last executing test programs:

17m2.972286982s ago: executing program 4 (id=524):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x10504)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3]})
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x629, 0x70bd2a, 0x25dfdbfd, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x4e22, 0x200, 0x4e23, 0x4, 0x2, 0x20, 0x80, 0x73}, {@in=@multicast1, 0x4cf, 0x33}, @in=@remote, {0x401, 0xd, 0x2, 0xffff, 0x4, 0x6, 0x0, 0xfffffffffffffffa}, {0x4554, 0x0, 0xffffffffffffffff, 0x1000}, {0x5, 0x8, 0x3}, 0x70bd2a, 0x0, 0xa, 0x3, 0xdf, 0x14}, 0x1, 0x6}}, 0xf8}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, 0x0)
sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d080006400000008c080004400000001705000200940000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

17m1.844071359s ago: executing program 4 (id=526):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})

17m1.562292331s ago: executing program 4 (id=530):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200acffec14"})
msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x2000, 0x0)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x9, 0x8}, {0x0, 0x1}, {0x9, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x400009, 0x80006, 0x0, 0x17, 0x0, 0x2, 0x6})

17m0.601609146s ago: executing program 4 (id=532):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x30000c0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x105042, 0x1db)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x3620feaec040159, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_socket_connect_nvme_tcp()
unshare(0x2040400)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/drivers\x00', 0x0, 0x0)
read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc)

16m58.42029761s ago: executing program 4 (id=536):
unshare(0x400) (async)
r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000040)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28a, &(0x7f00000008c0)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) (async, rerun: 64)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='nomand\x00', 0x0, 0x0)
unshare(0x44000600)

16m57.763938474s ago: executing program 4 (id=540):
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x80047453, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x80001, 0xd1)
r3 = syz_open_procfs(r0, &(0x7f00000003c0)='net/ip_tables_targets\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000680001000200d999ce334ac5940000fcffff7f0a00000036"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4090)
pread64(r3, &(0x7f0000000580)=""/153, 0x99, 0x20000000000004)
syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f0000000480))
pipe2(&(0x7f0000000040), 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x14, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000190001090000000020000000021800000002fd010000000008000100ac1414000800060008000000541399ea5c047dd954968b5a547d861117cd3891bcddf267d76eeeb89a6c046850f71488c4ed06d7e42a91ed3fe7e445abcaefa6e548195213275d2856f5a05f69dc82a9bd67c7ef807104"], 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

16m56.76792256s ago: executing program 32 (id=540):
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x80047453, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x80001, 0xd1)
r3 = syz_open_procfs(r0, &(0x7f00000003c0)='net/ip_tables_targets\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000680001000200d999ce334ac5940000fcffff7f0a00000036"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4090)
pread64(r3, &(0x7f0000000580)=""/153, 0x99, 0x20000000000004)
syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f0000000480))
pipe2(&(0x7f0000000040), 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x14, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000190001090000000020000000021800000002fd010000000008000100ac1414000800060008000000541399ea5c047dd954968b5a547d861117cd3891bcddf267d76eeeb89a6c046850f71488c4ed06d7e42a91ed3fe7e445abcaefa6e548195213275d2856f5a05f69dc82a9bd67c7ef807104"], 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

23.032624801s ago: executing program 5 (id=3297):
r0 = syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2078040024d0e29afeeaa424f2a1a352f53837807a91a7bd97f8e042d73ee6219990f7da2256b7f09eb74408fa397b7f3a6d2f7282dd2eb270f2be0670247d2b4e0d3df3b7906441890136c607635248"], 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5)
sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r6, 0x701}, 0x14}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="2084"], 0x0})

18.29267757s ago: executing program 5 (id=3308):
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x19d400, 0x6a, 0x1a}, 0x18)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000300)={0x9f, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x94}}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES64=r0], 0x48)
pipe2$9p(&(0x7f0000000080), 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
accept4$alg(r5, 0x0, 0x0, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.069020481s ago: executing program 5 (id=3309):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000002c0)={[{@lazytime}, {@uqnoenforce}, {@dax_inode}, {@filestreams}, {@grpquota}, {@noalign}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000008900000008000300", @ANYRES32=r2, @ANYBLOB="20001d801c00008006000500c200000005000b000100000005000c00022d420c"], 0x3c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x808, &(0x7f0000000580)=ANY=[], 0xfd, 0x1a7, &(0x7f0000000d40)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r5, 0x7ffffffc, 0x0)
getdents64(r5, 0x0, 0x28)
accept4$tipc(r0, &(0x7f0000000180), &(0x7f0000000240)=0x10, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
gettid()
r6 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000340)={{0x2, 0x4e63, @rand_addr=0x64010101}, {0x1, @link_local}, 0x6f631b4376e74f1e, {0x2, 0x4e24, @rand_addr=0x64010102}, 'bridge_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$inet(0x2, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)

15.925329534s ago: executing program 5 (id=3313):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
getpid()
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8}, "43e8999272302221eb392155e697f5b7e61a965af658bfa18e3b1fcd6b87c15330a767f651765a04a2056b110cd22da2c8b25bd95146ec4a4b570952793b53fee845840a7483b7b9c0c6bbc555a869415f28006619c7933da916d2134b"}, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r2 = getpid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000039000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd})
preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/26, 0x1a}], 0x1, 0x4000ffe, 0xfffffffc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r5}, 0x18)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x80000000000725)
r7 = syz_pidfd_open(r2, 0x0)
setns(r7, 0x24020000)
r8 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r9, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000180)={'ni_at_ao\x00', [0xabeb, 0x0, 0x7, 0x0, 0x5, 0x6, 0x0, 0x8, 0x1, 0x6, 0x800, 0x1, 0x1ff, 0x800, 0x6, 0x2, 0x3, 0xc4, 0xc0a2, 0x80000000, 0x36e, 0x0, 0xc, 0x9, 0x4, 0x7fff, 0x1, 0x62, 0x3, 0x80, 0x2, 0x200]})
r10 = syz_pidfd_open(r8, 0x0)
pidfd_send_signal(r10, 0x2, 0x0, 0x0)

14.479753112s ago: executing program 5 (id=3330):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x45}})

12.646000444s ago: executing program 1 (id=3332):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800185aac000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
unshare(0x20020600)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

12.618182514s ago: executing program 5 (id=3333):
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x8d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)

12.428907705s ago: executing program 1 (id=3335):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r1 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f00000003c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYBLOB=',=\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")
syz_fuse_handle_req(r0, &(0x7f0000000540)="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", 0x2000, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.178761117s ago: executing program 1 (id=3339):
prlimit64(0x0, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000140)={0x0, 0xff, 0x3a0000}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
sendmmsg$unix(r3, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x90}}], 0x2, 0x40)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x6)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)

10.309750778s ago: executing program 0 (id=3345):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet(0x2, 0x3, 0x5)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r3 = fsopen(&(0x7f0000000740)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x40)

10.044244659s ago: executing program 1 (id=3347):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000004c0)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@data_err_abort}, {@nogrpid}, {@init_itable}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r7, 0x2007ffc)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}]}}}]}, 0x44}}, 0x0)
sendfile(r7, r7, 0x0, 0x800000009)

10.01851143s ago: executing program 0 (id=3348):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18)
ioctl$TIOCGSID(r2, 0x5429, 0x0)
r5 = io_uring_setup(0x5594, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004)

9.884412311s ago: executing program 2 (id=3350):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRESHEX=0x0], 0x48}}, 0x0)

7.518979234s ago: executing program 3 (id=3351):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000070000000900000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

6.818156749s ago: executing program 0 (id=3352):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000c00409040000010300020009210100000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000013c0)=ANY=[@ANYBLOB="00018000000080310067"], 0x0, 0x0, 0x0, 0x0}, 0x0)

6.759926489s ago: executing program 2 (id=3353):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x0, 0x88c0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pipe2$9p(0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv6_newroute={0x20, 0x18, 0x1, 0x70bd28, 0x25dfdbff, {0xa, 0x14, 0x0, 0x5, 0x0, 0x1, 0x0, 0x8, 0x1500}, [@RTA_METRICS={0x4, 0x1e}]}, 0x20}}, 0x404c040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2)
listen(r3, 0xfffffff8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
close_range(r3, 0xffffffffffffffff, 0x0)

6.419368191s ago: executing program 3 (id=3354):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000080000004200000040000000c0000000", @ANYRES32, @ANYBLOB="000087c37931972db735e4363a8c148500", @ANYRES32], 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
write(r4, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f00000000000000000008fff4000d40ff000000", 0x24)

5.625936646s ago: executing program 1 (id=3355):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x4, 0xaf, 0x80})

4.220074935s ago: executing program 2 (id=3356):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x26}, 0x28)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r5}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
r7 = syz_open_procfs$userns(r0, &(0x7f0000000380))
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@bridge_getneigh={0x30, 0x1e, 0x0, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8600, 0x10400}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x680a8}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}]}, 0x30}}, 0x20042884)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")

2.928799732s ago: executing program 0 (id=3357):
r0 = socket$xdp(0x2c, 0x3, 0x0)
read(r0, &(0x7f0000000000)=""/116, 0x74)

2.688042544s ago: executing program 0 (id=3358):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=cp850,fmask=00000000000000000000240,errors=remount-ro,iocharset=cp936,iocharset=iso8859-14,allow_utime=00000000000000000000007,gid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,errors=continue,iocharset=iso8859-2,uid=', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000010001,euid<', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=sched_switch\x00,fowner=', @ANYRES32, @ANYBLOB=',appraise_type\x00\x00\x00\x00sig,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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")
r0 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f00000003c0)=0xc)
lchown(&(0x7f0000000040)='./file0\x00', r1, 0x0)

2.567845225s ago: executing program 1 (id=3359):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x10, 0x400, 0x7, 0x130, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
close(r3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x10)

2.516257925s ago: executing program 0 (id=3360):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES8], 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400))
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.375342726s ago: executing program 2 (id=3361):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)

2.315066376s ago: executing program 3 (id=3362):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x4, 0x8d}]}]}, {0x0, [0x2e, 0x30, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x1}, 0x28)

2.088325207s ago: executing program 3 (id=3363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x803, 0x6})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x0)

1.115097813s ago: executing program 3 (id=3364):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)="b494", 0x2}], 0x1}, 0x20000801)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

104.842929ms ago: executing program 2 (id=3365):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

288.489µs ago: executing program 3 (id=3366):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=3367):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

kernel console output (not intermixed with test programs):

