][T14741] RSP: 002b:00007ff1ba21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  800.096634][T14741] RAX: ffffffffffffffda RBX: 00007ff1b9625fa0 RCX: 00007ff1b939f559
[  800.104603][T14741] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  800.112564][T14741] RBP: 00007ff1b9436b20 R08: 0000000000000000 R09: 0000000000000000
[  800.120527][T14741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  800.128507][T14741] R13: 00007ff1b9626038 R14: 00007ff1b9625fa0 R15: 00007ffd44e18368
[  800.136491][T14741]  </TASK>
[  800.139784][T14741] Kernel Offset: disabled
[  800.144208][T14741] Rebooting in 86400 seconds..