last executing test programs:

3m21.418761786s ago: executing program 3 (id=251):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x8004, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2, 0x1000)

3m21.388158562s ago: executing program 3 (id=253):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$unix(0x1, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000006c0), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3m21.299734651s ago: executing program 3 (id=255):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x600, 0x0)
open(&(0x7f0000000a40)='.\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x138}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x6c}}, 0x28}}, 0x0)

3m21.220671197s ago: executing program 3 (id=256):
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001800)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0x7d, 0x1501, &(0x7f00000002c0)="$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")
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8082, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)

3m21.15749713s ago: executing program 3 (id=257):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000})
fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd})
fcntl$lock(r1, 0x26, 0x0)
fcntl$lock(r1, 0x7, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

3m20.979059987s ago: executing program 3 (id=260):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7, 0x2, 0xffffffff, 0x400000})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

3m5.174994936s ago: executing program 32 (id=260):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7, 0x2, 0xffffffff, 0x400000})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

20.665686504s ago: executing program 5 (id=1505):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
flock(r0, 0x5)
mlockall(0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfa, 0x20}, 0xc)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000a6", 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x0, 0x0, 0x0, 0x5, 0xc2, 0x1000}}}}}}}, 0x0)

20.245421482s ago: executing program 2 (id=1507):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r3}, &(0x7f0000000380), &(0x7f0000000400)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r5}, &(0x7f0000000ac0), &(0x7f0000000b40)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4}, 0x20)

20.214922068s ago: executing program 4 (id=1512):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
msgctl$IPC_RMID(0x0, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110a400000000001c110000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="65830000000000000000010000000800010074000007080022c1"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffc, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x24040000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

20.20758945s ago: executing program 0 (id=1513):
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ubifs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="617574685f686173685f6e616d653d736861312c62756c6b5f726561642c617574685f6861352c6e6f5f63686b5f646174615f6372632c666173745f756e6d6f756e742c617574685f6b65793d2e262f5c723e99ec173470cc012f495d2c6e6f5f62756c6b5f726561642c6e6f726d5f756e6d6f756e742c0000"], 0x1, 0x9dc3, &(0x7f0000013cc0)="$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")
openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x1ae)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

20.188756094s ago: executing program 4 (id=1514):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c6004000010902120001000000000904"], 0x0)
r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b603b)
shmctl$IPC_STAT(r0, 0x2, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000004c0)=""/16, &(0x7f0000000380)=0x10)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x3000)

20.171937488s ago: executing program 0 (id=1515):
r0 = socket(0x2b, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0)

19.743826847s ago: executing program 2 (id=1526):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000})
fcntl$lock(r1, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd})
fcntl$lock(r1, 0x26, 0x0)
fcntl$lock(r1, 0x7, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

19.663848084s ago: executing program 5 (id=1518):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f00000013c0)={0x14, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x4, 0xcb}]}, 0x14}], 0x1}, 0x4000000)

19.658688835s ago: executing program 1 (id=1519):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x800)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x8e, 0x180000504)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)

19.235229633s ago: executing program 0 (id=1520):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20010094}, 0xc050)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

19.234879904s ago: executing program 2 (id=1521):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x1})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3})
close_range(r1, 0xffffffffffffffff, 0x0)

19.234625513s ago: executing program 4 (id=1522):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc000)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000002010500"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x6400)

18.77582493s ago: executing program 5 (id=1523):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r1])
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r3, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

18.759473253s ago: executing program 1 (id=1524):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0xd, 0x6, "f78bcf", 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x4e23, 0x4e20, 0x8}}}}}}, &(0x7f0000000280)={0x1, 0x3, [0xd43, 0x1cf, 0xc5c, 0x791]})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x4000)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

18.759273473s ago: executing program 4 (id=1525):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000002000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0)

18.330709623s ago: executing program 5 (id=1527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0008000000000000f7080000070000007b5af8ff00000000bfa2000000002c91924d28b1000007020000f8ffffffb703000008000000b70400000000a300850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', <r4=>0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
fcntl$getown(r5, 0x9)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14)

18.313760186s ago: executing program 0 (id=1528):
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001800)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0x7d, 0x1501, &(0x7f00000002c0)="$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")
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8082, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)

18.260060828s ago: executing program 2 (id=1529):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$unix(0x1, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000006c0), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

18.258877898s ago: executing program 0 (id=1539):
openat(0xffffffffffffff9c, 0x0, 0x200, 0x8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x32}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)

18.190222112s ago: executing program 2 (id=1530):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}})
r0 = syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x3})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

18.063389329s ago: executing program 5 (id=1531):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x100}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3e8}]}}]}, 0x38}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000500)={0x11, 0x3, 0x2}, 0x14)
sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "01010101010101010101010101010101"}}}]}, 0x48}}, 0x0)
sendto$packet(r1, &(0x7f0000000200)="00112233445566778899aabb08004500001c000000004011000001010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000680)={0x11, 0x0, 0x2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0)

18.062114559s ago: executing program 2 (id=1542):
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r0=>0x0)
unshare(0x2c020400)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r2, &(0x7f0000000000)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0xfffffffffffffc01, 0x0)
tee(r1, r3, 0xfffffffffffffffc, 0x0)

17.834582087s ago: executing program 5 (id=1532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

17.834403627s ago: executing program 4 (id=1533):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
r2 = accept$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28)
sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0)

17.832874237s ago: executing program 1 (id=1544):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000008c0), 0x121202, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9)
write$binfmt_elf32(r3, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f003, 0x2})

16.376731462s ago: executing program 1 (id=1534):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000c9de00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000)

16.375202792s ago: executing program 0 (id=1547):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC], 0x2, 0x18b, &(0x7f00000003c0)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/24)

16.344860489s ago: executing program 1 (id=1535):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x10040000)

16.343368649s ago: executing program 4 (id=1549):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80))
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r1)
r4 = fcntl$dupfd(r0, 0x406, r2)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

15.463357903s ago: executing program 1 (id=1536):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5b, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = fsmount(r4, 0x0, 0x80)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r6, r3, 0x4, r3}, 0x10)

2.999137022s ago: executing program 33 (id=1542):
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r0=>0x0)
unshare(0x2c020400)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r2, &(0x7f0000000000)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0xfffffffffffffc01, 0x0)
tee(r1, r3, 0xfffffffffffffffc, 0x0)

2.501028677s ago: executing program 34 (id=1532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

1.00286273s ago: executing program 35 (id=1547):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC], 0x2, 0x18b, &(0x7f00000003c0)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/24)

973.807136ms ago: executing program 36 (id=1549):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80))
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r1)
r4 = fcntl$dupfd(r0, 0x406, r2)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

0s ago: executing program 37 (id=1536):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5b, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = fsmount(r4, 0x0, 0x80)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r6, r3, 0x4, r3}, 0x10)

kernel console output (not intermixed with test programs):