ROR: status = -22
[ 1011.500940][T13816] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1011.710574][T13816] usb 3-1: Using ep0 maxpacket: 32
[ 1011.773675][T13816] usb 3-1: device descriptor read/all, error -71
[ 1013.542652][T14185] loop3: detected capacity change from 0 to 32768
[ 1014.872856][T14210] netlink: 'syz.5.2539': attribute type 10 has an invalid length.
[ 1014.889825][T14210] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1015.306829][T13202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (13202)
[ 1017.321209][T14246] netlink: 832 bytes leftover after parsing attributes in process `syz.3.2547'.
[ 1018.621586][T14258] FAULT_INJECTION: forcing a failure.
[ 1018.621586][T14258] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1018.756342][T14258] CPU: 1 PID: 14258 Comm: syz.0.2552 Not tainted syzkaller #0
[ 1018.763881][T14258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1018.774168][T14258] Call Trace:
[ 1018.777476][T14258]  <TASK>
[ 1018.780419][T14258]  dump_stack_lvl+0x168/0x22e
[ 1018.785122][T14258]  ? show_regs_print_info+0x12/0x12
[ 1018.790343][T14258]  ? load_image+0x3b0/0x3b0
[ 1018.794974][T14258]  ? __lock_acquire+0x7c50/0x7c50
[ 1018.800018][T14258]  ? unwind_next_frame+0x1880/0x20b0
[ 1018.805322][T14258]  should_fail_ex+0x399/0x4d0
[ 1018.810108][T14258]  _copy_from_user+0x2c/0x170
[ 1018.814802][T14258]  binder_ioctl_write_read+0xb01/0x8a10
[ 1018.820478][T14258]  ? verify_lock_unused+0x140/0x140
[ 1018.825688][T14258]  ? kasan_set_track+0x60/0x70
[ 1018.830471][T14258]  ? binder_debug+0x1a0/0x1a0
[ 1018.835172][T14258]  ? slab_free_freelist_hook+0x131/0x1a0
[ 1018.840821][T14258]  ? __kmem_cache_free+0xb6/0x1f0
[ 1018.846217][T14258]  ? tomoyo_path_number_perm+0x4ae/0x600
[ 1018.851869][T14258]  ? security_file_ioctl+0x6c/0xa0
[ 1018.856992][T14258]  ? __se_sys_ioctl+0x48/0x170
[ 1018.861768][T14258]  ? do_syscall_64+0x4c/0xa0
[ 1018.866379][T14258]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1018.872941][T14258]  ? __lock_acquire+0x7c50/0x7c50
[ 1018.877994][T14258]  ? __rwlock_init+0x140/0x140
[ 1018.882786][T14258]  ? __might_sleep+0xd0/0xd0
[ 1018.887420][T14258]  ? _raw_spin_unlock+0x24/0x40
[ 1018.892352][T14258]  ? binder_get_thread+0x177/0x6c0
[ 1018.897841][T14258]  binder_ioctl+0x3db/0x1a40
[ 1018.902540][T14258]  ? __kmem_cache_free+0xb6/0x1f0
[ 1018.907692][T14258]  ? tomoyo_path_number_perm+0x503/0x600
[ 1018.913350][T14258]  ? tomoyo_path_number_perm+0x1b6/0x600
[ 1018.918999][T14258]  ? binder_poll+0x360/0x360
[ 1018.923671][T14258]  ? __fget_files+0x28/0x4d0
[ 1018.928372][T14258]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1018.933326][T14258]  ? security_file_ioctl+0x7c/0xa0
[ 1018.938450][T14258]  ? binder_poll+0x360/0x360
[ 1018.943056][T14258]  __se_sys_ioctl+0xfa/0x170
[ 1018.947661][T14258]  do_syscall_64+0x4c/0xa0
[ 1018.952129][T14258]  ? clear_bhb_loop+0x60/0xb0
[ 1018.956822][T14258]  ? clear_bhb_loop+0x60/0xb0
[ 1018.961538][T14258]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1018.967453][T14258] RIP: 0033:0x7f354b78efc9
[ 1018.971884][T14258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1018.991509][T14258] RSP: 002b:00007f354c6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1018.999936][T14258] RAX: ffffffffffffffda RBX: 00007f354b9e5fa0 RCX: 00007f354b78efc9
[ 1019.007934][T14258] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005
[ 1019.015938][T14258] RBP: 00007f354c6db090 R08: 0000000000000000 R09: 0000000000000000
[ 1019.023924][T14258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1019.031903][T14258] R13: 00007f354b9e6038 R14: 00007f354b9e5fa0 R15: 00007fff7b16fd48
[ 1019.039935][T14258]  </TASK>
[ 1019.043007][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1019.078222][T14258] binder: 14257:14258 ioctl c0306201 200000004a40 returned -14
[ 1019.149269][T14261] loop3: detected capacity change from 0 to 8
[ 1019.163580][T14261] /dev/loop3: Can't open blockdev
[ 1021.141799][T14281] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2561'.
[ 1022.124114][T14290] netlink: 832 bytes leftover after parsing attributes in process `syz.5.2564'.
[ 1022.279792][T14274] loop3: detected capacity change from 0 to 32768
[ 1022.415006][T13202] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1023.254565][T14296] loop2: detected capacity change from 0 to 512
[ 1023.371572][T14296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1023.659214][T14274] loop3: detected capacity change from 0 to 2048
[ 1023.760295][T14274] NILFS (loop3): couldn't find nilfs on the device
[ 1023.990926][T13202] udevd[13202]: incorrect nilfs2 checksum on /dev/loop3
[ 1024.103076][T13606] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1024.313354][T13606] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1024.333400][T13606] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1024.361036][T13606] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1024.389374][T13606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1024.417774][T13606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1024.462262][T13606] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1024.498480][T13606] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1024.507359][T14305] comedi comedi0: reset error (fatal)
[ 1024.533662][T13606] usb 4-1: Product: syz
[ 1024.544963][T13606] usb 4-1: Manufacturer: syz
[ 1024.591916][T13606] cdc_wdm 4-1:1.0: skipping garbage
[ 1024.610615][T13606] cdc_wdm 4-1:1.0: skipping garbage
[ 1026.287992][T13606] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1026.409619][T13606] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1026.858435][ T4275] EXT4-fs (loop2): unmounting filesystem.
[ 1026.935936][T13606] usb 4-1: USB disconnect, device number 37
[ 1027.198754][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'.
[ 1027.215628][T14323] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2574'.
[ 1028.298702][T14341] netlink: 832 bytes leftover after parsing attributes in process `syz.3.2579'.
[ 1028.780442][ T6783] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1029.131206][ T6783] usb 3-1: too many configurations: 164, using maximum allowed: 8
[ 1029.237105][ T6783] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 1029.260418][ T6783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.272804][ T6783] usb 3-1: config 0 descriptor??
[ 1029.490581][T14348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1030.545860][T14348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1030.585545][T14348] IPVS: ip_vs_add_dest(): server weight less than zero
[ 1030.593178][T14351] xt_nat: multiple ranges no longer supported
[ 1030.612338][ T4307] usb 3-1: USB disconnect, device number 33
[ 1032.725779][ T4268] Bluetooth: hci5: command 0x1003 tx timeout
[ 1032.732750][T12071] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1033.153428][T14400] netlink: 832 bytes leftover after parsing attributes in process `syz.0.2595'.
[ 1034.519605][T14430] FAULT_INJECTION: forcing a failure.
[ 1034.519605][T14430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1034.546917][T14430] CPU: 1 PID: 14430 Comm: syz.0.2605 Not tainted syzkaller #0
[ 1034.556304][T14430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1034.566698][T14430] Call Trace:
[ 1034.570114][T14430]  <TASK>
[ 1034.573192][T14430]  dump_stack_lvl+0x168/0x22e
[ 1034.577939][T14430]  ? show_regs_print_info+0x12/0x12
[ 1034.583286][T14430]  ? load_image+0x3b0/0x3b0
[ 1034.587856][T14430]  ? __lock_acquire+0x7c50/0x7c50
[ 1034.593036][T14430]  ? snprintf+0xd7/0x120
[ 1034.597456][T14430]  should_fail_ex+0x399/0x4d0
[ 1034.602200][T14430]  _copy_to_user+0x2c/0x130
[ 1034.606773][T14430]  simple_read_from_buffer+0xe3/0x150
[ 1034.612220][T14430]  proc_fail_nth_read+0x19a/0x210
[ 1034.617398][T14430]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1034.623637][T14430]  ? fsnotify_perm+0x248/0x550
[ 1034.628742][T14430]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1034.635489][T14430]  vfs_read+0x2c0/0x920
[ 1034.641596][T14430]  ? kernel_read+0x1e0/0x1e0
[ 1034.647922][T14430]  ? __fget_files+0x28/0x4d0
[ 1034.653426][T14430]  ? __fget_files+0x44a/0x4d0
[ 1034.660584][T14430]  ? __fdget_pos+0x2ae/0x360
[ 1034.665347][T14430]  ? ksys_read+0x71/0x240
[ 1034.669836][T14430]  ksys_read+0x143/0x240
[ 1034.674112][T14430]  ? vfs_write+0x960/0x960
[ 1034.678578][T14430]  ? lockdep_hardirqs_on+0x94/0x140
[ 1034.683840][T14430]  do_syscall_64+0x4c/0xa0
[ 1034.688295][T14430]  ? clear_bhb_loop+0x60/0xb0
[ 1034.693783][T14430]  ? clear_bhb_loop+0x60/0xb0
[ 1034.698722][T14430]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1034.704680][T14430] RIP: 0033:0x7f354b78d9dc
[ 1034.709304][T14430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1034.730180][T14430] RSP: 002b:00007f354c6db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1034.740805][T14430] RAX: ffffffffffffffda RBX: 00007f354b9e5fa0 RCX: 00007f354b78d9dc
[ 1034.749862][T14430] RDX: 000000000000000f RSI: 00007f354c6db0a0 RDI: 0000000000000004
[ 1034.757871][T14430] RBP: 00007f354c6db090 R08: 0000000000000000 R09: 0000000000000000
[ 1034.766067][T14430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1034.774622][T14430] R13: 00007f354b9e6038 R14: 00007f354b9e5fa0 R15: 00007fff7b16fd48
[ 1034.782629][T14430]  </TASK>
[ 1034.959547][T14435] loop3: detected capacity change from 0 to 16
[ 1034.989367][T14435] /dev/loop3: Can't open blockdev
[ 1036.118413][T14414] xt_nat: multiple ranges no longer supported
[ 1036.140541][ T6777] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1036.290381][   T26] kauditd_printk_skb: 2 callbacks suppressed
[ 1036.290399][   T26] audit: type=1326 audit(1762174479.212:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.2610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f97d8efc9 code=0x0
[ 1036.350561][ T6777] usb 4-1: Using ep0 maxpacket: 32
[ 1036.689794][T14452] loop2: detected capacity change from 0 to 4096
[ 1036.705099][T14452] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[ 1036.734485][T14452] ntfs3: loop2: mft corrupted
[ 1036.739477][T14452] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1036.748347][T14452] ntfs3: loop2: Failed to load $AttrDef -> 0
[ 1036.814543][   T26] audit: type=1326 audit(1762174479.742:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14443 comm="syz.2.2610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f97d8efc9 code=0x0
[ 1037.321177][ T6777] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1037.340537][ T6777] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1037.349509][ T6777] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1037.373631][ T6777] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1037.394377][ T6777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.408842][ T6777] usb 4-1: Product: syz
[ 1037.413653][ T6777] usb 4-1: Manufacturer: syz
[ 1037.418524][ T6777] usb 4-1: SerialNumber: syz
[ 1037.436441][ T6777] cdc_ncm 4-1:1.0: skipping garbage
[ 1037.443480][ T6777] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[ 1037.451090][ T6777] cdc_ncm 4-1:1.0: bind() failure
[ 1038.228583][T14463] FAULT_INJECTION: forcing a failure.
[ 1038.228583][T14463] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1038.248872][T14466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2617'.
[ 1038.258533][T14463] CPU: 1 PID: 14463 Comm: syz.0.2616 Not tainted syzkaller #0
[ 1038.266148][T14463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1038.276433][T14463] Call Trace:
[ 1038.279772][T14463]  <TASK>
[ 1038.282743][T14463]  dump_stack_lvl+0x168/0x22e
[ 1038.287481][T14463]  ? show_regs_print_info+0x12/0x12
[ 1038.292726][T14463]  ? load_image+0x3b0/0x3b0
[ 1038.297278][T14463]  ? __lock_acquire+0x7c50/0x7c50
[ 1038.302360][T14463]  ? __sys_sendmsg_sock+0x30/0x30
[ 1038.307422][T14463]  should_fail_ex+0x399/0x4d0
[ 1038.312130][T14463]  _copy_from_user+0x2c/0x170
[ 1038.316825][T14463]  ___sys_sendmsg+0x155/0x290
[ 1038.321526][T14463]  ? __sys_sendmsg+0x270/0x270
[ 1038.326337][T14463]  ? __might_fault+0xc2/0x120
[ 1038.331220][T14463]  ? __might_fault+0xa6/0x120
[ 1038.336141][T14463]  __sys_sendmmsg+0x272/0x490
[ 1038.341654][T14463]  ? __ia32_sys_sendmsg+0x80/0x80
[ 1038.346821][T14463]  ? mutex_unlock+0x10/0x10
[ 1038.351359][T14463]  ? __fget_files+0x44a/0x4d0
[ 1038.356077][T14463]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1038.362092][T14463]  ? lock_chain_count+0x20/0x20
[ 1038.366973][T14463]  __x64_sys_sendmmsg+0x9c/0xb0
[ 1038.371854][T14463]  do_syscall_64+0x4c/0xa0
[ 1038.376399][T14463]  ? clear_bhb_loop+0x60/0xb0
[ 1038.381107][T14463]  ? clear_bhb_loop+0x60/0xb0
[ 1038.385801][T14463]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1038.391708][T14463] RIP: 0033:0x7f354b78efc9
[ 1038.396141][T14463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1038.415779][T14463] RSP: 002b:00007f354c6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1038.424217][T14463] RAX: ffffffffffffffda RBX: 00007f354b9e5fa0 RCX: 00007f354b78efc9
[ 1038.432205][T14463] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000003
[ 1038.440730][T14463] RBP: 00007f354c6db090 R08: 0000000000000000 R09: 0000000000000000
[ 1038.448766][T14463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1038.456772][T14463] R13: 00007f354b9e6038 R14: 00007f354b9e5fa0 R15: 00007fff7b16fd48
[ 1038.464782][T14463]  </TASK>
[ 1038.529234][ T8393] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1038.553868][ T8393] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1038.571488][ T4337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1038.913343][ T4337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1039.325497][ T4337] usb 4-1: USB disconnect, device number 38
[ 1039.561793][ T8393] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1041.100061][T14488] FAULT_INJECTION: forcing a failure.
[ 1041.100061][T14488] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1041.113532][T14488] CPU: 0 PID: 14488 Comm: syz.0.2625 Not tainted syzkaller #0
[ 1041.121052][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1041.131141][T14488] Call Trace:
[ 1041.134451][T14488]  <TASK>
[ 1041.137464][T14488]  dump_stack_lvl+0x168/0x22e
[ 1041.142194][T14488]  ? show_regs_print_info+0x12/0x12
[ 1041.147866][T14488]  ? load_image+0x3b0/0x3b0
[ 1041.152421][T14488]  ? __lock_acquire+0x7c50/0x7c50
[ 1041.157525][T14488]  should_fail_ex+0x399/0x4d0
[ 1041.163677][T14488]  _copy_from_user+0x2c/0x170
[ 1041.168776][T14488]  __se_sys_mount+0x175/0x3c0
[ 1041.175043][T14488]  ? __x64_sys_mount+0xc0/0xc0
[ 1041.180075][T14488]  ? lockdep_hardirqs_on+0x94/0x140
[ 1041.185323][T14488]  ? __x64_sys_mount+0x1c/0xc0
[ 1041.190138][T14488]  do_syscall_64+0x4c/0xa0
[ 1041.194591][T14488]  ? clear_bhb_loop+0x60/0xb0
[ 1041.199313][T14488]  ? clear_bhb_loop+0x60/0xb0
[ 1041.204032][T14488]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1041.209963][T14488] RIP: 0033:0x7f354b78efc9
[ 1041.214418][T14488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1041.235642][T14488] RSP: 002b:00007f354c6ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1041.244205][T14488] RAX: ffffffffffffffda RBX: 00007f354b9e6090 RCX: 00007f354b78efc9
[ 1041.252229][T14488] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000
[ 1041.260966][T14488] RBP: 00007f354c6ba090 R08: 0000200000002140 R09: 0000000000000000
[ 1041.269105][T14488] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[ 1041.277398][T14488] R13: 00007f354b9e6128 R14: 00007f354b9e6090 R15: 00007fff7b16fd48
[ 1041.285426][T14488]  </TASK>
[ 1041.892462][T14485] loop3: detected capacity change from 0 to 1024
[ 1041.916608][T14485] /dev/loop3: Can't open blockdev
[ 1041.988002][T14489] fuse: Bad value for 'fd'
[ 1042.618729][T14514] FAULT_INJECTION: forcing a failure.
[ 1042.618729][T14514] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1042.685972][T14514] CPU: 1 PID: 14514 Comm: syz.0.2631 Not tainted syzkaller #0
[ 1042.693525][T14514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1042.703706][T14514] Call Trace:
[ 1042.707015][T14514]  <TASK>
[ 1042.709981][T14514]  dump_stack_lvl+0x168/0x22e
[ 1042.714797][T14514]  ? show_regs_print_info+0x12/0x12
[ 1042.720049][T14514]  ? load_image+0x3b0/0x3b0
[ 1042.724626][T14514]  ? __lock_acquire+0x7c50/0x7c50
[ 1042.729717][T14514]  ? snprintf+0xd7/0x120
[ 1042.734638][T14514]  should_fail_ex+0x399/0x4d0
[ 1042.739391][T14514]  _copy_to_user+0x2c/0x130
[ 1042.744317][T14514]  simple_read_from_buffer+0xe3/0x150
[ 1042.749766][T14514]  proc_fail_nth_read+0x19a/0x210
[ 1042.755016][T14514]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1042.760745][T14514]  ? fsnotify_perm+0x248/0x550
[ 1042.766051][T14514]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1042.771841][T14514]  vfs_read+0x2c0/0x920
[ 1042.776153][T14514]  ? kernel_read+0x1e0/0x1e0
[ 1042.780686][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1042.788364][T14514]  ? __fget_files+0x28/0x4d0
[ 1042.793020][T14514]  ? __fget_files+0x44a/0x4d0
[ 1042.797768][T14514]  ? __fdget_pos+0x2ae/0x360
[ 1042.802417][T14514]  ? ksys_read+0x71/0x240
[ 1042.806804][T14514]  ksys_read+0x143/0x240
