last executing test programs:

10m38.230214965s ago: executing program 32 (id=163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf251d00000008000300", @ANYRES32=r3], 0x8c}}, 0x2000000)

7m1.411870109s ago: executing program 33 (id=1347):
sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, 0x0}}], 0x1, 0x24044015)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8972, 0x1f280, 0x0, 0x8000399})
io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0)

5m47.282404322s ago: executing program 5 (id=1778):
r0 = syz_io_uring_setup(0x4a75, &(0x7f0000002180)={0x0, 0xb130, 0x2, 0x3, 0x15b}, &(0x7f0000002200), &(0x7f0000002240), &(0x7f0000000000))
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x1e0, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e66732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d72656c617865642c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f686173682c7365636c6162656c2c667373c322e2d22f62a3d3fcae283b43ea02757566312d62326634"], 0x2, 0x1d3, &(0x7f0000001a00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x20)
write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

5m46.560988796s ago: executing program 5 (id=1781):
r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x1000007})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000080)='4', 0x1)
fcntl$addseals(r0, 0x409, 0xb)

5m45.972462897s ago: executing program 4 (id=1784):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
fchdir(r0)
r1 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0)

5m45.900280849s ago: executing program 4 (id=1785):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
fanotify_init(0x40, 0x1000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

5m45.788213128s ago: executing program 5 (id=1786):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10)

5m45.711331321s ago: executing program 5 (id=1787):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)

5m45.652663082s ago: executing program 5 (id=1788):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x20, r1, 0x1, 0x470bd28, 0x25dfdbff, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x0)

5m45.280436326s ago: executing program 5 (id=1789):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

5m44.920381987s ago: executing program 34 (id=1789):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

5m44.868445676s ago: executing program 4 (id=1793):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8})
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)

5m44.6160084s ago: executing program 4 (id=1794):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x4, 0x1f5, &(0x7f0000000600)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
getdents64(r0, 0x0, 0x22)

5m44.220663428s ago: executing program 4 (id=1797):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x44, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x80}, @NL80211_ATTR_SSID={0x5, 0x34, @random='A'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8891}, 0x0)

5m43.940476595s ago: executing program 4 (id=1799):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
unshare(0x40400)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
splice(r0, 0x0, r1, 0x0, 0x7151, 0x0)

5m43.379841291s ago: executing program 35 (id=1799):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
unshare(0x40400)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
splice(r0, 0x0, r1, 0x0, 0x7151, 0x0)

3m33.934530671s ago: executing program 7 (id=2484):
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c202b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

3m33.82583328s ago: executing program 7 (id=2486):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000340)='./sys/kernel/reboot/mode\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1'}, 0xb)

3m32.873113113s ago: executing program 7 (id=2491):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000019"], 0x34}}, 0x0)

3m32.635535684s ago: executing program 7 (id=2494):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8820)

3m32.485859359s ago: executing program 7 (id=2497):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x0, 0x2)
r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x1000595f, 0x10000, 0xfffffffe, 0x51}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0x1, 0x9, 0x0, 0x0)

3m32.282027825s ago: executing program 7 (id=2500):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
unshare(0x6020400)
splice(r1, 0x0, r0, 0x0, 0x40000000401, 0x5)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x401, 0xc002e38, 0xff, 0x9, 0x10000, 0xa7d, 0x0, 0x0, 0x100}}, 0x50)

3m17.08881424s ago: executing program 36 (id=2500):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
unshare(0x6020400)
splice(r1, 0x0, r0, 0x0, 0x40000000401, 0x5)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x401, 0xc002e38, 0xff, 0x9, 0x10000, 0xa7d, 0x0, 0x0, 0x100}}, 0x50)

2m55.33990972s ago: executing program 8 (id=2659):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000002c0)="26660f38818100000fc303baf80c66b8c057618d66efbafc0c66b80070000066ef66b80500000066b9002800000f01c10f01c436362ef30fc7740ef0838100180465660fdc3d2667360fc7ae7943b87a660f6e600e", 0x55}], 0x39, 0x13, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m54.397813481s ago: executing program 8 (id=2666):
syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = epoll_create(0xaf2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000201f})

2m52.268603597s ago: executing program 8 (id=2676):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x30000, 0x4)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)
connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10)

2m52.043403315s ago: executing program 8 (id=2679):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
r0 = syz_open_dev$evdev(&(0x7f0000001dc0), 0x2, 0x80)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x14)
ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0)

2m51.37795827s ago: executing program 8 (id=2681):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
r0 = syz_io_uring_setup(0x686f, &(0x7f0000000200)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000140)=<r1=>0x0, &(0x7f00000004c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

2m51.248492082s ago: executing program 8 (id=2683):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$eJzs281OE18Yx/EfL/8/CMJUURSM8YludDOBegUNgcTYRIPU+JKYDDLVpkNLOg2mxgg7t14HcenOxHgDbLwCF+7YuGRhHMNMLS2UqAuZaL+fzXnI4deck+dMcxadnXuvV8vF0C16dfX3mQalTe1KGfVrQIm+5tgf1/+r3aauTeQ/Xbxz/8HNXD4/v2i2kFu6njWz8Uvvn714c/lDffTu2/F3Q9rOPNr5kv28Pbk9tfNt6WkptFJolWrdPFuuVuvecuDbSiksu2a3A98LfStVQr/WMV8MqmtrDfMqK2MjazU/DM2rNKzsN6xetXqtYd4Tr1Qx13VtbET4mcLW4qKXS3sV+LNqtZw3J2n60ExhK5UFAQCAVHH/72Xc/3vB3v3/YfP57cT9HwAAAAAAAAAAAAAAAAAAAACAv8FuFDlRFDk/xv+k+A2fqPn3CUkjkkYlnZQ0JmlckiMpI+mUpNOSJiSdkXRW0qSkc5LOS5pq+6y094rDjur/AP3vCTz/vY3+97a2F3eHpdVX64X1QjIm87miSgrka0aOvsa9bErqhRv5+RmLZXRhdaOZ31gvDHTmZ+XsHZhu+dkkb535ofjctfJZOXsHrFs+2zU/rKtX2vKuHH18rKoCrcRncj//ctZs7lb+QH46/r9/nWstXfvnukfNJ/lfOB/RTNf+DGp6MN29Qwobz8teEPg1CgoKilaR9jcTjsN+09NeCQAAAAAAAAAAAAAAAADgdxzHzwnT3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9DwAA//+TC2AL")
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0)

2m36.010037685s ago: executing program 37 (id=2683):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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")
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0)

1m18.455232215s ago: executing program 9 (id=3229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17)
write$P9_RREAD(r0, &(0x7f0000000140)={0xb, 0x75, 0x1}, 0xb)
close(r0)

1m18.221074505s ago: executing program 9 (id=3232):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x86, &(0x7f0000001040)}, 0x17)

1m18.065053112s ago: executing program 9 (id=3234):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000)
get_mempolicy(0x0, 0x0, 0x4, &(0x7f00007a8000/0x3000)=nil, 0x3)

1m17.90243136s ago: executing program 9 (id=3236):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x800, &(0x7f00000002c0)=ANY=[], 0xfd, 0x1524, &(0x7f0000001740)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1m16.15093241s ago: executing program 9 (id=3245):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000100000000000001000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000a50000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfef3, &(0x7f00000002c0)=ANY=[], 0x0)

1m15.876828957s ago: executing program 9 (id=3246):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10)
write(r0, &(0x7f0000000340)='4', 0x1)

1m0.75976021s ago: executing program 38 (id=3246):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10)
write(r0, &(0x7f0000000340)='4', 0x1)

55.470031817s ago: executing program 6 (id=3366):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000005c0)={r2, 0x7, 0x20}, &(0x7f0000000600)=0xc)

54.396894491s ago: executing program 6 (id=3369):
r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x9)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r2, 0x40, 0x0)

54.017238396s ago: executing program 6 (id=3371):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000000c0)={{0x67, @broadcast, 0x4e20, 0x4, 'nq\x00', 0x6, 0xfffffff5, 0x46}, {@broadcast, 0x4e21, 0x0, 0x5, 0x5d, 0x7}}, 0x44)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c)

53.728353606s ago: executing program 6 (id=3373):
setns(0xc9, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

53.420183879s ago: executing program 6 (id=3375):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000300)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000c40)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], 0x1, 0x35b, &(0x7f00000008c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138)

52.511697024s ago: executing program 6 (id=3379):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550e, &(0x7f0000005980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x7)

36.509640679s ago: executing program 39 (id=3379):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550e, &(0x7f0000005980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x7)

11.191534981s ago: executing program 1 (id=3497):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000000000)=ANY=[])

8.466581938s ago: executing program 3 (id=3506):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0)

8.092820602s ago: executing program 1 (id=3508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="14000200200100"/16], 0x34}}, 0x0)

7.833031106s ago: executing program 3 (id=3510):
r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0xa1bfe459c6c078b5)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r2, 0x9)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

7.088656665s ago: executing program 3 (id=3513):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000010)
write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x745, 0x10000b, 0x1, 0x20, 0x16, 0x5, 0x9}}, 0x138)
close(r0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

6.41613094s ago: executing program 1 (id=3515):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x404, 0x81, 0x6, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x200006, 0x100000000001], 0xeeee1000, 0x4fb40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.270858885s ago: executing program 3 (id=3516):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

6.210951525s ago: executing program 0 (id=3517):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
poll(&(0x7f0000000500)=[{r2, 0x1102}], 0x1, 0x81)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001})

5.339645805s ago: executing program 1 (id=3519):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x108)
lseek(r2, 0x3, 0x0)

5.230001113s ago: executing program 0 (id=3520):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000250000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000580)="f6c8dd08b0", 0x0}, 0x20)

4.5531191s ago: executing program 1 (id=3522):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000240)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)
syz_open_pts(r0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

4.460445475s ago: executing program 0 (id=3523):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

3.895803682s ago: executing program 1 (id=3525):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4)

2.79908939s ago: executing program 2 (id=3528):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.595523615s ago: executing program 3 (id=3529):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xd280, 0x0, 0x1, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f00000001c0)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

2.355863606s ago: executing program 2 (id=3530):
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, 0x0, 0x801, 0x400, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002060300"/17], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

1.917105132s ago: executing program 2 (id=3531):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24)
sendfile(r0, r1, 0x0, 0x64)

1.570327731s ago: executing program 2 (id=3532):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x6, 0x80800)
r3 = eventfd2(0x4, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4, r3})
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x4, r2})

1.201012744s ago: executing program 0 (id=3533):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000a40)='./file0\x00')
setresuid(0x0, 0xee00, 0x0)
syz_open_procfs(0x0, 0x0)

1.008096157s ago: executing program 2 (id=3534):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

795.030784ms ago: executing program 0 (id=3535):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x80000000, @vifc_lcl_addr=@remote, @multicast1}, 0x10)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000001c0)=0x8, 0x4)

661.625907ms ago: executing program 2 (id=3536):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0)

305.466258ms ago: executing program 0 (id=3537):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1)

0s ago: executing program 3 (id=3538):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x80000002, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095)

kernel console output (not intermixed with test programs):