eneric 0005:046D:B00E.0001: hidraw0: BLUETOOTH HID v7.bc Device [syz0] on syz0
[   45.990619][ T4806] loop2: detected capacity change from 0 to 512
[   46.020260][ T4806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   46.047824][ T4808] fido_id[4808]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   46.073490][ T4332] EXT4-fs (loop2): unmounting filesystem.
[   46.163984][ T4812] ftl_cs: FTL header not found.
[   46.222174][ T4812] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536]
[   46.310569][   T27] audit: type=1326 audit(46.290:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4813 comm="syz.4.133" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd79368 code=0x0
[   46.894012][ T4344] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   47.251844][ T4817] ubi0: attaching mtd0
[   47.253253][ T4817] ubi0: scanning is finished
[   47.254755][ T4817] ubi0: empty MTD device detected
[   47.360517][ T4827] bridge0: port 3(syz_tun) tried to become root port (blocked)
[   47.360854][ T4827] bridge0: port 3(syz_tun) entered listening state
[   47.377966][   T24] usb 1-1: USB disconnect, device number 2
[   47.393753][ T4817] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[   47.395217][ T4817] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   47.396530][ T4817] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[   47.404105][ T4817] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[   47.405345][ T4817] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   47.423677][ T4817] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[   47.425503][ T4817] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4218462911
[   47.427282][ T4817] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   47.429448][ T4834] ubi0: background thread "ubi_bgt0d" started, PID 4834
[   47.704706][    C0] vcan0: j1939_tp_rxtimer: 0x000000004d374013: rx timeout, send abort
[   48.183976][    C0] net_ratelimit: 15 callbacks suppressed
[   48.183990][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   48.187037][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   48.201368][    C0] vcan0: j1939_tp_rxtimer: 0x000000008fb02185: rx timeout, send abort
[   48.206775][    C0] vcan0: j1939_tp_rxtimer: 0x000000004d374013: abort rx timeout. Force session deactivation
[   48.334199][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   48.361040][ T4870] mmap: syz.0.140 (4870) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   48.399673][ T4881] netlink: 'syz.1.143': attribute type 5 has an invalid length.
[   48.507363][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   48.548762][ T4888] netlink: 'syz.1.145': attribute type 2 has an invalid length.
[   48.702689][    C0] vcan0: j1939_tp_rxtimer: 0x000000008fb02185: abort rx timeout. Force session deactivation
[   50.113768][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   50.124189][ T4379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   50.327612][ T4948] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.416956][ T4951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'.
[   50.423400][ T4948] bond1: (slave geneve2): making interface the new active one
[   50.432870][ T4948] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   50.436961][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   50.569744][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   50.571588][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   50.573098][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   50.586751][ T4968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   50.855413][ T4975] delete_channel: no stack
[   51.036935][ T4984] loop4: detected capacity change from 0 to 128
[   51.097555][ T4984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   51.992285][ T5001] loop2: detected capacity change from 0 to 128
[   52.010132][ T5001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[   52.011584][ T5001] System zones: 1-3, 19-19, 35-36
[   52.012847][ T5001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   52.205711][ T5016] EXT4-fs warning (device loop2): ext4_group_extend:1899: can't read last block, resize aborted
[   52.257352][ T4329] EXT4-fs (loop4): unmounting filesystem.
[   52.259074][ T4332] EXT4-fs (loop2): unmounting filesystem.
[   52.711469][ T5041] loop0: detected capacity change from 0 to 32768
[   52.758215][ T5041] XFS (loop0): Mounting V5 Filesystem
[   52.812063][ T5041] XFS (loop0): Ending clean mount
[   52.818040][ T5041] XFS (loop0): Quotacheck needed: Please wait.
[   52.834898][ T5041] XFS (loop0): Quotacheck: Done.
[   52.955759][ T4333] XFS (loop0): Unmounting Filesystem
[   54.206326][ T4375] net_ratelimit: 12 callbacks suppressed
[   54.206341][ T4375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   54.219240][ T5087] 0: reclassify loop, rule prio 0, protocol 03
[   55.017082][ T5100] loop3: detected capacity change from 0 to 32768
[   55.116355][ T5100] JBD2: Ignoring recovery information on journal
[   55.439531][ T4381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.445160][   T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.473877][ T5100] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[   55.494182][ T5100] FAULT_INJECTION: forcing a failure.
[   55.494182][ T5100] name failslab, interval 1, probability 0, space 0, times 1
[   55.496567][ T5100] CPU: 0 PID: 5100 Comm: syz.3.188 Not tainted syzkaller #0
[   55.497783][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   55.499591][ T5100] Call trace:
[   55.500191][ T5100]  dump_backtrace+0x1c4/0x1f0
[   55.501113][ T5100]  show_stack+0x2c/0x3c
[   55.501898][ T5100]  __dump_stack+0x30/0x40
[   55.502695][ T5100]  dump_stack_lvl+0xf4/0x15c
[   55.503551][ T5100]  dump_stack+0x1c/0x5c
[   55.504338][ T5100]  should_fail_ex+0x3cc/0x524
[   55.505236][ T5100]  __should_failslab+0xc0/0x11c
[   55.506147][ T5100]  should_failslab+0x10/0x28
[   55.506998][ T5100]  __kmem_cache_alloc_node+0x7c/0x318
[   55.508027][ T5100]  kmalloc_trace+0x48/0x94
[   55.508869][ T5100]  ocfs2_reserve_clusters_with_limit+0xe0/0xa3c
[   55.509993][ T5100]  ocfs2_reserve_suballoc_bits+0x688/0x3d40
[   55.511070][ T5100]  ocfs2_reserve_new_metadata_blocks+0x340/0x7e4
[   55.512251][ T5100]  ocfs2_lock_allocators+0x23c/0x530
[   55.513251][ T5100]  ocfs2_extend_allocation+0x37c/0x1760
[   55.514278][ T5100]  ocfs2_allocate_unwritten_extents+0x274/0x6dc
[   55.515381][ T5100]  __ocfs2_change_file_space+0x7e0/0xcf4
[   55.516415][ T5100]  ocfs2_fallocate+0x1f0/0x228
[   55.517265][ T5100]  vfs_fallocate+0x4a4/0x5fc
[   55.518152][ T5100]  __arm64_sys_fallocate+0xc4/0x114
[   55.519139][ T5100]  invoke_syscall+0x98/0x290
[   55.519990][ T5100]  el0_svc_common+0x13c/0x258
[   55.520861][ T5100]  do_el0_svc+0x5c/0x134
[   55.521633][ T5100]  el0_svc+0x58/0x128
[   55.522332][ T5100]  el0t_64_sync_handler+0x84/0xf0
[   55.523197][ T5100]  el0t_64_sync+0x18c/0x190
[   55.524418][ T5100] (syz.3.188,5100,1):ocfs2_reserve_clusters_with_limit:1174 ERROR: status = -12
[   55.527359][ T5100] (syz.3.188,5100,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -12
[   55.529371][ T5100] (syz.3.188,5100,1):ocfs2_block_group_alloc:697 ERROR: status = -12
[   55.530925][ T5100] (syz.3.188,5100,1):ocfs2_block_group_alloc:780 ERROR: status = -12
[   55.533486][ T5100] (syz.3.188,5100,1):ocfs2_reserve_suballoc_bits:855 ERROR: status = -12
[   55.535385][ T5100] (syz.3.188,5100,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -12
[   55.537155][ T5100] (syz.3.188,5100,1):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -12
[   55.539083][ T5100] (syz.3.188,5100,1):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -12
[   55.541471][ T5100] (syz.3.188,5100,1):ocfs2_lock_allocators:2693 ERROR: status = -12
[   55.543100][ T5100] (syz.3.188,5100,1):ocfs2_extend_allocation:588 ERROR: status = -12
[   55.545047][ T5100] (syz.3.188,5100,1):ocfs2_allocate_unwritten_extents:1499 ERROR: status = -12
[   55.546934][ T5100] (syz.3.188,5100,1):__ocfs2_change_file_space:2045 ERROR: status = -12
[   55.581159][ T4338] ocfs2: Unmounting device (7,3) on (node local)
[   56.861547][ T3901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   57.105832][ T4381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   57.345473][ T5147] netlink: 'syz.3.214': attribute type 1 has an invalid length.
[   57.367106][ T5147] device bond1 entered promiscuous mode
[   57.368350][ T5147] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.385159][ T5152] FAULT_INJECTION: forcing a failure.
[   57.385159][ T5152] name failslab, interval 1, probability 0, space 0, times 0
[   57.387817][ T5152] CPU: 1 PID: 5152 Comm: syz.4.207 Not tainted syzkaller #0
[   57.389175][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   57.391182][ T5152] Call trace:
[   57.391849][ T5152]  dump_backtrace+0x1c4/0x1f0
[   57.392728][ T5152]  show_stack+0x2c/0x3c
[   57.393529][ T5152]  __dump_stack+0x30/0x40
[   57.394353][ T5152]  dump_stack_lvl+0xf4/0x15c
[   57.395204][ T5152]  dump_stack+0x1c/0x5c
[   57.395971][ T5152]  should_fail_ex+0x3cc/0x524
[   57.396845][ T5152]  __should_failslab+0xc0/0x11c
[   57.397732][ T5152]  should_failslab+0x10/0x28
[   57.398591][ T5152]  kmem_cache_alloc+0x88/0x310
[   57.399481][ T5152]  mempool_alloc_slab+0x58/0x74
[   57.400384][ T5152]  mempool_init_node+0x1c4/0x470
[   57.401280][ T5152]  mempool_init+0x50/0x68
[   57.402081][ T5152]  bioset_init+0x22c/0x5c0
[   57.402930][ T5152]  __alloc_disk_node+0x8c/0x438
[   57.403868][ T5152]  __blk_alloc_disk+0x40/0xb8
[   57.404788][ T5152]  dm_create+0x514/0xf48
[   57.405601][ T5152]  dev_create+0xf4/0x25c
[   57.406375][ T5152]  dm_ctl_ioctl+0xaac/0xf1c
[   57.407208][ T5152]  __arm64_sys_ioctl+0x14c/0x1c8
[   57.408183][ T5152]  invoke_syscall+0x98/0x290
[   57.409043][ T5152]  el0_svc_common+0x13c/0x258
[   57.409953][ T5152]  do_el0_svc+0x5c/0x134
[   57.410786][ T5152]  el0_svc+0x58/0x128
[   57.411557][ T5152]  el0t_64_sync_handler+0x84/0xf0
[   57.412528][ T5152]  el0t_64_sync+0x18c/0x190
[   57.449501][ T5147] bond1: (slave bridge1): making interface the new active one
[   57.450891][ T5147] device bridge1 entered promiscuous mode
[   57.455407][ T3901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   57.464790][ T5147] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   57.690101][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   59.326274][ T4375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   59.328001][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   59.329496][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   59.863082][ T5178] capability: warning: `syz.1.215' uses deprecated v2 capabilities in a way that may be insecure
[   59.930720][ T5198] loop4: detected capacity change from 0 to 16
[   59.938705][ T5198] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported
[   60.465797][ T4379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.471097][ T5255] device syzkaller0 entered promiscuous mode
[   61.475200][ T5255] tipc: Started in network mode
[   61.477429][ T5255] tipc: Node identity c67757383bb1, cluster identity 4711
[   61.478791][ T5256] netlink: 'syz.2.237': attribute type 1 has an invalid length.
[   61.479141][ T5255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.483184][ T5254] tipc: Resetting bearer <eth:syzkaller0>
[   61.534540][ T4375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.830406][ T5261] binder: 5260:5261 tried to acquire reference to desc 0, got 1 instead
[   61.833577][ T5261] binder: 5260:5261 got reply transaction with bad transaction stack, transaction 25 has target 5260:0
[   61.836160][ T5261] binder: 5260:5261 transaction reply to 0:0 failed 32/29201/-71, size 0-0 line 2978
[   61.846210][ T4379] binder: release 5260:5261 transaction 25 out, still active
[   61.848435][ T4379] binder: undelivered TRANSACTION_COMPLETE
[   61.849867][ T4379] binder: undelivered TRANSACTION_ERROR: 29201
[   61.851446][ T4379] binder: send failed reply for transaction 25, target dead
[   61.854731][ T5254] tipc: Disabling bearer <eth:syzkaller0>
[   61.979068][ T3901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   62.344657][ T3901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   62.350190][ T5269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[   62.459026][ T5277] device syzkaller0 entered promiscuous mode
[   62.574742][    C0] bridge0: port 3(syz_tun) entered learning state
[   62.575530][ T4379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   62.577706][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   62.685685][ T5285] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[   62.806960][ T5295] loop4: detected capacity change from 0 to 1024
[   62.854198][ T5295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   62.860494][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.865968][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.872838][ T5295] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.250: lblock 0 mapped to illegal pblock 0 (length 6)
[   62.897379][ T5295] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.250: bg 0: block 112: padding at end of block bitmap is not set
[   62.902616][ T5295] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[   62.907543][ T5295] EXT4-fs (loop4): This should not happen!! Data will be lost
[   62.907543][ T5295] 
[   63.052342][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'.
[   63.148648][ T5316] loop3: detected capacity change from 0 to 256
[   63.170828][ T5316] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   63.296138][ T5318] FAULT_INJECTION: forcing a failure.
[   63.296138][ T5318] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   63.299691][ T5318] CPU: 0 PID: 5318 Comm: syz.3.257 Not tainted syzkaller #0
[   63.301023][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   63.302941][ T5318] Call trace:
[   63.303568][ T5318]  dump_backtrace+0x1c4/0x1f0
[   63.304456][ T5318]  show_stack+0x2c/0x3c
[   63.305268][ T5318]  __dump_stack+0x30/0x40
[   63.306115][ T5318]  dump_stack_lvl+0xf4/0x15c
[   63.307010][ T5318]  dump_stack+0x1c/0x5c
[   63.307819][ T5318]  should_fail_ex+0x3cc/0x524
[   63.308718][ T5318]  should_fail_alloc_page+0x74/0xb8
[   63.309708][ T5318]  prepare_alloc_pages+0x1b8/0x4f0
[   63.310671][ T5318]  __alloc_pages+0x134/0x544
[   63.311543][ T5318]  __folio_alloc+0x1c/0x44
[   63.312360][ T5318]  vma_alloc_folio+0x37c/0x8ac
[   63.313294][ T5318]  wp_page_copy+0x1d0/0x1774
[   63.314184][ T5318]  do_wp_page+0xaf8/0xed4
[   63.314941][ T5318]  handle_mm_fault+0x1520/0x3018
[   63.315848][ T5318]  do_page_fault+0x310/0x99c
[   63.316716][ T5318]  do_mem_abort+0x70/0x198
[   63.317580][ T5318]  el0_da+0x70/0x144
[   63.318330][ T5318]  el0t_64_sync_handler+0x90/0xf0
[   63.319293][ T5318]  el0t_64_sync+0x18c/0x190
[   63.340426][ T5318] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   63.431083][ T4387] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28
[   63.438053][ T4387] EXT4-fs (loop4): This should not happen!! Data will be lost
[   63.438053][ T4387] 
[   63.439918][ T4387] EXT4-fs (loop4): Total free blocks count 0
[   63.441145][ T4387] EXT4-fs (loop4): Free/Dirty block details
[   63.443399][ T4387] EXT4-fs (loop4): free_blocks=0
[   63.445511][ T4387] EXT4-fs (loop4): dirty_blocks=64
[   63.448041][ T4387] EXT4-fs (loop4): Block reservation details
[   63.567621][ T5332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.569380][ T5332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.613902][ T4381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   64.496229][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[   64.497689][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[   64.654121][ T4381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.062688][ T5353] loop4: detected capacity change from 0 to 40427
[   65.067803][ T5353] F2FS-fs (loop4): Unrecognized mount option "./bus" or missing value
[   65.162305][ T4344] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[   65.383855][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.694498][ T4381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.773868][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.288178][ T5385] device syzkaller0 entered promiscuous mode
[   66.425222][ T3901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.519898][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'.
[   66.561371][ T5397] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[   66.687580][ T5403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.689457][ T5403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.691087][ T5403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.695110][ T5403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.697053][ T5403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   67.627312][ T5416] loop4: detected capacity change from 0 to 1024