[ 1042.811110][T14514]  ? vfs_write+0x960/0x960
[ 1042.815578][T14514]  ? lockdep_hardirqs_on+0x94/0x140
[ 1042.820837][T14514]  do_syscall_64+0x4c/0xa0
[ 1042.825300][T14514]  ? clear_bhb_loop+0x60/0xb0
[ 1042.830027][T14514]  ? clear_bhb_loop+0x60/0xb0
[ 1042.834758][T14514]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1042.840876][T14514] RIP: 0033:0x7f354b78d9dc
[ 1042.845336][T14514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1042.865993][T14514] RSP: 002b:00007f354c6ba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1042.875157][T14514] RAX: ffffffffffffffda RBX: 00007f354b9e6090 RCX: 00007f354b78d9dc
[ 1042.883687][T14514] RDX: 000000000000000f RSI: 00007f354c6ba0a0 RDI: 0000000000000007
[ 1042.891767][T14514] RBP: 00007f354c6ba090 R08: 0000000000000000 R09: 0000000000000000
[ 1042.899800][T14514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1042.907974][T14514] R13: 00007f354b9e6128 R14: 00007f354b9e6090 R15: 00007fff7b16fd48
[ 1042.916860][T14514]  </TASK>
[ 1042.966627][T14516] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2632'.
[ 1043.784342][T14532] FAULT_INJECTION: forcing a failure.
[ 1043.784342][T14532] name failslab, interval 1, probability 0, space 0, times 0
[ 1043.803403][T14532] CPU: 1 PID: 14532 Comm: syz.0.2634 Not tainted syzkaller #0
[ 1043.810963][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1043.821066][T14532] Call Trace:
[ 1043.824374][T14532]  <TASK>
[ 1043.827330][T14532]  dump_stack_lvl+0x168/0x22e
[ 1043.832072][T14532]  ? show_regs_print_info+0x12/0x12
[ 1043.837317][T14532]  ? load_image+0x3b0/0x3b0
[ 1043.841994][T14532]  ? is_bpf_text_address+0x28b/0x2a0
[ 1043.847343][T14532]  ? is_bpf_text_address+0x22/0x2a0
[ 1043.852614][T14532]  ? kernel_text_address+0x9c/0xd0
[ 1043.854021][   T26] audit: type=1326 audit(1762174486.782:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.1.2643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb6798efc9 code=0x0
[ 1043.858643][T14532]  should_fail_ex+0x399/0x4d0
[ 1043.886009][T14532]  should_failslab+0x5/0x20
[ 1043.890622][T14532]  slab_pre_alloc_hook+0x59/0x310
[ 1043.895699][T14532]  kmem_cache_alloc_node+0x5a/0x320
[ 1043.900930][T14532]  ? stack_trace_save+0x98/0xe0
[ 1043.905844][T14532]  ? __alloc_skb+0xfc/0x7e0
[ 1043.910387][T14532]  __alloc_skb+0xfc/0x7e0
[ 1043.914767][T14532]  sctp_ulpevent_make_assoc_change+0x1be/0xb20
[ 1043.920951][T14532]  ? sctp_outq_tail+0x600/0x8a0
[ 1043.925850][T14532]  ? sctp_sf_do_9_1_prm_abort+0x160/0x280
[ 1043.931599][T14532]  sctp_do_sm+0xe5b/0x5500
[ 1043.936054][T14532]  ? sctp_generate_t3_rtx_event+0x340/0x340
[ 1043.942168][T14532]  ? skb_put+0x117/0x210
[ 1043.946509][T14532]  ? memcpy+0x3c/0x60
[ 1043.950731][T14532]  ? sctp_addto_chunk+0xee/0x220
[ 1043.955743][T14532]  sctp_primitive_ABORT+0x94/0xc0
[ 1043.960984][T14532]  sctp_close+0x2d3/0x8f0
[ 1043.965688][T14532]  ? __sctp_write_space+0x530/0x530
[ 1043.971600][T14532]  ? read_lock_is_recursive+0x10/0x10
[ 1043.977101][T14532]  ? preempt_count_add+0x8d/0x190
[ 1043.982243][T14532]  ? rwsem_write_trylock+0x12f/0x1b0
[ 1043.987554][T14532]  ? clear_nonspinnable+0x60/0x60
[ 1043.992627][T14532]  ? ip_mc_drop_socket+0x25b/0x270
[ 1043.997796][T14532]  inet_release+0x139/0x180
[ 1044.002334][T14532]  sock_close+0xd5/0x240
[ 1044.006627][T14532]  ? sock_mmap+0x90/0x90
[ 1044.010910][T14532]  __fput+0x22c/0x920
[ 1044.014945][T14532]  task_work_run+0x1ca/0x250
[ 1044.019588][T14532]  ? task_work_cancel+0x230/0x230
[ 1044.024656][T14532]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1044.030147][T14532]  exit_to_user_mode_loop+0xe6/0x110
[ 1044.035525][T14532]  exit_to_user_mode_prepare+0xee/0x180
[ 1044.041124][T14532]  syscall_exit_to_user_mode+0x16/0x40
[ 1044.047210][T14532]  do_syscall_64+0x58/0xa0
[ 1044.052228][T14532]  ? clear_bhb_loop+0x60/0xb0
[ 1044.056966][T14532]  ? clear_bhb_loop+0x60/0xb0
[ 1044.061669][T14532]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1044.067596][T14532] RIP: 0033:0x7f354b78efc9
[ 1044.072207][T14532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1044.092641][T14532] RSP: 002b:00007f354c6ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1044.101076][T14532] RAX: 0000000000000000 RBX: 00007f354b9e6090 RCX: 00007f354b78efc9
[ 1044.109080][T14532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1044.117092][T14532] RBP: 00007f354c6ba090 R08: 0000000000000000 R09: 0000000000000000
[ 1044.125106][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1044.133097][T14532] R13: 00007f354b9e6128 R14: 00007f354b9e6090 R15: 00007fff7b16fd48
[ 1044.141112][T14532]  </TASK>
[ 1044.301173][T13816] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[ 1044.533222][T13816] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1044.559214][T13816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1044.588288][T13816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1044.589911][   T26] audit: type=1326 audit(1762174487.512:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.1.2643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb6798efc9 code=0x0
[ 1044.609650][T13816] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1044.644878][T13816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.658437][T13816] usb 3-1: Product: syz
[ 1044.665143][T13816] usb 3-1: Manufacturer: syz
[ 1044.675160][T13816] usb 3-1: SerialNumber: syz
[ 1044.720127][T14525] bridge0: port 3(team0) entered disabled state
[ 1044.726790][T14525] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1045.034792][T14525] device wg2 left promiscuous mode
[ 1045.107200][T13816] usb 3-1: 0:2 : does not exist
[ 1045.235606][T14525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1045.273844][T14525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1045.561539][T14525] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.588187][T14525] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.608763][T14525] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.617891][T14525] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.402573][T14585] device syzkaller1 entered promiscuous mode
[ 1047.605776][T14587] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2647'.
[ 1048.679122][ T9671] usb 3-1: USB disconnect, device number 34
[ 1049.595294][T14628] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2661'.
[ 1051.360432][ T4515] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[ 1051.410534][T14658] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2672'.
[ 1051.420491][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1051.552353][ T4515] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1051.668798][ T4515] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1051.697865][ T4515] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1051.835744][ T4515] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1051.879336][ T4515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.918163][ T4515] usb 3-1: Product: syz
[ 1051.942343][ T4515] usb 3-1: Manufacturer: syz
[ 1051.956345][ T4515] usb 3-1: SerialNumber: syz
[ 1052.497985][ T4515] usb 3-1: 0:2 : does not exist
[ 1054.623323][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.629865][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.046259][T14701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2684'.
[ 1056.053965][ T4515] usb 3-1: USB disconnect, device number 35
[ 1056.440070][T14721] 9pnet_fd: Insufficient options for proto=fd
[ 1058.141893][T14751] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2698'.
[ 1059.199975][T14763] FAULT_INJECTION: forcing a failure.
[ 1059.199975][T14763] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1059.213269][T14763] CPU: 0 PID: 14763 Comm: syz.0.2702 Not tainted syzkaller #0
[ 1059.220772][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1059.230863][T14763] Call Trace:
[ 1059.234174][T14763]  <TASK>
[ 1059.237137][T14763]  dump_stack_lvl+0x168/0x22e
[ 1059.241869][T14763]  ? show_regs_print_info+0x12/0x12
[ 1059.247124][T14763]  ? load_image+0x3b0/0x3b0
[ 1059.251688][T14763]  ? __lock_acquire+0x7c50/0x7c50
[ 1059.256762][T14763]  ? snprintf+0xd7/0x120
[ 1059.261109][T14763]  should_fail_ex+0x399/0x4d0
[ 1059.265846][T14763]  _copy_to_user+0x2c/0x130
[ 1059.270404][T14763]  simple_read_from_buffer+0xe3/0x150
[ 1059.275860][T14763]  proc_fail_nth_read+0x19a/0x210
[ 1059.281644][T14763]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1059.287347][T14763]  ? fsnotify_perm+0x248/0x550
[ 1059.292155][T14763]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1059.297823][T14763]  vfs_read+0x2c0/0x920
[ 1059.302032][T14763]  ? kernel_read+0x1e0/0x1e0
[ 1059.306667][T14763]  ? __fget_files+0x28/0x4d0
[ 1059.311312][T14763]  ? __fget_files+0x44a/0x4d0
[ 1059.316059][T14763]  ? __fdget_pos+0x2ae/0x360
[ 1059.320686][T14763]  ? ksys_read+0x71/0x240
[ 1059.325106][T14763]  ksys_read+0x143/0x240
[ 1059.329414][T14763]  ? vfs_write+0x960/0x960
[ 1059.333883][T14763]  ? lockdep_hardirqs_on+0x94/0x140
[ 1059.339128][T14763]  do_syscall_64+0x4c/0xa0
[ 1059.343572][T14763]  ? clear_bhb_loop+0x60/0xb0
[ 1059.348306][T14763]  ? clear_bhb_loop+0x60/0xb0
[ 1059.353437][T14763]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1059.359361][T14763] RIP: 0033:0x7f354b78d9dc
[ 1059.363806][T14763] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1059.383634][T14763] RSP: 002b:00007f354c6db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1059.392077][T14763] RAX: ffffffffffffffda RBX: 00007f354b9e5fa0 RCX: 00007f354b78d9dc
[ 1059.400067][T14763] RDX: 000000000000000f RSI: 00007f354c6db0a0 RDI: 0000000000000004
[ 1059.408053][T14763] RBP: 00007f354c6db090 R08: 0000000000000000 R09: 0000000000000000
[ 1059.416043][T14763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1059.424027][T14763] R13: 00007f354b9e6038 R14: 00007f354b9e5fa0 R15: 00007fff7b16fd48
[ 1059.432042][T14763]  </TASK>
[ 1061.766913][T14781] FAULT_INJECTION: forcing a failure.
[ 1061.766913][T14781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1061.788947][T14781] CPU: 0 PID: 14781 Comm: syz.0.2708 Not tainted syzkaller #0
[ 1061.796494][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1061.806941][T14781] Call Trace:
[ 1061.810252][T14781]  <TASK>
[ 1061.813242][T14781]  dump_stack_lvl+0x168/0x22e
[ 1061.818071][T14781]  ? show_regs_print_info+0x12/0x12
[ 1061.823323][T14781]  ? load_image+0x3b0/0x3b0
[ 1061.827874][T14781]  ? __lock_acquire+0x7c50/0x7c50
[ 1061.832947][T14781]  ? snprintf+0xd7/0x120
[ 1061.837270][T14781]  should_fail_ex+0x399/0x4d0
[ 1061.842028][T14781]  _copy_to_user+0x2c/0x130
[ 1061.846746][T14781]  simple_read_from_buffer+0xe3/0x150
[ 1061.852288][T14781]  proc_fail_nth_read+0x19a/0x210
[ 1061.857461][T14781]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1061.863225][T14781]  ? fsnotify_perm+0x248/0x550
[ 1061.868022][T14781]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1061.873805][T14781]  vfs_read+0x2c0/0x920
[ 1061.877987][T14781]  ? kernel_read+0x1e0/0x1e0
[ 1061.882619][T14781]  ? __fget_files+0x28/0x4d0
[ 1061.887242][T14781]  ? __fget_files+0x44a/0x4d0
[ 1061.891955][T14781]  ? __fdget_pos+0x2ae/0x360
[ 1061.896561][T14781]  ? ksys_read+0x71/0x240
[ 1061.900903][T14781]  ksys_read+0x143/0x240
[ 1061.905161][T14781]  ? vfs_write+0x960/0x960
[ 1061.909848][T14781]  ? lockdep_hardirqs_on+0x94/0x140
[ 1061.915081][T14781]  do_syscall_64+0x4c/0xa0
[ 1061.919501][T14781]  ? clear_bhb_loop+0x60/0xb0
[ 1061.924185][T14781]  ? clear_bhb_loop+0x60/0xb0
[ 1061.928973][T14781]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1061.934985][T14781] RIP: 0033:0x7f354b78d9dc
[ 1061.939458][T14781] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1061.959122][T14781] RSP: 002b:00007f354c6db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1061.967865][T14781] RAX: ffffffffffffffda RBX: 00007f354b9e5fa0 RCX: 00007f354b78d9dc
[ 1061.976047][T14781] RDX: 000000000000000f RSI: 00007f354c6db0a0 RDI: 0000000000000004
[ 1061.984054][T14781] RBP: 00007f354c6db090 R08: 0000000000000000 R09: 0000000000000000
[ 1061.992081][T14781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1062.000184][T14781] R13: 00007f354b9e6038 R14: 00007f354b9e5fa0 R15: 00007fff7b16fd48
[ 1062.008194][T14781]  </TASK>
[ 1062.108174][T14783] loop3: detected capacity change from 0 to 8
[ 1062.151771][T14783] /dev/loop3: Can't open blockdev
[ 1063.136054][T14792] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2712'.
[ 1063.810188][T14806] FAULT_INJECTION: forcing a failure.
[ 1063.810188][T14806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1063.981350][T14806] CPU: 0 PID: 14806 Comm: syz.3.2716 Not tainted syzkaller #0
[ 1063.988867][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1063.998942][T14806] Call Trace:
[ 1064.002249][T14806]  <TASK>
[ 1064.005195][T14806]  dump_stack_lvl+0x168/0x22e
[ 1064.009893][T14806]  ? show_regs_print_info+0x12/0x12
[ 1064.015114][T14806]  ? load_image+0x3b0/0x3b0
[ 1064.019653][T14806]  ? __lock_acquire+0x7c50/0x7c50
[ 1064.024801][T14806]  should_fail_ex+0x399/0x4d0
[ 1064.029541][T14806]  _copy_from_user+0x2c/0x170
[ 1064.034275][T14806]  kstrtouint_from_user+0xbe/0x150
[ 1064.039527][T14806]  ? kstrtol_from_user+0x150/0x150
[ 1064.044697][T14806]  proc_fail_nth_write+0x85/0x1f0
[ 1064.049744][T14806]  ? proc_fail_nth_read+0x210/0x210
[ 1064.054979][T14806]  ? common_file_perm+0x171/0x1c0
[ 1064.060072][T14806]  ? proc_fail_nth_read+0x210/0x210
[ 1064.065316][T14806]  vfs_write+0x2c4/0x960
[ 1064.069658][T14806]  ? file_end_write+0x250/0x250
[ 1064.074611][T14806]  ? __fget_files+0x28/0x4d0
[ 1064.079228][T14806]  ? __fget_files+0x44a/0x4d0
[ 1064.083947][T14806]  ? __fdget_pos+0x2ae/0x360
[ 1064.088643][T14806]  ? ksys_write+0x71/0x240
[ 1064.093082][T14806]  ksys_write+0x143/0x240
[ 1064.097437][T14806]  ? __ia32_sys_read+0x80/0x80
[ 1064.102228][T14806]  ? lockdep_hardirqs_on+0x94/0x140
[ 1064.107476][T14806]  do_syscall_64+0x4c/0xa0
[ 1064.111934][T14806]  ? clear_bhb_loop+0x60/0xb0
[ 1064.116640][T14806]  ? clear_bhb_loop+0x60/0xb0
[ 1064.121334][T14806]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1064.127247][T14806] RIP: 0033:0x7fbc0dd8da7f
[ 1064.131769][T14806] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1064.151915][T14806] RSP: 002b:00007fbc0ec19030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1064.160371][T14806] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbc0dd8da7f
[ 1064.168746][T14806] RDX: 0000000000000001 RSI: 00007fbc0ec190a0 RDI: 0000000000000005
[ 1064.176774][T14806] RBP: 00007fbc0ec19090 R08: 0000000000000000 R09: 0000000000000000
[ 1064.184788][T14806] R10: 0000000040010100 R11: 0000000000000293 R12: 0000000000000001
[ 1064.192797][T14806] R13: 00007fbc0dfe6038 R14: 00007fbc0dfe5fa0 R15: 00007fff6d044a28
[ 1064.200968][T14806]  </TASK>
[ 1065.289363][T14813] netlink: 860 bytes leftover after parsing attributes in process `syz.3.2719'.
[ 1066.339073][T14819] loop2: detected capacity change from 0 to 128
[ 1066.563252][T14712] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1066.655222][T14825] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2725'.
[ 1068.151407][T14837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2721'.
[ 1068.291769][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2721'.
[ 1075.311229][T14539] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[ 1075.522457][T14539] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1075.550394][T14539] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1075.622868][ T9671] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1075.662264][T14539] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1075.717128][T14539] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1075.747370][T14539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.779205][T14539] usb 3-1: Product: syz
[ 1075.787158][T14539] usb 3-1: Manufacturer: syz
[ 1075.891091][T14539] usb 3-1: SerialNumber: syz
[ 1076.662161][ T9671] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1076.680403][ T9671] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1076.691874][ T9671] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1076.701356][ T9671] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1076.730709][ T9671] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1076.772863][ T9671] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1076.793011][T14539] usb 3-1: 0:2 : does not exist
[ 1076.800430][ T9671] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1076.829171][ T9671] usb 4-1: Product: syz
[ 1076.859564][ T9671] usb 4-1: Manufacturer: syz
[ 1076.924275][ T9671] cdc_wdm 4-1:1.0: skipping garbage
[ 1076.948725][ T9671] cdc_wdm 4-1:1.0: skipping garbage
[ 1076.972922][ T9671] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1076.979006][ T9671] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1078.694920][ T4515] usb 4-1: USB disconnect, device number 39
[ 1080.522225][ T8527] usb 3-1: USB disconnect, device number 36
[ 1082.135700][T14952] autofs4:pid:14952:autofs_fill_super: called with bogus options
[ 1085.431704][T14975] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2762'.
