last executing test programs:

5m5.626032679s ago: executing program 32 (id=1216):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0xfffc, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20008}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4048004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

4m48.967329722s ago: executing program 0 (id=1275):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)="8e6b373c083a4aa28e5588524a41399bf5fbb0f58b843bb2980b248235f47fbd", 0x0, 0x80}, 0x38)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

4m48.277357667s ago: executing program 0 (id=1276):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
syz_usb_connect(0x5, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0xa6, 0xcc, 0x92, 0x10, 0x4e6, 0x9, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0xa0, 0xf, "", [{{0x9, 0x4, 0x51, 0xf, 0x0, 0xd6, 0xef, 0xed, 0x80}}]}}]}}, 0x0)

4m45.345008621s ago: executing program 0 (id=1286):
syz_usb_connect(0x2, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810240000007050202"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044000}, 0x40)
write$char_usb(r0, &(0x7f00000004c0)="620482", 0x140)

4m43.252988619s ago: executing program 0 (id=1296):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

4m42.360467582s ago: executing program 0 (id=1297):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x59f8, 0x4)
sendto$inet6(r0, &(0x7f00000002c0)="8d", 0x1, 0x80001, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/78, 0x4e}, 0x1ff}], 0x1, 0x2000, 0x0)

4m41.545038394s ago: executing program 0 (id=1299):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e)

4m40.782290069s ago: executing program 33 (id=1299):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e)

4m1.839819939s ago: executing program 6 (id=1504):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000000780)={{@any, 0x1}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
close(0x3)

4m0.273572477s ago: executing program 6 (id=1515):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r1}, 0x14)
syz_emit_ethernet(0x11fb, &(0x7f0000001b00)=ANY=[], 0x0)

3m59.85125714s ago: executing program 6 (id=1518):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r0, 0x104, 0x1)
getdents64(r0, 0x0, 0x4f)

3m59.616467276s ago: executing program 6 (id=1521):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

3m58.722903672s ago: executing program 6 (id=1528):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c800000020000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x10001)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x50, r1, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x50}}, 0x0)

3m56.950648289s ago: executing program 6 (id=1535):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001840)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0)
read(r0, &(0x7f00000005c0)=""/1015, 0xffb5)
pread64(r0, &(0x7f0000003900)=""/4118, 0x1016, 0x1000000000001)
read$FUSE(r0, &(0x7f00000018c0)={0x2020}, 0x2020)

3m56.294682459s ago: executing program 34 (id=1535):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001840)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0)
read(r0, &(0x7f00000005c0)=""/1015, 0xffb5)
pread64(r0, &(0x7f0000003900)=""/4118, 0x1016, 0x1000000000001)
read$FUSE(r0, &(0x7f00000018c0)={0x2020}, 0x2020)

2m6.756608423s ago: executing program 5 (id=2296):
listen(0xffffffffffffffff, 0x204)
r0 = socket$inet(0x2, 0x1, 0x0)
listen(0xffffffffffffffff, 0x5)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c)
r1 = socket$inet(0x2, 0x1, 0x6)
connect(r1, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10)

2m5.688624383s ago: executing program 5 (id=2310):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000540)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYRESDEC], 0x1, 0x105ea, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

2m4.409509314s ago: executing program 5 (id=2314):
socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @broadcast, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x2, 0x24, 0x65, 0x0, 0xd, 0x21, 0x0, @remote, @private=0xa010100}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x5, 0x6, 's&}', 0x1, "c07b04"}}}}}}, 0x0)

2m3.30904695s ago: executing program 5 (id=2323):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
creat(&(0x7f0000000740)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)

2m2.589127012s ago: executing program 5 (id=2327):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000440)=""/250, 0xfa}], 0x2}, 0x10007}], 0x1, 0x30100, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="377a304d622047c21ade79e5a23cf715115651ba762f8904a325a6fa0728f8ee0c550a3b1d1aab4adfe022add19b8c5832e229e5215b7ed93800024c7ceb8f924ad7000000", 0x45}], 0x1}}], 0x1, 0x20e8086)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

2m1.496807826s ago: executing program 5 (id=2335):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

2m0.828779938s ago: executing program 35 (id=2335):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

46.911770766s ago: executing program 8 (id=2780):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0xf)
syz_emit_ethernet(0x36, &(0x7f00000027c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "f7db79", 0x0, 0x21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0)

46.669227314s ago: executing program 8 (id=2785):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b52810000000000010902270001010080fa0904000003ff000000070581020002000705020200020007058303400001"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0x0, 0x0, 0x4, '\x00\x00\x00L'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

44.207577607s ago: executing program 4 (id=2802):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
fcntl$setsig(r0, 0xa, 0x21)
fcntl$setlease(r0, 0x400, 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

43.12715725s ago: executing program 8 (id=2803):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b0000000000060001"], 0x40}}, 0x20)

43.12705811s ago: executing program 4 (id=2804):
openat$pfkey(0xffffffffffffff9c, 0x0, 0x240, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r1, &(0x7f0000000600), &(0x7f0000000840)=""/10, 0x4}, 0x20)

42.859107502s ago: executing program 4 (id=2807):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28100c8, &(0x7f0000006500)=ANY=[@ANYBLOB="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"], 0xfe, 0x6180, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x46)
fsync(r1)

42.732990947s ago: executing program 8 (id=2809):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

41.793688311s ago: executing program 4 (id=2816):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x32095}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

41.519978125s ago: executing program 8 (id=2819):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000a40)="$eJzs3EFII1cYwPHPGGMSa5JDaWmh+Ggv7WXQtOfSUBRKAxU1pVoojDppQ6aJZIIlpVQ97XXZ+54W9iAevQm73vbkZW+7sOxlb14W9qCHZWfJZMYkY4wxRuIm/x/IvLz3Pue9mRf4ZsjM8W93/85nLS2rlyUQVvKRiMipSEIC4hlxtwGnHJJG2ycy8ebZF4vLKz+n0unZBaXmUkvfJpVSsalH//wXcbsdjMtR4o/j18lXR58cfXb8bumvnKVylioUy0pXq8WXZX3VNNR6zsprSs2bhm4ZKlewjFKtvVhrz5rFjY2K0gvrk9GNkmFZSi9UVN6oqHJRlUsVpf+p5wpK0zQ1GZX2Xjy5pMMQyOwuLOipLoPXejwY3JBSKaWPikjkXEtmty8DAgAAfeXP/wMi21fK/+UbN/+XmJP/VzvX8/+9Lw/LE7/ux9z8/yDUKv//7nntfzXl/2ER6Sb/vy8d5v/SMiMaLtfK/3E7TIXOVY00farm/1H3++vY+X1v2imQ/wMAAAAAAAAAAAAAAAAAAAAA8CE4te24bdtxb+v91R8hcD9jIF10/sdFJFw9+zbnf5AtLq9I2HlwLxgTMe9sZjYzta3b4VBETDFkWuLy1lkPrmrZe/JIVSXksbnlxm9tZkadllRWck78jMQl4Y+37bmf0rMzqsaNP3tMKdoYn5S4fNw6Ptkc7+4/JF9/1RCvSVyerklRTFl31nU9/v8ZpX78Je2Ljzj9AAAAAAAYBJo60/L6XdMuaq+9ZeTs+rrl/YHa9fV0y+vzYPzzYL9nDwAAAADAcLAq/+Z10zRKbQoRubxP94VgZ51Dvpqxdp1HG2bY6XhCzu9dRHxNARG50rwedHhUmwreDymamsJuZXeH15t/z87XdvNh6SAq6B/8VLVCXXc83m2j0AXHWebPRwXarISxnq3nT+89POndF+T7fW8FXN55p9t9hf2rzimMuTvmDh0AAAAwQOpJv1fzQ2PzSF8GBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkLmRV/r5Cv2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBbvA8AAP//KbT7SA==")
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200006, 0x9, 0x203, 0x5, 0x83, 0xd616, 0x1000000a, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x1}}, {0x0, 0xa}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000100)=0x6, 0x8112)

38.679957053s ago: executing program 4 (id=2823):
r0 = syz_ublk_setup_io_uring(0x3df8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f000001a400)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}])
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)

38.205024366s ago: executing program 8 (id=2827):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x1000008, &(0x7f00000011c0)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0xd73}}, {@nombcache}]}, 0x1, 0x51e, &(0x7f0000002a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x400)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='\f', 0xffffff27, 0x3ff)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

38.18297261s ago: executing program 4 (id=2828):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='4', 0x1)

37.714183863s ago: executing program 36 (id=2827):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x1000008, &(0x7f00000011c0)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0xd73}}, {@nombcache}]}, 0x1, 0x51e, &(0x7f0000002a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x400)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='\f', 0xffffff27, 0x3ff)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

23.038820135s ago: executing program 37 (id=2828):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000340)='4', 0x1)

5.273044384s ago: executing program 2 (id=2977):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4, 0x0, 0x3, 0x6, 0x5}, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x4}]}, 0x18}}, 0x8000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)

5.000651698s ago: executing program 2 (id=2980):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x180800)
modify_ldt$read_default(0x2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)

3.076887126s ago: executing program 3 (id=2988):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={<r1=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0xe3)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118)

2.786349853s ago: executing program 7 (id=2990):
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000029000000", @ANYRES8=r0], 0x18}, 0x0)

2.786165773s ago: executing program 2 (id=2991):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0x3)

2.538313462s ago: executing program 7 (id=2993):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40)

2.514416326s ago: executing program 9 (id=2994):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000008680)=[{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)="1a24", 0x2}], 0x1, 0x0, 0x0, 0x40080}], 0x1, 0x0)
recvmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)=""/210, 0xd2}], 0x1}}], 0x1, 0x2000, 0x0)

2.44825774s ago: executing program 3 (id=2995):
r0 = socket(0x1, 0x5, 0x0)
close(r0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x201d})

2.374719444s ago: executing program 1 (id=2996):
r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1555563c})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x8)

2.220996614s ago: executing program 2 (id=2997):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000900)=[{&(0x7f0000000180)="84b5", 0x2}, {0x0, 0x3}], 0x2)

2.183879761s ago: executing program 9 (id=2998):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f00000000c0)={0x3, 0x7fff, 0x7fff, 0x401})

2.094019049s ago: executing program 3 (id=2999):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x0, 0x0}, 0x10)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000040)={&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001940)=""/4079, 0xfef})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

1.861045984s ago: executing program 9 (id=3000):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_raw(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000)

1.78628807s ago: executing program 3 (id=3001):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = dup(r0)
read$FUSE(r1, &(0x7f0000000a80)={0x2020}, 0x2020)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)

1.741030479s ago: executing program 2 (id=3002):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r0, 0x6000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x2000)

1.707393375s ago: executing program 7 (id=3003):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2000851, 0x0, 0x0)

1.599932746s ago: executing program 1 (id=3004):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000001500)=ANY=[@ANYBLOB="34140000", @ANYRES16=r2, @ANYBLOB="adab27bd7000fddbdf250b"], 0x1434}, 0x1, 0x0, 0x0, 0x80}, 0x14)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0)

1.487977468s ago: executing program 7 (id=3005):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000026c0)=[{}])

1.447540776s ago: executing program 9 (id=3006):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r3=>0x0})
bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x1, r3, 0x3d, r0}, 0x32)

1.197724085s ago: executing program 1 (id=3007):
openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='5\n', 0x2)

1.081000268s ago: executing program 9 (id=3008):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000240)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec70c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0xf5, 0x304, &(0x7f0000000440)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'connbytes\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1c, 0x3, "0000000010000000e80300"/24}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)

549.998152ms ago: executing program 9 (id=3009):
syz_usb_connect(0x2, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810240000007050202", @ANYRESDEC], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write$char_usb(r0, &(0x7f00000004c0)="620482", 0x3)

508.37221ms ago: executing program 1 (id=3010):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x180)

445.605773ms ago: executing program 3 (id=3011):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x5d031, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, 0x0)

335.994435ms ago: executing program 7 (id=3012):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x200)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x0, 0x0, 0x0, 0x2, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x2, 0x0, 0x6, 0x38, 0x1, 0xfffe, 0x3, 0x3}, [{0x3, 0xf, 0x8, 0x11, 0x0, 0xe5, 0x1, 0x3}]}, 0x78)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

279.346086ms ago: executing program 2 (id=3013):
r0 = syz_open_dev$usbmon(0x0, 0x8, 0x1)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
write(r1, &(0x7f0000000080)="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", 0xfe)

230.100725ms ago: executing program 1 (id=3014):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/5, 0x5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)

93.029652ms ago: executing program 7 (id=3015):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x180000, @local, 0xfffffffc}, 0x18, 0x0, 0x0, &(0x7f00000008c0)=[@rthdrdstopts={{0x18, 0x29, 0x3b, {0x21}}}], 0x18}, 0x2404c082)

78.250805ms ago: executing program 3 (id=3016):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfefffffd, 0x5, 0x0, 0xfd, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000080000200000000001900", 0x3c}, 0x60)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0xe0cba8b119564bb4, 0x0, 0x46, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x2d}, 0x60)

0s ago: executing program 1 (id=3017):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000140)=0x4ecd, 0x4)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1)

kernel console output (not intermixed with test programs):