[   67.643553][ T5416] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   67.646150][ T5416] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (40000)
[   67.968232][ T5419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'.
[   68.019977][ T5423] loop0: detected capacity change from 0 to 512
[   68.030431][ T5423] EXT4-fs: inline encryption not supported
[   68.039741][ T5423] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   68.045719][ T5421] netlink: 'syz.4.291': attribute type 5 has an invalid length.
[   68.047234][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'.
[   68.071456][ T5423] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.292: corrupted in-inode xattr
[   68.081372][ T5427] binder: 5426:5427 tried to acquire reference to desc 0, got 1 instead
[   68.085345][ T4374] binder: release 5426:5427 transaction 37 out, still active
[   68.086857][ T4374] binder: undelivered TRANSACTION_COMPLETE
[   68.087150][ T5423] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.292: couldn't read orphan inode 15 (err -117)
[   68.094720][ T5423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   68.095230][ T4374] binder: send failed reply for transaction 37, target dead
[   68.149783][ T4333] EXT4-fs (loop0): unmounting filesystem.
[   69.319720][ T5454] loop4: detected capacity change from 0 to 512
[   69.338183][ T5454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   69.744992][    T7] cfg80211: failed to load regulatory.db
[   69.746585][ T3901] net_ratelimit: 322 callbacks suppressed
[   69.746595][ T3901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   70.268267][ T4329] EXT4-fs (loop4): unmounting filesystem.
[   70.339345][ T4379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   70.488273][ T5478] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   70.490460][ T5478] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   70.496573][ T5478] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   70.499615][ T5478] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   70.509137][ T5478] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   70.514038][ T5478] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   70.520111][ T5478] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   70.525254][ T5478] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   70.845826][ T5486] device syzkaller0 entered promiscuous mode
[   71.384877][ T5494] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[   71.579477][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'.
[   71.593026][ T5511] netlink: 'syz.1.318': attribute type 10 has an invalid length.
[   71.602105][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.604120][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.638137][ T5511] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.639476][ T5511] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.640827][ T5511] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.642044][ T5511] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.661227][ T5511] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   71.740994][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'.
[   71.742642][ T5511] device bridge_slave_1 left promiscuous mode
[   71.751065][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.777454][ T5511] device bridge_slave_0 left promiscuous mode
[   71.778694][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.835242][ T5521] dns_resolver: Unsupported server list version (6)
[   72.062537][ T5513] loop0: detected capacity change from 0 to 256
[   72.097216][ T5513] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   72.164605][ T5511] bond0: (slave bridge0): Releasing backup interface
[   72.279240][ T5524] device syzkaller0 entered promiscuous mode
[   73.507675][ T5553] loop2: detected capacity change from 0 to 256
[   73.900199][ T5559] tipc: Enabled bearer <udp:syz0>, priority 10
[   73.908221][ T5559] tipc: Enabled bearer <eth:dummy0>, priority 10
[   73.913102][ T5559] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[   73.918961][ T5559] tipc: Bearer <udp:syz2>: trying with adjusted priority
[   73.920825][ T5559] tipc: New replicast peer: 255.255.255.255
[   73.922982][ T5559] tipc: Enabled bearer <udp:syz2>, priority 9
[   74.068029][ T5555] overlayfs: failed to clone upperpath
[   74.163930][ T5571] loop4: detected capacity change from 0 to 1024
[   74.318196][ T5578] netlink: 'syz.0.342': attribute type 10 has an invalid length.
[   74.335292][ T4607] hfsplus: b-tree write err: -5, ino 25
[   74.336567][ T4607] hfsplus: b-tree write err: -5, ino 4
[   74.337600][ T4607] hfsplus: b-tree write err: -5, ino 2
[   74.338890][ T4607] hfsplus: b-tree write err: -5, ino 26
[   74.340051][ T4607] hfsplus: b-tree write err: -5, ino 27
[   74.352360][ T5578] team0: Port device netdevsim0 added
[   74.377752][ T5581] netlink: 36 bytes leftover after parsing attributes in process `syz.4.343'.
[   75.055619][ T5597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.349'.
[   75.350835][   T24] tipc: Node number set to 4257634104
[   75.440694][ T5605] binder: BINDER_SET_CONTEXT_MGR already set
[   75.442024][ T5605] binder: 5604:5605 ioctl 4018620d 200002c0 returned -16
[   75.457004][ T5605] binder: tried to use weak ref as strong ref
[   75.458332][ T5605] binder: 5604:5605 Acquire 1 refcount change on invalid ref 0 ret -22
[   75.460150][ T5605] binder: 5604:5605 got transaction to invalid handle, 1
[   75.461608][ T5605] binder: 5605:5604 cannot find target node
[   75.462688][ T5605] binder: 5604:5605 transaction async to 0:0 failed 40/29201/-22, size 0-0 line 3062
[   75.537303][ T3901] binder: undelivered TRANSACTION_ERROR: 29201
[   75.614061][   T24] net_ratelimit: 20480 callbacks suppressed
[   75.614074][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.675438][ T5620] cifs: Unknown parameter 'timeo'
[   75.853437][ T5627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.912822][ T5633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.968279][ T5627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.011886][ T5638] loop4: detected capacity change from 0 to 2048
[   76.017813][ T4374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.039489][ T5638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   76.623991][ T5650] loop2: detected capacity change from 0 to 256
[   76.629885][ T5650] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   76.654120][  T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.656613][  T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.009397][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   77.027413][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   77.045274][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   77.053403][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.058279][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   77.070568][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   77.078791][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   77.085878][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   77.092552][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'.
[   77.179470][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.181389][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.187280][ T5668] loop0: detected capacity change from 0 to 512
[   77.193104][ T5668] EXT4-fs: Ignoring removed bh option
[   77.209725][ T5668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e00ce01c, mo2=0002]
[   77.211244][ T5668] System zones: 1-12
[   77.212615][ T5668] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.369: inode has both inline data and extents flags
[   77.217993][ T5668] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.369: couldn't read orphan inode 15 (err -117)
[   77.220198][ T5668] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   77.933753][    C0] bridge0: port 3(syz_tun) entered forwarding state
[   77.935046][    C0] bridge0: topology change detected, propagating
[   78.046822][ T4333] EXT4-fs (loop0): unmounting filesystem.
[   78.325778][   T27] audit: type=1326 audit(78.310:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.2.377" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87379368 code=0x0
[   79.251441][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[   79.353615][ T5711] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.355564][ T5711] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.356960][ T5711] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.358423][ T5711] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.685322][ T4335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   79.692754][ T4335] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   79.696031][ T4335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   79.697996][ T4335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   79.699637][ T4335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   79.701215][ T4335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   79.839287][ T5720] chnl_net:caif_netlink_parms(): no params data found
[   79.859486][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.860904][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.862505][ T5720] device bridge_slave_0 entered promiscuous mode
[   79.886567][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.888102][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.889907][ T5720] device bridge_slave_1 entered promiscuous mode
[   79.951766][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.954918][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.964605][ T5720] team0: Port device team_slave_0 added
[   79.966689][ T5720] team0: Port device team_slave_1 added
[   79.972773][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.974627][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.979531][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.982407][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.984091][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.989674][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.025191][ T5720] device hsr_slave_0 entered promiscuous mode
[   80.063970][ T5720] device hsr_slave_1 entered promiscuous mode
[   80.123762][ T5720] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.125091][ T5720] Cannot create hsr debugfs directory
[   80.443029][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.445029][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.446613][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.468949][ T5472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.604915][ T5472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.611898][ T5720] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   80.706291][ T5472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.709041][ T5720] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   80.796037][ T5472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.799587][ T5720] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   80.835262][ T5720] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   80.883050][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.884499][ T5720] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.885847][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.887140][ T5720] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.895270][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.897790][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.920902][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.926363][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.928312][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.931529][ T5720] 8021q: adding VLAN 0 to HW filter on device team0
[   80.937637][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.939680][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.941486][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.942875][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.947170][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.949024][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.950541][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.951841][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.957605][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.961544][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.976576][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.979473][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.985469][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.987426][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.989400][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.010496][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.012662][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.015029][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.017930][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.031901][ T5720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.127161][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.128815][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.133478][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.318866][ T5807] netlink: 32 bytes leftover after parsing attributes in process `syz.4.399'.
[   81.539876][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.541968][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.599562][ T5720] device veth0_vlan entered promiscuous mode
[   81.602915][ T5720] device veth1_vlan entered promiscuous mode
[   81.628675][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.630541][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.632124][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.634494][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.637140][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.638909][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.642960][ T5720] device veth0_macvtap entered promiscuous mode
[   81.645373][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.647223][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.649212][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.652317][ T5720] device veth1_macvtap entered promiscuous mode
[   81.661354][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.663185][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.666000][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.668031][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.669969][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.671849][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.673566][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.775116][ T4335] Bluetooth: hci5: command 0x0409 tx timeout
[   81.963886][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.965468][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.967174][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.969558][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.016711][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   82.018857][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.020926][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.023957][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.025852][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.027627][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.029522][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.031340][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.033192][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.035159][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.037316][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.039043][ T5720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.044177][ T5720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.052228][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.055375][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.061880][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.169151][ T5720] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.171877][ T5720] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.173565][ T5720] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.184925][ T5720] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.263845][   T27] audit: type=1326 audit(82.240:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.1.401" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x0