[ 1085.441318][T14975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2762'.
[ 1086.414979][T14966] loop3: detected capacity change from 0 to 32768
[ 1086.481995][T14905] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1090.470654][T14539] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1090.795380][T14539] usb 4-1: Using ep0 maxpacket: 32
[ 1091.099173][T14539] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1091.117267][T14539] usb 4-1: config 0 has no interfaces?
[ 1091.149377][T14539] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1091.176672][T14539] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1091.192089][T14539] usb 4-1: Product: syz
[ 1091.205378][T14539] usb 4-1: Manufacturer: syz
[ 1091.213332][T14539] usb 4-1: SerialNumber: syz
[ 1091.254470][T14539] usb 4-1: config 0 descriptor??
[ 1092.452476][ T9671] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[ 1092.662607][ T9671] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1092.708794][ T9671] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1092.756728][ T9671] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1092.768331][ T8527] usb 4-1: USB disconnect, device number 40
[ 1092.800488][ T9671] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1092.809602][ T9671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.849870][ T9671] usb 3-1: Product: syz
[ 1092.868599][ T9671] usb 3-1: Manufacturer: syz
[ 1092.888836][ T9671] usb 3-1: SerialNumber: syz
[ 1093.088883][T15076] Bluetooth: hci0: unsupported parameter 28
[ 1093.095214][T15076] Bluetooth: hci0: unsupported parameter 28
[ 1093.104381][T15076] mmap: syz.3.2796 (15076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1093.971712][ T9671] usb 3-1: 0:2 : does not exist
[ 1094.195445][T15091] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2798'.
[ 1096.336499][T15111] nfs: Unknown parameter ''
[ 1096.957301][T14539] usb 3-1: USB disconnect, device number 37
[ 1097.500643][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1098.508476][T15111] loop3: detected capacity change from 0 to 32768
[ 1098.577347][T15136] loop2: detected capacity change from 0 to 512
[ 1098.628105][T15136] EXT4-fs (loop2): revision level too high, forcing read-only mode
[ 1098.637529][T15136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1099.752193][T15150] FAULT_INJECTION: forcing a failure.
[ 1099.752193][T15150] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1099.825630][T14905] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (14905)
[ 1099.900941][T15150] CPU: 1 PID: 15150 Comm: syz.3.2816 Not tainted syzkaller #0
[ 1099.908497][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1099.918595][T15150] Call Trace:
[ 1099.921907][T15150]  <TASK>
[ 1099.924880][T15150]  dump_stack_lvl+0x168/0x22e
[ 1099.930145][T15150]  ? show_regs_print_info+0x12/0x12
[ 1099.935585][T15150]  ? load_image+0x3b0/0x3b0
[ 1099.940149][T15150]  ? __lock_acquire+0x7c50/0x7c50
[ 1099.945232][T15150]  should_fail_ex+0x399/0x4d0
[ 1099.950006][T15150]  prepare_alloc_pages+0x1e2/0x5f0
[ 1099.955269][T15150]  __alloc_pages+0x123/0x4e0
[ 1099.959913][T15150]  ? zone_statistics+0x170/0x170
[ 1099.964903][T15150]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 1099.970359][T15150]  ? copy_page_from_iter+0xe4/0x100
[ 1099.975632][T15150]  pipe_write+0x633/0x1b00
[ 1099.980117][T15150]  ? pipe_read+0x1200/0x1200
[ 1099.984752][T15150]  ? end_current_label_crit_section+0x14b/0x170
[ 1099.991058][T15150]  ? common_file_perm+0x171/0x1c0
[ 1099.996151][T15150]  ? fsnotify_perm+0x5a/0x550
[ 1100.000879][T15150]  vfs_write+0x44c/0x960
[ 1100.005203][T15150]  ? file_end_write+0x250/0x250
[ 1100.010102][T15150]  ? __fget_files+0x44a/0x4d0
[ 1100.014807][T15150]  ? __fdget_pos+0x1d4/0x360
[ 1100.019409][T15150]  ? ksys_write+0x71/0x240
[ 1100.023840][T15150]  ksys_write+0x143/0x240
[ 1100.028187][T15150]  ? __ia32_sys_read+0x80/0x80
[ 1100.032967][T15150]  ? lockdep_hardirqs_on+0x94/0x140
[ 1100.038189][T15150]  do_syscall_64+0x4c/0xa0
[ 1100.042611][T15150]  ? clear_bhb_loop+0x60/0xb0
[ 1100.047316][T15150]  ? clear_bhb_loop+0x60/0xb0
[ 1100.052030][T15150]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1100.057942][T15150] RIP: 0033:0x7fbc0dd8efc9
[ 1100.062375][T15150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1100.082008][T15150] RSP: 002b:00007fbc0ec19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1100.090443][T15150] RAX: ffffffffffffffda RBX: 00007fbc0dfe5fa0 RCX: 00007fbc0dd8efc9
[ 1100.098876][T15150] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000
[ 1100.106861][T15150] RBP: 00007fbc0ec19090 R08: 0000000000000000 R09: 0000000000000000
[ 1100.115131][T15150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1100.123114][T15150] R13: 00007fbc0dfe6038 R14: 00007fbc0dfe5fa0 R15: 00007fff6d044a28
[ 1100.131290][T15150]  </TASK>
[ 1100.168606][ T4275] EXT4-fs (loop2): unmounting filesystem.
[ 1104.969375][T15202] loop3: detected capacity change from 0 to 128
[ 1105.071250][T15202] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1105.107970][T15202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1105.303998][T15211] netlink: 672 bytes leftover after parsing attributes in process `syz.1.2832'.
[ 1105.912650][ T4277] EXT4-fs (loop3): unmounting filesystem.
[ 1106.080461][ T8527] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[ 1106.312320][ T8527] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1106.326015][ T8527] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1106.528475][ T8527] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1107.224742][ T8527] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1107.255294][ T8527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1107.275646][ T8527] usb 3-1: Product: syz
[ 1107.280150][ T8527] usb 3-1: Manufacturer: syz
[ 1107.316434][ T8527] usb 3-1: SerialNumber: syz
[ 1108.319102][ T8527] usb 3-1: 0:2 : does not exist
[ 1108.834176][T15221] loop3: detected capacity change from 0 to 32768
[ 1111.214539][ T9671] usb 3-1: USB disconnect, device number 38
[ 1111.450871][ T4337] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1111.650435][ T4337] usb 4-1: Using ep0 maxpacket: 8
[ 1111.680820][ T4337] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1111.689089][ T4337] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1111.724980][ T4337] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1111.800134][ T4337] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1111.878343][ T4337] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1112.549612][ T4337] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1112.570020][ T4337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.798592][ T4337] usb 4-1: usb_control_msg returned -32
[ 1112.848818][ T4337] usbtmc 4-1:16.0: can't read capabilities
[ 1113.244364][T15285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2848'.
[ 1115.119077][ T9671] usb 4-1: USB disconnect, device number 41
[ 1116.067106][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.075675][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1120.130787][ T8527] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1120.348418][ T8527] usb 4-1: config 0 has no interfaces?
[ 1120.362947][ T8527] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1120.403237][ T8527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.427945][ T8527] usb 4-1: Product: syz
[ 1120.441687][ T8527] usb 4-1: Manufacturer: syz
[ 1120.455373][ T8527] usb 4-1: SerialNumber: syz
[ 1120.519983][ T8527] usb 4-1: config 0 descriptor??
[ 1120.617238][T15353] loop2: detected capacity change from 0 to 512
[ 1120.715560][T15353] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1120.738930][T15354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2872'.
[ 1120.748900][ T6777] usb 4-1: USB disconnect, device number 42
[ 1120.775699][T15357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2872'.
[ 1120.800522][T15353] EXT4-fs: error -4 creating inode table initialization thread
[ 1120.822454][T15353] EXT4-fs (loop2): mount failed
[ 1121.261042][T15365] loop2: detected capacity change from 0 to 64
[ 1123.170706][ T8527] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[ 1123.379086][T12071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1123.393660][T12071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1123.410800][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1123.425795][ T8527] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1123.434913][T12071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1123.605518][T12071] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1123.615656][T12071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1123.647926][ T8527] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1123.658810][ T8527] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1123.691859][ T8527] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1123.705616][ T8527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1123.715177][ T8527] usb 3-1: Product: syz
[ 1123.721792][ T8527] usb 3-1: Manufacturer: syz
[ 1123.726603][ T8527] usb 3-1: SerialNumber: syz
[ 1124.149744][ T8527] usb 3-1: 0:2 : does not exist
[ 1124.414112][T15376] chnl_net:caif_netlink_parms(): no params data found
[ 1125.664043][T12071] Bluetooth: hci2: command 0x0409 tx timeout
[ 1126.776989][T15376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1126.800746][T15376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1126.840305][T15376] device bridge_slave_0 entered promiscuous mode
[ 1126.932857][T15376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1126.973891][T15376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1127.015148][T15376] device bridge_slave_1 entered promiscuous mode
[ 1127.202767][T15376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1127.328712][T15376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1127.373086][T15419] loop3: detected capacity change from 0 to 1024
[ 1127.391590][T15419] /dev/loop3: Can't open blockdev
[ 1127.426183][T10969] tipc: Left network mode
[ 1127.535280][T15376] team0: Port device team_slave_0 added
[ 1127.703558][T15376] team0: Port device team_slave_1 added
[ 1127.846729][T12071] Bluetooth: hci2: command 0x041b tx timeout
[ 1128.558566][T15376] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1128.586755][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1128.601867][ T6777] usb 3-1: USB disconnect, device number 39
[ 1128.679028][T15376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1128.837217][T15376] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1128.853831][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1128.933357][T15376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1129.900437][T12071] Bluetooth: hci2: command 0x040f tx timeout
[ 1130.179102][T15376] device hsr_slave_0 entered promiscuous mode
[ 1130.206022][T15376] device hsr_slave_1 entered promiscuous mode
[ 1130.308763][T15376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1130.398305][T15376] Cannot create hsr debugfs directory
[ 1131.980616][T12071] Bluetooth: hci2: command 0x0419 tx timeout
[ 1134.795977][T10969] device hsr_slave_0 left promiscuous mode
[ 1134.831789][T10969] device hsr_slave_1 left promiscuous mode
[ 1134.911700][T10969] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1134.964320][T10969] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1135.013213][T10969] device team0 left promiscuous mode
[ 1135.018576][T10969] device team_slave_0 left promiscuous mode
[ 1135.128532][T10969] device team_slave_1 left promiscuous mode
[ 1135.171830][T10969] device bridge1 left promiscuous mode
[ 1135.205670][T10969] bridge0: port 3(team0) entered disabled state
[ 1135.268277][T10969] device bridge_slave_1 left promiscuous mode
[ 1135.315836][T10969] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1135.347494][T10969] device bridge_slave_0 left promiscuous mode
[ 1135.361413][T10969] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.467347][T10969] team0 (unregistering): Port device bridge1 removed
[ 1135.483399][T15485] loop2: detected capacity change from 0 to 512
[ 1138.715577][T10969] team0 (unregistering): Port device team_slave_1 removed
[ 1138.826059][T10969] team0 (unregistering): Port device team_slave_0 removed
[ 1138.935259][T10969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1139.061255][T10969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1140.166187][T10969] bond0 (unregistering): Released all slaves
[ 1140.488109][T15541] netlink: 'syz.5.2919': attribute type 6 has an invalid length.
[ 1140.500619][T15541] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.2919'.
[ 1141.713128][T15376] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1141.829789][T15376] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1141.856733][T15376] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1141.905272][T15376] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1142.302572][T15376] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1142.346303][T15573] device veth1_to_hsr entered promiscuous mode
[ 1142.391807][T15573] device macvtap1 entered promiscuous mode
[ 1142.481604][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1142.651229][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1142.995377][T15376] 8021q: adding VLAN 0 to HW filter on device team0
[ 1143.404603][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1143.417349][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1143.428538][T10969] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1143.435853][T10969] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1143.657695][T15586] loop3: detected capacity change from 0 to 4096
[ 1143.675479][T15586] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[ 1144.906353][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1145.009056][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1145.100141][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1145.376872][T10959] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.384094][T10959] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1145.533538][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1145.543240][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1145.554315][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1145.838664][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1145.897434][T15376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1145.980738][T15376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1146.064311][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1146.082081][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1146.205994][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1146.827022][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1146.878186][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1147.200377][   T26] audit: type=1326 audit(1762174590.052:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15608 comm="syz.2.2934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f97d8efc9 code=0x0
[ 1147.319878][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1147.356384][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1147.374139][T10959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1149.776401][T15637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2941'.
[ 1149.795220][T15637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2941'.
[ 1149.805163][T15637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2941'.
[ 1150.230048][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1150.257888][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1150.357865][T15376] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1150.674438][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1150.713148][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1150.904889][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1151.020499][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1151.112991][T15644] loop3: detected capacity change from 0 to 8192
[ 1151.148722][T15376] device veth0_vlan entered promiscuous mode
[ 1151.174263][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1151.264279][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1151.322046][T15376] device veth1_vlan entered promiscuous mode
[ 1152.112570][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1152.154025][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1152.319655][T15376] device veth0_macvtap entered promiscuous mode
[ 1152.348230][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1152.367917][T15376] device veth1_macvtap entered promiscuous mode
[ 1152.641746][T15671] loop2: detected capacity change from 0 to 40427
[ 1152.672438][T15671] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[ 1152.679507][T15671] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1152.691740][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.704901][T15671] F2FS-fs (loop2): invalid crc value