][T10924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.621025][T10924] R13: 00007f56e7826038 R14: 00007f56e7825fa0 R15: 00007ffd25b4d028
[  402.637186][T10924]  </TASK>
[  402.743159][ T6715] net_ratelimit: 63 callbacks suppressed
[  403.466627][T10950] jffs2: notice: (10950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  404.016109][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  405.664402][   T26] audit: type=1804 audit(1790654715.678:350): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2047" name="/newroot/49/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=28099 res=1 errno=0
[  406.937911][T11048] netlink: 'syz.4.2060': attribute type 8 has an invalid length.
[  407.162885][T11054] loop4: detected capacity change from 0 to 512
[  407.365933][  T128] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  407.596169][  T128] usb 4-1: Using ep0 maxpacket: 8
[  407.603412][  T128] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  407.627237][  T128] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  407.666256][  T128] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  407.701113][  T128] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  407.735885][  T128] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  407.777072][  T128] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  407.796074][  T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.823892][    C1] net_ratelimit: 60 callbacks suppressed
[  408.042625][  T128] usb 4-1: usb_control_msg returned -32
[  408.049212][  T128] usbtmc 4-1:16.0: can't read capabilities
[  408.380096][T11079] device geneve1 entered promiscuous mode
[  408.613079][T11087] netlink: 'syz.1.2071': attribute type 8 has an invalid length.
[  408.856620][T11092] usbtmc 4-1:16.0: usb_control_msg returned -32
[  408.872825][T11098] FAULT_INJECTION: forcing a failure.
[  408.872825][T11098] name failslab, interval 1, probability 0, space 0, times 0
[  408.886677][T11098] CPU: 0 PID: 11098 Comm: syz.4.2075 Not tainted syzkaller #0
[  408.894189][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  408.904320][T11098] Call Trace:
[  408.907641][T11098]  <TASK>
[  408.910614][T11098]  dump_stack_lvl+0x188/0x24e
[  408.915348][T11098]  ? show_regs_print_info+0x12/0x12
[  408.920581][T11098]  ? load_image+0x410/0x410
[  408.925126][T11098]  ? __might_sleep+0xd0/0xd0
[  408.929766][T11098]  ? __lock_acquire+0x7c40/0x7c40
[  408.934861][T11098]  should_fail_ex+0x390/0x4c0
[  408.939600][T11098]  should_failslab+0x5/0x20
[  408.944153][T11098]  slab_pre_alloc_hook+0x59/0x300
[  408.949243][T11098]  ? alloc_workqueue+0x175/0x14a0
[  408.954322][T11098]  __kmem_cache_alloc_node+0x4f/0x270
[  408.959750][T11098]  ? alloc_workqueue+0x175/0x14a0
[  408.964835][T11098]  __kmalloc+0xa3/0x240
[  408.969054][T11098]  alloc_workqueue+0x175/0x14a0
[  408.973948][T11098]  ? vsnprintf+0x1b22/0x1c20
[  408.978605][T11098]  ? snprintf+0xe5/0x140
[  408.982900][T11098]  ? lockdep_init_map_type+0x98/0x8d0
[  408.988323][T11098]  ? apply_workqueue_attrs+0x180/0x180
[  408.993828][T11098]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  408.999785][T11098]  nci_register_device+0x5c6/0x9f0
[  409.004988][T11098]  ? nci_free_device+0x90/0x90
[  409.009829][T11098]  ? nci_hci_allocate+0x1dd/0x2a0
[  409.014914][T11098]  ? nci_allocate_device+0x241/0x350
[  409.020254][T11098]  virtual_ncidev_open+0x55/0xc0
[  409.025248][T11098]  ? virtual_ncidev_ioctl+0x90/0x90
[  409.030509][T11098]  misc_open+0x31f/0x390
[  409.034813][T11098]  chrdev_open+0x585/0x5f0
[  409.039282][T11098]  ? cd_forget+0x160/0x160
[  409.043756][T11098]  ? fsnotify_perm+0x39b/0x550
[  409.048575][T11098]  ? cd_forget+0x160/0x160
[  409.053041][T11098]  do_dentry_open+0x7dd/0x10b0
[  409.057874][T11098]  path_openat+0x2674/0x2f10
[  409.062531][T11098]  ? verify_lock_unused+0x140/0x140
[  409.067762][T11098]  ? do_sys_openat2+0xdd/0x4f0
[  409.072581][T11098]  ? do_filp_open+0x420/0x420
[  409.077305][T11098]  do_filp_open+0x1ee/0x420
[  409.081883][T11098]  ? vfs_tmpfile+0x470/0x470
[  409.081986][T11098]  ? _raw_spin_unlock+0x24/0x40
[  409.091372][T11098]  ? alloc_fd+0x590/0x640
[  409.095745][T11098]  do_sys_openat2+0x14b/0x4f0
[  409.100462][T11098]  ? do_sys_open+0xe0/0xe0
[  409.104914][T11098]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  409.110927][T11098]  ? lock_chain_count+0x20/0x20
[  409.110966][T11098]  __x64_sys_openat+0x135/0x160
[  409.120697][T11098]  do_syscall_64+0x4c/0xa0
[  409.125137][T11098]  ? clear_bhb_loop+0x60/0xb0
[  409.129842][T11098]  ? clear_bhb_loop+0x60/0xb0
[  409.134549][T11098]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.140477][T11098] RIP: 0033:0x7fabc179e159
[  409.140500][T11098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.140521][T11098] RSP: 002b:00007fabc25f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  409.164566][T11098] RAX: ffffffffffffffda RBX: 00007fabc1a25fa0 RCX: 00007fabc179e159
[  409.164587][T11098] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  409.164614][T11098] RBP: 00007fabc183506b R08: 0000000000000000 R09: 0000000000000000
[  409.181008][T11098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  409.181026][T11098] R13: 00007fabc1a26038 R14: 00007fabc1a25fa0 R15: 00007fff735a28f8
[  409.181093][T11098]  </TASK>
[  409.260346][  T128] usb 4-1: USB disconnect, device number 23
[  409.385026][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'.
[  409.437006][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2078'.
[  409.491874][T11105] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  409.500787][T11105] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  409.509557][T11105] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  409.518354][T11105] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  409.570667][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'.
[  409.590035][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2078'.
[  410.878697][T11140] loop4: detected capacity change from 0 to 1024
[  410.883397][T11145] netlink: 'syz.5.2085': attribute type 8 has an invalid length.
[  410.936788][T11140] EXT4-fs: Ignoring removed bh option
[  411.051691][T11140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  412.149185][ T8487] EXT4-fs (loop4): unmounting filesystem.
[  412.342677][T11192] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2102'.
[  412.801417][T11190] loop4: detected capacity change from 0 to 32768
[  412.860615][T11190] JBD2: Ignoring recovery information on journal
[  412.895901][    C1] net_ratelimit: 65 callbacks suppressed
[  412.990658][T11190] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  413.143622][   T26] audit: type=1804 audit(1790654723.158:351): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2100" name="/newroot/144/file1/file1" dev="loop4" ino=17059 res=1 errno=0
[  413.338093][ T8487] ocfs2: Unmounting device (7,4) on (node local)
[  413.818942][T11227] fuse: Bad value for 'fd'
[  415.545328][T11277] overlayfs: failed to clone upperpath
[  416.336045][ T4275] Bluetooth: hci4: command 0x0406 tx timeout
[  417.169556][T11320] input: syz0 as /devices/virtual/input/input37
[  417.629044][T11333] loop4: detected capacity change from 0 to 256
[  417.707715][T11333] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  418.015881][    C1] net_ratelimit: 70 callbacks suppressed
[  418.194650][T11350] loop5: detected capacity change from 0 to 4096
[  418.267346][T11350] EXT4-fs: Ignoring removed nobh option
[  418.287595][T11350] EXT4-fs: Ignoring removed bh option
[  418.328147][T11350] EXT4-fs (loop5): Test dummy encryption mode enabled
[  418.455624][T11350] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  418.814041][ T9750] EXT4-fs (loop5): unmounting filesystem.
[  419.230199][T11388] FAULT_INJECTION: forcing a failure.
[  419.230199][T11388] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  419.277585][T11388] CPU: 1 PID: 11388 Comm: syz.1.2167 Not tainted syzkaller #0
[  419.285127][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  419.295219][T11388] Call Trace:
[  419.298532][T11388]  <TASK>
[  419.301499][T11388]  dump_stack_lvl+0x188/0x24e
[  419.306230][T11388]  ? show_regs_print_info+0x12/0x12
[  419.311483][T11388]  ? load_image+0x410/0x410
[  419.316052][T11388]  ? __lock_acquire+0x7c40/0x7c40
[  419.321141][T11388]  ? do_futex+0x310/0x320
[  419.325525][T11388]  should_fail_ex+0x390/0x4c0
[  419.330270][T11388]  strncpy_from_user+0x32/0x340
[  419.335189][T11388]  __se_sys_add_key+0xd8/0x410
[  419.340031][T11388]  ? __x64_sys_add_key+0xc0/0xc0
[  419.345026][T11388]  ? lockdep_hardirqs_on+0x94/0x140
[  419.350274][T11388]  ? __x64_sys_add_key+0x1c/0xc0
[  419.355266][T11388]  do_syscall_64+0x4c/0xa0
[  419.359737][T11388]  ? clear_bhb_loop+0x60/0xb0
[  419.364458][T11388]  ? clear_bhb_loop+0x60/0xb0
[  419.369184][T11388]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  419.375137][T11388] RIP: 0033:0x7f7af3d9e159
[  419.379593][T11388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.399227][T11388] RSP: 002b:00007f7af4bce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  419.399258][T11388] RAX: ffffffffffffffda RBX: 00007f7af4025fa0 RCX: 00007f7af3d9e159
[  419.399276][T11388] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 00002000000003c0
[  419.423693][T11388] RBP: 00007f7af3e3506b R08: fffffffffffffffd R09: 0000000000000000
[  419.431691][T11388] R10: 00000000000000c9 R11: 0000000000000246 R12: 0000000000000000
[  419.439692][T11388] R13: 00007f7af4026038 R14: 00007f7af4025fa0 R15: 00007fffed1ce0a8
[  419.447702][T11388]  </TASK>
[  419.985920][ T4323] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  420.133882][T11409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2176'.
[  420.196043][ T4323] usb 6-1: Using ep0 maxpacket: 16
[  420.204453][ T4323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.232368][ T4323] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.258833][ T4323] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.285602][ T4323] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  420.324862][ T4323] usb 6-1: config 0 interface 0 has no altsetting 0
[  420.346780][ T4323] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  420.374902][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.426006][ T4323] usb 6-1: config 0 descriptor??
[  420.541505][T11409] device hsr_slave_1 left promiscuous mode
[  420.891472][ T4323] logitech-djreceiver 0003:046D:C53A.001D: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0
[  421.071497][ T4323] usb 6-1: USB disconnect, device number 11
[  421.259900][T11430] fido_id[11430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  421.403305][T11439] loop4: detected capacity change from 0 to 512
[  421.435665][T11439] EXT4-fs: Ignoring removed nobh option
[  421.503670][T11439] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2188: invalid indirect mapped block 256 (level 2)
[  421.560257][T11439] EXT4-fs (loop4): 2 truncates cleaned up
[  421.616546][T11439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  421.760445][ T8487] EXT4-fs (loop4): unmounting filesystem.
[  422.131594][T11456] Bluetooth: MGMT ver 1.22
[  423.055892][    C0] net_ratelimit: 73 callbacks suppressed
[  423.200039][T11492] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2208'.
[  423.212930][T11492] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2208'.
[  423.325385][T11498] xt_hashlimit: overflow, rate too high: 0
[  423.693561][T11509] device gretap1 entered promiscuous mode
[  423.835017][T11515] device bridge0 entered promiscuous mode
[  424.735951][T11519] loop3: detected capacity change from 0 to 131072
[  424.786025][T11519] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  424.794168][T11519] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  424.803772][T11519] F2FS-fs (loop3): invalid crc value
[  424.848876][T11519] F2FS-fs (loop3): Found nat_bits in checkpoint
[  424.916299][T11519] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  424.923425][T11519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  425.460089][T11547] loop5: detected capacity change from 0 to 512
[  425.587254][T11547] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  425.626070][T11547] System zones: 1-12
[  425.780052][T11547] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.2229: missing EA_INODE flag
[  425.817661][T11547] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2229: error while reading EA inode 12 err=-117
[  425.876808][T11547] EXT4-fs (loop5): 1 orphan inode deleted
[  425.882639][T11547] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  426.313184][T11561] device bridge1 entered promiscuous mode
[  426.388214][ T9750] EXT4-fs (loop5): unmounting filesystem.
[  426.476771][T11564] loop3: detected capacity change from 0 to 164
[  426.566789][   T26] audit: type=1326 audit(1790654736.588:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  426.683212][   T26] audit: type=1326 audit(1790654736.588:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  426.801826][   T26] audit: type=1326 audit(1790654736.588:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  426.936160][   T26] audit: type=1326 audit(1790654736.588:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  427.225443][   T26] audit: type=1326 audit(1790654736.588:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  427.394476][   T26] audit: type=1326 audit(1790654736.588:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  427.541543][   T26] audit: type=1326 audit(1790654736.588:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  427.706119][   T26] audit: type=1326 audit(1790654736.588:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  427.787508][T11573] loop3: detected capacity change from 0 to 131072
[  427.795542][T11573] XFS: ikeep mount option is deprecated.
[  427.832556][T11573] XFS (loop3): Mounting V5 Filesystem
[  428.007940][   T26] audit: type=1326 audit(1790654736.588:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  428.037499][T11573] XFS (loop3): Starting recovery (logdev: internal)
[  428.090732][T11573] XFS (loop3): Ending recovery (logdev: internal)
[  428.137623][   T26] audit: type=1326 audit(1790654736.588:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.3.2234" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f56e759e159 code=0x7ffc0000
[  428.405343][ T4273] XFS (loop3): Unmounting Filesystem
[  428.895888][    C1] net_ratelimit: 61 callbacks suppressed
[  429.318003][T11622] loop5: detected capacity change from 0 to 1024
[  429.346106][  T128] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  429.543792][  T128] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  429.562376][  T128] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  429.595350][  T128] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  429.661911][  T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.680498][  T128] usb 5-1: Product: syz
[  429.684726][  T128] usb 5-1: Manufacturer: syz
[  429.701459][   T11] hfsplus: b-tree write err: -5, ino 25
[  429.720339][  T128] usb 5-1: SerialNumber: syz
[  429.726706][   T11] hfsplus: b-tree write err: -5, ino 4
[  429.738867][   T11] hfsplus: b-tree write err: -5, ino 2
[  429.754730][   T11] hfsplus: b-tree write err: -5, ino 26
[  429.774987][   T11] hfsplus: b-tree write err: -5, ino 27
[  429.916777][   T27] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  429.969745][  T128] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  430.125935][   T27] usb 4-1: Using ep0 maxpacket: 8
[  430.138419][   T27] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  430.178380][   T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  430.204614][   T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  430.222457][   T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  430.234003][   T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  430.271527][   T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  430.292856][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.331683][ T5709] usb 5-1: USB disconnect, device number 20
[  430.365696][ T5709] usblp0: removed
[  430.563327][   T27] usb 4-1: usb_control_msg returned -32
[  430.569763][   T27] usbtmc 4-1:16.0: can't read capabilities
[  431.197441][T11667] "syz.5.2270" (11667) uses obsolete ecb(arc4) skcipher
[  431.572775][  T128] usb 4-1: USB disconnect, device number 24
[  431.824700][T11680] loop4: detected capacity change from 0 to 4096
[  431.920399][T11686] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  431.956952][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  431.956965][   T26] audit: type=1326 audit(1790654741.978:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.7.2278" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c6899e159 code=0x0
[  432.119145][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'.
[  432.376871][T11696] input: syz1 as /devices/virtual/input/input38