d80/0x7d80
[  557.478348][T13949]  should_fail_ex+0x394/0x4c0
[  557.478379][T13949]  prepare_alloc_pages+0x1e1/0x5b0
[  557.478407][T13949]  __alloc_pages+0x134/0x460
[  557.478431][T13949]  ? zone_statistics+0x170/0x170
[  557.529087][T13949]  ? alloc_pages+0x4e1/0x740
[  557.533692][T13949]  __get_free_pages+0xc/0x30
[  557.538286][T13949]  __se_sys_mincore+0xe0/0x600
[  557.543056][T13949]  ? __x64_sys_mincore+0x3f/0x80
[  557.547998][T13949]  do_syscall_64+0x55/0xb0
[  557.552422][T13949]  ? clear_bhb_loop+0x40/0x90
[  557.557137][T13949]  ? clear_bhb_loop+0x40/0x90
[  557.561823][T13949]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  557.567719][T13949] RIP: 0033:0x7fd5b419e159
[  557.572130][T13949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.591748][T13949] RSP: 002b:00007fd5b5038028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b
[  557.600256][T13949] RAX: ffffffffffffffda RBX: 00007fd5b4425fa0 RCX: 00007fd5b419e159
[  557.608229][T13949] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000
[  557.616196][T13949] RBP: 00007fd5b423506b R08: 0000000000000000 R09: 0000000000000000
[  557.624164][T13949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  557.632130][T13949] R13: 00007fd5b4426038 R14: 00007fd5b4425fa0 R15: 00007fff67c663c8
[  557.640109][T13949]  </TASK>
[  557.663639][   T23] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  557.695492][   T23] usb 9-1: Product: syz
[  557.700499][   T23] usb 9-1: Manufacturer: syz
[  557.721239][   T23] cdc_wdm 9-1:1.0: skipping garbage
[  557.726656][   T23] cdc_wdm 9-1:1.0: skipping garbage
[  557.739621][   T23] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  557.745600][   T23] cdc_wdm 9-1:1.0: Unknown control protocol
[  557.756756][T13953] loop6: detected capacity change from 0 to 4096
[  558.042369][T13961] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  558.215958][ T5159] usb 9-1: USB disconnect, device number 2
[  558.756381][    T8] IPVS: starting estimator thread 0...
[  558.767502][T13970] IPVS: fo: FWM 3 0x00000003 - no destination available
[  558.813765][    C0] IPVS: fo: FWM 3 0x00000003 - no destination available
[  558.887043][T13971] IPVS: using max 21 ests per chain, 50400 per kthread
[  558.959359][ T6228] wlan1: Trigger new scan to find an IBSS to join
[  559.209053][T13986] FAULT_INJECTION: forcing a failure.
[  559.209053][T13986] name failslab, interval 1, probability 0, space 0, times 0
[  559.226358][T13986] CPU: 0 PID: 13986 Comm: syz.0.2678 Not tainted syzkaller #0
[  559.233870][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  559.243957][T13986] Call Trace:
[  559.247261][T13986]  <TASK>
[  559.250216][T13986]  dump_stack_lvl+0x18c/0x250
[  559.254950][T13986]  ? show_regs_print_info+0x20/0x20
[  559.260187][T13986]  ? load_image+0x420/0x420
[  559.264737][T13986]  should_fail_ex+0x394/0x4c0
[  559.269459][T13986]  should_failslab+0x9/0x20
[  559.274017][T13986]  slab_pre_alloc_hook+0x59/0x300
[  559.279084][T13986]  ? inet_bind2_bucket_find+0x5f4/0x630
[  559.284793][T13986]  kmem_cache_alloc+0x5a/0x2c0
[  559.289594][T13986]  ? __inet_hash_connect+0xbda/0x1870
[  559.295013][T13986]  __inet_hash_connect+0xbda/0x1870
[  559.300365][T13986]  ? inet_bhash2_reset_saddr+0x80/0x80
[  559.305880][T13986]  tcp_v4_connect+0xc55/0x18a0
[  559.310735][T13986]  ? tcp_twsk_unique+0x970/0x970
[  559.315717][T13986]  tcp_v6_connect+0xb06/0x1900
[  559.320631][T13986]  ? tcp_v6_pre_connect+0xf0/0xf0
[  559.325666][T13986]  ? __lock_acquire+0x1262/0x7d80
[  559.330706][T13986]  ? do_syscall_64+0x55/0xb0
[  559.335300][T13986]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  559.341403][T13986]  __inet_stream_connect+0x254/0xdf0
[  559.346732][T13986]  ? inet_dgram_connect+0x340/0x340
[  559.351942][T13986]  tcp_sendmsg_fastopen+0x3af/0x5f0
[  559.357173][T13986]  tcp_sendmsg_locked+0x44ee/0x4ab0
[  559.362371][T13986]  ? lock_chain_count+0x20/0x20
[  559.367226][T13986]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  559.373393][T13986]  ? lockdep_hardirqs_on+0x98/0x150
[  559.378589][T13986]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  559.384753][T13986]  ? mark_lock+0x94/0x320
[  559.389084][T13986]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  559.395076][T13986]  ? lock_chain_count+0x20/0x20
[  559.399937][T13986]  ? tcp_set_state+0x6c0/0x6c0
[  559.404738][T13986]  tcp_sendmsg+0x2f/0x50
[  559.409019][T13986]  __sys_sendto+0x4a9/0x6b0
[  559.413552][T13986]  ? __ia32_sys_getpeername+0x90/0x90
[  559.418958][T13986]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  559.424959][T13986]  ? lock_chain_count+0x20/0x20
[  559.429829][T13986]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  559.435841][T13986]  __x64_sys_sendto+0xde/0xf0
[  559.440565][T13986]  do_syscall_64+0x55/0xb0
[  559.444993][T13986]  ? clear_bhb_loop+0x40/0x90
[  559.449686][T13986]  ? clear_bhb_loop+0x40/0x90
[  559.454375][T13986]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  559.460275][T13986] RIP: 0033:0x7ff0b999e159
[  559.464697][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.484305][T13986] RSP: 002b:00007ff0ba95c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  559.492735][T13986] RAX: ffffffffffffffda RBX: 00007ff0b9c25fa0 RCX: 00007ff0b999e159
[  559.500715][T13986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  559.508705][T13986] RBP: 00007ff0b9a3506b R08: 00002000000001c0 R09: 000000000000001c
[  559.516688][T13986] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000
[  559.524769][T13986] R13: 00007ff0b9c26038 R14: 00007ff0b9c25fa0 R15: 00007ffea1521688
[  559.532754][T13986]  </TASK>
[  559.782179][    T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  560.047364][    T8] usb 4-1: Using ep0 maxpacket: 32
[  560.069061][    T8] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  560.119638][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.134539][ T6228] wlan1: Creating new IBSS network, BSSID 52:12:21:14:b1:42
[  560.147156][    T8] usb 4-1: Product: syz
[  560.161825][    T8] usb 4-1: Manufacturer: syz
[  560.204973][    T8] usb 4-1: SerialNumber: syz
[  560.267721][    T8] usb 4-1: config 0 descriptor??
[  560.556311][    T8] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 028
[  561.302408][ T5813] usb 4-1: USB disconnect, device number 28
[  561.327076][T14025] i2c i2c-1: failure sending STOP
[  561.968178][T14038] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  562.379748][T14047] loop6: detected capacity change from 0 to 1024
[  562.425789][T14052] loop3: detected capacity change from 0 to 256
[  562.448684][T14047] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  562.491676][T14052] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  562.560732][T14047] EXT4-fs (loop6): Errors on filesystem, clearing orphan list.
[  562.606605][T14047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  562.907373][T11131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.058823][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  563.065436][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  564.720734][ T5783] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  564.962726][ T5783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  564.997185][ T5783] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  565.035776][ T5783] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  565.082417][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.104365][   T28] audit: type=1326 audit(1790915540.100:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14088 comm="syz.3.2705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5b419e159 code=0x0
[  565.516017][T14098] loop6: detected capacity change from 0 to 128
[  565.631669][T14098] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  565.641266][ T5783] rtsx_usb: probe of 1-1:1.0 failed with error -71
[  565.703240][ T5783] usb 1-1: USB disconnect, device number 21
[  566.217231][  T972] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  566.405552][  T972] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  566.443064][  T972] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  566.493518][  T972] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  566.565275][  T972] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  566.598094][  T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  566.606768][  T972] usb 7-1: Product: syz
[  566.657719][  T972] usb 7-1: Manufacturer: syz
[  566.662378][  T972] usb 7-1: SerialNumber: syz
[  566.960947][  T972] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  567.269932][  T972] usb 7-1: USB disconnect, device number 14
[  567.333967][T14101] usblp0: removed
[  567.718123][ T5783] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  567.962540][ T5783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  567.988045][ T5783] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  568.027011][ T5783] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  568.103587][ T5783] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  568.146837][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  568.207056][ T5783] usb 1-1: Product: syz
[  568.212391][ T5783] usb 1-1: Manufacturer: syz
[  568.295195][T14127] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  568.325866][ T5783] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected
[  568.431973][ T5783] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  568.855118][ T5783] usb 1-1: USB disconnect, device number 22
[  568.911348][ T5783] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  568.948490][ T5783] garmin_gps 1-1:1.0: device disconnected
[  570.572941][T14183] loop3: detected capacity change from 0 to 128
[  570.671406][T14183] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  570.774505][T14183] ext4 filesystem being mounted at /575/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  571.134789][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  571.524773][T14202] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2743'.
[  571.908052][T14211] input: syz0 as /devices/virtual/input/input41
[  571.930552][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806d395000: rx timeout, send abort
[  572.431081][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806d397400: rx timeout, send abort
[  572.446832][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806d395000: abort rx timeout. Force session deactivation
[  572.942598][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806d397400: abort rx timeout. Force session deactivation
[  573.169245][T14231] ip_tables: iptables: counters copy to user failed while replacing table
[  574.456612][T14253] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  574.478950][T14259] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  574.499825][T14258] loop6: detected capacity change from 0 to 1024
[  574.525885][T14253] overlayfs: failed to set xattr on upper
[  574.536263][T14258] EXT4-fs: Ignoring removed i_version option
[  574.567352][T14253] overlayfs: ...falling back to redirect_dir=nofollow.
[  574.605982][T14258] EXT4-fs: Ignoring removed bh option
[  574.607153][T14253] overlayfs: ...falling back to index=off.
[  574.660839][T14258] EXT4-fs (loop6): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  574.667241][T14253] overlayfs: ...falling back to uuid=null.
[  574.713733][T14253] overlayfs: ...falling back to xino=off.
[  574.738546][T14258] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  574.769527][T14253] overlayfs: conflicting lowerdir path
[  574.782390][T14258] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  574.887140][   T28] audit: type=1800 audit(1790915549.880:298): pid=14258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2757" name="file1" dev="loop6" ino=15 res=0 errno=0
[  574.907676][    C1] vkms_vblank_simulate: vblank timer overrun
[  575.095148][T11131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  576.481374][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  576.494096][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  576.507293][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  576.516354][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  576.524903][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  576.533133][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  577.223449][ T6234] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.530976][T14307] loop3: detected capacity change from 0 to 256
[  577.542668][ T6234] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.574294][T14307] exfat: Deprecated parameter 'utf8'
[  577.582740][T14307] exfat: Deprecated parameter 'namecase'
[  577.632151][T14307] exfat: Deprecated parameter 'namecase'
[  577.646810][T14309] bridge1: entered promiscuous mode
[  577.653166][T14307] exfat: Deprecated parameter 'utf8'
[  577.662034][T14309] bridge1: entered allmulticast mode
[  577.682373][T14307] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  577.753083][ T6234] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.926099][ T6234] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.053962][T14287] chnl_net:caif_netlink_parms(): no params data found
[  578.558722][ T5787] Bluetooth: hci2: command tx timeout
[  578.874445][T14287] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.882245][T14287] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.902199][T14287] bridge_slave_0: entered allmulticast mode
[  578.913735][T14287] bridge_slave_0: entered promiscuous mode
[  579.006537][T14287] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.031253][T14287] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.051177][T14287] bridge_slave_1: entered allmulticast mode
[  579.083259][T14287] bridge_slave_1: entered promiscuous mode
[  579.508151][T14287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.662546][T14287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  579.973367][T14287] team0: Port device team_slave_0 added
[  580.048091][T14287] team0: Port device team_slave_1 added
[  580.544097][T14287] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.582812][T14343] loop6: detected capacity change from 0 to 32768
[  580.598696][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.637548][ T5787] Bluetooth: hci2: command tx timeout
[  580.686183][T14343] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  580.747527][T14287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.825450][T14287] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.865442][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.986989][   T28] audit: type=1800 audit(1790915555.970:299): pid=14343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2772" name="file1" dev="loop6" ino=17060 res=0 errno=0
[  581.048718][T14287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.625360][ T6234] hsr_slave_0: left promiscuous mode
[  581.655491][ T6234] hsr_slave_1: left promiscuous mode
[  581.707386][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.714868][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.750388][T11131] ocfs2: Unmounting device (7,6) on (node local)
[  581.807719][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.815193][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.908344][ T6234] bridge_slave_1: left allmulticast mode
[  581.914056][ T6234] bridge_slave_1: left promiscuous mode
[  581.945847][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.016162][ T6234] bridge_slave_0: left allmulticast mode
[  582.037181][ T6234] bridge_slave_0: left promiscuous mode
[  582.042974][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.208991][ T6234] veth1_macvtap: left promiscuous mode
[  582.214583][ T6234] veth0_macvtap: left promiscuous mode
[  582.219987][T14350] loop3: detected capacity change from 0 to 32768
[  582.234313][ T6234] veth1_vlan: left promiscuous mode
[  582.260497][ T6234] veth0_vlan: left promiscuous mode
[  582.384185][T14350] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  582.607181][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2782'.
[  582.717108][ T5787] Bluetooth: hci2: command tx timeout
[  583.003149][T14396] ceph: No mds server is up or the cluster is laggy
[  583.019476][T14350] XFS (loop3): Ending clean mount
[  583.044581][T14350] XFS (loop3): Quotacheck needed: Please wait.
[  583.312863][T14350] XFS (loop3): Quotacheck: Done.