[   83.166703][ T1590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.168142][ T1590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.209349][ T1590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.210936][ T1590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.405254][ T5833] loop2: detected capacity change from 0 to 40427
[   83.421551][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.423236][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.437715][ T5833] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[   83.453090][ T5833] F2FS-fs (loop2): invalid crc value
[   83.471501][ T5833] F2FS-fs (loop2): Found nat_bits in checkpoint
[   83.541141][ T5833] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   83.581793][ T5833] device syzkaller0 entered promiscuous mode
[   83.876983][ T4335] Bluetooth: hci5: command 0x041b tx timeout
[   84.494280][ T5879] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   84.599220][ T5896] binder: 5895:5896 tried to acquire reference to desc 0, got 1 instead
[   84.603518][ T5897] loop0: detected capacity change from 0 to 4096
[   84.609843][ T5896] binder: 5895:5896 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   84.610374][ T5897] EXT4-fs: inline encryption not supported
[   84.891359][ T5896] binder: 5896 RLIMIT_NICE not set
[   84.892521][ T5896] binder: 5896 RLIMIT_NICE not set
[   84.893414][ T5896] binder: send failed reply for transaction 45 to 5895:5896
[   84.913994][ T5896] binder: 5895:5896 ioctl c0306201 20000180 returned -14
[   84.917064][ T4376] binder: undelivered TRANSACTION_COMPLETE
[   84.918285][ T4376] binder: undelivered TRANSACTION_ERROR: 29201
[   84.926254][ T5897] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   84.927765][ T5897] EXT4-fs (loop0): Test dummy encryption mode enabled
[   84.939246][ T5897] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   84.947695][ T5897] System zones: 0-5
[   85.005322][ T5897] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   85.050224][ T5897] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   85.058012][ T5897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.412: bg 0: block 401: padding at end of block bitmap is not set
[   85.068623][ T5897] EXT4-fs (loop0): Remounting filesystem read-only
[   86.685117][ T5909] sched: RT throttling activated
[   86.690596][ T4344] Bluetooth: hci5: command 0x040f tx timeout
[   87.656406][ T4333] EXT4-fs (loop0): unmounting filesystem.
[   88.664065][   T27] audit: type=1326 audit(87.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.5.417" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x0
[   88.930895][ T4344] Bluetooth: hci5: command 0x0419 tx timeout
[   89.422122][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'.
[   89.820343][ T5472] device hsr_slave_0 left promiscuous mode
[   89.832665][ T5965] IPVS: fo: FWM 3 0x00000003 - no destination available
[   89.835232][    C0] IPVS: fo: FWM 3 0x00000003 - no destination available
[   89.857332][ T5472] device hsr_slave_1 left promiscuous mode
[   89.934404][ T5472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.935828][ T5472] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.937992][ T5472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.939701][ T5472] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.942811][ T5472] device bridge_slave_1 left promiscuous mode
[   89.945262][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.974461][ T5472] device bridge_slave_0 left promiscuous mode
[   89.976350][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.104045][ T5472] device veth1_macvtap left promiscuous mode
[   90.105461][ T5472] device veth0_macvtap left promiscuous mode
[   90.106515][ T5472] device veth1_vlan left promiscuous mode
[   90.107604][ T5472] device veth0_vlan left promiscuous mode
[   90.188398][ T5472] bond1 (unregistering): (slave bridge1): Releasing backup interface
[   90.190020][ T5472] device bridge1 left promiscuous mode
[   93.465509][ T5472] bond1 (unregistering): Released all slaves
[   93.743253][   T27] audit: type=1326 audit(93.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.0.433" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x0
[   94.530334][ T6024] binder: 6022:6024 tried to acquire reference to desc 0, got 1 instead
[   94.536964][ T4381] binder: release 6022:6024 transaction 50 out, still active
[   94.538312][ T4381] binder: undelivered TRANSACTION_COMPLETE
[   94.551906][ T4381] binder: send failed reply for transaction 50, target dead
[   94.675297][ T6030] futex_wake_op: syz.2.440 tries to shift op by 144; fix this program
[   94.928510][ T6036] loop2: detected capacity change from 0 to 40427
[   94.932925][ T6036] F2FS-fs (loop2): Invalid log_blocksize (2060), supports only 12
[   94.937380][ T6036] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   94.940335][ T6036] F2FS-fs (loop2): invalid crc value
[   94.942225][ T6036] F2FS-fs (loop2): invalid crc value
[   94.943354][ T6036] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[   97.035554][ T5472] team0 (unregistering): Port device team_slave_1 removed
[   97.527265][ T5472] team0 (unregistering): Port device team_slave_0 removed
[   97.777557][ T5472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.962527][ T6070] loop0: detected capacity change from 0 to 512
[   97.969900][ T6070] EXT4-fs: inline encryption not supported
[   97.976978][ T6070] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.451: inode #1: comm syz.0.451: iget: illegal inode #
[   97.980808][ T6070] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.451: error while reading EA inode 1 err=-117
[   97.986741][ T6070] EXT4-fs (loop0): 1 orphan inode deleted
[   97.987784][ T6070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   98.043809][ T6070] loop0: detected capacity change from 512 to 0
[   98.045456][ T5472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.047762][ T6070] ext4: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿ01777777777777777777777ž®·¾åct±]òBð+Åvr”QJÏ_+�³;žF;Ð5}¸Ûùõœ»ÅkÖ¶%FZo’ò'É!$1@Ç«ñ•éó|nÓ7Ñá!q»Edzê0Øæép'
[   98.061123][ T6070] syz.0.451: attempt to access beyond end of device
[   98.061123][ T6070] loop0: rw=14337, sector=510, nr_sectors = 2 limit=0
[   98.063488][ T6070] Buffer I/O error on dev loop0, logical block 255, lost sync page write
[   98.066589][ T6070] EXT4-fs error (device loop0): ext4_xattr_block_set:2115: inode #12: block 255: comm syz.0.451: IO error syncing itable block
[   98.069014][ T6070] syz.0.451: attempt to access beyond end of device
[   98.069014][ T6070] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[   98.071325][ T6070] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   98.072746][ T6070] EXT4-fs (loop0): I/O error while writing superblock
[   98.074304][ T6070] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   98.076900][ T6070] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.451: Error while async write back metadata
[   98.079232][ T6070] syz.0.451: attempt to access beyond end of device
[   98.079232][ T6070] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[   98.081547][ T6070] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   98.083069][ T6070] EXT4-fs (loop0): I/O error while writing superblock
[   98.084437][ T6070] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.451: Error while async write back metadata
[   98.086672][ T6070] syz.0.451: attempt to access beyond end of device
[   98.086672][ T6070] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[   98.089091][ T6070] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   98.091565][ T6070] EXT4-fs (loop0): I/O error while writing superblock
[   98.092753][ T6070] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.451: Error while async write back metadata
[   98.095808][ T6070] syz.0.451: attempt to access beyond end of device
[   98.095808][ T6070] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[   98.097983][ T6070] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   98.099449][ T6070] EXT4-fs (loop0): I/O error while writing superblock
[   98.100659][ T6070] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.451: Error while async write back metadata
[   98.102929][ T6070] syz.0.451: attempt to access beyond end of device
[   98.102929][ T6070] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[   98.105388][ T6070] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   98.106823][ T6070] EXT4-fs (loop0): I/O error while writing superblock
[   98.107899][ T6070] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.451: Error while async write back metadata
[   98.109926][ T6070] syz.0.451: attempt to access beyond end of device
[   98.109926][ T6070] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[   98.112052][ T6070] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   98.114613][ T6070] EXT4-fs (loop0): I/O error while writing superblock
[   98.116002][ T6070] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.451: Error while async write back metadata
[   98.118065][ T6070] syz.0.451: attempt to access beyond end of device
[   98.118065][ T6070] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[   98.120266][ T6070] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   98.121602][ T6070] EXT4-fs (loop0): I/O error while writing superblock
[   98.123059][ T6070] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.451: invalid indirect mapped block 234881024 (level 0)
[   98.125673][ T6070] syz.0.451: attempt to access beyond end of device
[   98.125673][ T6070] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[   98.127726][ T6070] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   98.129088][ T6070] EXT4-fs (loop0): I/O error while writing superblock
[   98.130251][ T6070] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.451: Error while async write back metadata
[   98.132319][ T6070] syz.0.451: attempt to access beyond end of device
[   98.132319][ T6070] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[   98.139019][ T6070] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   98.140441][ T6070] EXT4-fs (loop0): I/O error while writing superblock
[   98.141818][ T6070] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.451: Error while async write back metadata
[   99.286822][ T6081] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[   99.288102][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   99.290134][ T6081] vhci_hcd vhci_hcd.0: Device attached
[   99.292759][ T6084] loop0: detected capacity change from 0 to 256
[   99.326655][ T6084] FAT-fs (loop0): Directory bread(block 64) failed
[   99.328019][ T6084] FAT-fs (loop0): Directory bread(block 65) failed
[   99.329432][ T6084] FAT-fs (loop0): Directory bread(block 66) failed
[   99.330809][ T6084] FAT-fs (loop0): Directory bread(block 67) failed
[   99.332325][ T6084] FAT-fs (loop0): Directory bread(block 68) failed
[   99.333679][ T6084] FAT-fs (loop0): Directory bread(block 69) failed
[   99.335150][ T6084] FAT-fs (loop0): Directory bread(block 70) failed
[   99.336389][ T6084] FAT-fs (loop0): Directory bread(block 71) failed
[   99.337762][ T6084] FAT-fs (loop0): Directory bread(block 72) failed
[   99.339084][ T6084] FAT-fs (loop0): Directory bread(block 73) failed
[  100.075151][ T6082] vhci_hcd: connection closed
[  100.077664][ T4979] vhci_hcd: stop threads
[  100.080422][ T4979] vhci_hcd: release socket
[  100.081393][ T4979] vhci_hcd: disconnect device
[  100.444841][ T5472] bond0 (unregistering): Released all slaves
[  100.632892][ T6086] loop0: detected capacity change from 0 to 4096
[  100.648379][ T6086] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  100.767345][ T5990] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  100.838361][ T6057] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  100.882584][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'.
[  100.927214][ T6096] FAULT_INJECTION: forcing a failure.
[  100.927214][ T6096] name failslab, interval 1, probability 0, space 0, times 0
[  100.929620][ T6096] CPU: 0 PID: 6096 Comm: syz.2.459 Not tainted syzkaller #0
[  100.931039][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  100.932843][ T6096] Call trace:
[  100.933472][ T6096]  dump_backtrace+0x1c4/0x1f0
[  100.934375][ T6096]  show_stack+0x2c/0x3c
[  100.935178][ T6096]  __dump_stack+0x30/0x40
[  100.936016][ T6096]  dump_stack_lvl+0xf4/0x15c
[  100.936883][ T6096]  dump_stack+0x1c/0x5c
[  100.937648][ T6096]  should_fail_ex+0x3cc/0x524
[  100.938535][ T6096]  __should_failslab+0xc0/0x11c
[  100.939470][ T6096]  should_failslab+0x10/0x28
[  100.940322][ T6096]  kmem_cache_alloc_node+0x8c/0x344
[  100.941287][ T6096]  __alloc_skb+0x128/0x728
[  100.942118][ T6096]  cfg80211_del_sta_sinfo+0x1e0/0x5c0
[  100.943105][ T6096]  __sta_info_destroy_part2+0x2d0/0x3c0
[  100.944118][ T6096]  __sta_info_flush+0x380/0x438
[  100.945025][ T6096]  ieee80211_ibss_disconnect+0x1a0/0x5d8
[  100.946004][ T6096]  ieee80211_ibss_leave+0x2c/0x114
[  100.946929][ T6096]  ieee80211_leave_ibss+0x20/0x30
[  100.947857][ T6096]  __cfg80211_leave_ibss+0x1d0/0x4b0
[  100.948956][ T6096]  cfg80211_ibss_wext_siwessid+0x124/0x338
[  100.950175][ T6096]  __cfg80211_wext_siwessid+0xe0/0x13c
[  100.951351][ T6096]  ioctl_standard_iw_point+0x7b4/0xcf8
[  100.952486][ T6096]  ioctl_standard_call+0xb8/0x24c
[  100.953536][ T6096]  wext_ioctl_dispatch+0x168/0x3d0
[  100.954549][ T6096]  wext_handle_ioctl+0x1ac/0x370
[  100.955551][ T6096]  sock_ioctl+0x138/0x828
[  100.956421][ T6096]  __arm64_sys_ioctl+0x14c/0x1c8
[  100.957418][ T6096]  invoke_syscall+0x98/0x290
[  100.958386][ T6096]  el0_svc_common+0x13c/0x258
[  100.959380][ T6096]  do_el0_svc+0x5c/0x134
[  100.960289][ T6096]  el0_svc+0x58/0x128
[  100.961115][ T6096]  el0t_64_sync_handler+0x84/0xf0
[  100.962139][ T6096]  el0t_64_sync+0x18c/0x190
[  101.005518][ T6092] 9pnet: p9_errstr2errno: server reported unknown error 18446744073
[  101.396218][ T4333] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  101.923921][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.464'.
[  103.243892][ T6190] device syzkaller0 entered promiscuous mode
[  103.409283][ T6196] device bridge1 entered promiscuous mode
[  103.412670][ T6196] team0: Port device bridge1 added
[  103.426425][ T6196] bridge0: port 3(team0) entered blocking state
[  103.434091][ T6196] bridge0: port 3(team0) entered disabled state
[  103.437466][ T6196] device team0 entered promiscuous mode
[  103.438856][ T6196] device team_slave_0 entered promiscuous mode
[  103.440095][ T6196] device team_slave_1 entered promiscuous mode
[  103.441869][ T6196] bridge0: port 3(team0) entered blocking state
[  103.443046][ T6196] bridge0: port 3(team0) entered forwarding state
[  104.205974][ T4608] wlan1: Trigger new scan to find an IBSS to join
[  104.807573][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.487'.
[  104.863093][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.5.487'.
[  109.054034][ T4608] wlan1: Trigger new scan to find an IBSS to join
[  109.405002][ T6346] loop5: detected capacity change from 0 to 256
[  109.441350][ T6346] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.318362][ T6362] loop2: detected capacity change from 0 to 32768
[  110.745632][   T92] wlan1: Creating new IBSS network, BSSID 16:90:18:1d:11:89
[  110.897035][ T6376] loop5: detected capacity change from 0 to 2048
[  111.430078][ T6376] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  111.461094][ T6376] fs-verity: sha512 using implementation "sha512-ce"
[  111.688750][ T6383] MPTCP: kernel_bind error, err=-99
[  111.778982][ T6389] netlink: 'syz.0.535': attribute type 10 has an invalid length.
[  111.900101][ T5720] EXT4-fs (loop5): unmounting filesystem.
[  111.992296][ T6389] team0 (unregistering): Port device team_slave_0 removed
[  112.007451][ T6389] team0 (unregistering): Port device team_slave_1 removed
[  112.018703][ T6389] team0 (unregistering): Port device netdevsim0 removed
[  112.805435][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'.
[  113.154677][ T6437] loop0: detected capacity change from 0 to 4096
[  113.188982][ T6437] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  113.190879][ T6437] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[  113.195793][ T6437] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  113.196955][ T6437]  loop0:
[  113.361084][ T6458] binder: 6457:6458 tried to acquire reference to desc 0, got 1 instead
[  113.362985][ T6458] binder: 6457:6458 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  113.365787][ T6458] binder: 6458 RLIMIT_NICE not set
[  113.707746][ T6330] binder: undelivered TRANSACTION_COMPLETE
[  113.724412][ T4376] binder: undelivered transaction 61, process died.
[  113.917752][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.557'.
[  114.407934][ T6504] device syzkaller0 entered promiscuous mode