[  433.311027][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2291'.
[  434.005964][   T27] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  434.016065][ T6710] net_ratelimit: 73 callbacks suppressed
[  434.207496][   T27] usb 5-1: not running at top speed; connect to a high speed hub
[  434.227125][   T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  434.282927][   T27] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  434.309577][   T27] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  434.329680][   T27] usb 5-1: Product: syz
[  434.337780][   T27] usb 5-1: Manufacturer: syz
[  434.372376][   T27] usb 5-1: Found UVC 1.00 device syz (225a:e1d4)
[  434.563605][   T27] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  434.592549][   T27] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  434.627332][   T27] uvcvideo 5-1:1.1: Failed to initialize the device (-5).
[  434.685232][   T27] usb 5-1: USB disconnect, device number 21
[  435.454993][T11762] loop5: detected capacity change from 0 to 131072
[  435.471249][T11762] F2FS-fs (loop5): invalid crc value
[  435.513045][T11762] F2FS-fs (loop5): Found nat_bits in checkpoint
[  435.552265][T11762] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  435.576180][T11762] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  435.599300][   T26] audit: type=1800 audit(1790654745.618:364): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2310" name="file1" dev="loop5" ino=7 res=0 errno=0
[  437.092633][T11811] loop5: detected capacity change from 0 to 64
[  437.295957][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  437.368153][T11797] loop3: detected capacity change from 0 to 32768
[  437.376057][T11811] loop5: detected capacity change from 64 to 0
[  437.399310][T11816] syz.5.2323: attempt to access beyond end of device
[  437.399310][T11816] loop5: rw=0, sector=8, nr_sectors = 1 limit=0
[  437.514715][T11797] XFS (loop3): Mounting V5 Filesystem
[  437.568516][    C0] vxcan1: j1939_simple_recv: Received already invalidated message
[  437.666495][T11797] XFS (loop3): Ending clean mount
[  437.843931][ T6719] kworker/u4:16: attempt to access beyond end of device
[  437.843931][ T6719] loop5: rw=0, sector=1, nr_sectors = 1 limit=0
[  437.912116][ T6719] BFS-fs: find_inode(): Unable to read inode loop5:00000001
[  437.941116][ T4273] XFS (loop3): Unmounting Filesystem
[  437.958610][ T6719] kworker/u4:16: attempt to access beyond end of device
[  437.958610][ T6719] loop5: rw=0, sector=1, nr_sectors = 1 limit=0
[  438.002361][ T6719] BFS-fs: find_inode(): Unable to read inode loop5:00000000
[  438.053003][ T6719] kworker/u4:16: attempt to access beyond end of device
[  438.053003][ T6719] loop5: rw=0, sector=1, nr_sectors = 1 limit=0
[  438.106882][ T6719] BFS-fs: find_inode(): Unable to read inode loop5:00000002
[  438.876617][T11839] FAULT_INJECTION: forcing a failure.
[  438.876617][T11839] name failslab, interval 1, probability 0, space 0, times 0
[  438.941533][   T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.944435][T11839] CPU: 0 PID: 11839 Comm: syz.1.2334 Not tainted syzkaller #0
[  438.959769][T11839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  438.969865][T11839] Call Trace:
[  438.973200][T11839]  <TASK>
[  438.976168][T11839]  dump_stack_lvl+0x188/0x24e
[  438.981019][T11839]  ? show_regs_print_info+0x12/0x12
[  438.986261][T11839]  ? load_image+0x410/0x410
[  438.990799][T11839]  ? __lock_acquire+0x7c40/0x7c40
[  438.995856][T11839]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  439.001879][T11839]  ? __lock_acquire+0x7c40/0x7c40
[  439.006938][T11839]  should_fail_ex+0x390/0x4c0
[  439.011663][T11839]  should_failslab+0x5/0x20
[  439.016191][T11839]  slab_pre_alloc_hook+0x59/0x300
[  439.021255][T11839]  ? copy_net_ns+0x10b/0x5b0
[  439.025883][T11839]  __kmem_cache_alloc_node+0x4f/0x270
[  439.031296][T11839]  ? copy_net_ns+0x10b/0x5b0
[  439.035927][T11839]  __kmalloc+0xa3/0x240
[  439.040125][T11839]  copy_net_ns+0x10b/0x5b0
[  439.044576][T11839]  create_new_namespaces+0x3ce/0x700
[  439.050000][T11839]  unshare_nsproxy_namespaces+0x116/0x160
[  439.055765][T11839]  ksys_unshare+0x4f6/0x8e0
[  439.060336][T11839]  ? sighand_ctor+0x40/0x40
[  439.064886][T11839]  ? lock_chain_count+0x20/0x20
[  439.069775][T11839]  ? syscall_enter_from_user_mode+0x21/0x80
[  439.075708][T11839]  __x64_sys_unshare+0x34/0x40
[  439.080498][T11839]  do_syscall_64+0x4c/0xa0
[  439.084940][T11839]  ? clear_bhb_loop+0x60/0xb0
[  439.089640][T11839]  ? clear_bhb_loop+0x60/0xb0
[  439.094345][T11839]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  439.100271][T11839] RIP: 0033:0x7f7af3d9e159
[  439.104713][T11839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.124343][T11839] RSP: 002b:00007f7af4bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  439.132786][T11839] RAX: ffffffffffffffda RBX: 00007f7af4025fa0 RCX: 00007f7af3d9e159
[  439.140783][T11839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000200
[  439.148772][T11839] RBP: 00007f7af3e3506b R08: 0000000000000000 R09: 0000000000000000
[  439.156756][T11839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  439.156773][T11839] R13: 00007f7af4026038 R14: 00007f7af4025fa0 R15: 00007fffed1ce0a8
[  439.172764][T11839]  </TASK>
[  439.176674][    C0] net_ratelimit: 62 callbacks suppressed
[  439.179186][   T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.416723][   T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.437563][   T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.707911][   T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.762946][   T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.858935][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  439.865320][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  440.016836][   T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.045868][   T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.267542][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  440.280258][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  440.289349][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  440.309530][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  440.321894][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  440.329755][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  440.934809][T11876] loop4: detected capacity change from 0 to 2048
[  441.017002][T11876] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  441.065452][T11876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  441.841291][T11891] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  441.964603][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805544f000: rx timeout, send abort
[  442.416167][ T4278] Bluetooth: hci3: command 0x0409 tx timeout
[  442.464489][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805544fc00: rx timeout, send abort
[  442.473066][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805544f000: abort rx timeout. Force session deactivation
[  442.596278][ T7967] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  442.786092][ T7967] usb 5-1: Using ep0 maxpacket: 8
[  442.800799][ T7967] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  442.830141][ T7967] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  442.873018][ T7967] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  442.913361][ T7967] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  442.933247][ T7967] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  442.955021][ T7967] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  442.964257][ T7967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.972756][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805544fc00: abort rx timeout. Force session deactivation
[  443.055659][T11864] chnl_net:caif_netlink_parms(): no params data found
[  443.222018][ T7967] usb 5-1: usb_control_msg returned -32
[  443.228233][ T7967] usbtmc 5-1:16.0: can't read capabilities
[  443.483259][   T60] device hsr_slave_0 left promiscuous mode
[  443.501132][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.514748][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.523288][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.531377][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.539682][   T60] device bridge_slave_1 left promiscuous mode
[  443.546609][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.563279][   T60] device bridge_slave_0 left promiscuous mode
[  443.570272][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.673658][   T60] device veth1_macvtap left promiscuous mode
[  443.687462][   T60] device veth0_macvtap left promiscuous mode
[  443.693629][   T60] device veth1_vlan left promiscuous mode
[  443.700328][   T60] device veth0_vlan left promiscuous mode
[  444.293001][ T7967] usb 5-1: USB disconnect, device number 22
[  444.501777][    C1] net_ratelimit: 68 callbacks suppressed
[  444.507692][ T4278] Bluetooth: hci3: command 0x041b tx timeout
[  444.792224][   T60] team0 (unregistering): Port device team_slave_1 removed
[  444.901313][   T60] team0 (unregistering): Port device team_slave_0 removed
[  444.971118][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.045327][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.646966][   T60] bond0 (unregistering): Released all slaves
[  445.933391][T11864] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.948443][T11864] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.957011][T11864] device bridge_slave_0 entered promiscuous mode
[  445.966009][T11864] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.973124][T11864] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.981685][T11864] device bridge_slave_1 entered promiscuous mode
[  446.035636][T11864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.047990][T11864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.132786][T11864] team0: Port device team_slave_0 added
[  446.143581][T11864] team0: Port device team_slave_1 added
[  446.206510][T11864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.213511][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.243415][T11864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.257281][T11864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.264279][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.300925][T11864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.452170][T11864] device hsr_slave_0 entered promiscuous mode
[  446.488265][T11864] device hsr_slave_1 entered promiscuous mode
[  446.502646][T11864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  446.512369][T11864] Cannot create hsr debugfs directory
[  446.576040][ T4278] Bluetooth: hci3: command 0x040f tx timeout
[  447.212294][T11864] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  447.267089][T11864] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  447.294289][T11864] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  447.336354][T11864] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  447.527316][T11864] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.564039][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  447.578974][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  447.598499][T11864] 8021q: adding VLAN 0 to HW filter on device team0
[  447.617625][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  447.633993][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  447.643778][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.650933][ T6710] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.680718][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  447.693605][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  447.708727][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  447.718372][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.725502][ T6710] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.733405][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  447.762599][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  447.774797][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  447.811927][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  447.835738][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  447.863265][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  447.887735][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  447.909568][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  447.921460][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  447.954342][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  447.967512][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  447.990514][T11864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  448.363522][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  448.381622][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  448.398904][T11864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.656995][ T4278] Bluetooth: hci3: command 0x0419 tx timeout
[  448.843473][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  448.862182][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  448.914456][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  448.932441][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  448.946058][T11864] device veth0_vlan entered promiscuous mode
[  448.962227][T11864] device veth1_vlan entered promiscuous mode
[  448.989486][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  449.003854][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  449.033818][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  449.052353][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  449.067795][T11864] device veth0_macvtap entered promiscuous mode
[  449.085315][T11864] device veth1_macvtap entered promiscuous mode
[  449.113544][T11864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.132524][T11864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.144953][T11864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.162909][T11864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.173934][T11864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.190013][T11864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.201705][T11864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.212463][T11864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.224378][T11864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.235779][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  449.250957][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  449.264604][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  449.282772][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  449.300805][T11864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.312296][T11864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.323245][T11864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.333907][T11864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.344203][T11864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  449.354863][T11864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.373365][T11864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.385660][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  449.409970][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  449.424745][T11864] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.439746][T11864] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.448966][T11864] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.458478][T11864] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.507279][ T6710] net_ratelimit: 55 callbacks suppressed
[  449.609411][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.626163][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.642254][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  449.691594][ T4450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.705990][ T4450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.714188][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  449.882118][T11989] loop3: detected capacity change from 0 to 512
[  449.914194][T11986] capability: warning: `syz.4.2368' uses 32-bit capabilities (legacy support in use)
[  449.997184][T11989] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  450.192338][T11989] EXT4-fs (loop3): 1 truncate cleaned up
[  450.210789][T11989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  450.279493][   T26] audit: type=1800 audit(1790654760.298:365): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2367" name="file0" dev="loop3" ino=13 res=0 errno=0
[  450.399714][T12003] loop4: detected capacity change from 0 to 16
[  450.454072][T12003] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  450.471142][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  451.365916][  T128] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  451.565997][  T128] usb 5-1: Using ep0 maxpacket: 16