[  583.464137][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  583.464952][T14405] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  583.597179][ T5783] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  583.847649][ T5783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  583.862137][ T5783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  583.938679][ T5783] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 64
[  583.972640][ T5783] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  583.989053][T14408] loop6: detected capacity change from 0 to 8192
[  584.003220][T14408] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  584.040441][T14408] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  584.093172][T14408] REISERFS (device loop6): using ordered data mode
[  584.136019][T14408] reiserfs: using flush barriers
[  584.145740][T14408] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  584.177935][ T5783] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  584.188239][T14408] REISERFS (device loop6): checking transaction log (loop6)
[  584.189573][T14408] REISERFS (device loop6): Using r5 hash to sort names
[  584.190007][T14408] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  584.284070][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.320260][ T5783] usb 1-1: Product: syz
[  584.339900][ T5783] usb 1-1: Manufacturer: syz
[  584.346328][ T5783] usb 1-1: SerialNumber: syz
[  584.539433][T14411] loop3: detected capacity change from 0 to 4096
[  584.648866][T14403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  584.709406][T14415] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  584.819795][ T5787] Bluetooth: hci2: command tx timeout
[  585.492515][T14403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  585.658714][ T6234] team0 (unregistering): Port device team_slave_1 removed
[  585.772884][ T5783] cdc_ncm 1-1:1.0: bind() failure
[  585.825457][ T5783] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  585.844127][ T5783] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  585.844127][ T6234] team0 (unregistering): Port device team_slave_0 removed
[  585.847731][ T5783] usbtest: probe of 1-1:1.1 failed with error -71
[  585.912522][ T5783] usb 1-1: USB disconnect, device number 23
[  586.067917][ T6234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  586.253597][ T6234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  586.260670][T14420] loop6: detected capacity change from 0 to 32768
[  587.739287][ T6234] bond0 (unregistering): Released all slaves
[  588.020852][T14417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2790'.
[  588.039758][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2790'.
[  588.121811][T14287] hsr_slave_0: entered promiscuous mode
[  588.147997][T14287] hsr_slave_1: entered promiscuous mode
[  588.173144][T14287] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  588.207141][T14287] Cannot create hsr debugfs directory
[  588.878694][T14287] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  588.924448][T14287] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  589.007062][   T28] audit: type=1326 audit(1790915564.000:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  589.031182][    C1] vkms_vblank_simulate: vblank timer overrun
[  589.062499][T14287] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  589.115376][T14287] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  589.125838][   T28] audit: type=1326 audit(1790915564.000:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  589.206705][   T28] audit: type=1326 audit(1790915564.030:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  589.230972][    C1] vkms_vblank_simulate: vblank timer overrun
[  589.333858][   T28] audit: type=1326 audit(1790915564.030:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  589.453421][   T28] audit: type=1326 audit(1790915564.030:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  589.477561][    C1] vkms_vblank_simulate: vblank timer overrun
[  589.525086][T14287] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.584052][T14287] 8021q: adding VLAN 0 to HW filter on device team0
[  589.619711][   T28] audit: type=1326 audit(1790915564.030:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  589.643798][    C1] vkms_vblank_simulate: vblank timer overrun
[  589.679059][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.686233][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.736501][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.743741][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.762900][   T28] audit: type=1326 audit(1790915564.030:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  589.867257][ T5783] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  589.883294][   T28] audit: type=1326 audit(1790915564.030:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  589.962718][   T28] audit: type=1326 audit(1790915564.030:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  590.043002][   T28] audit: type=1326 audit(1790915564.030:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.3.2804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd5b419e159 code=0x7ffc0000
[  590.122109][ T5783] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  590.135567][T14287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  590.167262][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.197065][ T5783] usb 1-1: Product: syz
[  590.213219][ T5783] usb 1-1: Manufacturer: syz
[  590.230013][ T5783] usb 1-1: SerialNumber: syz
[  590.267685][ T5783] usb 1-1: config 0 descriptor??
[  590.303193][T14287] veth0_vlan: entered promiscuous mode
[  590.361571][T14287] veth1_vlan: entered promiscuous mode
[  590.520651][T14287] veth0_macvtap: entered promiscuous mode
[  590.576326][ T5783] usb 1-1: USB disconnect, device number 24
[  590.576720][T14287] veth1_macvtap: entered promiscuous mode
[  590.738101][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.780450][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.846199][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  590.905968][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  590.959974][T14287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.032479][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.072805][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.112088][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.142959][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.172025][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.204752][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.235193][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.275558][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.318915][T14287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.390025][T14287] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.426080][T14287] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  591.450736][T14287] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  591.485870][T14287] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  591.533811][T14505] FAULT_INJECTION: forcing a failure.
[  591.533811][T14505] name failslab, interval 1, probability 0, space 0, times 0
[  591.608022][T14505] CPU: 1 PID: 14505 Comm: syz.6.2813 Not tainted syzkaller #0
[  591.615555][T14505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  591.625627][T14505] Call Trace:
[  591.628922][T14505]  <TASK>
[  591.631871][T14505]  dump_stack_lvl+0x18c/0x250
[  591.636582][T14505]  ? show_regs_print_info+0x20/0x20
[  591.641812][T14505]  ? load_image+0x420/0x420
[  591.646362][T14505]  ? __might_sleep+0xe0/0xe0
[  591.650981][T14505]  ? __lock_acquire+0x7d80/0x7d80
[  591.656044][T14505]  should_fail_ex+0x394/0x4c0
[  591.660756][T14505]  should_failslab+0x9/0x20
[  591.665282][T14505]  slab_pre_alloc_hook+0x59/0x300
[  591.670601][T14505]  ? futex_wait_queue+0x9d/0x1b0
[  591.675798][T14505]  ? refill_pi_state_cache+0x8d/0x170
[  591.681198][T14505]  __kmem_cache_alloc_node+0x53/0x250
[  591.686611][T14505]  ? plist_add+0x3db/0x490
[  591.691092][T14505]  ? refill_pi_state_cache+0x8d/0x170
[  591.696521][T14505]  kmalloc_trace+0x2a/0xe0
[  591.700972][T14505]  refill_pi_state_cache+0x8d/0x170
[  591.706201][T14505]  futex_requeue+0x1cb/0x13c0
[  591.710901][T14505]  ? futex_unqueue+0xcb/0xf0
[  591.715524][T14505]  ? put_task_struct+0xc0/0xc0
[  591.720314][T14505]  ? futex_wait_setup+0x270/0x270
[  591.725379][T14505]  ? file_end_write+0x159/0x250
[  591.730249][T14505]  ? vfs_write+0x5de/0x9a0
[  591.734685][T14505]  do_futex+0x32b/0x3e0
[  591.738871][T14505]  ? __ia32_sys_get_robust_list+0x110/0x110
[  591.744774][T14505]  ? lock_chain_count+0x20/0x20
[  591.749637][T14505]  __se_sys_futex+0x3a9/0x440
[  591.754328][T14505]  ? __x64_sys_futex+0xf0/0xf0
[  591.759112][T14505]  ? __x64_sys_futex+0x21/0xf0
[  591.763890][T14505]  do_syscall_64+0x55/0xb0
[  591.768324][T14505]  ? clear_bhb_loop+0x40/0x90
[  591.773026][T14505]  ? clear_bhb_loop+0x40/0x90
[  591.777722][T14505]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  591.783630][T14505] RIP: 0033:0x7f401bb9e159
[  591.788051][T14505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  591.807678][T14505] RSP: 002b:00007f401cad9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  591.816216][T14505] RAX: ffffffffffffffda RBX: 00007f401be25fa0 RCX: 00007f401bb9e159
[  591.824210][T14505] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000
[  591.832193][T14505] RBP: 00007f401bc3506b R08: 0000200000048000 R09: 0000000000000000
[  591.840183][T14505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  591.848167][T14505] R13: 00007f401be26038 R14: 00007f401be25fa0 R15: 00007ffd1a88a918
[  591.856171][T14505]  </TASK>
[  591.859226][    C1] vkms_vblank_simulate: vblank timer overrun
[  592.012346][ T6241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.040940][ T6241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.095922][ T6217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.114539][ T6217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.482512][ T6225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  593.259294][T14534] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  593.266317][T14534] overlayfs: failed to set xattr on upper
[  593.337319][T14534] overlayfs: ...falling back to index=off.
[  593.343198][T14534] overlayfs: ...falling back to uuid=null.
[  593.558654][T14543] FAULT_INJECTION: forcing a failure.
[  593.558654][T14543] name failslab, interval 1, probability 0, space 0, times 0
[  593.576188][T14543] CPU: 0 PID: 14543 Comm: syz.3.2822 Not tainted syzkaller #0
[  593.583701][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  593.593803][T14543] Call Trace:
[  593.597107][T14543]  <TASK>
[  593.600061][T14543]  dump_stack_lvl+0x18c/0x250
[  593.604778][T14543]  ? show_regs_print_info+0x20/0x20
[  593.610017][T14543]  ? load_image+0x420/0x420
[  593.614556][T14543]  ? __might_sleep+0xe0/0xe0
[  593.619188][T14543]  ? __lock_acquire+0x7d80/0x7d80
[  593.624351][T14543]  should_fail_ex+0x394/0x4c0
[  593.629090][T14543]  should_failslab+0x9/0x20
[  593.633640][T14543]  slab_pre_alloc_hook+0x59/0x300
[  593.638697][T14543]  ? ramfs_init_fs_context+0x4f/0xe0
[  593.644061][T14543]  ? ramfs_init_fs_context+0x4f/0xe0
[  593.649386][T14543]  __kmem_cache_alloc_node+0x53/0x250
[  593.654799][T14543]  ? ramfs_init_fs_context+0x4f/0xe0
[  593.660120][T14543]  kmalloc_trace+0x2a/0xe0
[  593.664580][T14543]  ramfs_init_fs_context+0x4f/0xe0
[  593.669750][T14543]  alloc_fs_context+0x618/0x7a0
[  593.674639][T14543]  __se_sys_fsopen+0xa0/0x2c0
[  593.679328][T14543]  do_syscall_64+0x55/0xb0
[  593.683757][T14543]  ? clear_bhb_loop+0x40/0x90
[  593.688438][T14543]  ? clear_bhb_loop+0x40/0x90
[  593.693121][T14543]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  593.699013][T14543] RIP: 0033:0x7fd5b419e159
[  593.703428][T14543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  593.723041][T14543] RSP: 002b:00007fd5b5038028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  593.731455][T14543] RAX: ffffffffffffffda RBX: 00007fd5b4425fa0 RCX: 00007fd5b419e159
[  593.739430][T14543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[  593.747406][T14543] RBP: 00007fd5b423506b R08: 0000000000000000 R09: 0000000000000000
[  593.755548][T14543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  593.763520][T14543] R13: 00007fd5b4426038 R14: 00007fd5b4425fa0 R15: 00007fff67c663c8
[  593.771509][T14543]  </TASK>
[  594.432851][T14562] loop3: detected capacity change from 0 to 512
[  594.449378][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2827'.
[  594.472969][T14562] EXT4-fs: inline encryption not supported
[  594.531133][T14565] xfrm1: entered promiscuous mode
[  594.559086][T14565] xfrm1: entered allmulticast mode
[  594.589581][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2827'.
[  594.637840][T14562] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  594.750122][T14562] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2826: invalid indirect mapped block 2683928664 (level 1)
[  594.941085][T14562] EXT4-fs (loop3): Remounting filesystem read-only
[  594.972210][T14562] EXT4-fs (loop3): 1 truncate cleaned up
[  595.010999][T14562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  595.780283][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.987153][   T23] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  596.013283][T14577] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.021134][T14577] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.085856][T14595] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff
[  596.194092][   T23] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  596.234942][   T23] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  596.268335][   T23] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  596.286980][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  596.333051][   T23] usb 7-1: SerialNumber: syz
[  596.591369][   T23] usb 7-1: 0:2 : does not exist
[  596.596382][   T23] usb 7-1: unit 2 not found!
[  596.689911][   T23] usb 7-1: USB disconnect, device number 15
[  596.768650][ T9270] udevd[9270]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  597.241086][T14577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.321308][T14577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  598.155037][T14577] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  598.187059][T14577] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  598.195999][T14577] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  598.215809][T14577] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  598.271962][    T8] IPVS: starting estimator thread 0...
[  598.397336][T14626] IPVS: using max 17 ests per chain, 40800 per kthread
[  599.279307][T14647] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  599.360407][T14647] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  602.734850][T14723] netlink: 'syz.6.2873': attribute type 4 has an invalid length.
[  602.833131][T14722] netlink: 'syz.6.2873': attribute type 4 has an invalid length.
[  603.177385][ T5813] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  603.412236][ T5813] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  603.455457][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.510937][ T5813] usb 4-1: config 0 descriptor??
[  603.529539][T14744] loop6: detected capacity change from 0 to 4096
[  603.644859][T14744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.975825][T11131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.066772][T14754] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3)
[  604.074478][T14754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  604.153104][T14754] vhci_hcd vhci_hcd.0: Device attached
[  604.197073][T14755] vhci_hcd: connection closed
[  604.209779][ T6217] vhci_hcd: stop threads
[  604.250806][ T6217] vhci_hcd: release socket
[  604.255415][ T6217] vhci_hcd: disconnect device
[  604.437707][T14766] 9pnet: p9_errstr2errno: server reported unknown error 000060928,
[  604.877557][ T5813] usb 4-1: Cannot set autoneg
[  604.884530][ T5813] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71
[  604.951223][ T5813] usb 4-1: USB disconnect, device number 29
[  605.597307][ T5159] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  605.812257][ T5159] usb 7-1: config 1 has an invalid interface number: 3 but max is 0