[  114.765279][ T6515] binder: BINDER_SET_CONTEXT_MGR already set
[  114.766461][ T6515] binder: 6514:6515 ioctl 4018620d 20000040 returned -16
[  114.769025][ T6515] binder: 6514:6515 got transaction to invalid handle, 1
[  114.770304][ T6515] binder: 6515:6514 cannot find target node
[  114.771379][ T6515] binder: 6514:6515 transaction call to 0:0 failed 64/29201/-22, size 0-24 line 3062
[  114.774281][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  114.811093][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'.
[  114.968041][ T6537] VFS: Mount too revealing
[  115.173757][ T4377] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  115.392573][ T4377] usb 1-1: config 1 has an invalid descriptor of length 40, skipping remainder of the config
[  115.607853][ T4377] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  115.614248][ T4377] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40
[  115.615894][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.617375][ T4377] usb 1-1: Product: syz
[  115.618132][ T4377] usb 1-1: Manufacturer: syz
[  115.619023][ T4377] usb 1-1: SerialNumber: syz
[  115.785587][ T6578] loop5: detected capacity change from 0 to 256
[  115.833371][ T4377] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor
[  115.837394][ T4377] usb 1-1: 1:1 : format type 5 is not supported yet
[  115.842955][ T4377] usb 1-1: 0:2 : does not exist
[  115.884932][ T4377] usb 1-1: USB disconnect, device number 3
[  116.693803][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.808825][ T6613] device syzkaller0 entered promiscuous mode
[  117.070717][ T6632] netlink: 'syz.1.582': attribute type 1 has an invalid length.
[  117.078086][ T6632] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.133467][ T6626] bond2: (slave veth0_to_bond): making interface the new active one
[  117.148635][ T6626] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  117.150497][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  117.157435][ T6645] device bond2 entered promiscuous mode
[  117.158476][ T6645] device veth0_to_bond entered promiscuous mode
[  117.226231][ T6626] device macvlan2 entered promiscuous mode
[  117.231510][ T6626] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  117.900712][ T6626] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  117.917802][ T6678] loop0: detected capacity change from 0 to 1024
[  118.434498][ T6696] 9pnet_fd: Insufficient options for proto=fd
[  118.549184][ T6700] loop2: detected capacity change from 0 to 128
[  118.687911][ T6710] device wlan0 entered promiscuous mode
[  118.843904][ T6718] loop2: detected capacity change from 0 to 512
[  120.614448][ T6718] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2
[  120.698321][ T6724] netlink: 'syz.1.604': attribute type 4 has an invalid length.
[  120.699735][ T6723] process 'syz.0.603' launched '/dev/fd/-1' with NULL argv: empty string added
[  120.817662][ T6724] netlink: 'syz.1.604': attribute type 4 has an invalid length.
[  120.902423][ T6727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.809595][ T6747] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  121.851298][ T4335] Bluetooth: Unknown BR/EDR signaling command 0x11
[  121.852421][ T4335] Bluetooth: Wrong link type (-22)
[  121.861726][ T4335] Bluetooth: hci5: hardware error 0x1f
[  122.096885][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'.
[  122.209145][ T6783] bridge0: port 3(syz_tun) entered blocking state
[  122.210473][ T6783] bridge0: port 3(syz_tun) entered disabled state
[  122.212984][ T6783] device syz_tun entered promiscuous mode
[  122.267388][ T6786] loop2: detected capacity change from 0 to 256
[  122.302008][ T6787] Injecting memory failure for pfn 0x135610 at process virtual address 0x20001000
[  122.313895][ T6787] Memory failure: 0x135610: recovery action for clean unevictable LRU page: Recovered
[  122.320671][ T6787] Injecting memory failure for pfn 0x144857 at process virtual address 0x20002000
[  122.327306][ T6787] Memory failure: 0x144857: recovery action for clean unevictable LRU page: Recovered
[  122.328959][ T6787] Injecting memory failure for pfn 0x12fdb5 at process virtual address 0x20003000
[  122.330611][ T6787] Memory failure: 0x12fdb5: recovery action for clean unevictable LRU page: Recovered
[  122.787794][ T4344] Bluetooth: hci5: unexpected event for opcode 0x1003
[  122.789205][ T4344] Bluetooth: hci5: unexpected event for opcode 0x2003
[  122.791696][ T4344] Bluetooth: hci5: unexpected event for opcode 0x2060
[  122.847975][ T6810] Bluetooth: ISO socket layer initialized
[  122.857925][ T6810] Bluetooth: MGMT ver 1.22
[  122.955063][ T6820] loop2: detected capacity change from 0 to 1024
[  122.988365][ T6820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  123.047926][ T4332] EXT4-fs (loop2): unmounting filesystem.
[  123.149759][ T6831] loop2: detected capacity change from 0 to 4096
[  123.264673][ T6831] ext4: Unknown parameter 'noacl'
[  123.369346][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.377303][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.433281][ T6849] bridge0: port 3(syz_tun) entered blocking state
[  123.435509][ T6849] bridge0: port 3(syz_tun) entered disabled state
[  123.437256][ T6849] device syz_tun entered promiscuous mode
[  123.438442][ T6849] bridge0: port 3(syz_tun) entered blocking state
[  123.439622][ T6849] bridge0: port 3(syz_tun) entered listening state
[  123.443801][    C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost
[  123.446286][    C0] bridge0: topology change detected, propagating
[  123.567771][ T6858] device syzkaller0 entered promiscuous mode
[  124.093775][ T4335] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  124.228057][ T6883] loop2: detected capacity change from 0 to 4096
[  124.255452][ T6883] binder: 6880:6883 tried to acquire reference to desc 0, got 1 instead
[  124.260360][ T6883] binder: 6880:6883 BC_INCREFS_DONE u0000000000000001 no match
[  124.272987][ T4507] binder: release 6880:6883 transaction 69 out, still active
[  124.274692][ T4507] binder: undelivered TRANSACTION_COMPLETE
[  124.294752][ T4507] binder: send failed reply for transaction 69, target dead
[  125.280061][ T6922] bridge0: port 4(dummy0) entered blocking state
[  125.281369][ T6922] bridge0: port 4(dummy0) entered disabled state
[  125.283179][ T6922] device dummy0 entered promiscuous mode
[  125.427930][ T6933] loop2: detected capacity change from 0 to 1024
[  125.480345][ T6933] hfsplus: request for non-existent node 33554434 in B*Tree
[  125.484149][ T6933] hfsplus: request for non-existent node 33554434 in B*Tree
[  125.487425][ T6933] hfsplus: request for non-existent node 33554434 in B*Tree
[  125.490860][ T6933] hfsplus: request for non-existent node 33554434 in B*Tree
[  125.499593][ T6933] hfsplus: request for non-existent node 33554434 in B*Tree
[  125.500973][ T6933] hfsplus: request for non-existent node 33554434 in B*Tree
[  125.518435][ T6937] loop0: detected capacity change from 0 to 512
[  125.550811][ T6937] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  125.588154][ T4335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200'
[  125.590145][ T4335] CPU: 1 PID: 4335 Comm: kworker/u5:3 Not tainted syzkaller #0
[  125.591490][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  125.593624][ T4335] Workqueue: hci1 hci_rx_work
[  125.594605][ T4335] Call trace:
[  125.595254][ T4335]  dump_backtrace+0x1c4/0x1f0
[  125.596259][ T4335]  show_stack+0x2c/0x3c
[  125.597101][ T4335]  __dump_stack+0x30/0x40
[  125.597949][ T4335]  dump_stack_lvl+0xf4/0x15c
[  125.598836][ T4335]  dump_stack+0x1c/0x5c
[  125.599667][ T4335]  sysfs_create_dir_ns+0x244/0x264
[  125.600660][ T4335]  kobject_add_internal+0x5a8/0xb18
[  125.601649][ T4335]  kobject_add+0x144/0x20c
[  125.602506][ T4335]  device_add+0x3dc/0xe4c
[  125.603333][ T4335]  hci_conn_add_sysfs+0xb8/0x1bc
[  125.604243][ T4335]  hci_sync_conn_complete_evt+0x5f8/0x944
[  125.605332][ T4335]  hci_event_packet+0x698/0xe60
[  125.606370][ T4335]  hci_rx_work+0x310/0xa70
[  125.607208][ T4335]  process_one_work+0x7e4/0x13bc
[  125.608141][ T4335]  worker_thread+0x8cc/0xfe8
[  125.608973][ T4335]  kthread+0x254/0x2e0
[  125.609723][ T4335]  ret_from_fork+0x10/0x20
[  125.611402][ T4335] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory.
[  125.614335][ T4335] Bluetooth: hci1: failed to register connection device
[  125.615480][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  126.304360][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  126.306006][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  126.514560][ T6977] using random self ethernet address
[  126.516299][ T6977] using random host ethernet address
[  126.526177][ T6977] using random self ethernet address
[  126.527459][ T6977] using random host ethernet address
[  127.694863][ T4335] Bluetooth: hci1: command 0x0409 tx timeout
[  128.299479][ T7000] sctp: [Deprecated]: syz.2.703 (pid 7000) Use of int in max_burst socket option.
[  128.299479][ T7000] Use struct sctp_assoc_value instead
[  131.924632][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'.
[  133.517053][ T7121] netlink: 'syz.2.740': attribute type 4 has an invalid length.
[  133.558468][ T7121] netlink: 'syz.2.740': attribute type 4 has an invalid length.
[  133.569200][ T7121] netlink: 'syz.2.740': attribute type 4 has an invalid length.
[  133.686077][   T27] audit: type=1326 audit(136.666:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  133.694275][   T27] audit: type=1326 audit(136.666:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  133.698093][   T27] audit: type=1326 audit(136.666:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  133.713764][   T27] audit: type=1326 audit(136.666:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  133.718505][   T27] audit: type=1326 audit(136.666:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  133.722789][   T27] audit: type=1326 audit(136.696:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  133.727340][   T27] audit: type=1326 audit(136.696:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  133.731618][   T27] audit: type=1326 audit(136.696:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  134.042461][   T27] audit: type=1326 audit(136.696:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  134.047046][   T27] audit: type=1326 audit(136.696:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.5.746" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8779368 code=0x7ffc0000
[  134.094942][ T7148] netlink: 'syz.1.749': attribute type 1 has an invalid length.
[  134.101903][ T7149] bond1: option mode: unable to set because the bond device has slaves
[  134.217702][ T7148] bond3: (slave gretap1): making interface the new active one
[  134.219609][ T7148] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  134.222963][ T7155] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  134.231745][ T7158] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  134.717796][ T7173] device wlan0 left promiscuous mode
[  134.728648][ T5557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  136.278497][ T7212] "syz.5.764" (7212) uses obsolete ecb(arc4) skcipher
[  137.036308][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'.
[  137.348462][ T7221] device ip6gre1 entered promiscuous mode
[  137.720792][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.725616][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.744517][ T4507] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.796435][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.5.773'.
[  137.826644][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.5.773'.
[  137.833872][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.934502][ T7238] netlink: 'syz.0.777': attribute type 10 has an invalid length.
[  138.337075][ T7248] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  138.423906][ T7253] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  138.733694][    C0] bridge0: port 3(syz_tun) entered learning state
[  139.312264][ T7269] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  139.312264][ T7269] The task syz.5.782 (7269) triggered the difference, watch for misbehavior.
[  139.473825][ T4375] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  139.757293][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  139.759508][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  139.761317][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x70fb instead
[  139.763102][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd889 instead
[  139.765003][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  139.766706][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  139.768471][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  139.770241][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  139.772033][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  139.773940][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  139.775836][ T7292] jffs2: Further such events for this erase block will not be printed
[  139.778389][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  139.780198][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  139.781989][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x70fb instead
[  139.783800][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd889 instead
[  139.785504][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  139.787239][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  139.788993][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  139.790920][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  139.792862][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  139.794971][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  139.796805][ T7292] jffs2: Further such events for this erase block will not be printed
[  139.799521][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[  139.880136][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[  139.883611][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x70fb instead
[  139.885796][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xd889 instead
[  139.889638][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[  139.892116][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[  139.894564][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x70fb instead
[  139.897159][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xd889 instead
[  139.899721][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[  139.902149][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[  139.904592][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x70fb instead
[  139.906955][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xd889 instead
[  139.909695][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[  139.912220][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[  139.914511][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x70fb instead
[  139.916789][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xd889 instead
[  139.919621][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[  139.921921][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[  139.924376][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x70fb instead
[  139.926550][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xd889 instead
[  139.929021][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[  139.931591][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[  139.934057][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x70fb instead
[  139.938655][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xd889 instead
[  139.942528][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[  139.945153][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[  139.947747][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x70fb instead
[  139.950292][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xd889 instead
[  139.952648][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[  139.955177][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[  139.957859][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x70fb instead
[  139.960296][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xd889 instead
[  139.962888][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[  139.965489][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[  139.967961][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x70fb instead
[  139.970451][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xd889 instead
[  139.973027][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[  139.975560][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[  139.977990][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x70fb instead