[  451.573596][  T128] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  451.602869][  T128] usb 5-1: config 1 has no interface number 0
[  451.635654][  T128] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  451.678041][  T128] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  451.725922][  T128] usb 5-1: config 1 interface 105 has no altsetting 0
[  451.761804][  T128] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  451.792069][  T128] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  451.820832][  T128] usb 5-1: Product: syz
[  451.826043][  T128] usb 5-1: Manufacturer: syz
[  451.830712][  T128] usb 5-1: SerialNumber: syz
[  451.876911][T12016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  451.884217][T12016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  452.176774][ T4278] Bluetooth: hci0: command 0x0406 tx timeout
[  452.368700][T12016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  452.384021][T12016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  453.026035][  T128] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  453.057734][  T128] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  453.130850][  T128] aqc111 5-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a2:b7:05:07:1d:1c
[  453.216401][  T128] usb 5-1: USB disconnect, device number 23
[  453.238740][  T128] aqc111 5-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  453.374297][T12062] FAULT_INJECTION: forcing a failure.
[  453.374297][T12062] name failslab, interval 1, probability 0, space 0, times 0
[  453.396146][T12062] CPU: 0 PID: 12062 Comm: syz.3.2380 Not tainted syzkaller #0
[  453.403667][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  453.413773][T12062] Call Trace:
[  453.417085][T12062]  <TASK>
[  453.420052][T12062]  dump_stack_lvl+0x188/0x24e
[  453.424784][T12062]  ? show_regs_print_info+0x12/0x12
[  453.430034][T12062]  ? load_image+0x410/0x410
[  453.434596][T12062]  ? __might_sleep+0xd0/0xd0
[  453.439224][T12062]  ? __lock_acquire+0x7c40/0x7c40
[  453.444390][T12062]  should_fail_ex+0x390/0x4c0
[  453.449128][T12062]  should_failslab+0x5/0x20
[  453.453847][T12062]  slab_pre_alloc_hook+0x59/0x300
[  453.458933][T12062]  ? kvmalloc_node+0x6c/0x180
[  453.463686][T12062]  __kmem_cache_alloc_node+0x4f/0x270
[  453.469114][T12062]  ? kvmalloc_node+0x6c/0x180
[  453.473843][T12062]  __kmalloc_node+0xa2/0x240
[  453.478488][T12062]  kvmalloc_node+0x6c/0x180
[  453.483046][T12062]  bpf_test_run_xdp_live+0x206/0x1a90
[  453.488471][T12062]  ? verify_lock_unused+0x140/0x140
[  453.493733][T12062]  ? kasan_set_track+0x60/0x70
[  453.498546][T12062]  ? __kasan_kmalloc+0x8e/0xa0
[  453.503357][T12062]  ? __kmalloc+0xb3/0x240
[  453.507740][T12062]  ? bpf_test_init+0x9f/0x140
[  453.512467][T12062]  ? bpf_prog_test_run_xdp+0x488/0xf80
[  453.517985][T12062]  ? __sys_bpf+0x62b/0x780
[  453.522457][T12062]  ? __x64_sys_bpf+0x78/0x90
[  453.527099][T12062]  ? do_syscall_64+0x4c/0xa0
[  453.531732][T12062]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  453.537869][T12062]  ? xdp_convert_md_to_buff+0x330/0x330
[  453.543485][T12062]  ? __lock_acquire+0x7c40/0x7c40
[  453.548575][T12062]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  453.554879][T12062]  ? bpf_test_init+0x119/0x140
[  453.559701][T12062]  ? xdp_convert_md_to_buff+0x5b/0x330
[  453.565215][T12062]  bpf_prog_test_run_xdp+0x757/0xf80
[  453.570563][T12062]  ? __lock_acquire+0x7c40/0x7c40
[  453.575659][T12062]  ? dev_put+0x80/0x80
[  453.579788][T12062]  ? dev_put+0x80/0x80
[  453.583912][T12062]  bpf_prog_test_run+0x31c/0x390
[  453.588903][T12062]  __sys_bpf+0x62b/0x780
[  453.593210][T12062]  ? bpf_link_show_fdinfo+0x380/0x380
[  453.598662][T12062]  ? lock_chain_count+0x20/0x20
[  453.603579][T12062]  __x64_sys_bpf+0x78/0x90
[  453.608057][T12062]  do_syscall_64+0x4c/0xa0
[  453.612520][T12062]  ? clear_bhb_loop+0x60/0xb0
[  453.617245][T12062]  ? clear_bhb_loop+0x60/0xb0
[  453.621988][T12062]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  453.627942][T12062] RIP: 0033:0x7f56e759e159
[  453.632380][T12062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.652031][T12062] RSP: 002b:00007f56e848c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  453.660496][T12062] RAX: ffffffffffffffda RBX: 00007f56e7825fa0 RCX: 00007f56e759e159
[  453.668511][T12062] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  453.676517][T12062] RBP: 00007f56e763506b R08: 0000000000000000 R09: 0000000000000000
[  453.676536][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.692503][T12062] R13: 00007f56e7826038 R14: 00007f56e7825fa0 R15: 00007ffd25b4d028
[  453.692540][T12062]  </TASK>
[  453.926737][  T128] aqc111 5-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  453.974003][  T128] aqc111 5-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  454.017673][  T128] aqc111 5-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  454.292410][T12078] overlayfs: failed to clone upperpath
[  454.323109][T12076] device gretap0 entered promiscuous mode
[  454.346479][T12076] device vlan2 entered promiscuous mode
[  454.575862][    C0] net_ratelimit: 72 callbacks suppressed
[  454.723277][T12087] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  455.906078][T12093] syz.4.2388 (12093) used greatest stack depth: 17280 bytes left
[  455.920956][T12095] syz.4.2388 (12095) used greatest stack depth: 16016 bytes left
[  456.325961][ T5705] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  456.526101][ T5705] usb 9-1: Using ep0 maxpacket: 8
[  456.542681][ T5705] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  456.582103][ T5705] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  456.627651][ T5705] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  456.670860][ T5705] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  456.719921][ T5705] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  456.775992][ T5705] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  456.799375][ T5705] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.068147][ T5705] usb 9-1: usb_control_msg returned -32
[  457.074430][ T5705] usbtmc 9-1:16.0: can't read capabilities
[  457.415926][T12114] loop4: detected capacity change from 0 to 32768
[  457.460456][T12114] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  457.481216][T12114] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  457.499678][T12114] BTRFS info (device loop4): using free space tree
[  457.626198][T12114] BTRFS info (device loop4): enabling ssd optimizations
[  458.063043][ T8487] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  458.078053][ T7967] usb 9-1: USB disconnect, device number 2
[  458.715721][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'.
[  459.112605][T12174] loop8: detected capacity change from 0 to 128
[  459.165633][T12174] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  459.182781][T12162] device hsr_slave_1 left promiscuous mode
[  459.273077][T12174] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  459.312530][T12174] ext2 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  459.534148][T12180] device gretap0 entered promiscuous mode
[  459.565579][T12180] device vlan2 entered promiscuous mode
[  459.615882][    C1] net_ratelimit: 61 callbacks suppressed
[  459.674692][T12174] EXT4-fs error (device loop8): dx_make_map:1328: inode #2: block 33: comm syz.8.2403: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  459.723191][T12174] EXT4-fs (loop8): Remounting filesystem read-only
[  459.731674][T12174] EXT4-fs error (device loop8) in do_split:2097: Corrupt filesystem
[  459.747006][T12174] EXT4-fs (loop8): Remounting filesystem read-only
[  459.774623][T12192] EXT4-fs error (device loop8): dx_make_map:1328: inode #2: block 33: comm syz.8.2403: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  459.819482][T12192] EXT4-fs (loop8): Remounting filesystem read-only
[  459.834050][T12192] EXT4-fs error (device loop8) in do_split:2097: Corrupt filesystem
[  459.862244][T12192] EXT4-fs (loop8): Remounting filesystem read-only
[  459.946007][ T5705] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  460.079580][T11864] EXT4-fs (loop8): unmounting filesystem.
[  460.098727][T12199] device vlan0 entered promiscuous mode
[  460.115307][T12198] device vlan0 left promiscuous mode
[  460.148429][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.185568][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.216695][ T5705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  460.271170][ T5705] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  460.319206][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.360326][ T5705] usb 5-1: config 0 descriptor??
[  460.805763][ T5705] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving
[  460.846013][ T5705] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  461.247052][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2419'.
[  461.666192][T12226] device hsr_slave_1 left promiscuous mode
[  461.819506][T12240] FAULT_INJECTION: forcing a failure.
[  461.819506][T12240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  461.903614][T12240] CPU: 0 PID: 12240 Comm: syz.8.2422 Not tainted syzkaller #0
[  461.911154][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  461.921248][T12240] Call Trace:
[  461.924575][T12240]  <TASK>
[  461.927552][T12240]  dump_stack_lvl+0x188/0x24e
[  461.932293][T12240]  ? show_regs_print_info+0x12/0x12
[  461.937557][T12240]  ? load_image+0x410/0x410
[  461.942126][T12240]  ? __lock_acquire+0x7c40/0x7c40
[  461.947217][T12240]  should_fail_ex+0x390/0x4c0
[  461.951963][T12240]  _copy_from_user+0x2c/0x170
[  461.956719][T12240]  do_handle_open+0x1d2/0x870
[  461.961485][T12240]  ? __ia32_compat_sys_open_by_handle_at+0x80/0x80
[  461.968055][T12240]  ? lockdep_hardirqs_on+0x94/0x140
[  461.973323][T12240]  do_syscall_64+0x4c/0xa0
[  461.977799][T12240]  ? clear_bhb_loop+0x60/0xb0
[  461.982525][T12240]  ? clear_bhb_loop+0x60/0xb0
[  461.987233][T12240]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  461.987276][T12240] RIP: 0033:0x7fe96739e159
[  461.987297][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  461.987314][T12240] RSP: 002b:00007fe968269028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  461.993691][T12240] RAX: ffffffffffffffda RBX: 00007fe967625fa0 RCX: 00007fe96739e159
[  461.993714][T12240] RDX: 0000000000121101 RSI: 0000200000000040 RDI: 0000000000000003
[  461.993730][T12240] RBP: 00007fe96743506b R08: 0000000000000000 R09: 0000000000000000
[  461.993745][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.058623][T12240] R13: 00007fe967626038 R14: 00007fe967625fa0 R15: 00007ffc4ec6ab48
[  462.066636][T12240]  </TASK>
[  462.940999][ T4323] usb 5-1: USB disconnect, device number 24
[  464.815962][    C1] net_ratelimit: 58 callbacks suppressed
[  467.177798][T12304] device geneve1 entered promiscuous mode
[  467.862371][T12306] loop4: detected capacity change from 0 to 40427
[  467.894135][T12306] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  467.975929][T12306] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  468.033690][T12306] F2FS-fs (loop4): Found nat_bits in checkpoint
[  468.142437][T12306] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  468.161912][T12306] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  468.452884][T12306] syz.4.2446: attempt to access beyond end of device
[  468.452884][T12306] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  468.886781][ T4450] kworker/u4:8: attempt to access beyond end of device
[  468.886781][ T4450] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  470.016053][    C1] net_ratelimit: 58 callbacks suppressed
[  470.437042][T12339] loop3: detected capacity change from 0 to 40427
[  470.459099][T12339] F2FS-fs (loop3): invalid crc value
[  470.483786][T12339] F2FS-fs (loop3): Found nat_bits in checkpoint
[  470.643597][T12339] F2FS-fs (loop3): Start checkpoint disabled!
[  470.747287][T12339] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  471.588922][ T4450] kworker/u4:8: attempt to access beyond end of device
[  471.588922][ T4450] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  472.591990][T12376] loop8: detected capacity change from 0 to 40427
[  472.676966][T12376] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  472.686011][T12376] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  472.741362][T12376] F2FS-fs (loop8): Found nat_bits in checkpoint
[  472.932587][T12376] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  472.943593][T12376] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  475.056337][    C1] net_ratelimit: 69 callbacks suppressed
[  477.176317][T12534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2513'.
[  477.223957][T12534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2513'.
[  477.401772][T12539] loop3: detected capacity change from 0 to 256
[  477.544820][T12539] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  477.643342][T12545] fuse: Bad value for 'fd'
[  478.243632][T12561] device gretap0 entered promiscuous mode
[  478.296286][T12561] device vlan2 entered promiscuous mode
[  479.732396][T12578] loop3: detected capacity change from 0 to 40427
[  479.772661][T12578] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  479.842903][T12578] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  479.964251][T12578] F2FS-fs (loop3): Found nat_bits in checkpoint
[  480.176242][    C1] net_ratelimit: 54 callbacks suppressed
[  480.203319][T12578] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  480.217746][T12578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  480.834907][T12620] FAULT_INJECTION: forcing a failure.
[  480.834907][T12620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.906126][T12620] CPU: 0 PID: 12620 Comm: syz.4.2548 Not tainted syzkaller #0
[  480.913700][T12620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  480.923804][T12620] Call Trace:
[  480.927127][T12620]  <TASK>
[  480.930107][T12620]  dump_stack_lvl+0x188/0x24e
[  480.934841][T12620]  ? show_regs_print_info+0x12/0x12
[  480.940091][T12620]  ? load_image+0x410/0x410
[  480.944646][T12620]  ? __lock_acquire+0x7c40/0x7c40
[  480.949723][T12620]  ? do_futex+0x310/0x320
[  480.954104][T12620]  should_fail_ex+0x390/0x4c0
[  480.958862][T12620]  strncpy_from_user+0x32/0x340
[  480.963777][T12620]  __se_sys_add_key+0xd8/0x410
[  480.968597][T12620]  ? __x64_sys_add_key+0xc0/0xc0
[  480.973585][T12620]  ? lockdep_hardirqs_on+0x94/0x140
[  480.978855][T12620]  ? __x64_sys_add_key+0x1c/0xc0
[  480.983844][T12620]  do_syscall_64+0x4c/0xa0
[  480.988311][T12620]  ? clear_bhb_loop+0x60/0xb0
[  480.993033][T12620]  ? clear_bhb_loop+0x60/0xb0
[  480.997752][T12620]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  481.003703][T12620] RIP: 0033:0x7fabc179e159
[  481.008166][T12620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.027823][T12620] RSP: 002b:00007fabc25f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  481.036282][T12620] RAX: ffffffffffffffda RBX: 00007fabc1a25fa0 RCX: 00007fabc179e159
[  481.044317][T12620] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 00002000000003c0
[  481.052336][T12620] RBP: 00007fabc183506b R08: fffffffffffffffd R09: 0000000000000000
[  481.060354][T12620] R10: 00000000000000c9 R11: 0000000000000246 R12: 0000000000000000
[  481.068363][T12620] R13: 00007fabc1a26038 R14: 00007fabc1a25fa0 R15: 00007fff735a28f8
[  481.076392][T12620]  </TASK>
[  481.303499][T12625] device gretap0 entered promiscuous mode
[  481.347528][T12625] device vlan2 entered promiscuous mode
[  482.422237][T12653] netlink: 204 bytes leftover after parsing attributes in process `syz.8.2546'.
[  482.444393][T12653] netlink: 232 bytes leftover after parsing attributes in process `syz.8.2546'.
[  482.979315][T12670] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2556'.
[  483.023938][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2556'.
[  484.814335][T12739] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2575'.
[  484.886366][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2575'.
[  485.216013][ T6715] net_ratelimit: 62 callbacks suppressed
[  485.349796][T12755] loop8: detected capacity change from 0 to 512
[  485.371501][T12755] EXT4-fs: Ignoring removed nobh option
[  485.386024][ T5705] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  485.540405][T12755] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2578: invalid indirect mapped block 256 (level 2)
[  485.615448][T12755] EXT4-fs (loop8): 2 truncates cleaned up
[  485.622347][ T5705] usb 4-1: Using ep0 maxpacket: 16
[  485.628275][T12755] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  485.639702][ T5705] usb 4-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.666557][ T5705] usb 4-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  485.742246][ T5705] usb 4-1: config 0 interface 0 has no altsetting 0
[  485.788556][ T5705] usb 4-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00