[ 1152.736858][T15671] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1152.761563][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.791154][T15671] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1152.798321][T15671] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1152.835622][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.916676][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.979537][T15376] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1152.990083][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1153.024472][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1153.098206][T15688] tmpfs: Unknown parameter 'noswap'
[ 1153.575206][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1153.616016][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.672252][T15376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1153.724323][T15376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1153.994129][T15376] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1154.335024][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1154.399624][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1154.455485][T15376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.505293][T15376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.530654][T15376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.559882][T15376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.254588][T15700] loop2: detected capacity change from 0 to 8192
[ 1155.304477][T15700] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1155.336325][T15700] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[ 1155.352154][T15700] REISERFS (device loop2): using ordered data mode
[ 1155.362795][T15700] reiserfs: using flush barriers
[ 1155.372622][T15700] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1155.502526][T15700] REISERFS (device loop2): checking transaction log (loop2)
[ 1156.328364][T15725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1156.397522][T15725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1156.763280][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1156.898577][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1156.947771][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1157.030487][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1157.267472][T15725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1157.296437][T15700] REISERFS (device loop2): Using tea hash to sort names
[ 1157.485622][T15700] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[ 1157.579081][T15700] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[ 1158.826157][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2960'.
[ 1161.132688][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1161.147387][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1161.158937][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1161.181078][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1161.188927][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1161.197582][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1161.251207][ T4459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1161.296083][ T4459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1161.577631][ T4459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1161.645621][ T4459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1162.357004][ T4459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1162.394401][ T4459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1163.014709][ T4459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1163.062730][ T4459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1163.262611][ T4268] Bluetooth: hci4: command 0x0409 tx timeout
[ 1163.498809][T15785] chnl_net:caif_netlink_parms(): no params data found
[ 1163.798440][ T4459] tipc: Disabling bearer <eth:syzkaller0>
[ 1163.815940][ T4459] tipc: Left network mode
[ 1163.907105][T15785] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1163.934944][T15785] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1163.966640][T15785] device bridge_slave_0 entered promiscuous mode
[ 1164.084619][T15785] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1164.101663][T15785] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1164.111908][T15785] device bridge_slave_1 entered promiscuous mode
[ 1164.155096][T15785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1164.265562][T15785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1164.655592][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2984'.
[ 1165.140530][T15785] team0: Port device team_slave_0 added
[ 1165.340707][ T4268] Bluetooth: hci4: command 0x041b tx timeout
[ 1166.180390][T15785] team0: Port device team_slave_1 added
[ 1166.264496][T15785] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1166.748886][T15785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1166.891889][T15785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1167.147992][T15785] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1167.420524][ T4268] Bluetooth: hci4: command 0x040f tx timeout
[ 1167.887905][T15785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1167.915556][T15785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1168.056426][T15885] 9pnet_fd: Insufficient options for proto=fd
[ 1168.193441][T15785] device hsr_slave_0 entered promiscuous mode
[ 1168.222862][T15785] device hsr_slave_1 entered promiscuous mode
[ 1168.240848][T15785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1168.261909][T15785] Cannot create hsr debugfs directory
[ 1169.500716][ T4268] Bluetooth: hci4: command 0x0419 tx timeout
[ 1169.769847][ T4459] device veth5 left promiscuous mode
[ 1169.786858][ T4459] bridge1: port 3(veth5) entered disabled state
[ 1169.807719][ T4459] device veth0_to_bond left promiscuous mode
[ 1169.819551][ T4459] bridge1: port 2(veth0_to_bond) entered disabled state
[ 1169.905696][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'.
[ 1170.131048][ T4459] device veth3 left promiscuous mode
[ 1170.136529][ T4459] bridge1: port 1(veth3) entered disabled state
[ 1170.437464][ T4459] device hsr_slave_0 left promiscuous mode
[ 1170.471653][ T4459] device hsr_slave_1 left promiscuous mode
[ 1170.486129][ T4459] batman_adv: batadv0: Interface deactivated: dummy0
[ 1170.528400][ T4459] batman_adv: batadv0: Removing interface: dummy0
[ 1170.542257][ T4459] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1170.580531][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1170.611263][ T4459] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1170.627021][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1170.652783][ T4459] device bridge_slave_1 left promiscuous mode
[ 1170.679426][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.705850][ T4459] device bridge_slave_0 left promiscuous mode
[ 1170.720652][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.888077][ T4459] device veth1_macvtap left promiscuous mode
[ 1171.311283][ T4459] device veth0_macvtap left promiscuous mode
[ 1171.317486][ T4459] device veth1_vlan left promiscuous mode
[ 1171.352850][ T4459] device veth0_vlan left promiscuous mode
[ 1173.359128][ T4459] team0 (unregistering): Port device team_slave_1 removed
[ 1173.450061][ T4459] team0 (unregistering): Port device team_slave_0 removed
[ 1174.492441][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3002'.
[ 1174.508557][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3002'.
[ 1174.519049][T15932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3002'.
[ 1174.659902][T15952] FAULT_INJECTION: forcing a failure.
[ 1174.659902][T15952] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1174.714816][T15952] CPU: 1 PID: 15952 Comm: syz.2.3006 Not tainted syzkaller #0
[ 1174.722354][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1174.732423][T15952] Call Trace:
[ 1174.735717][T15952]  <TASK>
[ 1174.738666][T15952]  dump_stack_lvl+0x168/0x22e
[ 1174.743368][T15952]  ? show_regs_print_info+0x12/0x12
[ 1174.748596][T15952]  ? load_image+0x3b0/0x3b0
[ 1174.753124][T15952]  ? __lock_acquire+0x7c50/0x7c50
[ 1174.758191][T15952]  ? snprintf+0xd7/0x120
[ 1174.762456][T15952]  should_fail_ex+0x399/0x4d0
[ 1174.767155][T15952]  _copy_to_user+0x2c/0x130
[ 1174.771679][T15952]  simple_read_from_buffer+0xe3/0x150
[ 1174.777076][T15952]  proc_fail_nth_read+0x19a/0x210
[ 1174.782117][T15952]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1174.787766][T15952]  ? fsnotify_perm+0x248/0x550
[ 1174.792632][T15952]  ? proc_fault_inject_write+0x2f0/0x2f0
[ 1174.798296][T15952]  vfs_read+0x2c0/0x920
[ 1174.802503][T15952]  ? kernel_read+0x1e0/0x1e0
[ 1174.807127][T15952]  ? __fget_files+0x28/0x4d0
[ 1174.811744][T15952]  ? __fget_files+0x44a/0x4d0
[ 1174.816448][T15952]  ? __fdget_pos+0x2ae/0x360
[ 1174.821055][T15952]  ? ksys_read+0x71/0x240
[ 1174.825403][T15952]  ksys_read+0x143/0x240
[ 1174.829691][T15952]  ? vfs_write+0x960/0x960
[ 1174.834131][T15952]  ? lockdep_hardirqs_on+0x94/0x140
[ 1174.839357][T15952]  do_syscall_64+0x4c/0xa0
[ 1174.843881][T15952]  ? clear_bhb_loop+0x60/0xb0
[ 1174.848575][T15952]  ? clear_bhb_loop+0x60/0xb0
[ 1174.853267][T15952]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1174.859197][T15952] RIP: 0033:0x7f3f97d8d9dc
[ 1174.863629][T15952] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1174.883251][T15952] RSP: 002b:00007f3f98baa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1174.891715][T15952] RAX: ffffffffffffffda RBX: 00007f3f97fe5fa0 RCX: 00007f3f97d8d9dc
[ 1174.899699][T15952] RDX: 000000000000000f RSI: 00007f3f98baa0a0 RDI: 0000000000000004
[ 1174.907687][T15952] RBP: 00007f3f98baa090 R08: 0000000000000000 R09: 0000000000000000
[ 1174.915670][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1174.923667][T15952] R13: 00007f3f97fe6038 R14: 00007f3f97fe5fa0 R15: 00007ffcc6a7fed8
[ 1174.931780][T15952]  </TASK>
[ 1175.064697][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3008'.
[ 1175.184929][T15959] FAULT_INJECTION: forcing a failure.
[ 1175.184929][T15959] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1175.238074][T15959] CPU: 1 PID: 15959 Comm: syz.0.3009 Not tainted syzkaller #0
[ 1175.245715][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1175.255814][T15959] Call Trace:
[ 1175.259134][T15959]  <TASK>
[ 1175.262119][T15959]  dump_stack_lvl+0x168/0x22e
[ 1175.266893][T15959]  ? show_regs_print_info+0x12/0x12
[ 1175.272149][T15959]  ? load_image+0x3b0/0x3b0
[ 1175.276713][T15959]  ? __lock_acquire+0x7c50/0x7c50
[ 1175.281793][T15959]  should_fail_ex+0x399/0x4d0
[ 1175.286535][T15959]  prepare_alloc_pages+0x1e2/0x5f0
[ 1175.291719][T15959]  __alloc_pages+0x123/0x4e0
[ 1175.296458][T15959]  ? lock_chain_count+0x20/0x20
[ 1175.301362][T15959]  ? zone_statistics+0x170/0x170
[ 1175.306358][T15959]  ? count_memcg_event_mm+0x8f/0x3b0
[ 1175.310975][T15963] FAULT_INJECTION: forcing a failure.
[ 1175.310975][T15963] name failslab, interval 1, probability 0, space 0, times 0
[ 1175.311674][T15959]  ? count_memcg_event_mm+0x358/0x3b0
[ 1175.329709][T15959]  ? count_memcg_event_mm+0x8f/0x3b0
[ 1175.335056][T15959]  __folio_alloc+0xe/0x30
[ 1175.339445][T15959]  vma_alloc_folio+0x4a3/0x900
[ 1175.344347][T15959]  handle_mm_fault+0x2237/0x3e60
[ 1175.349365][T15959]  ? numa_migrate_prep+0x250/0x250
[ 1175.354617][T15959]  __get_user_pages+0x3ff/0xeb0
[ 1175.359502][T15959]  ? populate_vma_page_range+0x2b0/0x2b0
[ 1175.365179][T15959]  get_user_pages_unlocked+0x248/0x6f0
[ 1175.370671][T15959]  ? __gup_longterm_locked+0x1a60/0x1a60
[ 1175.376320][T15959]  ? sanity_check_pinned_pages+0xf07/0x1090
[ 1175.382239][T15959]  internal_get_user_pages_fast+0x1f00/0x2620
[ 1175.388368][T15959]  ? get_user_pages_fast_only+0x40/0x40
[ 1175.393936][T15959]  ? rds_info_getsockopt+0x1d4/0x470
[ 1175.399255][T15959]  ? rcu_is_watching+0x11/0xa0
[ 1175.404045][T15959]  ? rds_info_getsockopt+0x1d4/0x470
[ 1175.409345][T15959]  ? __kmalloc+0xe1/0x240
[ 1175.413698][T15959]  rds_info_getsockopt+0x1f4/0x470
[ 1175.418834][T15959]  ? rds_info_copy+0x2a0/0x2a0
[ 1175.423619][T15959]  ? __might_fault+0xa6/0x120
[ 1175.428925][T15959]  ? __might_fault+0xc2/0x120
[ 1175.433613][T15959]  ? __might_fault+0xa6/0x120
[ 1175.438302][T15959]  ? rds_getsockopt+0x13b/0x3c0
[ 1175.443198][T15959]  ? rds_setsockopt+0xe20/0xe20
[ 1175.448079][T15959]  __sys_getsockopt+0x1b0/0x230
[ 1175.453481][T15959]  __x64_sys_getsockopt+0xb1/0xc0
[ 1175.458530][T15959]  do_syscall_64+0x4c/0xa0
[ 1175.462964][T15959]  ? clear_bhb_loop+0x60/0xb0
[ 1175.467660][T15959]  ? clear_bhb_loop+0x60/0xb0
[ 1175.472356][T15959]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1175.478268][T15959] RIP: 0033:0x7f7ed7f8efc9
[ 1175.482698][T15959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1175.502329][T15959] RSP: 002b:00007f7ed8e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1175.510767][T15959] RAX: ffffffffffffffda RBX: 00007f7ed81e5fa0 RCX: 00007f7ed7f8efc9
[ 1175.518762][T15959] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000004
[ 1175.526748][T15959] RBP: 00007f7ed8e2b090 R08: 0000200000000040 R09: 0000000000000000
[ 1175.534733][T15959] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[ 1175.542717][T15959] R13: 00007f7ed81e6038 R14: 00007f7ed81e5fa0 R15: 00007ffcabd2b478
[ 1175.550715][T15959]  </TASK>
[ 1175.613812][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3010'.
[ 1175.627217][T15961] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3010'.
[ 1175.745564][T15785] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1175.787162][T15963] CPU: 1 PID: 15963 Comm: syz.2.3011 Not tainted syzkaller #0
[ 1175.794712][T15963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1175.804821][T15963] Call Trace:
[ 1175.808195][T15963]  <TASK>
[ 1175.811168][T15963]  dump_stack_lvl+0x168/0x22e
[ 1175.815898][T15963]  ? show_regs_print_info+0x12/0x12
[ 1175.821153][T15963]  ? load_image+0x3b0/0x3b0
[ 1175.825806][T15963]  ? __might_sleep+0xd0/0xd0
[ 1175.830501][T15963]  ? __lock_acquire+0x7c50/0x7c50
[ 1175.835592][T15963]  should_fail_ex+0x399/0x4d0
[ 1175.840337][T15963]  should_failslab+0x5/0x20
[ 1175.844905][T15963]  slab_pre_alloc_hook+0x59/0x310
[ 1175.849993][T15963]  kmem_cache_alloc_node+0x5a/0x320
[ 1175.855269][T15963]  ? __alloc_skb+0xfc/0x7e0
[ 1175.859833][T15963]  __alloc_skb+0xfc/0x7e0
[ 1175.864225][T15963]  alloc_skb_with_frags+0xa7/0x710
[ 1175.869383][T15963]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1175.875432][T15963]  sock_alloc_send_pskb+0x853/0x980
[ 1175.880696][T15963]  ? sock_kzfree_s+0x50/0x50
[ 1175.885345][T15963]  ? apparmor_socket_getpeersec_dgram+0x5/0x10
[ 1175.891562][T15963]  ? security_socket_getpeersec_dgram+0x9d/0xc0
[ 1175.897908][T15963]  unix_dgram_sendmsg+0x592/0x16c0
[ 1175.903180][T15963]  ? aa_sk_perm+0x7e5/0x920
[ 1175.907738][T15963]  ? unix_dgram_poll+0x660/0x660
[ 1175.912727][T15963]  ? tomoyo_socket_sendmsg_permission+0x1d6/0x2f0
[ 1175.919210][T15963]  ? aa_sock_msg_perm+0x94/0x150
[ 1175.924210][T15963]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1175.929537][T15963]  ? security_socket_sendmsg+0x7c/0xa0
[ 1175.935052][T15963]  ? unix_dgram_poll+0x660/0x660
[ 1175.940038][T15963]  ____sys_sendmsg+0x59b/0x970
[ 1175.944867][T15963]  ? __lock_acquire+0x7c50/0x7c50
[ 1175.949963][T15963]  ? __sys_sendmsg_sock+0x30/0x30
[ 1175.955051][T15963]  ? __import_iovec+0x315/0x500
[ 1175.959973][T15963]  ? import_iovec+0x6f/0xa0
[ 1175.964544][T15963]  ___sys_sendmsg+0x21c/0x290
[ 1175.969278][T15963]  ? __sys_sendmsg+0x270/0x270
[ 1175.974124][T15963]  ? __lock_acquire+0x7c50/0x7c50
[ 1175.979222][T15963]  ? __fdget+0x17c/0x200
[ 1175.983520][T15963]  __se_sys_sendmsg+0x19e/0x270
[ 1175.988430][T15963]  ? __x64_sys_sendmsg+0x80/0x80
[ 1175.993479][T15963]  ? lockdep_hardirqs_on+0x94/0x140
[ 1175.998740][T15963]  do_syscall_64+0x4c/0xa0
[ 1176.003209][T15963]  ? clear_bhb_loop+0x60/0xb0
[ 1176.007929][T15963]  ? clear_bhb_loop+0x60/0xb0
[ 1176.012663][T15963]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1176.018609][T15963] RIP: 0033:0x7f3f97d8efc9
[ 1176.023068][T15963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1176.042810][T15963] RSP: 002b:00007f3f98baa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1176.051282][T15963] RAX: ffffffffffffffda RBX: 00007f3f97fe5fa0 RCX: 00007f3f97d8efc9
[ 1176.059299][T15963] RDX: 0000000020008840 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1176.067321][T15963] RBP: 00007f3f98baa090 R08: 0000000000000000 R09: 0000000000000000
[ 1176.075425][T15963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1176.083441][T15963] R13: 00007f3f97fe6038 R14: 00007f3f97fe5fa0 R15: 00007ffcc6a7fed8
[ 1176.091475][T15963]  </TASK>
[ 1176.103357][T15785] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1176.166203][T15785] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1176.312195][T15785] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1177.551424][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.769690][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.955242][T15785] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1177.998764][T15999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3018'.
[ 1178.029542][T15999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3018'.
[ 1178.126808][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3018'.