[  605.842611][ T5159] usb 7-1: config 1 has no interface number 0
[  605.869997][ T5159] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  605.906130][ T5159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.941307][ T5159] usb 7-1: Product: syz
[  605.945531][ T5159] usb 7-1: Manufacturer: syz
[  605.982579][ T5159] usb 7-1: SerialNumber: syz
[  606.261465][ T5159] usb 7-1: cannot find UAC_HEADER
[  606.325219][ T5159] snd-usb-audio: probe of 7-1:1.3 failed with error -22
[  606.368243][ T5159] usb 7-1: USB disconnect, device number 16
[  606.444323][ T9270] udevd[9270]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  606.826650][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'.
[  607.116794][T14829] loop6: detected capacity change from 0 to 256
[  607.170077][T14829] exfat: Deprecated parameter 'namecase'
[  607.181601][T14829] exfat: Deprecated parameter 'utf8'
[  607.207192][T14829] exfat: Deprecated parameter 'namecase'
[  607.231264][T14829] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  607.283435][T14829] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  607.437605][    T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  607.697364][    T8] usb 1-1: Using ep0 maxpacket: 16
[  607.738522][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  607.762852][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  607.813101][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  607.846075][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.885550][    T8] usb 1-1: Product: syz
[  607.896970][    T8] usb 1-1: Manufacturer: syz
[  607.913798][    T8] usb 1-1: SerialNumber: syz
[  607.953864][T14849] ip_tables: iptables: counters copy to user failed while replacing table
[  608.241108][    T8] usb 1-1: 0:2 : does not exist
[  608.294439][    T8] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  608.457917][    T8] usb 1-1: USB disconnect, device number 25
[  608.626502][ T9270] udevd[9270]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  610.572147][T14863] loop3: detected capacity change from 0 to 32768
[  610.659676][T14863] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  610.924227][T14863] XFS (loop3): Ending clean mount
[  611.056626][T14922] device-mapper: ioctl: name not supplied when creating device
[  611.607840][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  612.596637][T14958] FAULT_INJECTION: forcing a failure.
[  612.596637][T14958] name failslab, interval 1, probability 0, space 0, times 0
[  612.610484][T14958] CPU: 1 PID: 14958 Comm: syz.9.2938 Not tainted syzkaller #0
[  612.618075][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  612.628158][T14958] Call Trace:
[  612.631461][T14958]  <TASK>
[  612.634420][T14958]  dump_stack_lvl+0x18c/0x250
[  612.639132][T14958]  ? show_regs_print_info+0x20/0x20
[  612.644367][T14958]  ? load_image+0x420/0x420
[  612.648893][T14958]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  612.654910][T14958]  ? lock_chain_count+0x20/0x20
[  612.659807][T14958]  should_fail_ex+0x394/0x4c0
[  612.664530][T14958]  should_failslab+0x9/0x20
[  612.669071][T14958]  slab_pre_alloc_hook+0x59/0x300
[  612.674128][T14958]  kmem_cache_alloc_node+0x5e/0x310
[  612.679365][T14958]  ? __alloc_skb+0x103/0x2c0
[  612.684010][T14958]  __alloc_skb+0x103/0x2c0
[  612.688455][T14958]  tipc_buf_acquire+0x2b/0xe0
[  612.693267][T14958]  tipc_named_publish+0x266/0x760
[  612.698338][T14958]  tipc_nametbl_publish+0xee/0x1f0
[  612.703488][T14958]  tipc_sk_publish+0x1cc/0x430
[  612.708291][T14958]  ? tipc_sk_withdraw+0x640/0x640
[  612.713358][T14958]  ? do_raw_spin_unlock+0x121/0x230
[  612.718595][T14958]  tipc_sk_bind+0x1ee/0x300
[  612.723133][T14958]  __sys_bind+0x2f0/0x3f0
[  612.727488][T14958]  ? __ia32_sys_socketpair+0xb0/0xb0
[  612.732821][T14958]  __x64_sys_bind+0x7a/0x90
[  612.737354][T14958]  do_syscall_64+0x55/0xb0
[  612.741800][T14958]  ? clear_bhb_loop+0x40/0x90
[  612.746508][T14958]  ? clear_bhb_loop+0x40/0x90
[  612.751216][T14958]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  612.757229][T14958] RIP: 0033:0x7f63f9f9e159
[  612.761663][T14958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.781307][T14958] RSP: 002b:00007f63fad8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  612.789756][T14958] RAX: ffffffffffffffda RBX: 00007f63fa225fa0 RCX: 00007f63f9f9e159
[  612.797764][T14958] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003
[  612.805777][T14958] RBP: 00007f63fa03506b R08: 0000000000000000 R09: 0000000000000000
[  612.813782][T14958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  612.821780][T14958] R13: 00007f63fa226038 R14: 00007f63fa225fa0 R15: 00007ffc0eae19e8
[  612.829803][T14958]  </TASK>
[  612.832951][T14958] tipc: Publication distribution failure
[  614.504219][T15005] loop3: detected capacity change from 0 to 164
[  615.099103][T15017] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  615.182255][T15017] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00
[  615.213825][T15017] pci 0000:00:07.0: BAR 0 [io  0xc0a0-0xc0bf]
[  615.242672][T15017] pci 0000:00:07.0: BAR 1 [mem 0xfe802000-0xfe80203f]
[  615.375911][T15017] pci 0000:00:07.0: BAR 1 [mem 0xc0000000-0xc000003f]: assigned
[  615.397995][T15017] pci 0000:00:07.0: BAR 0 [io  0x1000-0x101f]: assigned
[  615.482491][T15017] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver
[  616.502859][T15038] loop6: detected capacity change from 0 to 4096
[  616.533544][T15038] EXT4-fs: inline encryption not supported
[  616.664859][T15038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  616.713458][T15038] EXT4-fs (loop6): Test dummy encryption mode enabled
[  616.810422][T15038] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  616.842832][T15038] System zones: 0-5
[  616.973708][T15038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.258374][T11131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.570275][T15070] loop6: detected capacity change from 0 to 1024
[  617.576725][T15072] device-mapper: ioctl: Unable to rename non-existent device,  to uuid .2\´£«.j—DH
[  617.604150][T15070] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  617.645084][T15070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.846270][T11131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.848814][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'.
[  617.870007][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2981'.
[  617.930903][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'.
[  617.943731][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2981'.
[  618.052535][T15082] loop6: detected capacity change from 0 to 1024
[  618.073918][T15082] EXT4-fs: Ignoring removed bh option
[  618.134223][T15082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  618.159364][T15082] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  618.260346][T11131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  618.433615][T15086] FAULT_INJECTION: forcing a failure.
[  618.433615][T15086] name failslab, interval 1, probability 0, space 0, times 0
[  618.487626][T15086] CPU: 0 PID: 15086 Comm: syz.0.2983 Not tainted syzkaller #0
[  618.495157][T15086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  618.505241][T15086] Call Trace:
[  618.508596][T15086]  <TASK>
[  618.511545][T15086]  dump_stack_lvl+0x18c/0x250
[  618.516271][T15086]  ? show_regs_print_info+0x20/0x20
[  618.521504][T15086]  ? load_image+0x420/0x420
[  618.526036][T15086]  ? __lock_acquire+0x7d80/0x7d80
[  618.531096][T15086]  should_fail_ex+0x394/0x4c0
[  618.535828][T15086]  should_failslab+0x9/0x20
[  618.540366][T15086]  slab_pre_alloc_hook+0x59/0x300
[  618.545432][T15086]  kmem_cache_alloc_lru+0x4d/0x2b0
[  618.550588][T15086]  ? new_inode_pseudo+0x82/0x1d0
[  618.555558][T15086]  ? lock_chain_count+0x20/0x20
[  618.560436][T15086]  new_inode_pseudo+0x82/0x1d0
[  618.565211][T15086]  alloc_anon_inode+0x1e/0x2f0
[  618.569985][T15086]  anon_inode_make_secure_inode+0x99/0x160
[  618.575804][T15086]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[  618.581288][T15086]  __se_sys_memfd_secret+0xcd/0x300
[  618.586496][T15086]  do_syscall_64+0x55/0xb0
[  618.590917][T15086]  ? clear_bhb_loop+0x40/0x90
[  618.595613][T15086]  ? clear_bhb_loop+0x40/0x90
[  618.600403][T15086]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  618.606314][T15086] RIP: 0033:0x7ff0b999e159
[  618.610738][T15086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  618.630458][T15086] RSP: 002b:00007ff0ba95c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  618.638890][T15086] RAX: ffffffffffffffda RBX: 00007ff0b9c25fa0 RCX: 00007ff0b999e159
[  618.646883][T15086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[  618.655056][T15086] RBP: 00007ff0b9a3506b R08: 0000000000000000 R09: 0000000000000000
[  618.663034][T15086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  618.671023][T15086] R13: 00007ff0b9c26038 R14: 00007ff0b9c25fa0 R15: 00007ffea1521688
[  618.679034][T15086]  </TASK>
[  619.193130][T15097] loop3: detected capacity change from 0 to 4096
[  619.224928][T15101] use of bytesused == 0 is deprecated and will be removed in the future,
[  619.239164][T15097] EXT4-fs: inline encryption not supported
[  619.247869][T15101] use the actual size instead.
[  619.308362][T15097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  619.347259][T15097] EXT4-fs (loop3): Test dummy encryption mode enabled
[  619.398586][T15097] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  619.437820][T15097] System zones: 0-5
[  619.469414][T15097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.870021][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.746458][T15142] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3005'.
[  620.766774][T15142] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3005'.
[  621.114182][T15151] loop6: detected capacity change from 0 to 16
[  621.159901][T15151] erofs: (device loop6): mounted with root inode @ nid 36.
[  622.282088][    T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  622.544720][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  622.597339][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  622.624036][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  622.682456][    T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  622.715538][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.750979][    T8] usb 4-1: Product: syz
[  622.756782][    T8] usb 4-1: Manufacturer: syz
[  622.790258][    T8] usb 4-1: SerialNumber: syz
[  622.839721][    T8] usb 4-1: config 0 descriptor??
[  622.853024][   T28] kauditd_printk_skb: 41 callbacks suppressed
[  622.853041][   T28] audit: type=1804 audit(1790915597.840:351): pid=15190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3019" name="/newroot/390/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=189 res=1 errno=0
[  623.121718][    T8] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  623.512560][    T9] usb 4-1: USB disconnect, device number 30
[  623.830008][T15208] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  624.479736][ T6241] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  624.498414][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  624.506046][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  625.164745][T15239] tls_set_device_offload_rx: netdev not found
[  625.405971][   T28] audit: type=1326 audit(1790915600.400:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.6.3036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bb9e159 code=0x7ffc0000
[  625.487492][   T28] audit: type=1326 audit(1790915600.430:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.6.3036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bb9e159 code=0x7ffc0000
[  625.551507][   T28] audit: type=1326 audit(1790915600.430:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.6.3036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bb9e159 code=0x7ffc0000
[  625.577283][T15246] FAULT_INJECTION: forcing a failure.
[  625.577283][T15246] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  625.627498][T15246] CPU: 0 PID: 15246 Comm: syz.3.3035 Not tainted syzkaller #0
[  625.632528][   T28] audit: type=1326 audit(1790915600.430:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.6.3036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f401bb9e159 code=0x7ffc0000
[  625.634997][T15246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  625.635013][T15246] Call Trace:
[  625.635021][T15246]  <TASK>
[  625.635030][T15246]  dump_stack_lvl+0x18c/0x250
[  625.680056][T15246]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  625.686254][T15246]  ? show_regs_print_info+0x20/0x20
[  625.691493][T15246]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  625.697700][T15246]  should_fail_ex+0x394/0x4c0
[  625.702412][T15246]  _copy_from_user+0x2f/0xe0
[  625.707028][T15246]  bpf_prog_create_from_user+0x103/0x420
[  625.712787][T15246]  ? seccomp_notify_detach+0x220/0x220
[  625.718267][T15246]  do_seccomp+0x794/0xdc0
[  625.722610][T15246]  ? prctl_set_seccomp+0x60/0x60
[  625.727553][T15246]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  625.733544][T15246]  ? lockdep_hardirqs_on+0x98/0x150
[  625.738745][T15246]  do_syscall_64+0x55/0xb0
[  625.743163][T15246]  ? clear_bhb_loop+0x40/0x90
[  625.747843][T15246]  ? clear_bhb_loop+0x40/0x90
[  625.752531][T15246]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  625.758431][T15246] RIP: 0033:0x7fd5b419e159
[  625.762844][T15246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.782454][T15246] RSP: 002b:00007fd5b5038028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  625.790871][T15246] RAX: ffffffffffffffda RBX: 00007fd5b4425fa0 RCX: 00007fd5b419e159
[  625.798846][T15246] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  625.806814][T15246] RBP: 00007fd5b423506b R08: 0000000000000000 R09: 0000000000000000
[  625.814792][T15246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  625.822759][T15246] R13: 00007fd5b4426038 R14: 00007fd5b4425fa0 R15: 00007fff67c663c8
[  625.830740][T15246]  </TASK>
[  625.856963][   T28] audit: type=1326 audit(1790915600.440:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.6.3036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bb9e159 code=0x7ffc0000
[  625.930935][   T28] audit: type=1326 audit(1790915600.510:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.6.3036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f401bb5e98e code=0x7ffc0000
[  625.955177][   T28] audit: type=1326 audit(1790915600.510:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.6.3036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f401bb5e98e code=0x7ffc0000
[  625.998547][   T28] audit: type=1326 audit(1790915600.520:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.6.3036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f401bb5e98e code=0x7ffc0000
[  626.046539][   T28] audit: type=1326 audit(1790915600.520:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.6.3036" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f401bb5e98e code=0x7ffc0000
[  626.584444][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  627.557129][T15211] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.587064][T15211] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.612137][T15211] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.622958][T15211] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.814000][T15211] hsr1: left promiscuous mode
[  627.833743][T15211] bridge1: left promiscuous mode
[  627.840740][T15211] bridge1: left allmulticast mode
[  627.864939][T15211] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  627.877219][T15211] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  627.888616][T15211] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  627.901050][T15211] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  628.411956][ T5787] Bluetooth: hci0: unexpected event for opcode 0x202a
[  628.412431][T15283] pim6reg: entered allmulticast mode
[  628.572368][T15272] pim6reg: left allmulticast mode
[  628.893977][T15297] bridge0: entered allmulticast mode
[  629.503123][T15315] FAULT_INJECTION: forcing a failure.
[  629.503123][T15315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  629.556446][T15315] CPU: 1 PID: 15315 Comm: syz.6.3056 Not tainted syzkaller #0