[  139.980458][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xd889 instead
[  139.982956][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[  139.985470][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[  139.987927][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x70fb instead
[  139.990547][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xd889 instead
[  139.994419][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[  139.997119][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[  139.999711][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x70fb instead
[  140.002255][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xd889 instead
[  140.004898][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[  140.007438][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[  140.009803][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x70fb instead
[  140.012439][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xd889 instead
[  140.015034][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[  140.017436][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[  140.019753][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x70fb instead
[  140.022236][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xd889 instead
[  140.024919][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[  140.027557][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[  140.030146][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x70fb instead
[  140.032624][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xd889 instead
[  140.035281][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[  140.037828][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[  140.040356][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x70fb instead
[  140.043061][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xd889 instead
[  140.045554][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[  140.048058][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[  140.050552][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x70fb instead
[  140.052937][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xd889 instead
[  140.055459][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[  140.057287][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[  140.059203][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x70fb instead
[  140.061184][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xd889 instead
[  140.063411][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[  140.065430][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[  140.067647][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x70fb instead
[  140.069589][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xd889 instead
[  140.071582][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[  140.073870][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[  140.075932][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x70fb instead
[  140.078020][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xd889 instead
[  140.080135][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[  140.081941][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[  140.084246][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x70fb instead
[  140.086353][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xd889 instead
[  140.088316][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  140.090228][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  140.092320][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x70fb instead
[  140.095281][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xd889 instead
[  140.097389][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  140.099335][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  140.101457][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x70fb instead
[  140.103509][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xd889 instead
[  140.105895][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  140.107633][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  140.109608][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x70fb instead
[  140.111524][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xd889 instead
[  140.113511][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  140.115717][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  140.117521][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x70fb instead
[  140.119631][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xd889 instead
[  140.121456][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  140.123552][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  140.125628][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x70fb instead
[  140.127643][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xd889 instead
[  140.129527][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  140.131488][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  140.133683][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x70fb instead
[  140.135620][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xd889 instead
[  140.137635][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  140.139772][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  140.142023][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x70fb instead
[  140.145492][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xd889 instead
[  140.147388][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  140.149530][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  140.151450][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x70fb instead
[  140.153577][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xd889 instead
[  140.155868][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  140.157726][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  140.159845][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x70fb instead
[  140.161729][ T7292] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xd889 instead
[  140.163873][ T7292] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  140.165643][ T7292] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  140.502343][ T7316] loop0: detected capacity change from 0 to 512
[  140.520910][ T7316] EXT4-fs: Ignoring removed nobh option
[  140.579697][ T7316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  141.127498][ T4609] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  141.562610][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  141.613731][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.762446][ T7337] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003
[  142.216763][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  142.219285][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  142.221246][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  142.223534][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  142.225454][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  144.904956][ T7371] raw_sendmsg: syz.4.815 forgot to set AF_INET. Fix it!
[  145.097524][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.819'.
[  145.708375][   T27] kauditd_printk_skb: 54 callbacks suppressed
[  145.708390][   T27] audit: type=1326 audit(148.686:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x7ffc0000
[  145.714245][   T27] audit: type=1326 audit(148.686:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x7ffc0000
[  145.719309][   T27] audit: type=1326 audit(148.686:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x7ffc0000
[  145.723828][   T27] audit: type=1326 audit(148.686:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff95f79368 code=0x7ffc0000
[  145.728601][   T27] audit: type=1326 audit(148.686:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x7ffc0000
[  145.733940][   T27] audit: type=1326 audit(148.686:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x7ffc0000
[  145.739010][   T27] audit: type=1326 audit(148.686:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x7ffc0000
[  145.744041][   T27] audit: type=1326 audit(148.686:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff95f5c22c code=0x7ffc0000
[  145.748102][   T27] audit: type=1326 audit(148.686:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x7ffc0000
[  145.752322][   T27] audit: type=1326 audit(148.686:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.1.827" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x7ffc0000
[  145.819002][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  145.843407][ T7417] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  146.125551][ T7420] netlink: 'syz.0.830': attribute type 1 has an invalid length.
[  146.136326][ T7420] device bond2 entered promiscuous mode
[  146.137867][ T7420] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.155829][ T7420] bond2: (slave bridge1): making interface the new active one
[  146.157470][ T7420] device bridge1 entered promiscuous mode
[  146.159612][ T7420] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  146.161546][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  147.707502][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'.
[  148.363156][ T7528] netlink: 48 bytes leftover after parsing attributes in process `syz.5.847'.
[  148.371774][ T7528] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.847'.
[  148.587184][ T7550] Core dump to core aborted: cannot preserve file permissions
[  149.001717][ T7558] loop0: detected capacity change from 0 to 2048
[  149.450486][ T7558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  149.541965][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  149.623773][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  151.320044][ T7629] device vlan2 entered promiscuous mode
[  151.326657][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'.
[  151.332471][ T7629] device hsr_slave_0 left promiscuous mode
[  151.838243][ T7639] loop0: detected capacity change from 0 to 4096
[  151.844793][ T7639] EXT4-fs: Ignoring removed mblk_io_submit option
[  151.846149][ T7639] EXT4-fs: Ignoring removed orlov option
[  151.862880][ T7639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  151.881755][ T7635] device geneve2 entered promiscuous mode
[  151.903356][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  151.960083][ T7651] loop0: detected capacity change from 0 to 1024
[  151.965737][ T7651] EXT4-fs: Ignoring removed mblk_io_submit option
[  152.005978][ T7651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  152.037116][ T7651] FAULT_INJECTION: forcing a failure.
[  152.037116][ T7651] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  152.040388][ T7651] CPU: 1 PID: 7651 Comm: syz.0.879 Not tainted syzkaller #0
[  152.041794][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  152.043836][ T7651] Call trace:
[  152.044493][ T7651]  dump_backtrace+0x1c4/0x1f0
[  152.045416][ T7651]  show_stack+0x2c/0x3c
[  152.046242][ T7651]  __dump_stack+0x30/0x40
[  152.046405][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'.
[  152.047096][ T7651]  dump_stack_lvl+0xf4/0x15c
[  152.048705][ T7657] bond1: option mode: unable to set because the bond device has slaves
[  152.049431][ T7651]  dump_stack+0x1c/0x5c
[  152.051766][ T7651]  should_fail_ex+0x3cc/0x524
[  152.052624][ T7651]  should_fail_alloc_page+0x74/0xb8
[  152.052821][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'.
[  152.053532][ T7651]  prepare_alloc_pages+0x1b8/0x4f0
[  152.056109][ T7651]  __alloc_pages+0x134/0x544
[  152.056938][ T7651]  __folio_alloc+0x1c/0x44
[  152.056967][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'.
[  152.057689][ T7651]  vma_alloc_folio+0x37c/0x8ac
[  152.057709][ T7651]  alloc_zeroed_user_highpage_movable+0x78/0x8c
[  152.060955][ T7651]  handle_mm_fault+0x1788/0x3018
[  152.061788][ T7651]  do_page_fault+0x310/0x99c
[  152.062607][ T7651]  do_translation_fault+0x94/0xc8
[  152.063547][ T7651]  do_mem_abort+0x70/0x198
[  152.064361][ T7651]  el0_da+0x70/0x144
[  152.065061][ T7651]  el0t_64_sync_handler+0x90/0xf0
[  152.065953][ T7651]  el0t_64_sync+0x18c/0x190
[  152.374352][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.377935][ T7651] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  152.381031][ T7657] bond1: (slave bond0): Enslaving as an active interface with an up link
[  152.383571][ T7659] netlink: 'syz.1.882': attribute type 10 has an invalid length.
[  152.441965][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  152.828248][ T7678] tipc: Failed to remove unknown binding: 66,0,0/0:820334481/820334483
[  152.830256][ T7672] tipc: Failed to remove unknown binding: 66,0,0/0:2212189771/2212189772
[  152.837308][ T7672] tipc: Failed to remove unknown binding: 66,0,0/0:2212189771/2212189772
[  152.940421][ T7686] netlink: 'syz.1.891': attribute type 1 has an invalid length.
[  152.969207][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.894'.
[  152.979076][ T7686] device bridge0 entered promiscuous mode
[  152.981433][ T7686] bond4: (slave bridge0): making interface the new active one
[  152.982999][ T7686] bond4: (slave bridge0): Enslaving as an active interface with an up link
[  152.988208][ T7695] device bond1 entered promiscuous mode
[  153.010998][ T7699] xt_TPROXY: Can be used only with -p tcp or -p udp
[  153.815738][ T7699] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  154.093740][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  154.094938][    C0] bridge0: topology change detected, propagating
[  154.098215][    C1] vxcan1: j1939_tp_rxtimer: 0x0000000055e8f0f1: rx timeout, send abort
[  154.388064][ T7712] netlink: 'syz.0.899': attribute type 1 has an invalid length.
[  154.424778][ T7712] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.485203][ T7716] bond3: (slave dummy0): making interface the new active one
[  154.488087][ T7716] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  154.489696][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  154.599855][    C1] vxcan1: j1939_tp_rxtimer: 0x0000000055e8f0f1: abort rx timeout. Force session deactivation
[  154.862517][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'.
[  154.864836][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.872980][ T7736] netlink: 'syz.2.906': attribute type 1 has an invalid length.
[  154.975169][ T7734] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.096249][ T7741] smc: net device team0 applied user defined pnetid SYZ2
[  155.216270][ T7744] smc: removing net device team0 with user defined pnetid SYZ2
[  155.236032][ T7744] team0 (unregistering): Port device team_slave_0 removed
[  155.254621][ T7744] team0 (unregistering): Port device team_slave_1 removed
[  155.260087][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.261409][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.279301][ T7744] team0 (unregistering): Port device bridge0 removed
[  155.339609][ T7746] bridge0: port 4(macvlan3) entered blocking state
[  155.342102][ T7746] bridge0: port 4(macvlan3) entered disabled state
[  155.349167][ T7746] device macvlan3 entered promiscuous mode
[  155.353813][ T7746] bridge0: port 4(macvlan3) entered blocking state
[  155.355092][ T7746] bridge0: port 4(macvlan3) entered listening state
[  155.829732][ T7743] ipt_CLUSTERIP: Please specify destination IP
[  155.858944][ T7756] Injecting memory failure for pfn 0x14738f at process virtual address 0x20002000
[  155.862986][ T7756] Memory failure: 0x14738f: recovery action for dirty LRU page: Recovered
[  155.868891][ T7756] Injecting memory failure for pfn 0x147390 at process virtual address 0x20003000
[  155.873124][ T7756] Memory failure: 0x147390: recovery action for dirty LRU page: Recovered
[  155.878107][ T7756] Injecting memory failure for pfn 0x147391 at process virtual address 0x20004000
[  155.881816][ T7756] Memory failure: 0x147391: recovery action for dirty LRU page: Recovered
[  155.887577][ T7756] Injecting memory failure for pfn 0x147392 at process virtual address 0x20005000
[  155.891853][ T7756] Memory failure: 0x147392: recovery action for dirty LRU page: Recovered
[  156.814785][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.925'.
[  158.280084][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.929'.
[  158.386298][ T7811] loop0: detected capacity change from 0 to 128
[  158.466912][ T7811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  158.733907][ T4335] Bluetooth: hci2: command 0x0406 tx timeout
[  158.735822][ T4335] Bluetooth: hci1: command 0x0406 tx timeout
[  159.354712][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  159.566967][ T7825] loop0: detected capacity change from 0 to 128