[ 1178.153317][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1178.194585][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1178.241597][T15785] 8021q: adding VLAN 0 to HW filter on device team0
[ 1178.260055][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1178.270865][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1178.280169][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1178.287419][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1178.309334][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1178.322952][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1178.338650][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1178.363271][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1178.370883][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1178.535585][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1178.909501][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1178.964087][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1178.983236][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1179.009797][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1179.027076][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1179.037565][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1179.058023][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1179.090835][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1179.105262][T15785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1179.251441][T15785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1179.311208][T10955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1179.320663][T10955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1179.437458][T16018] loop2: detected capacity change from 0 to 4096
[ 1179.464032][T16024] netlink: 884 bytes leftover after parsing attributes in process `syz.5.3023'.
[ 1179.539150][T16018] ntfs: volume version 3.1.
[ 1182.047360][T10955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1182.071382][T10955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1182.109186][T15785] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1182.697560][T10955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1182.761044][T10955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1182.865721][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1182.883053][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1182.932721][T15785] device veth0_vlan entered promiscuous mode
[ 1182.976660][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1183.025596][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1183.076521][T15785] device veth1_vlan entered promiscuous mode
[ 1183.222459][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1183.257413][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1183.310321][T15785] device veth0_macvtap entered promiscuous mode
[ 1183.482458][T15785] device veth1_macvtap entered promiscuous mode
[ 1184.238705][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1184.248054][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1184.271528][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1184.282768][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1184.294059][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1184.305670][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1184.503469][T15785] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1184.736066][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1185.014529][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1185.031316][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1185.048667][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1185.064163][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1185.075374][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1185.099188][T15785] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1185.109493][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1185.119780][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1185.134913][T15785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.155919][T15785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.166894][T15785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.179192][T15785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.625750][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1185.706893][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1185.893000][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1185.926367][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1186.041480][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.136867][T10969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1189.761417][T16116] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1189.834513][T16116] syzkaller1: linktype set to 776
[ 1189.867209][T16118] netlink: 'syz.0.3047': attribute type 12 has an invalid length.
[ 1189.891083][T16118] netlink: 'syz.0.3047': attribute type 29 has an invalid length.
[ 1189.929446][T16118] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3047'.
[ 1189.958759][T16118] netlink: 'syz.0.3047': attribute type 1 has an invalid length.
[ 1190.061383][T12071] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1190.093117][T12071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1190.110163][T12071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1190.118762][T12071] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1190.129106][T12071] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1190.137612][T12071] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1190.609023][T16128] netlink: 884 bytes leftover after parsing attributes in process `syz.2.3049'.
[ 1191.701356][T16122] chnl_net:caif_netlink_parms(): no params data found
[ 1192.095296][T16144] loop2: detected capacity change from 0 to 256
[ 1192.149110][T16122] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1192.209307][T16122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1192.220740][ T4268] Bluetooth: hci5: command 0x0409 tx timeout
[ 1192.249356][T16122] device bridge_slave_0 entered promiscuous mode
[ 1192.322039][T16122] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1192.356241][T16122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1192.927822][T16122] device bridge_slave_1 entered promiscuous mode
[ 1193.291920][T16122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1193.378534][T16122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1194.115839][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3057'.
[ 1194.146955][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3057'.
[ 1194.197147][T16163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3057'.
[ 1194.240475][T14544] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1194.293366][T16122] team0: Port device team_slave_0 added
[ 1194.300658][ T4268] Bluetooth: hci5: command 0x041b tx timeout
[ 1194.310613][T16122] team0: Port device team_slave_1 added
[ 1194.411079][T14544] usb 3-1: device descriptor read/64, error -71
[ 1194.527535][T16122] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1194.655373][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1194.687932][T16122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1194.704367][T16173] netlink: 884 bytes leftover after parsing attributes in process `syz.5.3059'.
[ 1194.722354][ T4392] tipc: Left network mode
[ 1194.727273][T16122] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1194.760755][T14544] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1195.506363][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1195.593777][T16122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1196.053352][T16194] loop2: detected capacity change from 0 to 512
[ 1196.089730][T16122] device hsr_slave_0 entered promiscuous mode
[ 1196.096882][T16194] EXT4-fs: Invalid want_extra_isize 0
[ 1196.128815][T16122] device hsr_slave_1 entered promiscuous mode
[ 1196.177245][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3065'.
[ 1196.385697][ T4268] Bluetooth: hci5: command 0x040f tx timeout
[ 1196.540599][T16199] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1196.546719][T16199] syzkaller1: linktype set to 776
[ 1198.519628][ T4268] Bluetooth: hci5: command 0x0419 tx timeout
[ 1200.529173][T16226] netlink: 636 bytes leftover after parsing attributes in process `syz.2.3075'.
[ 1200.638086][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1200.648164][ T4392] device hsr_slave_0 left promiscuous mode
[ 1200.658956][ T4392] device hsr_slave_1 left promiscuous mode
[ 1200.675686][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1200.693043][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1200.713637][ T4392] device bridge_slave_1 left promiscuous mode
[ 1200.728578][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1200.759927][ T4392] device bridge_slave_0 left promiscuous mode
[ 1200.774115][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1202.091124][T16243] loop2: detected capacity change from 0 to 256
[ 1202.101381][T16243] exfat: Deprecated parameter 'namecase'
[ 1202.107231][T16243] exfat: Deprecated parameter 'namecase'
[ 1202.114017][T16243] exfat: Deprecated parameter 'utf8'
[ 1202.126096][T16243] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1202.560714][ T8393] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1202.836213][ T8393] usb 3-1: device descriptor read/64, error -71
[ 1203.110433][ T8393] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1203.281500][ T8393] usb 3-1: device descriptor read/64, error -71
[ 1203.400968][ T8393] usb usb3-port1: attempt power cycle
[ 1203.569897][ T4392] team0 (unregistering): Port device team_slave_1 removed
[ 1203.680917][ T4392] team0 (unregistering): Port device team_slave_0 removed
[ 1203.795808][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1203.858523][ T8393] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1203.923338][ T8393] usb 3-1: device descriptor read/8, error -71
[ 1203.950732][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1204.230426][ T8393] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1204.292280][ T8393] usb 3-1: device descriptor read/8, error -71
[ 1204.415465][ T8393] usb usb3-port1: unable to enumerate USB device
[ 1205.318650][ T4392] bond0 (unregistering): Released all slaves
[ 1205.504322][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3076'.
[ 1205.563941][T16230] device syz_tun entered promiscuous mode
[ 1205.628084][T16230] bridge0: port 1(macvlan2) entered blocking state
[ 1205.651445][T16230] bridge0: port 1(macvlan2) entered disabled state
[ 1205.668963][T16230] device macvlan2 entered promiscuous mode
[ 1206.036163][T16122] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1206.200590][T16122] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1206.308786][T16122] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1206.345263][T16122] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1206.686324][T16278] fuse: Bad value for 'group_id'
[ 1207.133147][T16281] netlink: 636 bytes leftover after parsing attributes in process `syz.2.3091'.
[ 1207.897278][T16122] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1207.918318][T16122] 8021q: adding VLAN 0 to HW filter on device team0
[ 1207.941993][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1208.031606][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1208.117466][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1208.171325][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1208.218306][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1208.225529][ T4435] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1208.252284][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1208.273797][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1208.288525][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1208.295772][ T4435] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1208.313852][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1208.331373][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1208.357918][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1208.372630][T10961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1208.378156][T10961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1208.410163][T10961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1208.454260][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1208.455180][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1208.459898][T10961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1208.461500][T10961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1208.527677][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1208.528427][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1208.542727][T16122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1208.792717][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'.
[ 1208.792796][T16297] device bridge_slave_1 left promiscuous mode
[ 1208.792991][T16297] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1208.814812][T16297] device bridge_slave_0 left promiscuous mode
[ 1208.815017][T16297] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1209.530879][T16270] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1209.531023][T16270] syzkaller1: linktype set to 776
[ 1209.656814][T16316] FAULT_INJECTION: forcing a failure.
[ 1209.656814][T16316] name failslab, interval 1, probability 0, space 0, times 0
[ 1209.656849][T16316] CPU: 1 PID: 16316 Comm: syz.2.3099 Not tainted syzkaller #0
[ 1209.656870][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1209.656884][T16316] Call Trace:
[ 1209.656893][T16316]  <TASK>
[ 1209.656903][T16316]  dump_stack_lvl+0x168/0x22e
[ 1209.656938][T16316]  ? show_regs_print_info+0x12/0x12
[ 1209.656964][T16316]  ? load_image+0x3b0/0x3b0
[ 1209.657002][T16316]  ? fib_rules_unregister+0x340/0x340
[ 1209.657026][T16316]  should_fail_ex+0x399/0x4d0
[ 1209.657064][T16316]  should_failslab+0x5/0x20
[ 1209.657095][T16316]  slab_pre_alloc_hook+0x59/0x310
[ 1209.657124][T16316]  kmem_cache_alloc+0x56/0x2f0
[ 1209.657144][T16316]  ? dst_alloc+0x101/0x160
[ 1209.657179][T16316]  dst_alloc+0x101/0x160
[ 1209.657215][T16316]  ip_route_output_key_hash_rcu+0x14a4/0x23f0
[ 1209.657259][T16316]  ? ip_route_output_key_hash+0x12b/0x340
[ 1209.657292][T16316]  ip_route_output_key_hash+0x207/0x340
[ 1209.657326][T16316]  ? ip_route_input_rcu+0x30a0/0x30a0
[ 1209.657364][T16316]  ? __lock_acquire+0x7c50/0x7c50
[ 1209.657400][T16316]  ip_route_output_flow+0x26/0x150
[ 1209.657431][T16316]  ? security_sk_classify_flow+0x77/0x90
[ 1209.657466][T16316]  udp_sendmsg+0x15fb/0x2390
[ 1209.657510][T16316]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[ 1209.657538][T16316]  ? udp_cmsg_send+0x350/0x350
[ 1209.657578][T16316]  ? verify_lock_unused+0x140/0x140
[ 1209.657625][T16316]  ? verify_lock_unused+0x140/0x140
[ 1209.657658][T16316]  ? release_sock+0x2b/0x1b0
[ 1209.657689][T16316]  ? reacquire_held_locks+0x2f9/0x590
[ 1209.657723][T16316]  udpv6_sendmsg+0xa26/0x2370
[ 1209.657756][T16316]  ? print_unlock_imbalance_bug+0x160/0x160
[ 1209.657798][T16316]  ? udp_v6_early_demux+0xf50/0xf50
[ 1209.657834][T16316]  ? lock_chain_count+0x20/0x20
[ 1209.657873][T16316]  ? _local_bh_enable+0xa0/0xa0
[ 1209.657906][T16316]  ? ip6_datagram_release_cb+0x3b6/0x540
[ 1209.657930][T16316]  ? release_sock+0xa9/0x1b0
[ 1209.657965][T16316]  ? inet_send_prepare+0x1af/0x260
[ 1209.657997][T16316]  ? inet_send_prepare+0x1af/0x260
[ 1209.658029][T16316]  ? inet6_sendmsg+0x5b/0xd0
[ 1209.658054][T16316]  ? inet6_compat_ioctl+0x380/0x380
[ 1209.658078][T16316]  ____sys_sendmsg+0x59b/0x970
[ 1209.658107][T16316]  ? __lock_acquire+0x7c50/0x7c50
[ 1209.658142][T16316]  ? __sys_sendmsg_sock+0x30/0x30
[ 1209.658168][T16316]  ? __import_iovec+0x315/0x500
[ 1209.658210][T16316]  ? import_iovec+0x6f/0xa0
[ 1209.658245][T16316]  ___sys_sendmsg+0x21c/0x290
[ 1209.658278][T16316]  ? __sys_sendmsg+0x270/0x270
[ 1209.658349][T16316]  ? __fdget+0x17c/0x200
[ 1209.658381][T16316]  __sys_sendmmsg+0x272/0x490
[ 1209.658415][T16316]  ? __ia32_sys_sendmsg+0x80/0x80
[ 1209.658454][T16316]  ? mutex_unlock+0x10/0x10
[ 1209.658480][T16316]  ? __fget_files+0x44a/0x4d0
[ 1209.658520][T16316]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1209.658553][T16316]  ? lock_chain_count+0x20/0x20
[ 1209.658589][T16316]  __x64_sys_sendmmsg+0x9c/0xb0
[ 1209.658621][T16316]  do_syscall_64+0x4c/0xa0
[ 1209.658645][T16316]  ? clear_bhb_loop+0x60/0xb0
[ 1209.658668][T16316]  ? clear_bhb_loop+0x60/0xb0
[ 1209.658693][T16316]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1209.658716][T16316] RIP: 0033:0x7f3f97d8efc9
[ 1209.658735][T16316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1209.658756][T16316] RSP: 002b:00007f3f98b68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1209.658779][T16316] RAX: ffffffffffffffda RBX: 00007f3f97fe6180 RCX: 00007f3f97d8efc9
[ 1209.658802][T16316] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006
[ 1209.658817][T16316] RBP: 00007f3f98b68090 R08: 0000000000000000 R09: 0000000000000000
[ 1209.658832][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1209.658845][T16316] R13: 00007f3f97fe6218 R14: 00007f3f97fe6180 R15: 00007ffcc6a7fed8