[  485.838024][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.889857][ T5705] usb 4-1: config 0 descriptor??
[  485.911118][T11864] EXT4-fs (loop8): unmounting filesystem.
[  485.930533][ T5705] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  486.204442][T12765] Bluetooth: MGMT ver 1.22
[  486.286286][T12769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2584'.
[  486.314683][ T5705] wacom 0003:056A:00E6.001F: hidraw0: USB HID v0.05 Device [HID 056a:00e6] on usb-dummy_hcd.3-1/input0
[  486.531013][ T4323] usb 4-1: USB disconnect, device number 25
[  486.700389][T12773] fido_id[12773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  486.810522][T12779] xt_hashlimit: overflow, rate too high: 0
[  486.911422][T12781] Bluetooth: MGMT ver 1.22
[  487.115765][T12787] device vlan2 entered promiscuous mode
[  487.749173][ T5705] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  487.958053][ T5705] usb 4-1: config 4 has an invalid interface number: 44 but max is 0
[  487.982047][ T5705] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  488.022981][ T5705] usb 4-1: config 4 has no interface number 0
[  488.037471][ T5705] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  488.083712][ T5705] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  488.114808][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.147286][ T5705] usb 4-1: Product: syz
[  488.151519][ T5705] usb 4-1: Manufacturer: syz
[  488.177212][ T5705] usb 4-1: SerialNumber: syz
[  488.453432][T12819] xt_hashlimit: overflow, rate too high: 0
[  488.648011][ T5705] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  488.683817][ T5705] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  488.695044][ T5705] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  488.712392][ T5705] usb 4-1: media controller created
[  488.761917][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  488.915316][T12794] i2c i2c-1: Invalid block size returned: 206
[  489.045642][ T5705] DVB: Unable to find symbol dib7000p_attach()
[  489.055065][ T5705] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  489.369896][ T5705] rc_core: IR keymap rc-dib0700-rc5 not found
[  489.378859][ T5705] Registered IR keymap rc-empty
[  489.384280][ T5705] dvb-usb: could not initialize remote control.
[  489.403630][ T5705] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  489.482864][ T5705] usb 4-1: USB disconnect, device number 26
[  489.579851][ T5705] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  490.255878][    C1] net_ratelimit: 66 callbacks suppressed
[  490.295987][ T5705] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  490.496384][ T5705] usb 4-1: Using ep0 maxpacket: 16
[  490.510644][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  490.555888][ T5705] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  490.586046][ T5705] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  490.616417][ T5705] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  490.652571][ T5705] usb 4-1: config 0 interface 0 has no altsetting 0
[  490.660019][ T5705] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  490.677302][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.709628][ T5705] usb 4-1: config 0 descriptor??
[  491.195184][ T5705] logitech-djreceiver 0003:046D:C53A.0020: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0
[  491.400289][ T5709] usb 4-1: USB disconnect, device number 27
[  491.648592][T12871] fido_id[12871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  491.960166][   T26] audit: type=1326 audit(1790654801.958:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  492.082762][   T26] audit: type=1326 audit(1790654801.968:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  492.312732][   T26] audit: type=1326 audit(1790654801.968:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  492.462479][T12882] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2629'.
[  492.595128][   T26] audit: type=1326 audit(1790654801.968:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  492.737314][   T26] audit: type=1326 audit(1790654801.968:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  492.787099][   T26] audit: type=1326 audit(1790654801.968:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  492.811824][   T26] audit: type=1326 audit(1790654801.968:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  492.837958][   T26] audit: type=1326 audit(1790654801.968:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  492.864646][   T26] audit: type=1326 audit(1790654801.968:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  492.889314][   T26] audit: type=1326 audit(1790654801.968:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.7.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6899e159 code=0x7ffc0000
[  493.623579][T12897] overlayfs: failed to clone upperpath
[  494.327839][T12924] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2633'.
[  494.438938][T12924] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  494.448979][T12924] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  494.457856][T12924] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  494.466601][T12924] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  494.511084][T12924] device vxlan0 entered promiscuous mode
[  495.536137][    C1] net_ratelimit: 62 callbacks suppressed
[  496.073571][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2653'.
[  496.501816][T12991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2655'.
[  496.569091][T12991] device vxlan1 entered promiscuous mode
[  497.224996][T12997] netlink: 'syz.1.2669': attribute type 21 has an invalid length.
[  497.256425][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'.
[  497.286422][T12997] netlink: 'syz.1.2669': attribute type 21 has an invalid length.
[  497.294392][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'.
[  498.281616][T13010] loop3: detected capacity change from 0 to 32768
[  498.364317][T13010] JBD2: Ignoring recovery information on journal
[  498.473227][T13010] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  498.607870][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  498.607885][   T26] audit: type=1804 audit(1790654808.628:380): pid=13010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2662" name="/newroot/516/file1/file1" dev="loop3" ino=17059 res=1 errno=0
[  498.917166][ T4273] ocfs2: Unmounting device (7,3) on (node local)
[  499.019277][T13028] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2668'.
[  500.895853][    C1] net_ratelimit: 65 callbacks suppressed
[  500.938251][ T4324] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  501.020109][T13089] input: syz1 as /devices/virtual/input/input43
[  501.128050][ T4324] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  501.160297][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  501.201852][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  501.212011][ T4324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  501.234132][ T4324] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  501.272047][ T4324] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  501.287774][ T4324] usb 4-1: Manufacturer: syz
[  501.295199][ T4324] usb 4-1: config 0 descriptor??
[  501.309618][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  501.316111][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  501.759114][ T4324] appleir 0003:05AC:8243.0021: unknown main item tag 0x0
[  501.795278][ T4324] appleir 0003:05AC:8243.0021: No inputs registered, leaving
[  501.821791][ T4324] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  501.849384][T13103] netlink: 'syz.4.2698': attribute type 21 has an invalid length.
[  501.890783][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2698'.
[  501.955278][T13103] netlink: 'syz.4.2698': attribute type 21 has an invalid length.
[  501.986811][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2698'.
[  502.516836][T13122] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2707'.
[  502.637052][  T128] usb 4-1: USB disconnect, device number 28
[  502.912481][T13132] loop8: detected capacity change from 0 to 2048
[  503.006699][T13132] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  503.114859][T11864] EXT4-fs (loop8): unmounting filesystem.
[  503.410375][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  503.447097][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  503.530035][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  503.546131][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  503.568062][T13146] device bridge_slave_0 left promiscuous mode
[  503.590825][T13146] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.652640][T13146] device bridge_slave_1 left promiscuous mode
[  503.670860][T13150] loop8: detected capacity change from 0 to 256
[  503.696555][T13146] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.734239][T13146] bond0: (slave bond_slave_0): Releasing backup interface
[  503.792508][T13146] bond0: (slave bond_slave_1): Releasing backup interface
[  503.953950][T13146] team0: Port device team_slave_0 removed
[  504.133178][T13146] team0: Port device team_slave_1 removed
[  504.173475][T13146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  504.214744][T13146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  504.245136][T13146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.278226][T13146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.397002][T13146] bond1: (slave geneve2): Releasing active interface
[  504.542779][T13148] team0: Port device xfrm0 added
[  504.792494][T13177] overlayfs: failed to clone upperpath
[  505.120210][T13170] loop4: detected capacity change from 0 to 32768
[  505.267886][T13170] XFS (loop4): Mounting V5 Filesystem
[  505.344097][T13170] XFS (loop4): Ending clean mount
[  505.392154][   T26] audit: type=1800 audit(1790654815.408:381): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2727" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  505.696195][ T8487] XFS (loop4): Unmounting Filesystem
[  505.935870][    C0] net_ratelimit: 56 callbacks suppressed
[  505.965099][T13211] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock
[  506.106114][T13218] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.282594][T13218] device bridge_slave_1 left promiscuous mode
[  506.305990][T13218] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.416017][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  506.650903][T13217] loop8: detected capacity change from 0 to 32768
[  506.753042][T13217] JBD2: Ignoring recovery information on journal
[  506.986624][T13217] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  507.194210][   T26] audit: type=1804 audit(1790654817.208:382): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2735" name="/newroot/75/file1/file1" dev="loop8" ino=17059 res=1 errno=0
[  507.467958][T11864] ocfs2: Unmounting device (7,8) on (node local)
[  508.104747][T13242] loop8: detected capacity change from 0 to 128
[  508.156868][T13224] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.164254][T13224] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.173067][T13242] EXT4-fs: Ignoring removed i_version option
[  508.213484][T13242] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  508.267786][T13242] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  508.804971][T11864] EXT4-fs (loop8): unmounting filesystem.
[  509.055621][T13259] FAULT_INJECTION: forcing a failure.
[  509.055621][T13259] name failslab, interval 1, probability 0, space 0, times 0
[  509.076177][T13259] CPU: 1 PID: 13259 Comm: syz.8.2750 Not tainted syzkaller #0
[  509.083701][T13259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  509.093796][T13259] Call Trace:
[  509.097118][T13259]  <TASK>
[  509.100085][T13259]  dump_stack_lvl+0x188/0x24e
[  509.104799][T13259]  ? show_regs_print_info+0x12/0x12
[  509.110032][T13259]  ? load_image+0x410/0x410
[  509.114610][T13259]  ? __might_sleep+0xd0/0xd0
[  509.119230][T13259]  ? __lock_acquire+0x7c40/0x7c40
[  509.124289][T13259]  should_fail_ex+0x390/0x4c0
[  509.129006][T13259]  should_failslab+0x5/0x20
[  509.133535][T13259]  slab_pre_alloc_hook+0x59/0x300
[  509.138599][T13259]  kmem_cache_alloc+0x56/0x2f0
[  509.143414][T13259]  ? sk_prot_alloc+0x57/0x210
[  509.148132][T13259]  sk_prot_alloc+0x57/0x210
[  509.152664][T13259]  ? sk_alloc+0x20/0x330
[  509.156956][T13259]  sk_alloc+0x36/0x330
[  509.161059][T13259]  tipc_sk_create+0xe6/0x2930
[  509.165788][T13259]  ? rcu_read_unlock+0x8c/0xa0
[  509.170600][T13259]  ? __lock_acquire+0x7c40/0x7c40
[  509.175665][T13259]  __sock_create+0x49a/0x940
[  509.180294][T13259]  __sys_socketpair+0x1bd/0x540
[  509.185181][T13259]  __x64_sys_socketpair+0x97/0xb0
[  509.190237][T13259]  do_syscall_64+0x4c/0xa0
[  509.194674][T13259]  ? clear_bhb_loop+0x60/0xb0
[  509.199380][T13259]  ? clear_bhb_loop+0x60/0xb0
[  509.204084][T13259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  509.210013][T13259] RIP: 0033:0x7fe96739e159
[  509.214455][T13259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.234091][T13259] RSP: 002b:00007fe968269028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  509.242535][T13259] RAX: ffffffffffffffda RBX: 00007fe967625fa0 RCX: 00007fe96739e159
[  509.250537][T13259] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e
[  509.258535][T13259] RBP: 00007fe96743506b R08: 0000000000000000 R09: 0000000000000000
[  509.266544][T13259] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[  509.274556][T13259] R13: 00007fe967626038 R14: 00007fe967625fa0 R15: 00007ffc4ec6ab48
[  509.282569][T13259]  </TASK>
[  509.971213][T13224] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.923123][T13224] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  510.932168][T13224] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  510.941650][T13224] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  510.950858][T13224] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  511.020177][T13224] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.030227][T13224] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.040426][T13224] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.050165][T13224] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.184534][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2747'.
[  511.455990][    C0] net_ratelimit: 69 callbacks suppressed
[  511.548206][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2760'.
[  511.908509][T13299] loop3: detected capacity change from 0 to 128
[  511.916994][T13299] EXT4-fs: Ignoring removed i_version option
[  511.985397][T13299] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  512.033677][T13299] ext4 filesystem being mounted at /526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  512.266408][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  512.315515][T13306] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.397781][T13306] device bridge_slave_1 left promiscuous mode
[  512.403990][T13306] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.684474][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2781'.
[  512.877032][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2781'.
[  513.441642][T13335] hugetlbfs: syz.4.2782 (13335): Using mlock ulimits for SHM_HUGETLB is obsolete
[  513.853960][T13342] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.865111][T13355] FAULT_INJECTION: forcing a failure.
[  513.865111][T13355] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  513.886128][T13355] CPU: 1 PID: 13355 Comm: syz.3.2787 Not tainted syzkaller #0
[  513.893639][T13355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  513.893654][T13355] Call Trace:
[  513.893664][T13355]  <TASK>
[  513.906088][ T8319] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  513.907021][T13355]  dump_stack_lvl+0x188/0x24e
[  513.907057][T13355]  ? show_regs_print_info+0x12/0x12
[  513.917461][T13355]  ? load_image+0x410/0x410
[  513.927361][T13355]  ? __lock_acquire+0x7c40/0x7c40
[  513.936919][T13355]  ? kasan_set_track+0x60/0x70
[  513.936956][T13355]  ? slab_post_alloc_hook+0x4b/0x490
[  513.947029][T13355]  should_fail_ex+0x390/0x4c0
[  513.947070][T13355]  prepare_alloc_pages+0x1e1/0x5b0
[  513.956883][T13355]  __alloc_pages+0x130/0x4f0
[  513.956927][T13355]  ? zone_statistics+0x170/0x170
[  513.966483][T13355]  __get_free_pages+0x8/0x30
[  513.971115][T13355]  kasan_populate_vmalloc_pte+0x31/0xf0
[  513.976690][T13355]  ? __apply_to_page_range+0x97b/0xd10
[  513.982206][T13355]  __apply_to_page_range+0x98d/0xd10
[  513.987627][T13355]  ? kasan_populate_vmalloc+0x70/0x70
[  513.993058][T13355]  alloc_vmap_area+0x179f/0x18d0
[  513.998059][T13355]  ? vm_map_ram+0xab0/0xab0
[  513.998103][T13355]  ? rcu_is_watching+0x11/0xa0
[  514.007929][T13355]  __get_vm_area_node+0x158/0x330
[  514.013010][T13355]  vmap+0xf5/0x2c0
[  514.016789][T13355]  ? bpf_ringbuf_alloc+0x30e/0x530