[  629.563981][T15315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  629.574064][T15315] Call Trace:
[  629.577363][T15315]  <TASK>
[  629.580310][T15315]  dump_stack_lvl+0x18c/0x250
[  629.585022][T15315]  ? show_regs_print_info+0x20/0x20
[  629.590253][T15315]  ? load_image+0x420/0x420
[  629.594782][T15315]  ? __lock_acquire+0x7d80/0x7d80
[  629.599844][T15315]  ? __virt_addr_valid+0x10c/0x380
[  629.604995][T15315]  should_fail_ex+0x394/0x4c0
[  629.609716][T15315]  _copy_from_user+0x2f/0xe0
[  629.614339][T15315]  load_msg+0x28a/0x380
[  629.618579][T15315]  do_msgrcv+0x279/0x13d0
[  629.622943][T15315]  ? do_msgrcv+0x13d0/0x13d0
[  629.627580][T15315]  ? ksys_msgrcv+0x40/0x40
[  629.632025][T15315]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  629.638040][T15315]  ? lock_chain_count+0x20/0x20
[  629.642933][T15315]  ? lockdep_hardirqs_on+0x98/0x150
[  629.648168][T15315]  ? __x64_sys_msgrcv+0x20/0xd0
[  629.653062][T15315]  do_syscall_64+0x55/0xb0
[  629.657513][T15315]  ? clear_bhb_loop+0x40/0x90
[  629.662226][T15315]  ? clear_bhb_loop+0x40/0x90
[  629.666939][T15315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  629.672876][T15315] RIP: 0033:0x7f401bb9e159
[  629.677322][T15315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  629.696974][T15315] RSP: 002b:00007f401cad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046
[  629.705422][T15315] RAX: ffffffffffffffda RBX: 00007f401be25fa0 RCX: 00007f401bb9e159
[  629.713430][T15315] RDX: 00000000ffffff4e RSI: 0000200000002fc0 RDI: 0000000000000000
[  629.721436][T15315] RBP: 00007f401bc3506b R08: 0000000000004800 R09: 0000000000000000
[  629.729434][T15315] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  629.737431][T15315] R13: 00007f401be26038 R14: 00007f401be25fa0 R15: 00007ffd1a88a918
[  629.745446][T15315]  </TASK>
[  630.529207][   T23] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  630.735604][   T23] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  630.777008][   T23] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64
[  630.817066][   T23] usb 7-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  630.881520][   T23] usb 7-1: config 1 interface 0 has no altsetting 0
[  630.917232][   T23] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  630.956401][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  630.976988][   T23] usb 7-1: SerialNumber: syz
[  631.008819][T15333] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  631.016409][T15333] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  631.265140][T15333] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  631.292086][T15333] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  631.617272][    T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  631.769291][   T23] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42
[  631.852320][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  631.885915][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.198452][    T9] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  632.321330][   T23] usb 7-1: USB disconnect, device number 17
[  632.349599][   T23] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device
[  632.628591][    T9] usb 4-1: USB disconnect, device number 31
[  633.925152][T15393] netlink: 'syz.6.3076': attribute type 10 has an invalid length.
[  633.978550][T15393] syz_tun: entered promiscuous mode
[  634.042283][T15393] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  634.226999][T15400] 9p: Unknown uid 00000000004294967295
[  634.830350][T15417] loop3: detected capacity change from 0 to 1024
[  634.947604][T15417] hfsplus: invalid length 32517 has been corrected to 255
[  635.337333][T15429] loop6: detected capacity change from 0 to 512
[  635.514552][T15429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  635.571727][T15429] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  635.730016][T15441] hfsplus: b-tree write err: -5, ino 20
[  635.844584][T11131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.482625][T15456] loop6: detected capacity change from 0 to 4096
[  636.573346][T15456] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  636.675070][T15456] ntfs3: loop6: ino=19, mi_enum_attr
[  636.907214][T15456] ntfs3: loop6: failed to convert "c46c" to cp936
[  636.952608][T15456] ntfs3: loop6: ino=20, mi_enum_attr
[  637.025820][T15467] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  637.432301][T15474] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3098'.
[  637.478151][T15474] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3098'.
[  639.030419][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801bfe7c00: rx timeout, send abort
[  639.042585][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801bfe7c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  639.711164][T15530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3107'.
[  639.729191][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3107'.
[  640.332661][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801bfe6c00: rx timeout, send abort
[  640.344478][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801bfe6c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  640.491994][T15547] FAULT_INJECTION: forcing a failure.
[  640.491994][T15547] name failslab, interval 1, probability 0, space 0, times 0
[  640.514203][T15547] CPU: 1 PID: 15547 Comm: syz.9.3115 Not tainted syzkaller #0
[  640.521732][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  640.531825][T15547] Call Trace:
[  640.535121][T15547]  <TASK>
[  640.538072][T15547]  dump_stack_lvl+0x18c/0x250
[  640.542790][T15547]  ? show_regs_print_info+0x20/0x20
[  640.548026][T15547]  ? load_image+0x420/0x420
[  640.552564][T15547]  ? __might_sleep+0xe0/0xe0
[  640.557183][T15547]  ? __lock_acquire+0x7d80/0x7d80
[  640.562237][T15547]  ? aa_get_newest_label+0xfd/0x5c0
[  640.567557][T15547]  should_fail_ex+0x394/0x4c0
[  640.572274][T15547]  should_failslab+0x9/0x20
[  640.576809][T15547]  slab_pre_alloc_hook+0x59/0x300
[  640.581867][T15547]  ? kvmalloc_node+0x70/0x180
[  640.586579][T15547]  ? kvmalloc_node+0x70/0x180
[  640.591289][T15547]  __kmem_cache_alloc_node+0x53/0x250
[  640.596715][T15547]  ? kvmalloc_node+0x70/0x180
[  640.601439][T15547]  __kmalloc_node+0xa6/0x240
[  640.606073][T15547]  ? semctl_main+0x119/0x1660
[  640.610779][T15547]  ? semctl_main+0x119/0x1660
[  640.615485][T15547]  kvmalloc_node+0x70/0x180
[  640.620021][T15547]  semctl_main+0x8a4/0x1660
[  640.624558][T15547]  ? semctl_main+0x119/0x1660
[  640.629257][T15547]  ? semctl_stat+0x6f0/0x6f0
[  640.633911][T15547]  ? do_futex+0x2ff/0x3e0
[  640.638272][T15547]  __se_sys_semctl+0x33c/0x3e0
[  640.643071][T15547]  ? __x64_sys_semctl+0xb0/0xb0
[  640.647969][T15547]  ? lockdep_hardirqs_on+0x98/0x150
[  640.653189][T15547]  do_syscall_64+0x55/0xb0
[  640.657634][T15547]  ? clear_bhb_loop+0x40/0x90
[  640.662519][T15547]  ? clear_bhb_loop+0x40/0x90
[  640.667221][T15547]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  640.673138][T15547] RIP: 0033:0x7f63f9f9e159
[  640.677571][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  640.697207][T15547] RSP: 002b:00007f63fad8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042
[  640.705653][T15547] RAX: ffffffffffffffda RBX: 00007f63fa225fa0 RCX: 00007f63f9f9e159
[  640.713651][T15547] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000
[  640.721650][T15547] RBP: 00007f63fa03506b R08: 0000000000000000 R09: 0000000000000000
[  640.729645][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  640.737640][T15547] R13: 00007f63fa226038 R14: 00007f63fa225fa0 R15: 00007ffc0eae19e8
[  640.745658][T15547]  </TASK>
[  641.166166][T15558] FAULT_INJECTION: forcing a failure.
[  641.166166][T15558] name failslab, interval 1, probability 0, space 0, times 0
[  641.183678][T15558] CPU: 1 PID: 15558 Comm: syz.6.3120 Not tainted syzkaller #0
[  641.191192][T15558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  641.201271][T15558] Call Trace:
[  641.204664][T15558]  <TASK>
[  641.207621][T15558]  dump_stack_lvl+0x18c/0x250
[  641.212335][T15558]  ? show_regs_print_info+0x20/0x20
[  641.217570][T15558]  ? load_image+0x420/0x420
[  641.222100][T15558]  ? __lock_acquire+0x7d80/0x7d80
[  641.227155][T15558]  should_fail_ex+0x394/0x4c0
[  641.231864][T15558]  should_failslab+0x9/0x20
[  641.236402][T15558]  slab_pre_alloc_hook+0x59/0x300
[  641.241475][T15558]  kmem_cache_alloc_lru+0x4d/0x2b0
[  641.246615][T15558]  ? __d_alloc+0x31/0x710
[  641.250965][T15558]  ? read_lock_is_recursive+0x20/0x20
[  641.256371][T15558]  __d_alloc+0x31/0x710
[  641.260555][T15558]  ? hashlen_string+0xb8/0x110
[  641.265343][T15558]  d_alloc_name+0xbb/0x320
[  641.269781][T15558]  ? down_write+0x16e/0x200
[  641.274311][T15558]  ? d_alloc_pseudo+0x70/0x70
[  641.279023][T15558]  ? proc_setup_self+0x206/0x2c0
[  641.284020][T15558]  proc_setup_thread_self+0xaf/0x2c0
[  641.289346][T15558]  ? proc_fill_super+0x518/0x730
[  641.294317][T15558]  ? proc_reconfigure+0x370/0x370
[  641.299376][T15558]  get_tree_nodev+0xb5/0x140
[  641.303999][T15558]  vfs_get_tree+0x8c/0x280
[  641.308447][T15558]  do_new_mount+0x24a/0xa40
[  641.312983][T15558]  __se_sys_mount+0x2e7/0x3d0
[  641.317691][T15558]  ? __x64_sys_mount+0xc0/0xc0
[  641.322491][T15558]  ? lockdep_hardirqs_on+0x98/0x150
[  641.327717][T15558]  ? __x64_sys_mount+0x20/0xc0
[  641.332516][T15558]  do_syscall_64+0x55/0xb0
[  641.336965][T15558]  ? clear_bhb_loop+0x40/0x90
[  641.341679][T15558]  ? clear_bhb_loop+0x40/0x90
[  641.346404][T15558]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  641.352430][T15558] RIP: 0033:0x7f401bb9e159
[  641.356871][T15558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.376512][T15558] RSP: 002b:00007f401cad9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  641.384965][T15558] RAX: ffffffffffffffda RBX: 00007f401be25fa0 RCX: 00007f401bb9e159
[  641.392973][T15558] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000
[  641.400977][T15558] RBP: 00007f401bc3506b R08: 0000000000000000 R09: 0000000000000000
[  641.408989][T15558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  641.417007][T15558] R13: 00007f401be26038 R14: 00007f401be25fa0 R15: 00007ffd1a88a918
[  641.425117][T15558]  </TASK>
[  641.441036][T15558] proc_fill_super: can't allocate /proc/thread-self
[  642.391252][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3129'.
[  642.677667][   T28] kauditd_printk_skb: 29 callbacks suppressed
[  642.677683][   T28] audit: type=1326 audit(1790915617.680:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3133" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f401bb9e159 code=0x0
[  644.485427][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3144'.
[  644.504686][T15612] hsr_slave_0: left promiscuous mode
[  644.526470][T15612] hsr_slave_1: left promiscuous mode
[  644.758302][T15614] FAULT_INJECTION: forcing a failure.
[  644.758302][T15614] name failslab, interval 1, probability 0, space 0, times 0
[  644.806153][T15614] CPU: 0 PID: 15614 Comm: syz.0.3142 Not tainted syzkaller #0
[  644.813689][T15614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  644.823773][T15614] Call Trace:
[  644.827070][T15614]  <TASK>
[  644.830008][T15614]  dump_stack_lvl+0x18c/0x250
[  644.834692][T15614]  ? show_regs_print_info+0x20/0x20
[  644.839891][T15614]  ? load_image+0x420/0x420
[  644.844394][T15614]  ? __might_sleep+0xe0/0xe0
[  644.849416][T15614]  ? __lock_acquire+0x7d80/0x7d80
[  644.854442][T15614]  should_fail_ex+0x394/0x4c0
[  644.859130][T15614]  should_failslab+0x9/0x20
[  644.863643][T15614]  slab_pre_alloc_hook+0x59/0x300
[  644.868676][T15614]  kmem_cache_alloc_lru+0x4d/0x2b0
[  644.873802][T15614]  ? __d_alloc+0x31/0x710
[  644.878132][T15614]  __d_alloc+0x31/0x710
[  644.882282][T15614]  ? alloc_fd+0x590/0x640
[  644.886614][T15614]  d_alloc_pseudo+0x1d/0x70
[  644.891144][T15614]  alloc_file_pseudo+0xe4/0x210
[  644.895999][T15614]  ? fput+0x1a0/0x1a0
[  644.899984][T15614]  ? alloc_fd+0x590/0x640
[  644.904315][T15614]  sock_alloc_file+0xb7/0x280
[  644.909002][T15614]  __sys_socket+0x140/0x1b0
[  644.913509][T15614]  __x64_sys_socket+0x7a/0x90
[  644.918187][T15614]  do_syscall_64+0x55/0xb0
[  644.922603][T15614]  ? clear_bhb_loop+0x40/0x90
[  644.927289][T15614]  ? clear_bhb_loop+0x40/0x90
[  644.931967][T15614]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.937860][T15614] RIP: 0033:0x7ff0b999e159
[  644.942277][T15614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.961895][T15614] RSP: 002b:00007ff0ba95c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  644.970316][T15614] RAX: ffffffffffffffda RBX: 00007ff0b9c25fa0 RCX: 00007ff0b999e159
[  644.978289][T15614] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
[  644.986253][T15614] RBP: 00007ff0b9a3506b R08: 0000000000000000 R09: 0000000000000000
[  644.994221][T15614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  645.002194][T15614] R13: 00007ff0b9c26038 R14: 00007ff0b9c25fa0 R15: 00007ffea1521688
[  645.010193][T15614]  </TASK>
[  646.709973][T15661] FAULT_INJECTION: forcing a failure.
[  646.709973][T15661] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  646.732906][T15661] CPU: 1 PID: 15661 Comm: syz.9.3165 Not tainted syzkaller #0
[  646.740445][T15661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  646.750537][T15661] Call Trace:
[  646.753929][T15661]  <TASK>
[  646.756884][T15661]  dump_stack_lvl+0x18c/0x250
[  646.761606][T15661]  ? show_regs_print_info+0x20/0x20
[  646.766848][T15661]  ? load_image+0x420/0x420
[  646.771384][T15661]  ? __lock_acquire+0x7d80/0x7d80
[  646.776468][T15661]  should_fail_ex+0x394/0x4c0
[  646.781194][T15661]  prepare_alloc_pages+0x1e1/0x5b0
[  646.786365][T15661]  __alloc_pages+0x134/0x460
[  646.791007][T15661]  ? zone_statistics+0x170/0x170
[  646.795990][T15661]  ? mas_next_slot+0x910/0x980
[  646.800794][T15661]  __folio_alloc+0x10/0x20
[  646.805240][T15661]  vma_alloc_folio+0x474/0x8f0
[  646.810041][T15661]  ? vma_address+0x1e6/0x300
[  646.814670][T15661]  new_folio+0x46c/0x900
[  646.818952][T15661]  ? vma_iter_init+0xd0/0xd0
[  646.823587][T15661]  migrate_pages_batch+0x833/0x3710
[  646.828835][T15661]  ? vma_iter_init+0xd0/0xd0
[  646.833635][T15661]  ? migrate_pages+0x2b30/0x2b30
[  646.838611][T15661]  ? queue_folios_hugetlb+0x9f0/0x9f0
[  646.844013][T15661]  migrate_pages+0x1d4a/0x2b30
[  646.848813][T15661]  ? vma_iter_init+0xd0/0xd0
[  646.853438][T15661]  ? folio_detach_private+0x3c0/0x3c0
[  646.858915][T15661]  __se_sys_mbind+0x62c/0x7c0
[  646.863657][T15661]  ? __ia32_sys_get_robust_list+0x110/0x110
[  646.869587][T15661]  ? __x64_sys_mbind+0xf0/0xf0
[  646.874387][T15661]  ? lock_chain_count+0x20/0x20
[  646.879279][T15661]  ? __x64_sys_mbind+0x21/0xf0
[  646.884067][T15661]  do_syscall_64+0x55/0xb0
[  646.888525][T15661]  ? clear_bhb_loop+0x40/0x90
[  646.893227][T15661]  ? clear_bhb_loop+0x40/0x90
[  646.897931][T15661]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  646.903847][T15661] RIP: 0033:0x7f63f9f9e159
[  646.908280][T15661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.927911][T15661] RSP: 002b:00007f63fad8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  646.936355][T15661] RAX: ffffffffffffffda RBX: 00007f63fa225fa0 RCX: 00007f63f9f9e159
[  646.944355][T15661] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[  646.952701][T15661] RBP: 00007f63fa03506b R08: 0000000000000000 R09: 0000000000000002
[  646.960694][T15661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  646.968687][T15661] R13: 00007f63fa226038 R14: 00007f63fa225fa0 R15: 00007ffc0eae19e8
[  646.976699][T15661]  </TASK>
[  648.347352][T15699] tipc: Started in network mode
[  648.360962][T15699] tipc: Node identity ac1414aa, cluster identity 4711
[  648.386574][T15698] loop6: detected capacity change from 0 to 8192
[  648.412131][T15699] tipc: Enabled bearer <udp:s>, priority 10
[  648.453834][T15698]  loop6: p1 p2 p3 p4
[  648.467344][T15698] loop6: partition table partially beyond EOD, truncated
[  648.522366][T15698] loop6: p3 start 117772289 is beyond EOD, truncated
[  648.548084][T15698] loop6: p4 size 720896 extends beyond EOD, truncated
[  648.689527][T15698] device-mapper: ioctl: device name cannot contain '/'
[  648.732982][T15698] device-mapper: ioctl: Invalid ioctl structure: name >ªW•tÉ¥ìÿŸ¿%Uó./dev, dev 178f517437743bef
[  648.839160][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3184'.