[ 1209.658878][T16316]  </TASK>
[ 1211.052967][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1211.320563][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1211.335455][T16332] loop3: detected capacity change from 0 to 2048
[ 1211.426049][T16332] loop3: detected capacity change from 0 to 164
[ 1211.437283][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1212.169743][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1212.204904][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1212.269465][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1213.918850][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1213.952399][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1213.986690][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1216.323428][T16335] netlink: 636 bytes leftover after parsing attributes in process `syz.5.3104'.
[ 1216.383750][T16122] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1216.424408][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1216.434993][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1216.501722][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1217.022931][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1217.115037][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1217.137371][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1217.357761][T16122] device veth0_vlan entered promiscuous mode
[ 1217.378581][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1217.390196][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1217.964392][T16122] device veth1_vlan entered promiscuous mode
[ 1218.612878][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1218.618468][T16371] FAULT_INJECTION: forcing a failure.
[ 1218.618468][T16371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1218.625178][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1218.661207][T16371] CPU: 0 PID: 16371 Comm: syz.0.3114 Not tainted syzkaller #0
[ 1218.668737][T16371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1218.678808][T16371] Call Trace:
[ 1218.682099][T16371]  <TASK>
[ 1218.685132][T16371]  dump_stack_lvl+0x168/0x22e
[ 1218.689824][T16371]  ? show_regs_print_info+0x12/0x12
[ 1218.695037][T16371]  ? load_image+0x3b0/0x3b0
[ 1218.699668][T16371]  ? __lock_acquire+0x7c50/0x7c50
[ 1218.704811][T16371]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1218.710826][T16371]  should_fail_ex+0x399/0x4d0
[ 1218.715546][T16371]  _copy_from_user+0x2c/0x170
[ 1218.720262][T16371]  __ia32_sys_rt_sigreturn+0x1e6/0x790
[ 1218.725854][T16371]  ? load_gs_index+0x120/0x120
[ 1218.730655][T16371]  ? lock_chain_count+0x20/0x20
[ 1218.735539][T16371]  ? lockdep_hardirqs_on+0x94/0x140
[ 1218.740772][T16371]  do_syscall_64+0x4c/0xa0
[ 1218.745238][T16371]  ? clear_bhb_loop+0x60/0xb0
[ 1218.750049][T16371]  ? clear_bhb_loop+0x60/0xb0
[ 1218.754780][T16371]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1218.760706][T16371] RIP: 0033:0x7f7ed7f2b099
[ 1218.765134][T16371] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[ 1218.784758][T16371] RSP: 002b:00007f7ed8e2aa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[ 1218.793198][T16371] RAX: ffffffffffffffda RBX: 00007f7ed81e5fa0 RCX: 00007f7ed7f2b099
[ 1218.801184][T16371] RDX: 00007f7ed8e2aa80 RSI: 00007f7ed8e2abb0 RDI: 0000000000000021
[ 1218.809203][T16371] RBP: 00007f7ed8e2b090 R08: 0000000000000000 R09: 0000000000000000
[ 1218.817186][T16371] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[ 1218.825176][T16371] R13: 00007f7ed81e6038 R14: 00007f7ed81e5fa0 R15: 00007ffcabd2b478
[ 1218.833261][T16371]  </TASK>
[ 1218.851560][T16122] device veth0_macvtap entered promiscuous mode
[ 1218.880553][T16122] device veth1_macvtap entered promiscuous mode
[ 1218.946037][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1218.971409][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1218.982318][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1218.993713][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1219.004144][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1219.015891][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1219.038086][T16122] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1219.052687][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1219.101048][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1219.116973][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1219.127577][T16378] loop2: detected capacity change from 0 to 64
[ 1219.140853][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1219.689125][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1219.702321][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1219.720048][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1219.735584][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1219.757801][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1219.782199][T16122] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1219.818152][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1219.846735][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1219.875734][T16122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1219.933896][T16122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1219.953458][T16122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1219.984721][T16122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.265319][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1220.277628][T16389] netlink: 884 bytes leftover after parsing attributes in process `syz.5.3120'.
[ 1220.304198][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1220.348303][T10961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1220.407550][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1220.424192][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1220.456670][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1224.016918][T16423] loop2: detected capacity change from 0 to 4096
[ 1224.106040][T16423] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[ 1224.133205][T16439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3137'.
[ 1224.267250][    T9] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[ 1224.287589][ T4275] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[ 1224.295537][ T4275] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1224.318434][ T4275] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[ 1224.335405][    T9] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[ 1224.356806][ T4275] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22.
[ 1224.369380][T16447] netlink: 884 bytes leftover after parsing attributes in process `syz.3.3139'.
[ 1226.502273][T16467] infiniband syz0: set down
[ 1226.507009][T16467] infiniband syz0: added ipvlan0
[ 1226.589945][T16467] RDS/IB: syz0: added
[ 1226.606402][T16467] smc: adding ib device syz0 with port count 1
[ 1226.632918][T16467] smc:    ib device syz0 port 1 has pnetid 
[ 1227.053118][T16473] QAT: failed to copy from user cfg_data.
[ 1227.712112][T16479] loop2: detected capacity change from 0 to 2048
[ 1227.749342][T16479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1227.891883][T16481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3147'.
[ 1227.906567][T16481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3147'.
[ 1227.928609][T16481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3147'.
[ 1229.422795][T16498] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3150'.
[ 1229.450460][T16498] tc_dump_action: action bad kind
[ 1230.247675][T16507] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1230.254788][T16507] syzkaller1: linktype set to 776
[ 1231.088096][T16519] netlink: 884 bytes leftover after parsing attributes in process `syz.3.3154'.
[ 1232.739139][T16543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3162'.
[ 1232.761760][T16543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3162'.
[ 1232.789212][T16543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3162'.
[ 1235.772743][T16571] loop1: detected capacity change from 0 to 8192
[ 1236.999745][T16589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'.
[ 1237.021094][T16589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'.
[ 1237.102685][T16589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3176'.
[ 1238.053946][T16598] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1238.060187][T16598] syzkaller1: linktype set to 776
[ 1239.130985][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.137334][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.130894][T14546] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[ 1240.323861][T14546] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1240.342575][T14546] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1240.370432][T14546] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1240.388165][T14546] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1240.400593][T14546] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.411285][T14546] usb 2-1: Product: syz
[ 1240.415874][T14546] usb 2-1: Manufacturer: syz
[ 1240.423931][T14546] usb 2-1: SerialNumber: syz
[ 1240.854706][T14546] usb 2-1: 0:2 : does not exist
[ 1243.950755][T16651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3191'.
[ 1243.960051][T16651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3191'.
[ 1243.969822][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3191'.
[ 1244.701467][T14546] usb 2-1: USB disconnect, device number 42
[ 1246.330326][ T4268] Bluetooth: hci2: command 0x0406 tx timeout
[ 1246.856453][T16675] device syzkaller0 entered promiscuous mode
[ 1249.949180][T16695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3205'.
[ 1249.970746][T16695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3205'.
[ 1249.997970][T16695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3205'.
[ 1252.221821][T16706] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3197'.
[ 1252.231455][T16706] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[ 1252.466443][T16713] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[ 1252.560459][ T4329] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1252.755028][ T4329] usb 3-1: Using ep0 maxpacket: 32
[ 1252.764497][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1252.811706][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1252.858939][ T4329] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1252.912633][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.947621][ T4329] usb 3-1: config 0 descriptor??
[ 1255.092251][ T4329] usbhid 3-1:0.0: can't add hid device: -71
[ 1255.098292][ T4329] usbhid: probe of 3-1:0.0 failed with error -71
[ 1255.131673][ T4329] usb 3-1: USB disconnect, device number 46
[ 1256.640277][ T4515] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[ 1257.238963][T16747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3219'.
[ 1257.262711][ T4515] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1257.283925][T16747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3219'.
[ 1257.287467][ T4515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1257.312404][ T4515] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1257.323935][T16747] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3219'.
[ 1257.578170][ T4515] usb 2-1: string descriptor 0 read error: -71
[ 1257.610451][ T4515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1257.716767][ T4515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1257.749790][T16761] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1257.758840][T16761] syzkaller1: linktype set to 776
[ 1257.803339][ T4515] usb 2-1: can't set config #1, error -71
[ 1257.816792][ T4515] usb 2-1: USB disconnect, device number 43
[ 1258.480478][T16767] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[ 1263.830952][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3235'.
[ 1263.847132][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3235'.
[ 1263.860156][T16802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3235'.
[ 1264.542235][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057834800: rx timeout, send abort
[ 1264.555693][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057836000: rx timeout, send abort
[ 1264.590800][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057834800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1264.608320][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057836000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1267.433873][T16835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3246'.
[ 1267.453225][T16835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3246'.
[ 1267.482696][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3246'.
[ 1268.686239][ T6783] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[ 1269.034631][ T4337] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1269.817386][ T6783] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1269.839092][ T6783] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1269.930396][ T4337] usb 4-1: Using ep0 maxpacket: 32
[ 1269.949595][ T4337] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1269.960832][ T6783] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1269.982711][ T6783] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1270.000501][ T4337] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1270.000552][ T6783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1270.029584][ T4337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1270.040122][ T6783] usb 3-1: Product: syz
[ 1270.046770][ T6783] usb 3-1: Manufacturer: syz
[ 1270.054599][ T6783] usb 3-1: SerialNumber: syz
[ 1270.608915][ T4337] usb 4-1: config 1 has no interface number 0
[ 1270.756637][T16868] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1270.762782][T16868] syzkaller1: linktype set to 776
[ 1270.780500][ T4337] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1270.820381][ T4337] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1270.850357][ T4337] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1270.866486][ T6783] usb 3-1: 0:2 : does not exist
[ 1270.874942][ T4337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.918859][ T4337] usb 4-1: can't set config #1, error -71
[ 1270.945915][ T4337] usb 4-1: USB disconnect, device number 43
[ 1271.941285][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3260'.
[ 1272.044796][T16882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'.
[ 1272.054424][T16882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'.
[ 1272.063687][T16882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3261'.
[ 1272.099113][T14539] usb 3-1: USB disconnect, device number 47
[ 1273.441872][T16905] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1274.476382][T16910] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1274.484181][T16910] syzkaller1: linktype set to 776
[ 1274.781339][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1276.379639][ T4337] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[ 1276.595791][ T4337] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1276.621406][ T4337] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1276.664678][ T4337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1276.682309][T16924] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1276.727655][ T4337] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1276.761652][ T4337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.774943][ T4337] usb 4-1: Product: syz
[ 1276.779890][ T4337] usb 4-1: Manufacturer: syz
[ 1276.795652][ T4337] usb 4-1: SerialNumber: syz
[ 1277.101543][T16931] fuse: blksize only supported for fuseblk
[ 1277.225240][ T4337] usb 4-1: 0:2 : does not exist
[ 1278.365952][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3275'.
[ 1278.375122][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3275'.
[ 1278.388710][T16947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3275'.
[ 1278.498358][T14544] usb 4-1: USB disconnect, device number 44
[ 1282.710128][T16983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3292'.
[ 1283.220968][T16983] netlink: 'syz.0.3292': attribute type 49 has an invalid length.
[ 1284.348614][T16977] loop1: detected capacity change from 0 to 32768
[ 1284.360790][T16977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3290 (16977)
[ 1284.448019][T16977] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1284.491604][T16977] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1284.546704][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3295'.
[ 1284.556426][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3295'.
[ 1284.572491][T16992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3295'.
[ 1284.590610][T16977] BTRFS info (device loop1): force clearing of disk cache
[ 1284.608122][T16977] BTRFS info (device loop1): enabling auto defrag
[ 1284.660783][T16977] BTRFS info (device loop1): enabling ssd optimizations
[ 1284.667911][T16977] BTRFS info (device loop1): max_inline at 0
[ 1284.696075][T16977] BTRFS info (device loop1): enabling disk space caching
[ 1284.705143][T16977] BTRFS info (device loop1): disk space caching is enabled