[  514.021946][T13355]  bpf_ringbuf_alloc+0x30e/0x530
[  514.021978][T13355]  ringbuf_map_alloc+0x1ac/0x2d0
[  514.031912][T13355]  map_create+0x524/0xff0
[  514.036299][T13355]  ? security_bpf+0x7a/0xa0
[  514.040846][T13355]  __sys_bpf+0x38b/0x780
[  514.040884][T13355]  ? bpf_link_show_fdinfo+0x380/0x380
[  514.050572][T13355]  ? lock_chain_count+0x20/0x20
[  514.055485][T13355]  __x64_sys_bpf+0x78/0x90
[  514.055521][T13355]  do_syscall_64+0x4c/0xa0
[  514.055546][T13355]  ? clear_bhb_loop+0x60/0xb0
[  514.069094][T13355]  ? clear_bhb_loop+0x60/0xb0
[  514.069126][T13355]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  514.079727][T13355] RIP: 0033:0x7f56e759e159
[  514.079751][T13355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.079771][T13355] RSP: 002b:00007f56e848c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  514.079796][T13355] RAX: ffffffffffffffda RBX: 00007f56e7825fa0 RCX: 00007f56e759e159
[  514.079812][T13355] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000
[  514.084658][T13355] RBP: 00007f56e763506b R08: 0000000000000000 R09: 0000000000000000
[  514.112687][T13355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  514.128648][T13355] R13: 00007f56e7826038 R14: 00007f56e7825fa0 R15: 00007ffd25b4d028
[  514.128708][T13355]  </TASK>
[  514.258165][ T8319] usb 9-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.00
[  514.271059][T13342] device bridge_slave_1 left promiscuous mode
[  514.280683][T13342] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.295167][ T8319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.766497][ T8319] r8152-cfgselector 9-1: reset high-speed USB device number 3 using dummy_hcd
[  514.784183][T13361] loop4: detected capacity change from 0 to 4096
[  514.841125][T13361] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  514.921270][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2792'.
[  514.984070][ T8319] r8152-cfgselector 9-1: device descriptor read/64, error -32
[  515.064322][ T8487] EXT4-fs (loop4): unmounting filesystem.
[  515.287316][T13377] overlayfs: failed to clone upperpath
[  515.307451][ T8319] r8152-cfgselector 9-1: reset high-speed USB device number 3 using dummy_hcd
[  515.476044][ T8319] r8152-cfgselector 9-1: device descriptor read/64, error -32
[  515.660801][T13383] loop3: detected capacity change from 0 to 7
[  515.668695][ T5875] Dev loop3: unable to read RDB block 7
[  515.674382][ T5875]  loop3: unable to read partition table
[  515.682722][ T5875] loop3: partition table beyond EOD, truncated
[  515.691955][T13383] Dev loop3: unable to read RDB block 7
[  515.701415][T13383]  loop3: unable to read partition table
[  515.713402][T13383] loop3: partition table beyond EOD, truncated
[  515.734374][T13383] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  515.745977][ T8319] r8152-cfgselector 9-1: reset high-speed USB device number 3 using dummy_hcd
[  515.787542][ T8319] r8152-cfgselector 9-1: device descriptor read/8, error -32
[  516.055984][ T8319] r8152-cfgselector 9-1: reset high-speed USB device number 3 using dummy_hcd
[  516.505603][ T8319] r8152-cfgselector 9-1: device descriptor read/8, error -71
[  516.575902][    C0] net_ratelimit: 59 callbacks suppressed
[  516.631440][ T8319] r8152 9-1:1.0: USB reset failed, errno=-19
[  516.632105][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'.
[  516.650876][ T8319] r8152-cfgselector 9-1: Unknown version 0x0000
[  516.689929][ T8319] r8152-cfgselector 9-1: USB disconnect, device number 3
[  516.937641][T13392] device bridge_slave_1 left promiscuous mode
[  516.943806][T13392] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.086175][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'.
[  517.308117][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2803'.
[  517.622572][T13408] loop8: detected capacity change from 0 to 2048
[  517.731441][T13408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  517.830829][T13414] loop3: detected capacity change from 0 to 512
[  517.992939][T13414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  518.160521][T13405] loop4: detected capacity change from 0 to 32768
[  518.457201][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  518.808227][T11864] UDF-fs: error (device loop8): udf_read_inode: (ino 1317) failed !bh
[  518.858435][T11864] UDF-fs: error (device loop8): udf_read_inode: (ino 1317) failed !bh
[  518.892150][T13430] loop3: detected capacity change from 0 to 4096
[  518.990384][T13430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  519.683566][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  520.103617][T13427] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.624723][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  520.685339][T13427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.200816][T13427] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.210276][T13427] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.220547][T13427] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.233430][T13427] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.321970][T13427] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.331207][T13427] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.340274][T13427] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.349467][T13427] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  521.620804][    C0] net_ratelimit: 55 callbacks suppressed
[  521.672844][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'.
[  521.741510][T13444] device dummy0 entered promiscuous mode
[  521.801620][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  522.084605][ T4332] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.126002][ T4332] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.346775][ T4332] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.387201][ T4332] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.572157][ T4332] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.627164][ T4332] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.813326][ T4332] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.837227][ T4332] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.233895][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  523.249594][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  523.258692][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  523.268756][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  523.280588][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  523.290014][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  525.240286][T13469] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.256015][T13469] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.272264][T13469] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.281622][T13469] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.376751][ T4281] Bluetooth: hci3: command 0x0409 tx timeout
[  526.037378][T13469] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  526.046444][T13469] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  526.055355][T13469] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  526.064404][T13469] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  526.728180][T13522] net_ratelimit: 45 callbacks suppressed
[  526.728195][T13522] ip_tables: iptables: counters copy to user failed while replacing table
[  527.441700][T13473] chnl_net:caif_netlink_parms(): no params data found
[  527.456606][ T4281] Bluetooth: hci3: command 0x041b tx timeout
[  528.270282][T13473] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.285233][T13473] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.304739][T13473] device bridge_slave_0 entered promiscuous mode
[  528.366489][ T4332] device hsr_slave_0 left promiscuous mode
[  528.373412][ T4332] device hsr_slave_1 left promiscuous mode
[  528.382126][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.390511][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.417095][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.424696][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.434585][ T4332] device bridge_slave_0 left promiscuous mode
[  528.451970][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.624390][ T4332] device veth1_macvtap left promiscuous mode
[  528.635915][ T4332] device veth0_macvtap left promiscuous mode
[  528.642841][ T4332] device veth1_vlan left promiscuous mode
[  528.656030][ T4332] device veth0_vlan left promiscuous mode
[  529.546033][ T4281] Bluetooth: hci3: command 0x040f tx timeout
[  530.587902][ T4332] team0 (unregistering): Port device team_slave_1 removed
[  530.710554][ T4332] team0 (unregistering): Port device team_slave_0 removed
[  530.827672][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.959542][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  531.494183][ T4332] bond0 (unregistering): Released all slaves
[  531.625357][ T4281] Bluetooth: hci3: command 0x0419 tx timeout
[  531.721750][T13473] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.729083][T13473] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.737936][T13473] device bridge_slave_1 entered promiscuous mode
[  531.753301][T13552] device dummy0 entered promiscuous mode
[  531.777500][T13552] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  531.785191][T13552] Cannot create hsr debugfs directory
[  531.790814][T13552] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  531.801093][T13552] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  531.813173][T13565] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2848'.
[  531.972063][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  531.985279][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.024812][ T6715] net_ratelimit: 18 callbacks suppressed
[  532.132758][T13473] team0: Port device team_slave_0 added
[  532.165322][T13473] team0: Port device team_slave_1 added
[  532.275734][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  532.311251][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.348037][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.379960][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.393990][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.428377][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.611356][T13473] device hsr_slave_0 entered promiscuous mode
[  532.636633][T13473] device hsr_slave_1 entered promiscuous mode
[  532.649989][T13473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  532.658988][T13473] Cannot create hsr debugfs directory
[  533.423934][T13473] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  533.485694][T13473] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  533.526489][T13473] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  533.585182][T13473] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  533.752523][T13473] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.769926][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  533.790390][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  533.804985][T13473] 8021q: adding VLAN 0 to HW filter on device team0
[  533.825181][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  533.841016][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  533.852658][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.859861][ T6715] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.879470][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  533.894470][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  533.903694][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  533.918211][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.925343][ T6715] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.934223][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  533.961555][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  533.971472][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  533.990830][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  534.018874][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  534.028205][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  534.038193][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  534.048428][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  534.058388][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  534.067666][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  534.077046][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  534.087684][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  534.431735][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  534.445677][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  534.463247][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.924865][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  534.938690][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  534.982361][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  534.994904][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  535.014759][T13473] device veth0_vlan entered promiscuous mode
[  535.024940][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  535.040750][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  535.055073][T13473] device veth1_vlan entered promiscuous mode
[  535.092877][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  535.103083][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  535.113300][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  535.129158][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  535.145417][T13473] device veth0_macvtap entered promiscuous mode
[  535.158646][T13473] device veth1_macvtap entered promiscuous mode
[  535.183442][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.194814][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.213846][T13473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  535.223791][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  535.240477][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  535.250982][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  535.264671][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  535.284974][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.304967][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.323651][T13473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.332590][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  535.348970][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  535.362281][T13473] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.371623][T13473] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.380839][T13473] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.390656][T13473] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.561760][ T4450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.586635][ T4450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.606005][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  535.658474][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.673647][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.683698][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  535.852277][T13633] FAULT_INJECTION: forcing a failure.
[  535.852277][T13633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.869698][T13638] loop3: detected capacity change from 0 to 256
[  535.892480][T13633] CPU: 0 PID: 13633 Comm: syz.1.2863 Not tainted syzkaller #0
[  535.900006][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  535.910190][T13633] Call Trace:
[  535.910201][T13633]  <TASK>
[  535.910211][T13633]  dump_stack_lvl+0x188/0x24e
[  535.910244][T13633]  ? show_regs_print_info+0x12/0x12
[  535.910269][T13633]  ? load_image+0x410/0x410
[  535.931081][T13633]  ? __lock_acquire+0x7c40/0x7c40
[  535.936152][T13633]  should_fail_ex+0x390/0x4c0
[  535.936194][T13633]  _copy_to_user+0x2c/0x130
[  535.936223][T13633]  move_addr_to_user+0x146/0x1e0
[  535.945500][T13633]  __sys_getsockname+0x216/0x2d0
[  535.945531][T13633]  ? __ia32_sys_connect+0x80/0x80
[  535.945573][T13633]  __x64_sys_getsockname+0x77/0x90
[  535.956148][T13633]  do_syscall_64+0x4c/0xa0
[  535.956176][T13633]  ? clear_bhb_loop+0x60/0xb0
[  535.966318][T13633]  ? clear_bhb_loop+0x60/0xb0
[  535.966355][T13633]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.975462][T13633] RIP: 0033:0x7f7af3d9e159
[  535.986058][T13633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.986080][T13633] RSP: 002b:00007f7af4bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000033
[  535.986106][T13633] RAX: ffffffffffffffda RBX: 00007f7af4025fa0 RCX: 00007f7af3d9e159
[  536.010144][T13633] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000003
[  536.010164][T13633] RBP: 00007f7af3e3506b R08: 0000000000000000 R09: 0000000000000000
[  536.010179][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  536.010193][T13633] R13: 00007f7af4026038 R14: 00007f7af4025fa0 R15: 00007fffed1ce0a8
[  536.026604][T13633]  </TASK>