[  159.587414][ T7825] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  159.608876][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  159.652066][   T27] kauditd_printk_skb: 66 callbacks suppressed
[  159.652076][   T27] audit: type=1326 audit(176.625:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.1.934" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f79368 code=0x0
[  160.687172][ T7855] loop0: detected capacity change from 0 to 128
[  160.690512][ T7855] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  161.187286][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  161.257386][ T7875] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  162.312132][ T7906] netlink: 'syz.5.958': attribute type 1 has an invalid length.
[  162.325194][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.958'.
[  162.327321][ T7906] device bond1 entered promiscuous mode
[  162.328660][ T7906] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.338094][ T7906] device bridge2 entered promiscuous mode
[  162.346447][ T7906] bond1: (slave bridge2): making interface the new active one
[  162.348597][ T7906] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  162.353469][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'.
[  162.368294][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  162.402143][ T7909] bond4: (slave veth3): Enslaving as an active interface with an up link
[  162.943575][ T7925] kAFS: No cell specified
[  162.957559][ T7925] netlink: 32 bytes leftover after parsing attributes in process `syz.4.964'.
[  164.972784][ T7946] binder: 7940:7946 IncRefs 0 refcount change on invalid ref 0 ret -22
[  164.983760][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.989250][ T7946] binder: 7940:7946 got transaction to invalid handle, 1
[  164.990868][ T7946] binder: 7946:7940 cannot find target node
[  164.997284][ T7946] binder: 7940:7946 transaction call to 0:0 failed 78/29201/-22, size 72-24 line 3062
[  165.000040][ T7946] binder: 7940:7946 got transaction to invalid handle, 3
[  165.005240][ T7946] binder: 7946:7940 cannot find target node
[  165.006500][ T7946] binder: 7940:7946 transaction async to 0:0 failed 79/29201/-22, size 0-0 line 3062
[  165.054346][  T113] binder: undelivered TRANSACTION_ERROR: 29201
[  165.055763][  T113] binder: undelivered TRANSACTION_ERROR: 29201
[  165.198597][ T7964] device bridge0 entered promiscuous mode
[  166.413148][ T7988] loop0: detected capacity change from 0 to 256
[  166.432129][ T7988] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  166.449897][ T7988] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00)
[  166.452094][ T7988] FAT-fs (loop0): Filesystem has been set read-only
[  166.485214][ T7996] fuse: Bad value for 'fd'
[  166.490991][ T7988] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00)
[  166.610470][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.990'.
[  166.617735][ T8013] device bond2 entered promiscuous mode
[  166.619040][ T8013] 8021q: adding VLAN 0 to HW filter on device bond2
[  166.683095][ T8013] device erspan1 entered promiscuous mode
[  166.692575][ T8013] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  166.697469][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  168.791995][ T8054] netlink: 'syz.1.1001': attribute type 1 has an invalid length.
[  169.081700][ T8054] 8021q: adding VLAN 0 to HW filter on device bond6
[  169.107144][ T8054] bond6: (slave gretap2): making interface the new active one
[  169.110542][ T8054] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  169.123810][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  169.149459][ T8054] bond6: (slave veth3): Enslaving as an active interface with a down link
[  169.156401][ T8054] device veth0_virt_wifi entered promiscuous mode
[  169.175875][ T8054] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  170.106240][ T8076] UBIFS error (pid: 8076): cannot open "./file0", error -22
[  170.733820][    C1] bridge0: port 4(macvlan3) entered learning state
[  171.548921][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'.
[  171.589865][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'.
[  171.865315][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1014'.
[  174.685463][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  175.189237][ T8192] netlink: 'syz.4.1037': attribute type 1 has an invalid length.
[  175.212802][ T8192] 8021q: adding VLAN 0 to HW filter on device bond3
[  175.250402][ T8192] bond3: (slave gretap2): making interface the new active one
[  175.253805][ T8192] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  175.256074][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  177.851890][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1056'.
[  177.892639][ T8257] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  177.897094][ T8257] bond2: (slave ip_vti0): Error -95 calling set_mac_address
[  179.157288][ T8295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  179.163845][ T8295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  179.168436][ T8295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.172991][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'.
[  179.334354][ T8315] netlink: 'syz.5.1075': attribute type 2 has an invalid length.
[  180.334114][ T5557] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  180.347010][   T27] audit: type=1326 audit(197.325:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.0.1082" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x0
[  181.915558][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1087'.
[  182.174472][ T8358] HTB: quantum of class FFF10001 is small. Consider r2q change.
[  183.206211][ T8400] netlink: 'syz.0.1111': attribute type 12 has an invalid length.
[  184.039188][ T8432] fuse: Bad value for 'fd'
[  186.093664][    C1] bridge0: port 4(macvlan3) entered forwarding state
[  186.094848][    C1] bridge0: topology change detected, propagating
[  186.419948][ T8491] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  186.445405][ T8499] netlink: 'syz.0.1134': attribute type 1 has an invalid length.
[  186.927250][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1137'.
[  187.279798][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'.
[  187.386164][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  187.387468][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  187.486377][ T8541] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  188.821924][ T8577] device syzkaller0 left promiscuous mode
[  189.436722][ T4344] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  189.458097][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'.
[  190.275639][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1174'.
[  190.354335][ T8621] netlink: 'syz.5.1174': attribute type 5 has an invalid length.
[  190.356025][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1174'.
[  192.943886][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  192.946108][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  192.990499][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  192.992305][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  192.993973][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  192.997784][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  192.999835][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  193.001857][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  193.005045][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  193.007024][ T8677] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  193.015523][ T8681] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  193.627154][ T8693] netlink: 'syz.0.1197': attribute type 10 has an invalid length.
[  193.673508][ T8693] bridge0: port 4(macvlan3) entered disabled state
[  193.674903][ T8693] bridge0: port 3(syz_tun) entered disabled state
[  193.676159][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.678865][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.707607][ T8693] bridge0: port 4(macvlan3) entered blocking state
[  193.708927][ T8693] bridge0: port 4(macvlan3) entered listening state
[  193.710212][ T8693] bridge0: port 3(syz_tun) entered blocking state
[  193.711326][ T8693] bridge0: port 3(syz_tun) entered listening state
[  193.712485][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.713743][ T8693] bridge0: port 2(bridge_slave_1) entered listening state
[  193.714958][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.716220][ T8693] bridge0: port 1(bridge_slave_0) entered listening state
[  193.725824][ T8693] device bridge0 entered promiscuous mode
[  193.729780][ T8693] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  193.801522][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'.
[  193.803507][ T8694] device macvlan3 left promiscuous mode
[  193.805723][ T8694] bridge0: port 4(macvlan3) entered disabled state
[  193.834694][ T8694] device syz_tun left promiscuous mode
[  193.836084][ T8694] bridge0: port 3(syz_tun) entered disabled state
[  193.876710][ T8694] device bridge_slave_1 left promiscuous mode
[  193.878270][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.924587][ T8694] device bridge_slave_0 left promiscuous mode
[  193.925974][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.064997][ T8694] bond0: (slave bridge0): Releasing backup interface
[  194.187889][ T8701] tipc: Enabled bearer <udp:syz0>, priority 10
[  194.189475][ T8708] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.697972][ T8727] dns_resolver: Unsupported server list version (6)
[  194.969129][ T8729] fuse: Bad value for 'fd'
[  195.693826][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  196.026368][ T8760] netlink: 'syz.4.1219': attribute type 10 has an invalid length.
[  196.031633][ T8762] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1218'.
[  196.053588][ T8760] team0: Port device netdevsim0 added
[  196.905289][ T8798] cifs: Unknown parameter 'timeo'
[  196.998126][ T8800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1232'.
[  198.927140][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'.
[  198.952449][ T8843] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  198.954326][ T8843] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  198.956060][ T8843] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  198.957824][ T8843] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  198.962873][ T8843] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  198.980223][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1248'.
[  198.982544][ T8843] 8021q: adding VLAN 0 to HW filter on device bond4
[  199.387524][ T8856] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[  199.425478][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'.
[  200.013887][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  201.433824][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'.
[  201.439735][ T8923] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  201.441296][ T8923] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  201.442715][ T8923] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  201.444325][ T8923] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  201.450443][ T8923] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  201.467669][   T27] audit: type=1326 audit(218.445:150): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.0.1272" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x0
[  201.662987][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  201.677744][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  201.690729][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  201.731546][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  201.742410][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  201.744947][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  201.747380][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  202.883107][ T8994] netlink: 'syz.4.1292': attribute type 2 has an invalid length.
[  202.903122][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  203.480899][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'.
[  204.826789][ T9043] netlink: 'syz.4.1310': attribute type 1 has an invalid length.
[  204.990298][ T9043] bond5: (slave gretap3): making interface the new active one
[  204.992213][ T9043] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  204.995524][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'.
[  205.288257][ T9050] bridge0: port 3(syz_tun) entered disabled state
[  205.404226][ T9050] device syz_tun left promiscuous mode
[  205.406867][ T9050] bridge0: port 3(syz_tun) entered disabled state
[  205.762693][ T9043] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  206.010938][   T27] audit: type=1326 audit(222.985:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd79368 code=0x7ffc0000
[  206.018875][   T27] audit: type=1326 audit(222.985:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd79368 code=0x7ffc0000
[  206.027617][   T27] audit: type=1326 audit(223.005:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffabd5c22c code=0x7ffc0000
[  206.037213][   T27] audit: type=1326 audit(223.005:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd79368 code=0x7ffc0000
[  206.048414][   T27] audit: type=1326 audit(223.005:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd79368 code=0x7ffc0000
[  206.053148][   T27] audit: type=1326 audit(223.005:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffabd79368 code=0x7ffc0000
[  206.058396][   T27] audit: type=1326 audit(223.005:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd79368 code=0x7ffc0000
[  206.063611][   T27] audit: type=1326 audit(223.005:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabd79368 code=0x7ffc0000
[  206.071991][   T27] audit: type=1326 audit(223.005:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffabd79368 code=0x7ffc0000
[  207.082201][ T9111] device geneve2 entered promiscuous mode
[  207.111476][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'.
[  207.113019][ T9113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.555306][ T9113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.659050][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1336'.
[  209.077609][ T9168] net_ratelimit: 12954 callbacks suppressed
[  209.077621][ T9168] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  209.151873][   T27] kauditd_printk_skb: 29 callbacks suppressed
[  209.151882][   T27] audit: type=1326 audit(240.121:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[  209.161062][   T27] audit: type=1326 audit(240.141:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[  209.168370][   T27] audit: type=1326 audit(240.141:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[  209.172594][   T27] audit: type=1326 audit(240.141:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[  209.180987][   T27] audit: type=1326 audit(240.151:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[  209.196842][   T27] audit: type=1326 audit(240.151:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[  209.475585][   T27] audit: type=1326 audit(240.151:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[  209.702326][   T27] audit: type=1326 audit(240.151:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[  209.813418][   T27] audit: type=1326 audit(240.151:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9df5c22c code=0x7ffc0000
[  209.941072][   T27] audit: type=1326 audit(240.151:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9172 comm="syz.0.1348" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df79368 code=0x7ffc0000
[  211.316473][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'.
[  215.371714][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'.
[  215.788831][ T9273] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1379'.
[  216.152101][ T9275] device bridge0 entered promiscuous mode
[  216.685828][ T9288] netlink: 'syz.1.1384': attribute type 4 has an invalid length.
[  216.715069][ T9290] kAFS: No cell specified
[  216.722169][ T9290] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1386'.
[  216.733487][ T9288] netlink: 'syz.1.1384': attribute type 4 has an invalid length.
[  218.061091][ T9288] netlink: 'syz.1.1384': attribute type 4 has an invalid length.
[  218.512504][ T9313] bridge0: port 4(dummy0) entered blocking state
[  218.516864][ T9313] bridge0: port 4(dummy0) entered disabled state
[  218.518825][ T9313] device dummy0 entered promiscuous mode
[  218.520246][ T9313] bridge0: port 4(dummy0) entered blocking state
[  218.521512][ T9313] bridge0: port 4(dummy0) entered listening state
[  218.658178][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'.
[  219.011284][ T9334] device bridge0 left promiscuous mode
[  219.087038][ T9336] device bridge0 entered promiscuous mode