[ 1285.169977][T16977] BTRFS info (device loop1): rebuilding free space tree
[ 1285.470833][T16977] BTRFS info (device loop1): disabling free space tree
[ 1285.485284][T16977] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1285.496525][T16977] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1286.232032][T16122] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1286.553501][T17033] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1286.559697][T17033] syzkaller1: linktype set to 776
[ 1286.717914][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1287.115494][ T4268] Bluetooth: hci4: command 0x0406 tx timeout
[ 1288.030909][ T6785] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1288.516052][ T6785] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1288.620027][ T6785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.829224][ T6785] usb 4-1: config 0 descriptor??
[ 1288.855569][ T6785] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1289.736843][ T6785] gspca_cpia1: usb_control_msg 05, error -71
[ 1290.248435][ T6785] gspca_cpia1: usb_control_msg 01, error -71
[ 1290.254835][ T6785] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[ 1290.265956][ T6785] usb 4-1: USB disconnect, device number 45
[ 1290.380883][T17062] device syzkaller0 entered promiscuous mode
[ 1290.775437][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3310'.
[ 1290.797114][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3310'.
[ 1290.874704][T17069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3310'.
[ 1291.255661][T12071] Bluetooth: hci5: link tx timeout
[ 1291.278282][T12071] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1291.432665][T17086] loop1: detected capacity change from 0 to 512
[ 1291.439723][T17086] EXT4-fs: Invalid want_extra_isize 0
[ 1291.758304][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880590f4c00: rx timeout, send abort
[ 1291.766706][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880278ba000: rx timeout, send abort
[ 1292.501508][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880590f4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1292.516017][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880278ba000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1292.742140][T17091] device sit0 entered promiscuous mode
[ 1293.340612][T12071] Bluetooth: hci5: command 0x0406 tx timeout
[ 1293.388561][T17104] syz.0.3321[17104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1293.388672][T17104] syz.0.3321[17104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1296.088904][T17143] loop1: detected capacity change from 0 to 256
[ 1296.134659][T17143] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1296.248855][   T26] audit: type=1326 audit(1762174739.172:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.3.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72038efc9 code=0x7ffc0000
[ 1296.310372][   T26] audit: type=1326 audit(1762174739.172:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.3.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72038efc9 code=0x7ffc0000
[ 1296.380499][   T26] audit: type=1326 audit(1762174739.202:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.3.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe72038efc9 code=0x7ffc0000
[ 1296.559612][T17152] loop3: detected capacity change from 0 to 256
[ 1296.591203][T17152] /dev/loop3: Can't open blockdev
[ 1296.616723][ T9671] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1296.626190][   T26] audit: type=1326 audit(1762174739.202:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.3.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72038efc9 code=0x7ffc0000
[ 1296.651483][   T26] audit: type=1326 audit(1762174739.202:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.3.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72038efc9 code=0x7ffc0000
[ 1296.684782][   T26] audit: type=1326 audit(1762174739.202:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.3.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe72038efc9 code=0x7ffc0000
[ 1296.738646][   T26] audit: type=1326 audit(1762174739.202:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.3.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72038efc9 code=0x7ffc0000
[ 1296.797864][T17154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3339'.
[ 1296.812452][ T9671] usb 3-1: Using ep0 maxpacket: 16
[ 1296.839393][   T26] audit: type=1326 audit(1762174739.202:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17147 comm="syz.3.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72038efc9 code=0x7ffc0000
[ 1296.869373][ T9671] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1296.899818][ T9671] usb 3-1: config 0 has no interfaces?
[ 1296.932683][ T9671] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1296.950811][ T9671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1296.969509][ T9671] usb 3-1: SerialNumber: syz
[ 1297.024788][ T9671] usb 3-1: config 0 descriptor??
[ 1297.273500][T14547] usb 3-1: USB disconnect, device number 48
[ 1297.307903][T12071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1297.322532][T12071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1297.340639][T12071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1297.361705][T12071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1297.369809][T12071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1297.377890][T12071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1297.723648][T17157] tipc: Started in network mode
[ 1297.750349][T17157] tipc: Node identity 4, cluster identity 4711
[ 1297.767070][T17157] tipc: Node number set to 4
[ 1298.278434][T17158] chnl_net:caif_netlink_parms(): no params data found
[ 1298.502454][ T6523] device syz_tun left promiscuous mode
[ 1299.590848][ T4268] Bluetooth: hci0: command 0x0409 tx timeout
[ 1300.046897][T17189] loop1: detected capacity change from 0 to 1024
[ 1300.128663][T17189] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[ 1300.383002][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.389981][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.717183][ T6523] device macvlan2 left promiscuous mode
[ 1300.803617][ T6523] bridge0: port 1(macvlan2) entered disabled state
[ 1301.438219][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'.
[ 1301.452556][T17187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'.
[ 1301.660340][ T4268] Bluetooth: hci0: command 0x041b tx timeout
[ 1301.914593][T17200] netlink: 'syz.2.3353': attribute type 30 has an invalid length.
[ 1302.100881][T10969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1302.388877][T17158] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1302.436843][T17158] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1302.482951][T17158] device bridge_slave_0 entered promiscuous mode
[ 1302.642492][T10969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1302.748903][T17158] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1302.756568][T17158] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1302.773256][T17158] device bridge_slave_1 entered promiscuous mode
[ 1302.853229][T10969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1302.909072][T17158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1302.931262][T17158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1303.079391][T10969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1303.151640][T17158] team0: Port device team_slave_0 added
[ 1303.220040][T17214] syz.1.3355[17214] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1303.220396][T17214] syz.1.3355[17214] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1303.393888][T17158] team0: Port device team_slave_1 added
[ 1304.070321][T12071] Bluetooth: hci0: command 0x040f tx timeout
[ 1304.250179][T17158] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1304.257769][T17158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1304.556832][T17158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1304.727545][T17219] loop2: detected capacity change from 0 to 1024
[ 1304.734914][T17219] EXT4-fs: inline encryption not supported
[ 1304.740913][T17219] EXT4-fs: Ignoring removed bh option
[ 1305.391292][T17158] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1305.398308][T17158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1305.448394][T17219] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1305.459949][T17219] EXT4-fs (loop2): unmounting filesystem.
[ 1305.573293][T17158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1305.943904][T17158] device hsr_slave_0 entered promiscuous mode
[ 1305.957632][T17158] device hsr_slave_1 entered promiscuous mode
[ 1305.967853][T17158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1306.000268][T17158] Cannot create hsr debugfs directory
[ 1306.144917][ T4268] Bluetooth: hci0: command 0x0419 tx timeout
[ 1306.782585][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'.
[ 1308.684345][T10969] bond0: (slave wlan1): Releasing backup interface
[ 1308.725636][T10969] ------------[ cut here ]------------
[ 1308.732279][T10969] WARNING: CPU: 0 PID: 10969 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180
[ 1308.743262][T10969] Modules linked in:
[ 1308.747195][T10969] CPU: 0 PID: 10969 Comm: kworker/u4:22 Not tainted syzkaller #0
[ 1308.755060][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1308.765228][T10969] Workqueue: netns cleanup_net
[ 1308.770052][T10969] RIP: 0010:ieee80211_link_release_channel+0x150/0x180
[ 1308.777077][T10969] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 45 2f f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 00 7f 00 e8 f0 15 df f7 <0f> 0b eb c5 48 c7 c1 64 9f 1f 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51
[ 1308.797407][T10969] RSP: 0018:ffffc90005c976e8 EFLAGS: 00010293
[ 1308.803596][T10969] RAX: ffffffff89a1c070 RBX: ffff8880541455a8 RCX: ffff888026f33b80
[ 1308.812191][T10969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1308.820284][T10969] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1c3ed56
[ 1308.828830][T10969] R10: fffffbfff1c3ed56 R11: 1ffffffff1c3ed55 R12: ffff888054146ae0
[ 1308.837714][T10969] R13: 1ffff1100a828ab5 R14: ffff888054146258 R15: dffffc0000000000
[ 1308.845776][T10969] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1308.854793][T10969] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1308.861452][T10969] CR2: 000000110c386017 CR3: 0000000063f98000 CR4: 00000000003506f0
[ 1308.869474][T10969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1308.877531][T10969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1308.885570][T10969] Call Trace:
[ 1308.888881][T10969]  <TASK>
[ 1308.891875][T10969]  ? trace_drv_return_void+0x240/0x240
[ 1308.897450][T10969]  unregister_netdevice_many+0x12ab/0x1840
[ 1308.903365][T10969]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[ 1308.909109][T10969]  ? alloc_netdev_mqs+0xf00/0xf00
[ 1308.914228][T10969]  ? mutex_unlock+0x10/0x10
[ 1308.918793][T10969]  ? unregister_netdevice_queue+0x1aa/0x360
[ 1308.924787][T10969]  ? list_netdevice+0x6c0/0x6c0
[ 1308.929701][T10969]  ? ieee80211_txq_teardown_flows+0x15c/0x220
[ 1308.935964][T10969]  ? cfg80211_shutdown_all_interfaces+0x175/0x1c0
[ 1308.942908][T10969]  ieee80211_remove_interfaces+0x429/0x6d0
[ 1308.948784][T10969]  ? ieee80211_do_stop+0x1d70/0x1d70
[ 1308.954165][T10969]  ? up_write+0x1bb/0x420
[ 1308.958558][T10969]  ? atomic_notifier_chain_unregister+0xf1/0x100
[ 1308.965040][T10969]  ieee80211_unregister_hw+0x59/0x290
[ 1308.970511][T10969]  mac80211_hwsim_del_radio+0x270/0x450
[ 1308.976116][T10969]  ? rhashtable_remove_fast+0xc50/0xc50
[ 1308.981778][T10969]  ? net_generic+0x1e/0x240
[ 1308.986360][T10969]  hwsim_exit_net+0x581/0x640
[ 1308.991154][T10969]  ? hwsim_init_net+0x80/0x80
[ 1308.995906][T10969]  ? __ip_vs_dev_cleanup_batch+0x234/0x250
[ 1309.001913][T10969]  cleanup_net+0x6f0/0xb80
[ 1309.006392][T10969]  ? ops_free_list+0x3b0/0x3b0
[ 1309.011766][T10969]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1309.017911][T10969]  ? _raw_spin_unlock+0x40/0x40
[ 1309.022882][T10969]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1309.028158][T10969]  ? process_one_work+0x7a1/0x1160
[ 1309.033378][T10969]  process_one_work+0x898/0x1160
[ 1309.038387][T10969]  ? worker_detach_from_pool+0x240/0x240
[ 1309.044139][T10969]  ? _raw_spin_lock_irq+0xab/0xe0
[ 1309.049234][T10969]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 1309.054690][T10969]  ? kthread_data+0x4b/0xc0
[ 1309.059241][T10969]  worker_thread+0xaa2/0x1250
[ 1309.064033][T10969]  kthread+0x29d/0x330
[ 1309.065408][T17249] xt_bpf: check failed: parse error
[ 1309.068144][T10969]  ? worker_clr_flags+0x1a0/0x1a0
[ 1309.078655][T10969]  ? kthread_blkcg+0xd0/0xd0
[ 1309.083352][T10969]  ret_from_fork+0x1f/0x30
[ 1309.087834][T10969]  </TASK>
[ 1309.090948][T10969] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1309.098342][T10969] CPU: 0 PID: 10969 Comm: kworker/u4:22 Not tainted syzkaller #0
[ 1309.106105][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1309.116210][T10969] Workqueue: netns cleanup_net
[ 1309.121389][T10969] Call Trace:
[ 1309.124788][T10969]  <TASK>
[ 1309.129315][T10969]  dump_stack_lvl+0x168/0x22e
[ 1309.134567][T10969]  ? memcpy+0x3c/0x60
[ 1309.138698][T10969]  ? show_regs_print_info+0x12/0x12
[ 1309.144961][T10969]  ? load_image+0x3b0/0x3b0
[ 1309.149538][T10969]  panic+0x2c9/0x710
[ 1309.153492][T10969]  ? bpf_jit_dump+0xd0/0xd0
[ 1309.158058][T10969]  ? ret_from_fork+0x1f/0x30
[ 1309.162699][T10969]  __warn+0x2f8/0x4f0
[ 1309.166738][T10969]  ? ieee80211_link_release_channel+0x150/0x180
[ 1309.173124][T10969]  ? ieee80211_link_release_channel+0x150/0x180
[ 1309.179424][T10969]  report_bug+0x2ba/0x4f0
[ 1309.183810][T10969]  ? ieee80211_link_release_channel+0x150/0x180
[ 1309.190210][T10969]  handle_bug+0x3a/0x70
[ 1309.194415][T10969]  exc_invalid_op+0x16/0x40
[ 1309.199029][T10969]  asm_exc_invalid_op+0x16/0x20
[ 1309.203916][T10969] RIP: 0010:ieee80211_link_release_channel+0x150/0x180
[ 1309.210797][T10969] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 45 2f f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b5 00 7f 00 e8 f0 15 df f7 <0f> 0b eb c5 48 c7 c1 64 9f 1f 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51
[ 1309.230423][T10969] RSP: 0018:ffffc90005c976e8 EFLAGS: 00010293
[ 1309.236526][T10969] RAX: ffffffff89a1c070 RBX: ffff8880541455a8 RCX: ffff888026f33b80
[ 1309.244510][T10969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1309.252514][T10969] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1c3ed56
[ 1309.260507][T10969] R10: fffffbfff1c3ed56 R11: 1ffffffff1c3ed55 R12: ffff888054146ae0
[ 1309.268489][T10969] R13: 1ffff1100a828ab5 R14: ffff888054146258 R15: dffffc0000000000
[ 1309.276481][T10969]  ? ieee80211_link_release_channel+0x150/0x180
[ 1309.282758][T10969]  ? ieee80211_link_release_channel+0x150/0x180
[ 1309.289019][T10969]  ? trace_drv_return_void+0x240/0x240
[ 1309.294500][T10969]  unregister_netdevice_many+0x12ab/0x1840
[ 1309.300335][T10969]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[ 1309.305998][T10969]  ? alloc_netdev_mqs+0xf00/0xf00
[ 1309.311042][T10969]  ? mutex_unlock+0x10/0x10
[ 1309.315559][T10969]  ? unregister_netdevice_queue+0x1aa/0x360
[ 1309.321469][T10969]  ? list_netdevice+0x6c0/0x6c0
[ 1309.326341][T10969]  ? ieee80211_txq_teardown_flows+0x15c/0x220
[ 1309.332425][T10969]  ? cfg80211_shutdown_all_interfaces+0x175/0x1c0
[ 1309.338857][T10969]  ieee80211_remove_interfaces+0x429/0x6d0
[ 1309.344687][T10969]  ? ieee80211_do_stop+0x1d70/0x1d70
[ 1309.350078][T10969]  ? up_write+0x1bb/0x420
[ 1309.354427][T10969]  ? atomic_notifier_chain_unregister+0xf1/0x100
[ 1309.360771][T10969]  ieee80211_unregister_hw+0x59/0x290
[ 1309.366256][T10969]  mac80211_hwsim_del_radio+0x270/0x450
[ 1309.371826][T10969]  ? rhashtable_remove_fast+0xc50/0xc50
[ 1309.377385][T10969]  ? net_generic+0x1e/0x240
[ 1309.381915][T10969]  hwsim_exit_net+0x581/0x640
[ 1309.386627][T10969]  ? hwsim_init_net+0x80/0x80
[ 1309.391322][T10969]  ? __ip_vs_dev_cleanup_batch+0x234/0x250
[ 1309.397151][T10969]  cleanup_net+0x6f0/0xb80
[ 1309.401594][T10969]  ? ops_free_list+0x3b0/0x3b0
[ 1309.406386][T10969]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1309.412304][T10969]  ? _raw_spin_unlock+0x40/0x40
[ 1309.417180][T10969]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1309.422401][T10969]  ? process_one_work+0x7a1/0x1160
[ 1309.427528][T10969]  process_one_work+0x898/0x1160
[ 1309.432498][T10969]  ? worker_detach_from_pool+0x240/0x240
[ 1309.438173][T10969]  ? _raw_spin_lock_irq+0xab/0xe0
[ 1309.443221][T10969]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 1309.448610][T10969]  ? kthread_data+0x4b/0xc0
[ 1309.453140][T10969]  worker_thread+0xaa2/0x1250
[ 1309.457857][T10969]  kthread+0x29d/0x330
[ 1309.461945][T10969]  ? worker_clr_flags+0x1a0/0x1a0
[ 1309.467024][T10969]  ? kthread_blkcg+0xd0/0xd0
[ 1309.471640][T10969]  ret_from_fork+0x1f/0x30
[ 1309.476086][T10969]  </TASK>
[ 1309.479363][T10969] Kernel Offset: disabled
[ 1309.483853][T10969] Rebooting in 86400 seconds..