[  536.073422][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  536.083095][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  536.090648][T13637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  536.100038][T13637] device bridge_slave_0 left promiscuous mode
[  536.117469][T13637] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.125291][T13638] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  536.164479][T13637] device bridge_slave_1 left promiscuous mode
[  536.207565][T13637] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.267494][T13637] bond0: (slave bond_slave_0): Releasing backup interface
[  536.320672][T13637] bond0: (slave bond_slave_1): Releasing backup interface
[  536.421284][T13637] team0: Port device team_slave_0 removed
[  536.439397][T13637] team0: Port device team_slave_1 removed
[  536.446852][T13637] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.454383][T13637] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.471038][T13637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.479760][T13637] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.295943][    C1] net_ratelimit: 38 callbacks suppressed
[  537.566076][ T5705] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  537.787679][ T5705] usb 4-1: not running at top speed; connect to a high speed hub
[  537.804916][ T5705] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  537.871432][ T5705] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  537.931146][ T5705] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  537.962490][ T5705] usb 4-1: Product: syz
[  537.970730][ T5705] usb 4-1: Manufacturer: syz
[  538.014422][ T5705] usb 4-1: Found UVC 1.00 device syz (225a:e1d4)
[  538.021394][ T5705] usb 4-1: No streaming interface found for terminal 2.
[  538.045167][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  538.058738][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  538.077044][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  538.099341][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  538.115625][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  538.123428][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  538.233933][ T4351] usb 4-1: USB disconnect, device number 29
[  538.590475][T13695] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  538.635849][T13695] bond1: (slave lo): Enslaving as an active interface with an up link
[  539.047974][T13703] loop3: detected capacity change from 0 to 512
[  539.174973][T13703] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  539.232011][T13703] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.554356][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  539.691872][T13683] chnl_net:caif_netlink_parms(): no params data found
[  540.086458][T13728] FAULT_INJECTION: forcing a failure.
[  540.086458][T13728] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  540.169764][T13728] CPU: 1 PID: 13728 Comm: syz.3.2875 Not tainted syzkaller #0
[  540.177304][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  540.187406][T13728] Call Trace:
[  540.190732][T13728]  <TASK>
[  540.193707][T13728]  dump_stack_lvl+0x188/0x24e
[  540.198450][T13728]  ? show_regs_print_info+0x12/0x12
[  540.203704][T13728]  ? load_image+0x410/0x410
[  540.208270][T13728]  ? __lock_acquire+0x7c40/0x7c40
[  540.213363][T13728]  should_fail_ex+0x390/0x4c0
[  540.218112][T13728]  _copy_from_user+0x2c/0x170
[  540.222850][T13728]  copy_clone_args_from_user+0x1d8/0x6d0
[  540.228542][T13728]  ? futex_wait_setup+0x270/0x270
[  540.233629][T13728]  ? __delayed_free_task+0x20/0x20
[  540.238797][T13728]  __se_sys_clone3+0x13f/0x3f0
[  540.243621][T13728]  ? __x64_sys_clone3+0x60/0x60
[  540.248506][T13728]  ? do_futex+0x310/0x320
[  540.248568][T13728]  ? lockdep_hardirqs_on+0x94/0x140
[  540.248602][T13728]  do_syscall_64+0x4c/0xa0
[  540.248624][T13728]  ? clear_bhb_loop+0x60/0xb0
[  540.248647][T13728]  ? clear_bhb_loop+0x60/0xb0
[  540.272062][T13728]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  540.278054][T13728] RIP: 0033:0x7f56e759e159
[  540.282517][T13728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.302178][T13728] RSP: 002b:00007f56e848bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  540.310640][T13728] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f56e759e159
[  540.318640][T13728] RDX: 00007f56e848bf10 RSI: 0000000000000058 RDI: 00007f56e848bf10
[  540.318661][T13728] RBP: 00007f56e763506b R08: 0000000000000000 R09: 0000000000000058
[  540.318676][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.318691][T13728] R13: 00007f56e7826038 R14: 00007f56e7825fa0 R15: 00007ffd25b4d028
[  540.318725][T13728]  </TASK>
[  540.371380][ T4281] Bluetooth: hci5: command 0x0409 tx timeout
[  540.476629][T13683] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.483896][T13683] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.492691][T13683] device bridge_slave_0 entered promiscuous mode
[  540.504341][T13683] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.529414][T13683] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.557298][T13683] device bridge_slave_1 entered promiscuous mode
[  540.712914][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2879'.
[  540.752109][T13741] device xfrm1 entered promiscuous mode
[  540.796268][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2879'.
[  540.851070][T13683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  540.943961][T13683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.166230][T13683] team0: Port device team_slave_0 added
[  541.329398][T13683] team0: Port device team_slave_1 added
[  541.537800][T13683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.569986][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.683457][T13683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.750737][T13683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.788941][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.915432][T13683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.089725][T13748] loop9: detected capacity change from 0 to 40427
[  542.147179][T13748] F2FS-fs (loop9): invalid crc value
[  542.203573][T13748] F2FS-fs (loop9): Found nat_bits in checkpoint
[  542.233605][T13683] device hsr_slave_0 entered promiscuous mode
[  542.319984][T13683] device hsr_slave_1 entered promiscuous mode
[  542.367229][T13683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  542.398532][T13683] Cannot create hsr debugfs directory
[  542.416097][ T4281] Bluetooth: hci5: command 0x041b tx timeout
[  542.450218][T13748] F2FS-fs (loop9): Start checkpoint disabled!
[  542.495829][    C1] net_ratelimit: 21 callbacks suppressed
[  542.504922][T13748] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  543.545378][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  543.594621][ T4450] kworker/u4:8: attempt to access beyond end of device
[  543.594621][ T4450] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  544.496382][ T4281] Bluetooth: hci5: command 0x040f tx timeout
[  545.077781][T13829] FAULT_INJECTION: forcing a failure.
[  545.077781][T13829] name failslab, interval 1, probability 0, space 0, times 0
[  545.128115][T13829] CPU: 0 PID: 13829 Comm: syz.1.2902 Not tainted syzkaller #0
[  545.135706][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  545.145875][T13829] Call Trace:
[  545.146058][T13829]  <TASK>
[  545.146071][T13829]  dump_stack_lvl+0x188/0x24e
[  545.146107][T13829]  ? show_regs_print_info+0x12/0x12
[  545.149805][T13829]  ? load_image+0x410/0x410
[  545.157444][T13829]  ? __might_sleep+0xd0/0xd0
[  545.167488][T13829]  ? __lock_acquire+0x7c40/0x7c40
[  545.177202][T13829]  ? mas_prev_entry+0xc16/0xcd0
[  545.182154][T13829]  should_fail_ex+0x390/0x4c0
[  545.186881][T13829]  should_failslab+0x5/0x20
[  545.186905][T13829]  slab_pre_alloc_hook+0x59/0x300
[  545.186938][T13829]  kmem_cache_alloc+0x56/0x2f0
[  545.186961][T13829]  ? __ksm_enter+0x30/0x340
[  545.186986][T13829]  __ksm_enter+0x30/0x340
[  545.187011][T13829]  ksm_madvise+0x26c/0x340
[  545.187030][T13829]  ? blk_start_plug+0x94/0x110
[  545.187059][T13829]  do_madvise+0xd54/0x3520
[  545.187091][T13829]  ? release_firmware_map_entry+0x187/0x187
[  545.187117][T13829]  ? plist_add+0x3d7/0x490
[  545.187148][T13829]  ? madvise_set_anon_name+0x420/0x420
[  545.187175][T13829]  ? schedule+0xd0/0x180
[  545.187196][T13829]  ? futex_wait_queue+0x23/0x1b0
[  545.187219][T13829]  ? futex_wait_queue+0x134/0x1b0
[  545.187242][T13829]  ? futex_unqueue+0xc7/0xf0
[  545.187266][T13829]  ? futex_wait+0x4a3/0x5c0
[  545.187297][T13829]  ? futex_wait_setup+0x270/0x270
[  545.187354][T13829]  ? do_futex+0x310/0x320
[  545.187381][T13829]  ? __ia32_sys_get_robust_list+0x100/0x100
[  545.187425][T13829]  ? lock_chain_count+0x20/0x20
[  545.187463][T13829]  __x64_sys_madvise+0xa2/0xb0
[  545.197011][T13829]  do_syscall_64+0x4c/0xa0
[  545.206296][T13829]  ? clear_bhb_loop+0x60/0xb0
[  545.206322][T13829]  ? clear_bhb_loop+0x60/0xb0
[  545.206348][T13829]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  545.254431][T13829] RIP: 0033:0x7f7af3d9e159
[  545.254456][T13829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  545.263605][T13829] RSP: 002b:00007f7af4bce028 EFLAGS: 00000246
[  545.273001][T13829]  ORIG_RAX: 000000000000001c
[  545.283749][T13829] RAX: ffffffffffffffda RBX: 00007f7af4025fa0 RCX: 00007f7af3d9e159
[  545.283770][T13829] RDX: 000000000000000c RSI: 0000000000003000 RDI: 0000200000000000
[  545.283787][T13829] RBP: 00007f7af3e3506b R08: 0000000000000000 R09: 0000000000000000
[  545.292990][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  545.293007][T13829] R13: 00007f7af4026038 R14: 00007f7af4025fa0 R15: 00007fffed1ce0a8
[  545.302412][T13829]  </TASK>
[  545.430937][T13832] loop9: detected capacity change from 0 to 128
[  545.446502][T13809] loop3: detected capacity change from 0 to 32768
[  545.508021][T13832] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  545.585413][T13809] XFS (loop3): Mounting V5 Filesystem
[  545.589733][T13832] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  545.847555][T13809] XFS (loop3): Ending clean mount
[  545.956936][T13809] XFS (loop3): Quotacheck needed: Please wait.
[  545.968373][T13473] EXT4-fs (loop9): unmounting filesystem.
[  546.117547][T13809] XFS (loop3): Quotacheck: Done.
[  546.360534][ T4273] XFS (loop3): Unmounting Filesystem
[  546.519051][T13683] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  546.576692][ T4281] Bluetooth: hci5: command 0x0419 tx timeout
[  546.638234][T13683] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  546.669950][T13863] fuse: Bad value for 'fd'
[  546.760107][T13683] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  546.804909][T13683] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  547.205998][T13683] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.299662][T13683] 8021q: adding VLAN 0 to HW filter on device team0
[  547.355057][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  547.364157][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  547.418572][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  547.432446][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  547.483506][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.490707][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  547.524290][T13880] loop3: detected capacity change from 0 to 1024
[  547.546444][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  547.599037][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  547.620151][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  547.660173][T13880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  547.695825][    C1] net_ratelimit: 11 callbacks suppressed
[  547.698920][T13880] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  547.743457][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.750643][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  547.798360][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  547.869919][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  547.902551][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  547.928858][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  547.941126][ T4273] EXT4-fs (loop3): unmounting filesystem.
[  547.954942][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  547.971321][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  548.041899][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  548.123591][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  548.166824][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  548.196543][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  548.246623][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  548.268580][T13683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  548.602346][T13907] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  548.635416][T13907] overlayfs: failed to set xattr on upper
[  548.656922][T13907] overlayfs: ...falling back to index=off,metacopy=off.
[  548.701569][T13907] overlayfs: ...falling back to xino=off.
[  549.094632][T13925] loop9: detected capacity change from 0 to 7
[  549.160686][T13925] Dev loop9: unable to read RDB block 7
[  549.195934][T13925]  loop9: unable to read partition table
[  549.201946][T13925] loop9: partition table beyond EOD, 
[  549.226280][T13925] truncated
[  549.229488][T13925] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  549.307453][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  549.315099][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  549.390719][T13683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.501928][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  549.531389][ T6719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  549.632704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  549.657000][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  549.698760][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  549.735202][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  549.775095][T13683] device veth0_vlan entered promiscuous mode
[  549.838039][T13683] device veth1_vlan entered promiscuous mode
[  549.951522][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  549.982516][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  550.037241][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  550.087206][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  550.108926][T13683] device veth0_macvtap entered promiscuous mode
[  550.256646][T13949] netlink: 3568 bytes leftover after parsing attributes in process `syz.9.2935'.
[  550.299770][T13683] device veth1_macvtap entered promiscuous mode
[  550.349960][T13683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  550.416593][T13683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.452940][T13683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  550.491147][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  550.505477][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  550.549455][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  550.563364][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  550.748149][T13683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  550.767566][T13683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.796848][T13683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  550.864638][T13683] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  550.884055][T13683] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  550.894632][T13683] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.911799][T13683] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.966169][T13967] netlink: 'syz.7.2942': attribute type 4 has an invalid length.
[  550.994630][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  551.006966][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  551.338288][T13983] FAULT_INJECTION: forcing a failure.
[  551.338288][T13983] name failslab, interval 1, probability 0, space 0, times 0
[  551.370078][T13980] loop9: detected capacity change from 0 to 1024
[  551.434967][T13983] CPU: 1 PID: 13983 Comm: syz.3.2948 Not tainted syzkaller #0
[  551.442498][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  551.452598][T13983] Call Trace:
[  551.456261][T13983]  <TASK>
[  551.459237][T13983]  dump_stack_lvl+0x188/0x24e
[  551.463965][T13983]  ? show_regs_print_info+0x12/0x12
[  551.469213][T13983]  ? load_image+0x410/0x410
[  551.473778][T13983]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  551.479897][T13983]  ? __lock_acquire+0x7c40/0x7c40
[  551.484987][T13983]  should_fail_ex+0x390/0x4c0
[  551.489747][T13983]  should_failslab+0x5/0x20
[  551.494309][T13983]  slab_pre_alloc_hook+0x59/0x300
[  551.499411][T13983]  kmem_cache_alloc+0x56/0x2f0
[  551.504223][T13983]  ? __build_skb+0x27/0x3b0
[  551.508785][T13983]  __build_skb+0x27/0x3b0
[  551.513164][T13983]  ? build_skb+0x14/0x230
[  551.517551][T13983]  build_skb+0x1e/0x230