[  649.027428][T15712] udevd[15712]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  649.039811][T15710] udevd[15710]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  649.204550][T15707] team0: Port device team_slave_1 removed
[  649.414952][    T9] tipc: Node number set to 2886997162
[  649.491003][T15723] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3191'.
[  649.581153][T15727] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  650.000505][   T28] audit: type=1326 audit(1790915624.990:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b999e159 code=0x7ffc0000
[  650.033582][   T28] audit: type=1326 audit(1790915625.000:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b999e159 code=0x7ffc0000
[  650.113753][   T28] audit: type=1326 audit(1790915625.000:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b999e159 code=0x7ffc0000
[  650.213419][   T28] audit: type=1326 audit(1790915625.000:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b999e159 code=0x7ffc0000
[  650.282813][   T28] audit: type=1326 audit(1790915625.000:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff0b999e159 code=0x7ffc0000
[  650.355952][   T28] audit: type=1326 audit(1790915625.000:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0b999dec2 code=0x7ffc0000
[  650.389827][   T28] audit: type=1326 audit(1790915625.030:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0b995e98e code=0x7ffc0000
[  650.420337][   T28] audit: type=1326 audit(1790915625.060:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff0b999df87 code=0x7ffc0000
[  650.460452][   T28] audit: type=1326 audit(1790915625.080:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0b995e98e code=0x7ffc0000
[  650.524293][   T28] audit: type=1326 audit(1790915625.080:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.0.3197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0b999ddeb code=0x7ffc0000
[  650.550173][T15733] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  650.755216][T15753] "syz.3.3202" (15753) uses obsolete ecb(arc4) skcipher
[  651.943813][T15790] device-mapper: dirty region log: unrecognised sync argument to dirty region log: n
[  651.953627][T15790] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  651.971329][T15790] device-mapper: ioctl: error adding target to table
[  652.728345][T15814] ima: policy update failed
[  654.224417][T15803] loop3: detected capacity change from 0 to 32768
[  654.361070][T15803] JBD2: Ignoring recovery information on journal
[  654.563353][T15803] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  654.954871][T15853] loop6: detected capacity change from 0 to 1024
[  654.978387][T15838] clocksource: Switched to clocksource acpi_pm
[  655.029993][T15838] clocksource: Switched to clocksource tsc
[  655.117103][   T28] kauditd_printk_skb: 33 callbacks suppressed
[  655.117119][   T28] audit: type=1800 audit(1790915630.107:434): pid=15853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3244" name="file1" dev="loop6" ino=20 res=0 errno=0
[  655.549935][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[  656.552253][T15878] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3254'.
[  656.594727][T15878] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  657.215444][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'.
[  657.228129][T15899] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3262'.
[  659.608323][T15915] loop3: detected capacity change from 0 to 131072
[  659.618428][T15915] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  659.629440][T15915] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  659.642566][T15915] F2FS-fs (loop3): invalid crc value
[  659.699221][T15915] F2FS-fs (loop3): Found nat_bits in checkpoint
[  659.859598][T15915] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  659.869423][T15915] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  660.009571][T15929] loop6: detected capacity change from 0 to 512
[  660.037412][T15929] EXT4-fs (loop6): Test dummy encryption mode enabled
[  660.044339][T15929] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  660.094343][T15929] EXT4-fs (loop6): 1 truncate cleaned up
[  660.112622][T15929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  660.314477][T11131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.515421][T15937] netlink: 'syz.6.3276': attribute type 10 has an invalid length.
[  660.538336][T15937] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.547899][T15937] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.569892][T15937] bridge0: left promiscuous mode
[  660.574987][T15937] bridge0: left allmulticast mode
[  660.615664][T15937] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.622994][T15937] bridge0: port 2(bridge_slave_1) entered forwarding state
[  660.630587][T15937] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.637818][T15937] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.692371][T15937] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  660.948680][T15943] gadgetfs: bound to dummy_udc driver
[  662.233031][T15970] netlink: 'syz.6.3292': attribute type 30 has an invalid length.
[  662.261268][T15970] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  662.270521][T15970] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  662.279389][T15970] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  662.288193][T15970] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  662.309147][T15970] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  662.318928][T15970] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  662.327943][T15970] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  662.337231][T15970] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  663.074618][T15985] loop6: detected capacity change from 0 to 164
[  663.424439][T15985] loop6: detected capacity change from 0 to 256
[  663.447046][T15985] exFAT-fs (loop6): bogus fat length
[  663.452419][T15985] exFAT-fs (loop6): failed to read boot sector
[  663.514560][T15985] exFAT-fs (loop6): failed to recognize exfat type
[  664.109028][   T28] audit: type=1326 audit(1790915639.107:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15991 comm="syz.6.3300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401bb9e159 code=0x0
[  664.132642][    C1] vkms_vblank_simulate: vblank timer overrun
[  665.355861][T16021] 
[  665.444676][   T28] audit: type=1800 audit(1790915640.437:436): pid=16023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3311" name="addr_adrfam" dev="configfs" ino=46751 res=0 errno=0
[  666.274560][T16034] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.284942][T16034] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.359587][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3317'.
[  667.659024][T16007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  668.110459][T16051] vxcan1: tx drop: invalid da for name 0xfffffffffffffffd
[  668.496760][T16058] all: renamed from lo
[  669.008689][T16076] loop6: detected capacity change from 0 to 1024
[  669.097122][T16076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  669.165593][   T28] audit: type=1800 audit(1790915644.157:437): pid=16076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3333" name="file1" dev="loop6" ino=15 res=0 errno=0
[  669.230005][T11131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  670.713544][T16112] nla_validate_range_unsigned: 25 callbacks suppressed
[  670.713563][T16112] netlink: 'syz.6.3349': attribute type 11 has an invalid length.
[  671.015886][T16116] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3350'.
[  671.196213][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  671.211925][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  671.222210][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  671.250220][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  671.265048][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  671.278545][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  671.531332][T16119] chnl_net:caif_netlink_parms(): no params data found
[  671.729066][T16119] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.746208][T16119] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.776125][T16119] bridge_slave_0: entered allmulticast mode
[  671.808516][T16119] bridge_slave_0: entered promiscuous mode
[  671.854061][T16119] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.871774][T16119] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.899018][T16119] bridge_slave_1: entered allmulticast mode
[  671.915136][T16119] bridge_slave_1: entered promiscuous mode
[  672.011039][T16119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.062633][T16119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.125439][T16119] team0: Port device team_slave_0 added
[  672.176742][T16119] team0: Port device team_slave_1 added
[  672.249258][T16119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.276563][T16119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.343703][T16119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.394849][T16119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  672.415845][T16119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.498085][T16119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  672.737159][T16119] hsr_slave_0: entered promiscuous mode
[  672.746454][T16119] hsr_slave_1: entered promiscuous mode
[  672.756896][T16119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  672.768859][T16119] Cannot create hsr debugfs directory
[  672.883867][T16142] netem: change failed
[  672.987555][T15264] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  673.252926][T15264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  673.317330][T15264] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  673.361280][ T5780] Bluetooth: hci4: command tx timeout
[  673.368183][T15264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.507275][T15264] as10x_usb: device has been detected
[  673.539711][T15264] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  673.734891][T15264] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  674.159586][T15264] invalid firmware file
[  674.165680][T15264] as10x_usb: firmware: as102_data1_st.hex loaded with success
[  674.442193][T15264] invalid firmware file
[  674.467878][T15264] as10x_usb: firmware: as102_data2_st.hex loaded with success
[  674.566142][T15264] invalid firmware file
[  674.617176][T15264] as10x_usb: firmware: as102_data1_st.hex loaded with success
[  674.668330][T16174] FAULT_INJECTION: forcing a failure.
[  674.668330][T16174] name failslab, interval 1, probability 0, space 0, times 0
[  674.720486][T16174] CPU: 1 PID: 16174 Comm: syz.6.3364 Not tainted syzkaller #0
[  674.728105][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  674.738183][T16174] Call Trace:
[  674.741480][T16174]  <TASK>
[  674.744418][T16174]  dump_stack_lvl+0x18c/0x250
[  674.749127][T16174]  ? show_regs_print_info+0x20/0x20
[  674.754358][T16174]  ? load_image+0x420/0x420
[  674.758884][T16174]  ? __might_sleep+0xe0/0xe0
[  674.763491][T16174]  ? __lock_acquire+0x7d80/0x7d80
[  674.768539][T16174]  should_fail_ex+0x394/0x4c0
[  674.773243][T16174]  should_failslab+0x9/0x20
[  674.777799][T16174]  slab_pre_alloc_hook+0x59/0x300
[  674.782845][T16174]  ? __lock_acquire+0x7d80/0x7d80
[  674.787909][T16174]  ? security_prepare_creds+0x4b/0x130
[  674.793396][T16174]  ? security_prepare_creds+0x4b/0x130
[  674.798887][T16174]  __kmem_cache_alloc_node+0x53/0x250
[  674.804292][T16174]  ? security_prepare_creds+0x4b/0x130
[  674.809775][T16174]  __kmalloc+0xa7/0x240
[  674.813962][T16174]  security_prepare_creds+0x4b/0x130
[  674.819287][T16174]  prepare_creds+0x427/0x5d0
[  674.823906][T16174]  __sys_setuid+0x96/0x580
[  674.828433][T16174]  ? lockdep_hardirqs_on+0x98/0x150
[  674.833654][T16174]  do_syscall_64+0x55/0xb0
[  674.838090][T16174]  ? clear_bhb_loop+0x40/0x90
[  674.842833][T16174]  ? clear_bhb_loop+0x40/0x90
[  674.847543][T16174]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  674.853457][T16174] RIP: 0033:0x7f401bb9e159
[  674.857883][T16174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  674.876797][T15264] invalid firmware file
[  674.877488][T16174] RSP: 002b:00007f401cad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069
[  674.877513][T16174] RAX: ffffffffffffffda RBX: 00007f401be25fa0 RCX: 00007f401bb9e159
[  674.877528][T16174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[  674.877546][T16174] RBP: 00007f401bc3506b R08: 0000000000000000 R09: 0000000000000000
[  674.877560][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  674.877574][T16174] R13: 00007f401be26038 R14: 00007f401be25fa0 R15: 00007ffd1a88a918
[  674.877607][T16174]  </TASK>
[  675.121218][T15264] as10x_usb: firmware: as102_data2_st.hex loaded with success
[  675.158789][T15264] Registered device Abilis Systems DVB-Titan
[  675.177982][T15264] usb 4-1: USB disconnect, device number 32
[  675.438075][ T5780] Bluetooth: hci4: command tx timeout
[  675.454947][T15264] Unregistered device Abilis Systems DVB-Titan
[  675.490993][T15264] as10x_usb: device has been disconnected
[  676.181909][T16119] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  676.210084][T16119] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  676.247917][T16119] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  676.282840][T16119] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  676.642200][T16119] 8021q: adding VLAN 0 to HW filter on device bond0
[  676.742332][T16119] 8021q: adding VLAN 0 to HW filter on device team0
[  676.797496][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.804711][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.862912][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.870150][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state
[  677.174810][T16119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  677.374240][T16119] veth0_vlan: entered promiscuous mode
[  677.455750][T16119] veth1_vlan: entered promiscuous mode
[  677.519147][ T5780] Bluetooth: hci4: command tx timeout
[  677.543366][T16119] veth0_macvtap: entered promiscuous mode
[  677.554181][T16119] veth1_macvtap: entered promiscuous mode
[  677.628965][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.675463][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.701584][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.752278][T16223] loop6: detected capacity change from 0 to 512
[  677.759067][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.796838][T16119] batman_adv: batadv0: Interface activated: batadv_slave_0
[  677.822849][T16224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3374'.
[  677.828172][T16223] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  677.897380][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  677.934297][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.968053][T16223] EXT4-fs (loop6): 1 truncate cleaned up
[  677.975922][T16223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  678.011727][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.063197][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.110935][T16119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.163707][T16119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.216389][T16119] batman_adv: batadv0: Interface activated: batadv_slave_1
[  678.291513][T16119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  678.327448][T16119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  678.368810][T16119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  678.427327][T16119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.790588][T16240] loop3: detected capacity change from 0 to 512
[  678.823777][T16240] EXT4-fs: Ignoring removed bh option
[  678.929778][T16240] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  678.987590][T16240] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  679.011210][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.035514][T16240] EXT4-fs (loop3): orphan cleanup on readonly fs
[  679.063693][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.065545][T16240] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  679.137734][T16240] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  679.168045][T16240] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #16: comm syz.3.3378: casefold flag without casefold feature