[  222.987449][ T9375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1407'.
[  224.041572][ T9387] bridge0: port 4(dummy0) entered blocking state
[  224.046262][ T9387] bridge0: port 4(dummy0) entered disabled state
[  224.048107][ T9387] device dummy0 entered promiscuous mode
[  224.057924][ T9387] bridge0: port 4(dummy0) entered blocking state
[  224.059148][ T9387] bridge0: port 4(dummy0) entered forwarding state
[  225.311715][ T9415] netlink: 'syz.4.1422': attribute type 4 has an invalid length.
[  225.386288][ T9415] netlink: 'syz.4.1422': attribute type 4 has an invalid length.
[  225.419372][ T9415] netlink: 'syz.4.1422': attribute type 4 has an invalid length.
[  226.072660][ T9440] bond3: (slave dummy0): Releasing active interface
[  226.110864][ T9440] bridge0: port 1(dummy0) entered blocking state
[  226.112364][ T9440] bridge0: port 1(dummy0) entered disabled state
[  226.115262][ T9440] device dummy0 entered promiscuous mode
[  228.404119][ T9480] netlink: 'syz.5.1437': attribute type 4 has an invalid length.
[  229.786314][ T9488] netlink: 'syz.5.1437': attribute type 4 has an invalid length.
[  229.862916][ T9480] netlink: 'syz.5.1437': attribute type 4 has an invalid length.
[  230.889288][ T9513] bridge0: port 1(dummy0) entered blocking state
[  230.890790][ T9513] bridge0: port 1(dummy0) entered disabled state
[  230.892331][ T9513] device dummy0 entered promiscuous mode
[  230.916548][ T9513] bridge0: port 1(dummy0) entered blocking state
[  230.917806][ T9513] bridge0: port 1(dummy0) entered forwarding state
[  231.272438][ T9518] "syz.4.1446" (9518) uses obsolete ecb(arc4) skcipher
[  234.103715][    C0] bridge0: port 4(dummy0) entered learning state
[  238.604451][ T4387] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  245.165877][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'.
[  245.204895][ T9765] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  246.053493][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1527'.
[  246.610301][ T9798] tipc: Started in network mode
[  246.611276][ T9798] tipc: Node identity 080211000001, cluster identity 4711
[  259.053758][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  261.406391][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  261.409152][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  261.410866][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  261.412428][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  261.414385][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  261.415786][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  261.912191][ T4344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  261.915682][ T4344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  261.917458][ T4344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  261.920406][ T4344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  261.921962][ T4344] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  261.923318][ T4344] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  263.453780][ T4339] Bluetooth: hci4: command 0x0409 tx timeout
[  263.480644][ T4344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  263.484027][ T4344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  263.485910][ T4344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  263.487454][ T4344] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  263.488969][ T4344] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  263.490374][ T4344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  263.574477][ T4339] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  263.577765][ T4339] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  263.579618][ T4339] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  263.581194][ T4339] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  263.582763][ T4339] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  263.585694][ T4339] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  263.934097][ T4339] Bluetooth: hci6: command 0x0409 tx timeout
[  265.533726][ T4339] Bluetooth: hci7: command 0x0409 tx timeout
[  265.535460][ T4339] Bluetooth: hci4: command 0x041b tx timeout
[  265.613721][ T4344] Bluetooth: hci8: command 0x0409 tx timeout
[  266.014015][ T4339] Bluetooth: hci6: command 0x041b tx timeout
[  267.613710][ T4344] Bluetooth: hci4: command 0x040f tx timeout
[  267.614839][ T4344] Bluetooth: hci7: command 0x041b tx timeout
[  267.693703][ T4339] Bluetooth: hci8: command 0x041b tx timeout
[  268.094101][ T4344] Bluetooth: hci6: command 0x040f tx timeout
[  269.693716][ T4339] Bluetooth: hci7: command 0x040f tx timeout
[  269.694779][ T4339] Bluetooth: hci4: command 0x0419 tx timeout
[  269.773685][ T4344] Bluetooth: hci8: command 0x040f tx timeout
[  270.174122][ T4339] Bluetooth: hci6: command 0x0419 tx timeout
[  271.214445][ T5557] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  271.773689][ T4339] Bluetooth: hci7: command 0x0419 tx timeout
[  271.853840][ T4339] Bluetooth: hci8: command 0x0419 tx timeout
[  272.123633][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz.5.1532:9798]
[  272.125340][    C0] Modules linked in:
[  272.126084][    C0] irq event stamp: 1213041
[  272.126889][    C0] hardirqs last  enabled at (1213040): [<ffff8000083c7564>] timekeeping_get_ns+0x120/0x3b8
[  272.128736][    C0] hardirqs last disabled at (1213041): [<ffff800011bb2924>] el1_interrupt+0x24/0x54
[  272.130579][    C0] softirqs last  enabled at (866): [<ffff80000ff14cd8>] local_bh_enable+0x10/0x34
[  272.132318][    C0] softirqs last disabled at (928): [<ffff80000ff14ca4>] local_bh_disable+0x10/0x34
[  272.134065][    C0] CPU: 0 PID: 9798 Comm: syz.5.1532 Not tainted syzkaller #0
[  272.135610][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  272.137612][    C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  272.139193][    C0] pc : __sanitizer_cov_trace_pc+0x64/0x90
[  272.140263][    C0] lr : cake_heapify+0x30/0x464
[  272.141200][    C0] sp : ffff800022a26500
[  272.141985][    C0] x29: ffff800022a26520 x28: 0000000000000000 x27: ffff0000f03f8000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  272.143580][    C0] x26: 0000000000000000 x25: dfff800000000000 x24: 1fffe0001e07f85b
[  272.145148][    C0] x23: ffff0000f03fc2d8 x22: ffff0000f03f82c0 x21: ffff0000f03fc328
[  272.146715][    C0] x20: 0000000000000500 x19: 000000000000008a x18: 000000000004fffe
[  272.148158][    C0] x17: ffff8000154671c0 x16: ffff8000082dd284 x15: 000000000004ffff
[  272.149636][    C0] x14: 0000000000000001 x13: 1ffff00002a78071 x12: 0000000000080000
[  272.151132][    C0] x11: ff008000101b34e4 x10: 0000000000000002 x9 : ffff8000101b34e4
[  272.152723][    C0] x8 : ffff0000cf69b800 x7 : ffff8000083c7974 x6 : 0000000000000000
[  272.154259][    C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  272.155722][    C0] x2 : 0000000000000002 x1 : 000000000000008a x0 : ffff0000f03f82c0
[  272.157264][    C0] Call trace:
[  272.157848][    C0]  __sanitizer_cov_trace_pc+0x64/0x90
[  272.158863][    C0]  cake_enqueue+0x36c0/0x6a18
[  272.159669][    C0]  netem_dequeue+0xa00/0x1018
[  272.160485][    C0]  __qdisc_run+0x1b4/0x1300
[  272.161302][    C0]  __dev_queue_xmit+0xc38/0x3154
[  272.162194][    C0]  tipc_l2_send_msg+0x2a0/0x364
[  272.163042][    C0]  tipc_bearer_xmit_skb+0x240/0x380
[  272.164117][    C0]  __tipc_nl_bearer_enable+0xe1c/0x1170
[  272.165144][    C0]  tipc_nl_compat_doit+0x348/0x568
[  272.166063][    C0]  tipc_nl_compat_recv+0x684/0x988
[  272.167032][    C0]  genl_family_rcv_msg_doit+0x210/0x308
[  272.168090][    C0]  genl_rcv_msg+0x424/0x600
[  272.168919][    C0]  netlink_rcv_skb+0x220/0x3ec
[  272.169827][    C0]  genl_rcv+0x38/0x50
[  272.170600][    C0]  netlink_unicast+0x5fc/0x80c
[  272.171487][    C0]  netlink_sendmsg+0x6f0/0x9d8
[  272.172392][    C0]  ____sys_sendmsg+0x588/0x90c
[  272.173296][    C0]  __sys_sendmsg+0x288/0x374
[  272.174178][    C0]  __arm64_sys_sendmsg+0x80/0x94
[  272.175154][    C0]  invoke_syscall+0x98/0x290
[  272.176041][    C0]  el0_svc_common+0x13c/0x258
[  272.176922][    C0]  do_el0_svc+0x5c/0x134
[  272.177735][    C0]  el0_svc+0x58/0x128
[  272.178495][    C0]  el0t_64_sync_handler+0x84/0xf0
[  272.179460][    C0]  el0t_64_sync+0x18c/0x190
[  272.180288][    C0] Kernel panic - not syncing: softlockup: hung tasks
[  272.181497][    C0] CPU: 0 PID: 9798 Comm: syz.5.1532 Tainted: G             L     syzkaller #0
[  272.183058][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  272.184838][    C0] Call trace:
[  272.185405][    C0]  dump_backtrace+0x1c4/0x1f0
[  272.186232][    C0]  show_stack+0x2c/0x3c
[  272.186984][    C0]  __dump_stack+0x30/0x40
[  272.187754][    C0]  dump_stack_lvl+0xf4/0x15c
[  272.188712][    C0]  dump_stack+0x1c/0x5c
[  272.189575][    C0]  panic+0x2f8/0x7ac
[  272.190408][    C0]  softlockup_fn+0x0/0x120
[  272.191272][    C0]  __hrtimer_run_queues+0x414/0xc58
[  272.192257][    C0]  hrtimer_interrupt+0x294/0xb28
[  272.193210][    C0]  arch_timer_handler_virt+0x74/0x88
[  272.194212][    C0]  handle_percpu_devid_irq+0x17c/0x358
[  272.195265][    C0]  generic_handle_domain_irq+0xe4/0x154
[  272.196362][    C0]  gic_handle_irq+0x70/0x1d8
[  272.197196][    C0]  call_on_irq_stack+0x30/0x48
[  272.198036][    C0]  do_interrupt_handler+0xd4/0x138
[  272.198968][    C0]  el1_interrupt+0x34/0x54
[  272.199778][    C0]  el1h_64_irq_handler+0x18/0x24
[  272.200675][    C0]  el1h_64_irq+0x64/0x68
[  272.201482][    C0]  __sanitizer_cov_trace_pc+0x64/0x90
[  272.202426][    C0]  cake_enqueue+0x36c0/0x6a18
[  272.203262][    C0]  netem_dequeue+0xa00/0x1018
[  272.204070][    C0]  __qdisc_run+0x1b4/0x1300
[  272.204875][    C0]  __dev_queue_xmit+0xc38/0x3154
[  272.205751][    C0]  tipc_l2_send_msg+0x2a0/0x364
[  272.206613][    C0]  tipc_bearer_xmit_skb+0x240/0x380
[  272.207521][    C0]  __tipc_nl_bearer_enable+0xe1c/0x1170
[  272.208530][    C0]  tipc_nl_compat_doit+0x348/0x568
[  272.209468][    C0]  tipc_nl_compat_recv+0x684/0x988
[  272.210384][    C0]  genl_family_rcv_msg_doit+0x210/0x308
[  272.211343][    C0]  genl_rcv_msg+0x424/0x600
[  272.212126][    C0]  netlink_rcv_skb+0x220/0x3ec
[  272.212976][    C0]  genl_rcv+0x38/0x50
[  272.213684][    C0]  netlink_unicast+0x5fc/0x80c
[  272.214545][    C0]  netlink_sendmsg+0x6f0/0x9d8
[  272.215386][    C0]  ____sys_sendmsg+0x588/0x90c
[  272.216260][    C0]  __sys_sendmsg+0x288/0x374
[  272.217117][    C0]  __arm64_sys_sendmsg+0x80/0x94
[  272.218043][    C0]  invoke_syscall+0x98/0x290
[  272.218889][    C0]  el0_svc_common+0x13c/0x258
[  272.219789][    C0]  do_el0_svc+0x5c/0x134
[  272.220598][    C0]  el0_svc+0x58/0x128
[  272.221370][    C0]  el0t_64_sync_handler+0x84/0xf0
[  272.222326][    C0]  el0t_64_sync+0x18c/0x190
[  272.223146][    C0] SMP: stopping secondary CPUs
[  272.224044][    C0] Kernel Offset: disabled
[  272.224820][    C0] CPU features: 0x0a0000,000f0097,a65bfea7
[  272.225918][    C0] Memory Limit: none
[  272.238446][    C0] 
[  272.238905][    C0] ================================
[  272.239860][    C0] WARNING: inconsistent lock state
[  272.240839][    C0] syzkaller #0 Tainted: G             L    
[  272.241896][    C0] --------------------------------
[  272.242802][    C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage.
[  272.243972][    C0] syz.5.1532/9798 [HC1[1]:SC0[2]:HE0:SE0] takes:
[  272.245093][    C0] ffff8000154014f8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c
[  272.247073][    C0] {HARDIRQ-ON-W} state was registered at:
[  272.248141][    C0]   lock_acquire+0x20c/0x638
[  272.248982][    C0]   _raw_spin_lock+0x54/0x6c
[  272.249801][    C0]   efi_call_rts+0x3c8/0x9d8
[  272.250623][    C0]   process_one_work+0x7e4/0x13bc
[  272.251579][    C0]   worker_thread+0x8cc/0xfe8
[  272.252421][    C0]   kthread+0x254/0x2e0
[  272.253177][    C0]   ret_from_fork+0x10/0x20
[  272.254028][    C0] irq event stamp: 1213041
[  272.254850][    C0] hardirqs last  enabled at (1213040): [<ffff8000083c7564>] timekeeping_get_ns+0x120/0x3b8
[  272.256817][    C0] hardirqs last disabled at (1213041): [<ffff800011bb2924>] el1_interrupt+0x24/0x54
[  272.258620][    C0] softirqs last  enabled at (866): [<ffff80000ff14cd8>] local_bh_enable+0x10/0x34
[  272.260431][    C0] softirqs last disabled at (928): [<ffff80000ff14ca4>] local_bh_disable+0x10/0x34
[  272.262196][    C0] 
[  272.262196][    C0] other info that might help us debug this:
[  272.263709][    C0]  Possible unsafe locking scenario:
[  272.263709][    C0] 
[  272.265132][    C0]        CPU0
[  272.265741][    C0]        ----
[  272.266352][    C0]   lock(efi_rt_lock);
[  272.267111][    C0]   <Interrupt>
[  272.267771][    C0]     lock(efi_rt_lock);
[  272.268555][    C0] 
[  272.268555][    C0]  *** DEADLOCK ***
[  272.268555][    C0] 
[  272.270084][    C0] 8 locks held by syz.5.1532/9798:
[  272.271049][    C0]  #0: ffff800017a9b610 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50
[  272.272553][    C0]  #1: ffff800017a9b428 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600
[  272.274219][    C0]  #2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  272.275830][    C0]  #3: ffff800015597440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c
[  272.277667][    C0]  #4: ffff8000155974a0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54
[  272.279588][    C0]  #5: ffff0000dc9a1108 (&sch->root_lock_key#320){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154
[  272.281721][    C0]  #6: ffff800015597440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c
[  272.283559][    C0]  #7: ffff800017478e48 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x188/0x828
[  272.285447][    C0] 
[  272.285447][    C0] stack backtrace:
[  272.286573][    C0] CPU: 0 PID: 9798 Comm: syz.5.1532 Tainted: G             L     syzkaller #0
[  272.288272][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  272.290091][    C0] Call trace:
[  272.290676][    C0]  dump_backtrace+0x1c4/0x1f0
[  272.291496][    C0]  show_stack+0x2c/0x3c
[  272.292242][    C0]  __dump_stack+0x30/0x40
[  272.293007][    C0]  dump_stack_lvl+0xf4/0x15c
[  272.293826][    C0]  dump_stack+0x1c/0x5c
[  272.294583][    C0]  print_usage_bug+0x4c0/0x6dc
[  272.295474][    C0]  mark_lock_irq+0x858/0xab8
[  272.296332][    C0]  mark_lock+0x224/0x320
[  272.297074][    C0]  __lock_acquire+0xa60/0x6634
[  272.297937][    C0]  lock_acquire+0x20c/0x638
[  272.298762][    C0]  _raw_spin_lock+0x54/0x6c
[  272.299559][    C0]  virt_efi_set_variable_nonblocking+0x74/0x16c
[  272.300680][    C0]  efivar_set_variable_locked+0x1d0/0x204
[  272.301669][    C0]  efi_pstore_write+0x2a8/0x3b4
[  272.302555][    C0]  pstore_dump+0x5b8/0x828
[  272.303347][    C0]  kmsg_dump+0x174/0x264
[  272.304090][    C0]  panic+0x384/0x7ac
[  272.304818][    C0]  softlockup_fn+0x0/0x120
[  272.305608][    C0]  __hrtimer_run_queues+0x414/0xc58
[  272.306556][    C0]  hrtimer_interrupt+0x294/0xb28
[  272.307436][    C0]  arch_timer_handler_virt+0x74/0x88
[  272.308330][    C0]  handle_percpu_devid_irq+0x17c/0x358
[  272.309300][    C0]  generic_handle_domain_irq+0xe4/0x154
[  272.310335][    C0]  gic_handle_irq+0x70/0x1d8
[  272.311195][    C0]  call_on_irq_stack+0x30/0x48
[  272.312044][    C0]  do_interrupt_handler+0xd4/0x138
[  272.312975][    C0]  el1_interrupt+0x34/0x54
[  272.313812][    C0]  el1h_64_irq_handler+0x18/0x24
[  272.314753][    C0]  el1h_64_irq+0x64/0x68
[  272.315563][    C0]  __sanitizer_cov_trace_pc+0x64/0x90
[  272.316602][    C0]  cake_enqueue+0x36c0/0x6a18
[  272.317513][    C0]  netem_dequeue+0xa00/0x1018
[  272.318380][    C0]  __qdisc_run+0x1b4/0x1300
[  272.319182][    C0]  __dev_queue_xmit+0xc38/0x3154
[  272.320111][    C0]  tipc_l2_send_msg+0x2a0/0x364
[  272.320938][    C0]  tipc_bearer_xmit_skb+0x240/0x380
[  272.321825][    C0]  __tipc_nl_bearer_enable+0xe1c/0x1170
[  272.322824][    C0]  tipc_nl_compat_doit+0x348/0x568
[  272.323785][    C0]  tipc_nl_compat_recv+0x684/0x988
[  272.324711][    C0]  genl_family_rcv_msg_doit+0x210/0x308
[  272.325748][    C0]  genl_rcv_msg+0x424/0x600
[  272.326564][    C0]  netlink_rcv_skb+0x220/0x3ec
[  272.327425][    C0]  genl_rcv+0x38/0x50
[  272.328123][    C0]  netlink_unicast+0x5fc/0x80c
[  272.328984][    C0]  netlink_sendmsg+0x6f0/0x9d8
[  272.329844][    C0]  ____sys_sendmsg+0x588/0x90c
[  272.330700][    C0]  __sys_sendmsg+0x288/0x374
[  272.331513][    C0]  __arm64_sys_sendmsg+0x80/0x94
[  272.332405][    C0]  invoke_syscall+0x98/0x290
[  272.333245][    C0]  el0_svc_common+0x13c/0x258
[  272.334060][    C0]  do_el0_svc+0x5c/0x134
[  272.334790][    C0]  el0_svc+0x58/0x128
[  272.335497][    C0]  el0t_64_sync_handler+0x84/0xf0
[  272.336373][    C0]  el0t_64_sync+0x18c/0x190
[  272.650536][    C0] Rebooting in 86400 seconds..