[  551.521756][T13983]  bpf_prog_test_run_skb+0x38d/0x18e0
[  551.527206][T13983]  ? __fget_files+0x28/0x460
[  551.531874][T13983]  ? __fget_files+0x3fc/0x460
[  551.536619][T13983]  ? cpu_online+0xa0/0xa0
[  551.541001][T13983]  bpf_prog_test_run+0x31c/0x390
[  551.545991][T13983]  __sys_bpf+0x62b/0x780
[  551.550320][T13983]  ? bpf_link_show_fdinfo+0x380/0x380
[  551.555738][T13983]  ? lock_chain_count+0x20/0x20
[  551.560632][T13983]  __x64_sys_bpf+0x78/0x90
[  551.565086][T13983]  do_syscall_64+0x4c/0xa0
[  551.569540][T13983]  ? clear_bhb_loop+0x60/0xb0
[  551.574245][T13983]  ? clear_bhb_loop+0x60/0xb0
[  551.578948][T13983]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  551.584877][T13983] RIP: 0033:0x7f56e759e159
[  551.589317][T13983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.608950][T13983] RSP: 002b:00007f56e848c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  551.617395][T13983] RAX: ffffffffffffffda RBX: 00007f56e7825fa0 RCX: 00007f56e759e159
[  551.625411][T13983] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a
[  551.633405][T13983] RBP: 00007f56e763506b R08: 0000000000000000 R09: 0000000000000000
[  551.641403][T13983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  551.649395][T13983] R13: 00007f56e7826038 R14: 00007f56e7825fa0 R15: 00007ffd25b4d028
[  551.657405][T13983]  </TASK>
[  551.880352][T13989] hfsplus: request for non-existent node 211 in B*Tree
[  551.898729][    T9] hfsplus: b-tree write err: -5, ino 8
[  551.918702][T13989] hfsplus: request for non-existent node 211 in B*Tree
[  552.040820][ T6715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.103890][ T6715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.135183][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  552.142614][ T4450] hfsplus: b-tree write err: -5, ino 8
[  552.223565][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.243643][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.274833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  552.360799][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2950'.
[  552.905829][    C1] net_ratelimit: 45 callbacks suppressed
[  553.116939][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'.
[  553.961478][T14040] loop9: detected capacity change from 0 to 1024
[  554.391018][   T60] hfsplus: bad catalog file entry
[  555.133496][T14079] loop3: detected capacity change from 0 to 2048
[  555.244740][T14079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  555.325492][T14079] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  555.384468][T14079] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  555.454508][T14079] EXT4-fs (loop3): This should not happen!! Data will be lost
[  555.454508][T14079] 
[  555.526287][T14079] EXT4-fs (loop3): Total free blocks count 0
[  555.542770][T14079] EXT4-fs (loop3): Free/Dirty block details
[  555.568824][T14079] EXT4-fs (loop3): free_blocks=4096
[  555.586202][T14079] EXT4-fs (loop3): dirty_blocks=64
[  555.614783][T14079] EXT4-fs (loop3): Block reservation details
[  555.665437][T14079] EXT4-fs (loop3): i_reserved_data_blocks=4
[  555.675946][ T7967] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  555.825903][   T60] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  555.882273][ T7967] usb 3-1: unable to get BOS descriptor or descriptor too short
[  555.913858][ T7967] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  555.975846][ T7967] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  556.000817][ T7967] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  556.037658][ T7967] usb 3-1: string descriptor 0 read error: -22
[  556.064861][ T7967] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  556.084879][ T7967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.317107][ T7967] usb 3-1: Can't get UAC3 power state for id 10
[  556.729367][T14109] overlayfs: failed to clone upperpath
[  556.749074][ T7967] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  556.801444][ T7967] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  556.860332][T14102] loop3: detected capacity change from 0 to 131072
[  556.874356][T14102] F2FS-fs (loop3): invalid crc value
[  556.904799][T14102] F2FS-fs (loop3): Found nat_bits in checkpoint
[  556.955986][T14102] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  557.050907][ T7967] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  557.125718][ T7967] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  557.214001][ T7967] usb 3-1: USB disconnect, device number 13
[  557.629733][T14124] udevd[14124]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  557.935842][    C1] net_ratelimit: 32 callbacks suppressed
[  558.223366][T14155] gadgetfs: bound to dummy_udc driver
[  558.844195][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'.
[  559.165183][   T26] audit: type=1326 audit(1790654869.178:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.7.3005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c6899e159 code=0x0
[  559.265684][T14189] loop9: detected capacity change from 0 to 128
[  559.310958][T14186] ptp ptp0: new virtual clock ptp1
[  559.319127][T14189] FAT-fs (loop9): bogus number of reserved sectors
[  559.337958][T14189] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  559.359510][T14186] ptp ptp0: new virtual clock ptp2
[  559.378238][T14189] FAT-fs (loop9): Can't find a valid FAT filesystem
[  559.392667][T14186] ptp ptp0: new virtual clock ptp3
[  559.421017][T14186] ptp ptp0: new virtual clock ptp4
[  559.441300][T14186] ptp ptp0: new virtual clock ptp5
[  559.487042][T14186] ptp ptp0: guarantee physical clock free running
[  559.503396][T14189] xt_connbytes: Forcing CT accounting to be enabled
[  560.045991][ T5704] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  560.267815][ T5704] usb 10-1: not running at top speed; connect to a high speed hub
[  560.289401][ T5704] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64
[  560.327527][T14217] ==================================================================
[  560.335650][T14217] BUG: KASAN: slab-out-of-bounds in string+0x204/0x290
[  560.342578][T14217] Read of size 1 at addr ffff8881477c3321 by task syz.3.3016/14217
[  560.350519][T14217] 
[  560.350530][T14217] CPU: 1 PID: 14217 Comm: syz.3.3016 Not tainted syzkaller #0
[  560.360363][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  560.370453][T14217] Call Trace:
[  560.373766][T14217]  <TASK>
[  560.377006][T14217]  dump_stack_lvl+0x188/0x24e
[  560.381723][T14217]  ? __lock_acquire+0x7c40/0x7c40
[  560.386800][T14217]  ? show_regs_print_info+0x12/0x12
[  560.392046][T14217]  ? load_image+0x410/0x410
[  560.396614][T14217]  ? __virt_addr_valid+0x467/0x540
[  560.401780][T14217]  ? string+0x204/0x290
[  560.405986][T14217]  print_report+0xa8/0x210
[  560.410467][T14217]  kasan_report+0x10b/0x140
[  560.415014][T14217]  ? string+0x204/0x290
[  560.415049][T14217]  string+0x204/0x290
[  560.423269][T14217]  vsnprintf+0x10db/0x1c20
[  560.427733][T14217]  pointer+0x870/0xfe0
[  560.431849][T14217]  ? string+0x290/0x290
[  560.436039][T14217]  ? format_decode+0x8b1/0x1330
[  560.440928][T14217]  vsnprintf+0xd7c/0x1c20
[  560.445309][T14217]  vprintk_store+0x3d7/0xcf0
[  560.449939][T14217]  ? printk_parse_prefix+0x310/0x310
[  560.455255][T14217]  ? mark_lock+0x94/0x320
[  560.459617][T14217]  ? __lock_acquire+0x1465/0x7c40
[  560.464693][T14217]  ? __kernel_text_address+0x9/0x30
[  560.469923][T14217]  ? verify_lock_unused+0x140/0x140
[  560.475151][T14217]  ? arch_stack_walk+0xf2/0x140
[  560.480029][T14217]  vprintk_emit+0x114/0x6a0
[  560.484572][T14217]  ? printk_sprint+0x460/0x460
[  560.489369][T14217]  ? stack_trace_save+0xa6/0xf0
[  560.494246][T14217]  ? stack_trace_snprint+0xe0/0xe0
[  560.499396][T14217]  _printk+0xda/0x130
[  560.503424][T14217]  ? load_image+0x410/0x410
[  560.507977][T14217]  ? __mutex_trylock_common+0x15c/0x260
[  560.513558][T14217]  ? trace_raw_output_contention_end+0xd0/0xd0
[  560.519742][T14217]  __dynamic_pr_debug+0x196/0x240
[  560.524804][T14217]  ? __mutex_lock+0x1ab/0xae0
[  560.529509][T14217]  ? param_get_dyndbg_classes+0x160/0x160
[  560.535259][T14217]  ? nfc_llcp_get_sdp_ssap+0x35/0x3d0
[  560.540666][T14217]  ? mutex_lock_nested+0x10/0x10
[  560.545635][T14217]  ? __kmem_cache_alloc_node+0x19d/0x270
[  560.551295][T14217]  ? llcp_sock_bind+0x35d/0x700
[  560.556168][T14217]  ? rcu_is_watching+0x11/0xa0
[  560.560965][T14217]  nfc_llcp_get_sdp_ssap+0x3a0/0x3d0
[  560.566282][T14217]  llcp_sock_bind+0x3ab/0x700
[  560.570986][T14217]  ? llcp_sock_recvmsg+0xc90/0xc90
[  560.576128][T14217]  ? bpf_lsm_socket_bind+0x5/0x10
[  560.581174][T14217]  ? security_socket_bind+0x7c/0xa0
[  560.586423][T14217]  __sys_bind+0x2e9/0x3e0
[  560.590786][T14217]  ? __ia32_sys_socketpair+0xb0/0xb0
[  560.596118][T14217]  __x64_sys_bind+0x76/0x80
[  560.600655][T14217]  do_syscall_64+0x4c/0xa0
[  560.605092][T14217]  ? clear_bhb_loop+0x60/0xb0
[  560.609791][T14217]  ? clear_bhb_loop+0x60/0xb0
[  560.614488][T14217]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  560.620417][T14217] RIP: 0033:0x7f56e759e159
[  560.624866][T14217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.644499][T14217] RSP: 002b:00007f56e848c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  560.652935][T14217] RAX: ffffffffffffffda RBX: 00007f56e7825fa0 RCX: 00007f56e759e159
[  560.660927][T14217] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004
[  560.668932][T14217] RBP: 00007f56e763506b R08: 0000000000000000 R09: 0000000000000000
[  560.676923][T14217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  560.684913][T14217] R13: 00007f56e7826038 R14: 00007f56e7825fa0 R15: 00007ffd25b4d028
[  560.692913][T14217]  </TASK>
[  560.695968][T14217] 
[  560.698307][T14217] Allocated by task 14217:
[  560.702735][T14217]  kasan_set_track+0x4b/0x70
[  560.707361][T14217]  __kasan_kmalloc+0x8e/0xa0
[  560.711981][T14217]  __kmalloc_node_track_caller+0xb0/0x240
[  560.717733][T14217]  kmemdup+0x27/0x60
[  560.721655][T14217]  llcp_sock_bind+0x35d/0x700
[  560.726350][T14217]  __sys_bind+0x2e9/0x3e0
[  560.730717][T14217]  __x64_sys_bind+0x76/0x80
[  560.735247][T14217]  do_syscall_64+0x4c/0xa0
[  560.739684][T14217]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  560.745607][T14217] 
[  560.747948][T14217] The buggy address belongs to the object at ffff8881477c3320
[  560.747948][T14217]  which belongs to the cache kmalloc-8 of size 8
[  560.761673][T14217] The buggy address is located 1 bytes inside of
[  560.761673][T14217]  8-byte region [ffff8881477c3320, ffff8881477c3328)
[  560.774619][T14217] 
[  560.776960][T14217] The buggy address belongs to the physical page:
[  560.783383][T14217] page:ffffea00051df0c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1477c3
[  560.793643][T14217] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff)
[  560.801300][T14217] raw: 057ff00000000200 dead000000000100 dead000000000122 ffff888017441280
[  560.809905][T14217] raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000
[  560.818504][T14217] page dumped because: kasan: bad access detected
[  560.824934][T14217] page_owner tracks the page as allocated
[  560.830663][T14217] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 15320350621, free_ts 0
[  560.847383][T14217]  post_alloc_hook+0x173/0x1a0
[  560.852176][T14217]  get_page_from_freelist+0x206b/0x2180
[  560.857760][T14217]  __alloc_pages+0x1ec/0x4f0
[  560.862375][T14217]  alloc_page_interleave+0x24/0x1e0
[  560.867603][T14217]  alloc_slab_page+0x5d/0x180
[  560.872304][T14217]  new_slab+0x87/0x2d0
[  560.876414][T14217]  ___slab_alloc+0xbc5/0x1240
[  560.881108][T14217]  __kmem_cache_alloc_node+0x126/0x270
[  560.886588][T14217]  __kmalloc+0xa3/0x240
[  560.890775][T14217]  usb_get_configuration+0x17b/0x5240
[  560.896170][T14217]  usb_new_device+0x12c/0x15e0
[  560.900973][T14217]  register_root_hub+0x258/0x550
[  560.905946][T14217]  usb_add_hcd+0xbb9/0x1080
[  560.910467][T14217]  vhci_hcd_probe+0x1bd/0x370
[  560.915166][T14217]  platform_probe+0x137/0x1c0
[  560.919875][T14217]  really_probe+0x24a/0xb40
[  560.924406][T14217] page_owner free stack trace missing
[  560.929798][T14217] 
[  560.932150][T14217] Memory state around the buggy address:
[  560.937804][T14217]  ffff8881477c3200: fc 00 fc fc fc fc 05 fc fc fc fc fa fc fc fc fc
[  560.945883][T14217]  ffff8881477c3280: 05 fc fc fc fc 05 fc fc fc fc 00 fc fc fc fc fb
[  560.953967][T14217] >ffff8881477c3300: fc fc fc fc 01 fc fc fc fc 05 fc fc fc fc 05 fc
[  560.962031][T14217]                                ^
[  560.962044][T14217]  ffff8881477c3380: fc fc fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc
[  560.962059][T14217]  ffff8881477c3400: fc fc 06 fc fc fc fc 06 fc fc fc fc 00 fc fc fc
[  560.967346][    C0] virtqueue interrupt with no work for ffff888148ab4600
[  560.975259][T14217] ==================================================================
[  560.975312][T14217] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  560.975351][T14217] CPU: 1 PID: 14217 Comm: syz.3.3016 Not tainted syzkaller #0
[  560.975421][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  560.975467][T14217] Call Trace:
[  560.975487][T14217]  <TASK>
[  560.975510][T14217]  dump_stack_lvl+0x188/0x24e
[  560.975578][T14217]  ? memcpy+0x3c/0x60
[  560.975639][T14217]  ? show_regs_print_info+0x12/0x12
[  560.975694][T14217]  ? load_image+0x410/0x410
[  560.975792][T14217]  panic+0x2d3/0x710
[  560.975885][T14217]  ? bpf_jit_dump+0xd0/0xd0
[  560.975952][T14217]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  560.976042][T14217]  ? _raw_spin_unlock+0x40/0x40
[  560.976115][T14217]  ? print_memory_metadata+0x314/0x400
[  560.976219][T14217]  check_panic_on_warn+0x80/0xa0
[  560.976291][T14217]  ? string+0x204/0x290
[  560.976362][T14217]  end_report+0x66/0x110
[  560.976446][T14217]  kasan_report+0x118/0x140
[  560.976547][T14217]  ? string+0x204/0x290
[  560.976633][T14217]  string+0x204/0x290
[  560.976708][T14217]  vsnprintf+0x10db/0x1c20
[  560.976820][T14217]  pointer+0x870/0xfe0
[  560.976910][T14217]  ? string+0x290/0x290
[  560.976983][T14217]  ? format_decode+0x8b1/0x1330
[  560.977075][T14217]  vsnprintf+0xd7c/0x1c20
[  560.977162][T14217]  vprintk_store+0x3d7/0xcf0
[  560.977248][T14217]  ? printk_parse_prefix+0x310/0x310
[  560.977328][T14217]  ? mark_lock+0x94/0x320
[  560.977418][T14217]  ? __lock_acquire+0x1465/0x7c40
[  560.977524][T14217]  ? __kernel_text_address+0x9/0x30
[  560.977612][T14217]  ? verify_lock_unused+0x140/0x140
[  560.977707][T14217]  ? arch_stack_walk+0xf2/0x140
[  560.977773][T14217]  vprintk_emit+0x114/0x6a0
[  560.977865][T14217]  ? printk_sprint+0x460/0x460
[  560.977936][T14217]  ? stack_trace_save+0xa6/0xf0
[  560.978009][T14217]  ? stack_trace_snprint+0xe0/0xe0
[  560.978088][T14217]  _printk+0xda/0x130
[  560.978183][T14217]  ? load_image+0x410/0x410
[  560.978270][T14217]  ? __mutex_trylock_common+0x15c/0x260
[  560.978349][T14217]  ? trace_raw_output_contention_end+0xd0/0xd0
[  560.978471][T14217]  __dynamic_pr_debug+0x196/0x240
[  560.978547][T14217]  ? __mutex_lock+0x1ab/0xae0
[  560.978621][T14217]  ? param_get_dyndbg_classes+0x160/0x160
[  560.978713][T14217]  ? nfc_llcp_get_sdp_ssap+0x35/0x3d0
[  560.978804][T14217]  ? mutex_lock_nested+0x10/0x10
[  560.978949][T14217]  ? __kmem_cache_alloc_node+0x19d/0x270
[  560.979054][T14217]  ? llcp_sock_bind+0x35d/0x700
[  560.979109][T14217]  ? rcu_is_watching+0x11/0xa0
[  560.979208][T14217]  nfc_llcp_get_sdp_ssap+0x3a0/0x3d0
[  560.979319][T14217]  llcp_sock_bind+0x3ab/0x700
[  560.979378][T14217]  ? llcp_sock_recvmsg+0xc90/0xc90
[  560.979453][T14217]  ? bpf_lsm_socket_bind+0x5/0x10
[  560.979522][T14217]  ? security_socket_bind+0x7c/0xa0
[  560.979633][T14217]  __sys_bind+0x2e9/0x3e0
[  560.979728][T14217]  ? __ia32_sys_socketpair+0xb0/0xb0
[  560.979843][T14217]  __x64_sys_bind+0x76/0x80
[  560.979928][T14217]  do_syscall_64+0x4c/0xa0
[  560.979981][T14217]  ? clear_bhb_loop+0x60/0xb0
[  560.980036][T14217]  ? clear_bhb_loop+0x60/0xb0
[  560.980097][T14217]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  560.980181][T14217] RIP: 0033:0x7f56e759e159
[  560.980231][T14217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.980283][T14217] RSP: 002b:00007f56e848c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  560.980352][T14217] RAX: ffffffffffffffda RBX: 00007f56e7825fa0 RCX: 00007f56e759e159
[  560.980395][T14217] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004
[  560.980428][T14217] RBP: 00007f56e763506b R08: 0000000000000000 R09: 0000000000000000
[  560.980469][T14217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  560.980502][T14217] R13: 00007f56e7826038 R14: 00007f56e7825fa0 R15: 00007ffd25b4d028
[  560.980565][T14217]  </TASK>
[  560.983326][    C0] virtqueue interrupt with no work for ffff888148ab4400
[  560.983537][T14217] Kernel Offset: disabled
[  561.380313][T14217] Rebooting in 86400 seconds..