[  679.223328][T16240] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.3378: couldn't read orphan inode 16 (err -117)
[  679.270513][T12348] bond0: (slave syz_tun): Releasing backup interface
[  679.285665][T16240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  679.433501][ T6243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.489597][ T6243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.597667][ T5780] Bluetooth: hci4: command tx timeout
[  679.600575][T16254] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  680.232114][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.929935][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  685.936296][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  686.655640][T16423] loop2: detected capacity change from 0 to 512
[  687.413734][T16443] netlink: 'syz.3.3406': attribute type 4 has an invalid length.
[  688.179391][T16465] loop3: detected capacity change from 0 to 512
[  688.404779][T16465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  688.498556][T16465] ext4 filesystem being mounted at /706/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  688.577796][T16480] FAULT_INJECTION: forcing a failure.
[  688.577796][T16480] name failslab, interval 1, probability 0, space 0, times 0
[  688.667312][T16480] CPU: 0 PID: 16480 Comm: syz.2.3411 Not tainted syzkaller #0
[  688.674858][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  688.684950][T16480] Call Trace:
[  688.688238][T16480]  <TASK>
[  688.691171][T16480]  dump_stack_lvl+0x18c/0x250
[  688.695865][T16480]  ? show_regs_print_info+0x20/0x20
[  688.701075][T16480]  ? load_image+0x420/0x420
[  688.705588][T16480]  ? __might_sleep+0xe0/0xe0
[  688.710203][T16480]  ? __lock_acquire+0x7d80/0x7d80
[  688.715233][T16480]  should_fail_ex+0x394/0x4c0
[  688.719929][T16480]  should_failslab+0x9/0x20
[  688.724446][T16480]  slab_pre_alloc_hook+0x59/0x300
[  688.729479][T16480]  ? key_user_lookup+0x1bc/0x450
[  688.734447][T16480]  kmem_cache_alloc+0x5a/0x2c0
[  688.739242][T16480]  ? key_alloc+0x306/0x1030
[  688.743766][T16480]  key_alloc+0x306/0x1030
[  688.748112][T16480]  keyring_alloc+0x45/0xb0
[  688.752541][T16480]  keyctl_get_persistent+0x4b5/0x7a0
[  688.757830][T16480]  ? lock_chain_count+0x20/0x20
[  688.762698][T16480]  ? proc_key_users_show+0x310/0x310
[  688.767997][T16480]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  688.774162][T16480]  ? __se_sys_keyctl+0x81c/0xb50
[  688.779111][T16480]  __se_sys_keyctl+0x829/0xb50
[  688.783933][T16480]  ? __x64_sys_keyctl+0xc0/0xc0
[  688.788788][T16480]  ? do_futex+0x2ff/0x3e0
[  688.793119][T16480]  ? irqtime_account_irq+0x16f/0x1c0
[  688.798419][T16480]  ? __ia32_sys_get_robust_list+0x110/0x110
[  688.804329][T16480]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  688.810334][T16480]  ? lock_chain_count+0x20/0x20
[  688.815194][T16480]  ? lockdep_hardirqs_on+0x98/0x150
[  688.820537][T16480]  ? __x64_sys_keyctl+0x20/0xc0
[  688.825406][T16480]  do_syscall_64+0x55/0xb0
[  688.829929][T16480]  ? clear_bhb_loop+0x40/0x90
[  688.834620][T16480]  ? clear_bhb_loop+0x40/0x90
[  688.839311][T16480]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  688.845214][T16480] RIP: 0033:0x7f44e5d9e159
[  688.849640][T16480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.869261][T16480] RSP: 002b:00007f44e6c45028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  688.877684][T16480] RAX: ffffffffffffffda RBX: 00007f44e6025fa0 RCX: 00007f44e5d9e159
[  688.885689][T16480] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016
[  688.893692][T16480] RBP: 00007f44e5e3506b R08: 0000000000000000 R09: 0000000000000000
[  688.901695][T16480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.909770][T16480] R13: 00007f44e6026038 R14: 00007f44e6025fa0 R15: 00007fff3c359ef8
[  688.917761][T16480]  </TASK>
[  689.335883][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.762851][T15264] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  690.018081][T15264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.067782][T15264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  690.128676][T15264] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  690.209582][T15264] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  690.287333][T15264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.602912][T16518] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  690.692872][T16518] overlayfs: failed to set xattr on upper
[  690.729130][T16518] overlayfs: ...falling back to redirect_dir=nofollow.
[  690.768061][T16518] overlayfs: ...falling back to index=off.
[  690.911129][T15264] cxacru 1-1:1.0: send of cm 0x91 failed (-71)
[  690.927020][T15264] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  690.957057][T15264] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  690.983647][T15264] cxacru: probe of 1-1:1.0 failed with error -71
[  691.054550][T15264] usb 1-1: USB disconnect, device number 26
[  691.077868][  T790] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  691.352730][  T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  691.406825][  T790] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  691.440922][  T790] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  691.464406][  T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  691.501445][  T790] usb 3-1: SerialNumber: syz
[  691.836528][  T790] usb 3-1: 0:2 : does not exist
[  691.992649][  T790] usb 3-1: USB disconnect, device number 4
[  692.124777][T16496] udevd[16496]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  694.906132][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3434'.
[  695.360436][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  695.377390][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  695.392669][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  695.403101][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  695.437300][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  695.444896][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  696.013517][T16633] chnl_net:caif_netlink_parms(): no params data found
[  696.232768][T16653] loop2: detected capacity change from 0 to 512
[  696.334811][T16653] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  696.413358][T16633] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.462524][T16633] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.493904][T16653] EXT4-fs (loop2): orphan file too big: 8388608
[  696.508136][T16633] bridge_slave_0: entered allmulticast mode
[  696.548350][T16653] EXT4-fs (loop2): mount failed
[  696.591502][T16633] bridge_slave_0: entered promiscuous mode
[  696.643926][T16633] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.697170][T16633] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.704481][T16633] bridge_slave_1: entered allmulticast mode
[  696.767152][T16633] bridge_slave_1: entered promiscuous mode
[  696.876734][T16633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  696.915510][T16633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  697.073688][T16633] team0: Port device team_slave_0 added
[  697.114638][T16633] team0: Port device team_slave_1 added
[  697.201959][T16633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  697.226490][T16633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  697.314400][T16633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  697.358098][T16633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  697.385412][T16633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  697.517533][ T5787] Bluetooth: hci0: command tx timeout
[  697.531825][T16633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  697.681135][T16633] hsr_slave_0: entered promiscuous mode
[  697.742980][T16633] hsr_slave_1: entered promiscuous mode
[  697.781453][T16633] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  697.808812][T16633] Cannot create hsr debugfs directory
[  698.549816][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'.
[  699.597189][ T5787] Bluetooth: hci0: command tx timeout
[  699.828806][T15264] kernel write not supported for file /vcsa (pid: 15264 comm: kworker/0:5)
[  700.437743][T16715] FAULT_INJECTION: forcing a failure.
[  700.437743][T16715] name failslab, interval 1, probability 0, space 0, times 0
[  700.470216][T16633] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  700.500503][T16633] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  700.507218][T16715] CPU: 0 PID: 16715 Comm: syz.3.3448 Not tainted syzkaller #0
[  700.507341][T16715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  700.507355][T16715] Call Trace:
[  700.507365][T16715]  <TASK>
[  700.507373][T16715]  dump_stack_lvl+0x18c/0x250
[  700.507410][T16715]  ? show_regs_print_info+0x20/0x20
[  700.507438][T16715]  ? load_image+0x420/0x420
[  700.507465][T16715]  ? __might_sleep+0xe0/0xe0
[  700.507491][T16715]  ? __lock_acquire+0x7d80/0x7d80
[  700.507514][T16715]  ? mark_lock+0x94/0x320
[  700.507538][T16715]  should_fail_ex+0x394/0x4c0
[  700.507571][T16715]  should_failslab+0x9/0x20
[  700.507596][T16715]  slab_pre_alloc_hook+0x59/0x300
[  700.507628][T16715]  ? subflow_ulp_init+0x95/0x530
[  700.507739][T16715]  __kmem_cache_alloc_node+0x53/0x250
[  700.507767][T16715]  ? tcp_set_ulp+0xb1/0x5f0
[  700.507799][T16715]  ? subflow_ulp_init+0x95/0x530
[  700.507820][T16715]  kmalloc_trace+0x2a/0xe0
[  700.507850][T16715]  subflow_ulp_init+0x95/0x530
[  700.507873][T16715]  ? tcp_set_ulp+0xb1/0x5f0
[  700.507903][T16715]  tcp_set_ulp+0x536/0x5f0
[  700.507933][T16715]  mptcp_subflow_create_socket+0x61d/0xad0
[  700.507962][T16715]  ? __mptcp_subflow_connect+0x14d0/0x14d0
[  700.507986][T16715]  ? lock_chain_count+0x20/0x20
[  700.508016][T16715]  __mptcp_nmpc_sk+0x157/0x720
[  700.508079][T16715]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  700.508118][T16715]  mptcp_listen+0xb8/0x540
[  700.508138][T16715]  ? bpf_lsm_socket_listen+0x9/0x10
[  700.508177][T16715]  __sys_listen+0x1a4/0x220
[  700.508205][T16715]  __x64_sys_listen+0x5a/0x70
[  700.508228][T16715]  do_syscall_64+0x55/0xb0
[  700.663087][T16715]  ? clear_bhb_loop+0x40/0x90
[  700.667780][T16715]  ? clear_bhb_loop+0x40/0x90
[  700.672463][T16715]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  700.678359][T16715] RIP: 0033:0x7fd5b419e159
[  700.682780][T16715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  700.702382][T16715] RSP: 002b:00007fd5b5038028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[  700.710800][T16715] RAX: ffffffffffffffda RBX: 00007fd5b4425fa0 RCX: 00007fd5b419e159
[  700.718779][T16715] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003
[  700.726755][T16715] RBP: 00007fd5b423506b R08: 0000000000000000 R09: 0000000000000000
[  700.734728][T16715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  700.742718][T16715] R13: 00007fd5b4426038 R14: 00007fd5b4425fa0 R15: 00007fff67c663c8
[  700.750721][T16715]  </TASK>
[  700.975665][T16633] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  700.996841][T16633] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  701.252850][T16633] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.346642][T16701] loop2: detected capacity change from 0 to 40427
[  701.385406][T16633] 8021q: adding VLAN 0 to HW filter on device team0
[  701.407271][T16701] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  701.416363][T16701] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  701.490798][T16701] F2FS-fs (loop2): invalid crc value
[  701.494007][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.503428][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.568494][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.575673][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state
[  701.678363][ T5787] Bluetooth: hci0: command tx timeout
[  701.836194][T16633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  702.021936][T16633] veth0_vlan: entered promiscuous mode
[  702.109178][T16633] veth1_vlan: entered promiscuous mode
[  702.276514][T16633] veth0_macvtap: entered promiscuous mode
[  702.343797][T16633] veth1_macvtap: entered promiscuous mode
[  702.410321][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  702.444983][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  702.483653][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  702.507520][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  702.543823][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  702.577123][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  702.616557][T16633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  702.673487][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  702.712287][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  702.745682][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  702.791214][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  702.817211][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  702.855619][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  702.897029][T16633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  702.925650][T16633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  702.954844][T16633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  703.020405][T16633] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  703.052126][T16633] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  703.096997][T16633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  703.127164][T16633] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  703.367812][ T5787] Bluetooth: hci2: command 0x0406 tx timeout
[  703.561428][ T6243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  703.616100][ T6243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  703.708553][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  703.727357][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  703.757892][ T5780] Bluetooth: hci0: command tx timeout
[  704.217376][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  704.512720][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  704.633119][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  704.738172][    T9] usb 1-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice= 1.00
[  704.788422][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.887099][    T9] usb 1-1: Product: syz
[  704.927477][    T9] usb 1-1: Manufacturer: syz
[  704.933928][    T9] usb 1-1: SerialNumber: syz
[  705.031764][    T9] hub 1-1:1.0: USB hub found
[  705.328934][    T9] hub 1-1:1.0: 4 ports detected
[  706.431256][    T9] hub 1-1:1.0: hub_hub_status failed (err = -32)
[  706.485632][    T9] hub 1-1:1.0: config failed, can't get hub status (err -32)
[  707.307451][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806e04b000: rx timeout, send abort
[  707.323185][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e04b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  707.367803][    T9] usb 1-1: USB disconnect, device number 27
[  712.025180][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'.
[  712.203234][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'.
[  713.169885][T16973] file system registered
[  715.642918][T17039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3484'.
[  715.725031][T17040] FAULT_INJECTION: forcing a failure.
[  715.725031][T17040] name failslab, interval 1, probability 0, space 0, times 0
[  715.847232][T17040] CPU: 0 PID: 17040 Comm: syz.0.3485 Not tainted syzkaller #0
[  715.854767][T17040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  715.864855][T17040] Call Trace:
[  715.868200][T17040]  <TASK>
[  715.871152][T17040]  dump_stack_lvl+0x18c/0x250
[  715.875870][T17040]  ? show_regs_print_info+0x20/0x20
[  715.881107][T17040]  ? load_image+0x420/0x420
[  715.885729][T17040]  ? __might_sleep+0xe0/0xe0
[  715.890432][T17040]  ? __lock_acquire+0x7d80/0x7d80
[  715.895473][T17040]  should_fail_ex+0x394/0x4c0
[  715.900160][T17040]  should_failslab+0x9/0x20
[  715.904671][T17040]  slab_pre_alloc_hook+0x59/0x300
[  715.909713][T17040]  ? binderfs_fill_super+0x643/0xfa0
[  715.915125][T17040]  __kmem_cache_alloc_node+0x53/0x250
[  715.920510][T17040]  ? binderfs_fill_super+0x643/0xfa0
[  715.925805][T17040]  kmalloc_trace+0x2a/0xe0
[  715.930403][T17040]  binderfs_fill_super+0x643/0xfa0
[  715.935606][T17040]  ? binderfs_fs_context_reconfigure+0x210/0x210
[  715.941952][T17040]  ? up_write+0x1be/0x410
[  715.946371][T17040]  ? sget_fc+0x7f5/0x8d0
[  715.950616][T17040]  ? kill_litter_super+0xb0/0xb0
[  715.955551][T17040]  ? binderfs_fs_context_reconfigure+0x210/0x210
[  715.961891][T17040]  get_tree_nodev+0xb5/0x140
[  715.966483][T17040]  vfs_get_tree+0x8c/0x280
[  715.970907][T17040]  do_new_mount+0x24a/0xa40
[  715.975412][T17040]  __se_sys_mount+0x2e7/0x3d0
[  715.980095][T17040]  ? __x64_sys_mount+0xc0/0xc0
[  715.984858][T17040]  ? lockdep_hardirqs_on+0x98/0x150
[  715.990049][T17040]  ? __x64_sys_mount+0x20/0xc0
[  715.994818][T17040]  do_syscall_64+0x55/0xb0
[  715.999244][T17040]  ? clear_bhb_loop+0x40/0x90
[  716.003934][T17040]  ? clear_bhb_loop+0x40/0x90
[  716.008622][T17040]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  716.014524][T17040] RIP: 0033:0x7ff0b999e159
[  716.018937][T17040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.038723][T17040] RSP: 002b:00007ff0ba95c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  716.047143][T17040] RAX: ffffffffffffffda RBX: 00007ff0b9c25fa0 RCX: 00007ff0b999e159
[  716.055294][T17040] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000200000000300
[  716.063263][T17040] RBP: 00007ff0b9a3506b R08: 0000000000000000 R09: 0000000000000000
[  716.071236][T17040] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000
[  716.079214][T17040] R13: 00007ff0b9c26038 R14: 00007ff0b9c25fa0 R15: 00007ffea1521688
[  716.087202][T17040]  </TASK>
[  717.197721][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  717.348236][ T5783] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  717.467313][    T9] usb 3-1: Using ep0 maxpacket: 8
[  717.481380][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  717.503382][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  717.557202][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  717.577417][ T5783] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  717.627290][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  717.642281][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  717.695861][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  717.727010][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  717.821965][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0
[  717.837068][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  717.878158][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  717.911342][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  717.926760][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.954708][T17082] FAULT_INJECTION: forcing a failure.
[  717.954708][T17082] name failslab, interval 1, probability 0, space 0, times 0
[  717.987106][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0
[  718.028511][T17082] CPU: 0 PID: 17082 Comm: syz.0.3490 Not tainted syzkaller #0
[  718.036040][T17082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  718.046127][T17082] Call Trace:
[  718.049422][T17082]  <TASK>
[  718.052351][T17082]  dump_stack_lvl+0x18c/0x250
[  718.057048][T17082]  ? show_regs_print_info+0x20/0x20
[  718.062254][T17082]  ? load_image+0x420/0x420
[  718.066755][T17082]  ? __lock_acquire+0x7d80/0x7d80
[  718.071782][T17082]  should_fail_ex+0x394/0x4c0
[  718.076464][T17082]  should_failslab+0x9/0x20
[  718.080975][T17082]  slab_pre_alloc_hook+0x59/0x300
[  718.086011][T17082]  ? sk_prot_alloc+0xe7/0x210
[  718.090685][T17082]  ? sk_prot_alloc+0xe7/0x210
[  718.095615][T17082]  __kmem_cache_alloc_node+0x53/0x250
[  718.101015][T17082]  ? sk_prot_alloc+0xe7/0x210
[  718.105706][T17082]  __kmalloc+0xa7/0x240
[  718.109888][T17082]  sk_prot_alloc+0xe7/0x210
[  718.114399][T17082]  ? sk_alloc+0x24/0x350
[  718.118647][T17082]  sk_alloc+0x3a/0x350
[  718.122729][T17082]  alg_create+0xa4/0x140
[  718.126982][T17082]  __sock_create+0x49e/0x940
[  718.131585][T17082]  __sys_socket+0xd7/0x1b0
[  718.136042][T17082]  __x64_sys_socket+0x7a/0x90
[  718.140765][T17082]  do_syscall_64+0x55/0xb0
[  718.145194][T17082]  ? clear_bhb_loop+0x40/0x90
[  718.149883][T17082]  ? clear_bhb_loop+0x40/0x90
[  718.154604][T17082]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  718.160511][T17082] RIP: 0033:0x7ff0b999e159
[  718.164935][T17082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  718.184554][T17082] RSP: 002b:00007ff0ba95c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  718.192979][T17082] RAX: ffffffffffffffda RBX: 00007ff0b9c25fa0 RCX: 00007ff0b999e159
[  718.200953][T17082] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026
[  718.208939][T17082] RBP: 00007ff0b9a3506b R08: 0000000000000000 R09: 0000000000000000
[  718.216926][T17082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  718.224904][T17082] R13: 00007ff0b9c26038 R14: 00007ff0b9c25fa0 R15: 00007ffea1521688
[  718.232893][T17082]  </TASK>
[  718.525480][    T9] usb 3-1: GET_CAPABILITIES returned 0
[  718.533923][    T9] usbtmc 3-1:16.0: can't read capabilities
[  718.551471][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  718.564345][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  718.583109][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0
[  718.638587][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  718.667132][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  718.705901][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0
[  718.787202][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  718.844584][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  718.915780][T15264] usb 3-1: USB disconnect, device number 5
[  718.933527][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0
[  718.996279][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.040165][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.107037][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0
[  719.151815][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.205477][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.318104][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0
[  719.374873][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.417425][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.477136][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0
[  719.574214][ T5783] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  719.633144][ T5783] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  719.727701][ T5783] usb 4-1: Product: syz
[  719.733711][ T5783] usb 4-1: Manufacturer: syz
[  719.807388][ T5783] usb 4-1: SerialNumber: syz
[  719.880539][ T5783] usb 4-1: config 0 descriptor??
[  720.026105][ T5783] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  720.302434][ T5783] usb 4-1: USB disconnect, device number 33
[  720.371230][ T5783] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  720.738007][T15264] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  720.979790][T17145] netlink: 'syz.2.3499': attribute type 1 has an invalid length.
[  721.017167][T15264] usb 2-1: Using ep0 maxpacket: 8
[  721.049674][T15264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  721.135744][T15264] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  721.220458][T15264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.260235][T17145] bond1: entered promiscuous mode
[  721.295652][T17145] bond1: entered allmulticast mode
[  721.307675][T15264] usb 2-1: config 0 descriptor??
[  721.335288][T17145] 8021q: adding VLAN 0 to HW filter on device bond1
[  721.476804][T17150] erspan1: entered allmulticast mode
[  721.596667][T15264] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  721.639746][T17150] bond1: (slave erspan1): making interface the new active one
[  721.717302][T17150] erspan1: entered promiscuous mode
[  721.808615][T17150] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  722.207156][T15264] usb 2-1: USB disconnect, device number 10
[  722.702335][T17177] loop3: detected capacity change from 0 to 7
[  722.777593][T17177] Dev loop3: unable to read RDB block 7
[  722.817437][T17177]  loop3: unable to read partition table
[  722.868058][T17177] loop3: partition table beyond EOD, truncated
[  722.927401][T17177] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  723.837078][T17198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3508'.
[  725.513583][ T5439] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  725.534112][ T5439] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  725.552269][ T5439] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  725.565843][ T5439] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  725.583049][ T5439] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  725.595098][ T5439] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  725.622951][ T5439] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  725.640990][ T5439] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  725.652812][ T5439] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  725.665904][ T5439] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  725.686049][ T5439] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  725.695599][ T5439] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  727.257465][T15264] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  727.560068][T15264] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  727.619172][T15264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.674294][T15264] usb 1-1: Product: syz
[  727.704640][T15264] usb 1-1: Manufacturer: syz
[  727.734943][T15264] usb 1-1: SerialNumber: syz
[  727.804834][T15264] usb 1-1: config 0 descriptor??
[  728.078103][T15264] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  729.096162][T15264] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  729.148437][T15264] usb 1-1: USB disconnect, device number 28
[  730.467750][T17300] loop3: detected capacity change from 0 to 32768
[  730.486196][T17314] lo: entered allmulticast mode
[  730.552015][T17313] lo: left allmulticast mode
[  730.703004][T17300] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  731.146054][T15264] ------------[ cut here ]------------
[  731.153891][T15264] sysfs group 'byte_queue_limits' not found for kobject 'tx-0'
[  731.173516][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[  731.247624][T15264] WARNING: CPU: 0 PID: 15264 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290
[  731.260583][T15264] Modules linked in:
[  731.266074][T15264] CPU: 0 PID: 15264 Comm: kworker/0:5 Not tainted syzkaller #0
[  731.276565][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  731.290609][T15264] Workqueue: events delete_netdev
[  731.296706][T15264] RIP: 0010:sysfs_remove_group+0x17b/0x290
[  731.304313][T15264] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff
[  731.329968][T15264] RSP: 0018:ffffc9000d5e7840 EFLAGS: 00010246
[  731.337599][T15264] RAX: 08f404f09c1e0d00 RBX: ffffffff8bc599a0 RCX: ffff88802cceda00
[  731.347095][T15264] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  731.358043][T15264] RBP: 00000000000000a3 R08: ffffc9000d5e7547 R09: 1ffff92001abcea8
[  731.368627][T15264] R10: dffffc0000000000 R11: fffff52001abcea9 R12: 1ffffffff178b230
[  731.379534][T15264] R13: dffffc0000000000 R14: ffff88802c2c94d8 R15: ffff88807d7e2020
[  731.391187][T15264] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  731.402454][T15264] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  731.411588][T15264] CR2: 0000001b2da1fff8 CR3: 000000006331f000 CR4: 00000000003506f0
[  731.421394][T15264] Call Trace:
[  731.425233][T15264]  <TASK>
[  731.429501][T15264]  ? netdev_queue_update_kobjects+0x3a6/0x480
[  731.438104][T15264]  netdev_queue_update_kobjects+0x3e1/0x480
[  731.445209][T15264]  netdev_unregister_kobject+0x108/0x250
[  731.453078][T15264]  unregister_netdevice_many_notify+0x1449/0x1910
[  731.461665][T15264]  ? __rwlock_init+0x150/0x150
[  731.467731][T15264]  ? unregister_netdevice_many+0x20/0x20
[  731.474588][T15264]  ? do_raw_spin_unlock+0x121/0x230
[  731.480924][T15264]  ? __mutex_lock+0x923/0xc80
[  731.486439][T15264]  ? __mutex_lock+0x4d2/0xc80
[  731.492854][T15264]  unregister_netdevice_queue+0x2e9/0x330
[  731.500006][T15264]  ? list_netdevice+0x730/0x730
[  731.505754][T15264]  ? read_lock_is_recursive+0x20/0x20
[  731.512519][T15264]  lowpan_unregister_netdev+0x1c/0x30
[  731.519853][T15264]  unregister_dev+0x70/0x1a0
[  731.525607][T15264]  ? process_scheduled_works+0x975/0x1600
[  731.533703][T15264]  process_scheduled_works+0xa60/0x1600
[  731.541745][T15264]  ? worker_attach_to_pool+0x370/0x370
[  731.549446][T15264]  ? assign_work+0x3cc/0x5d0
[  731.554867][T15264]  worker_thread+0xa5e/0xfe0
[  731.561261][T15264]  ? _raw_spin_unlock+0x40/0x40
[  731.567283][T15264]  ? __kthread_parkme+0x71/0x1c0
[  731.573290][T15264]  kthread+0x2fa/0x390
[  731.578960][T15264]  ? pr_cont_work+0x550/0x550
[  731.584577][T15264]  ? kthread_blkcg+0xd0/0xd0
[  731.590274][T15264]  ret_from_fork+0x48/0x80
[  731.595445][T15264]  ? kthread_blkcg+0xd0/0xd0
[  731.601892][T15264]  ret_from_fork_asm+0x11/0x20
[  731.608412][T15264]  </TASK>
[  731.611973][T15264] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  731.619251][T15264] CPU: 0 PID: 15264 Comm: kworker/0:5 Not tainted syzkaller #0
[  731.626980][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  731.637054][T15264] Workqueue: events delete_netdev
[  731.642099][T15264] Call Trace:
[  731.645367][T15264]  <TASK>
[  731.648289][T15264]  dump_stack_lvl+0x18c/0x250
[  731.652965][T15264]  ? show_regs_print_info+0x20/0x20
[  731.658159][T15264]  ? load_image+0x420/0x420
[  731.662665][T15264]  panic+0x2ca/0x720
[  731.666558][T15264]  ? bpf_jit_dump+0xd0/0xd0
[  731.671064][T15264]  ? ret_from_fork_asm+0x11/0x20
[  731.676003][T15264]  __warn+0x2e0/0x470
[  731.679979][T15264]  ? sysfs_remove_group+0x17b/0x290
[  731.685175][T15264]  ? sysfs_remove_group+0x17b/0x290
[  731.690365][T15264]  report_bug+0x2be/0x4f0
[  731.694857][T15264]  ? sysfs_remove_group+0x17b/0x290
[  731.700051][T15264]  ? sysfs_remove_group+0x17b/0x290
[  731.705238][T15264]  ? sysfs_remove_group+0x17d/0x290
[  731.710432][T15264]  handle_bug+0xcf/0x120
[  731.714683][T15264]  exc_invalid_op+0x1a/0x50
[  731.719180][T15264]  asm_exc_invalid_op+0x1a/0x20
[  731.724027][T15264] RIP: 0010:sysfs_remove_group+0x17b/0x290
[  731.729826][T15264] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff
[  731.749442][T15264] RSP: 0018:ffffc9000d5e7840 EFLAGS: 00010246
[  731.755508][T15264] RAX: 08f404f09c1e0d00 RBX: ffffffff8bc599a0 RCX: ffff88802cceda00
[  731.763745][T15264] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  731.771715][T15264] RBP: 00000000000000a3 R08: ffffc9000d5e7547 R09: 1ffff92001abcea8
[  731.779720][T15264] R10: dffffc0000000000 R11: fffff52001abcea9 R12: 1ffffffff178b230
[  731.787856][T15264] R13: dffffc0000000000 R14: ffff88802c2c94d8 R15: ffff88807d7e2020
[  731.796112][T15264]  ? netdev_queue_update_kobjects+0x3a6/0x480
[  731.802181][T15264]  netdev_queue_update_kobjects+0x3e1/0x480
[  731.808082][T15264]  netdev_unregister_kobject+0x108/0x250
[  731.813718][T15264]  unregister_netdevice_many_notify+0x1449/0x1910
[  731.820138][T15264]  ? __rwlock_init+0x150/0x150
[  731.824903][T15264]  ? unregister_netdevice_many+0x20/0x20
[  731.830531][T15264]  ? do_raw_spin_unlock+0x121/0x230
[  731.835727][T15264]  ? __mutex_lock+0x923/0xc80
[  731.840400][T15264]  ? __mutex_lock+0x4d2/0xc80
[  731.845074][T15264]  unregister_netdevice_queue+0x2e9/0x330
[  731.850791][T15264]  ? list_netdevice+0x730/0x730
[  731.855639][T15264]  ? read_lock_is_recursive+0x20/0x20
[  731.861010][T15264]  lowpan_unregister_netdev+0x1c/0x30
[  731.866379][T15264]  unregister_dev+0x70/0x1a0
[  731.870968][T15264]  ? process_scheduled_works+0x975/0x1600
[  731.876688][T15264]  process_scheduled_works+0xa60/0x1600
[  731.882255][T15264]  ? worker_attach_to_pool+0x370/0x370
[  731.887717][T15264]  ? assign_work+0x3cc/0x5d0
[  731.892305][T15264]  worker_thread+0xa5e/0xfe0
[  731.896907][T15264]  ? _raw_spin_unlock+0x40/0x40
[  731.901756][T15264]  ? __kthread_parkme+0x71/0x1c0
[  731.906697][T15264]  kthread+0x2fa/0x390
[  731.910776][T15264]  ? pr_cont_work+0x550/0x550
[  731.915446][T15264]  ? kthread_blkcg+0xd0/0xd0
[  731.920027][T15264]  ret_from_fork+0x48/0x80
[  731.924439][T15264]  ? kthread_blkcg+0xd0/0xd0
[  731.929020][T15264]  ret_from_fork_asm+0x11/0x20
[  731.933788][T15264]  </TASK>
[  731.937064][T15264] Kernel Offset: disabled
[  731.941493][T15264] Rebooting in 86400 seconds..