last executing test programs:

7m33.698180385s ago: executing program 32 (id=77):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000300)="cc", 0x1, 0x40, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8)

7m24.781854584s ago: executing program 33 (id=128):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})

6m48.905268623s ago: executing program 34 (id=285):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0xff7ffff7)
r3 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x2, 0x2, r3})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r2})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x2, 0x2, r2})

6m27.2119838s ago: executing program 35 (id=394):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$rfkill(r0, &(0x7f0000000000), 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m12.026322342s ago: executing program 36 (id=448):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10)
sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)

6m11.368503638s ago: executing program 37 (id=452):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x394889, 0x0)

5m42.201009459s ago: executing program 38 (id=566):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20, 0x0)

5m27.148435657s ago: executing program 39 (id=629):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x9}, 0x7f, 0x20, 0x0, 0x20, 0x4c, 0xe51, 0x0, 0x709, 0x2, 0x0})

4m48.215009924s ago: executing program 40 (id=883):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x4000000000002bd)

4m45.592579198s ago: executing program 41 (id=901):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00')
pread64(r2, &(0x7f0000001600)=""/4124, 0x101c, 0xb6)

4m44.967667841s ago: executing program 42 (id=906):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4080, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2, 0xfe, 0xe1, 0xc, 0x6, 0x95, 0x40, 0x41, 0xfb, 0x7, 0xc, 0x0, 0x8, 0x2, 0x1, 0x5}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xffffffff, 0x7d, 0x0, 0x20, 0x3, 0x80000000000000, 0x106e, 0x80000001, 0x2, 0x8000000400007d, 0x1, 0x7, 0x5, 0x8000000000000007, 0x800000000000000, 0xd], 0x1, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m31.011588339s ago: executing program 6 (id=974):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0)
ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x75, 0x2a40})

4m30.956160594s ago: executing program 6 (id=975):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0))

4m30.887806111s ago: executing program 6 (id=976):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0xee01)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r2, 0xc0089364, 0x1000000000000)

4m30.788302501s ago: executing program 6 (id=977):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000300)={[{@umask}, {@umask}, {@undelete}, {@dmode={'dmode', 0x3d, 0x5}}, {@shortad}, {@uid_forget}, {@undelete}, {@unhide}, {@gid_ignore}, {@nostrict}, {@shortad}, {}, {@session}, {@mode={'mode', 0x3d, 0xd1f}}, {@adinicb}, {@nostrict}]}, 0x2, 0xc34, &(0x7f0000001bc0)="$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")
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

4m30.612274439s ago: executing program 6 (id=979):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x2, 0xdddd1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m29.80512375s ago: executing program 6 (id=982):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0)

4m29.619532059s ago: executing program 43 (id=982):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0)

4m13.165566749s ago: executing program 4 (id=1044):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000380)={{0xffffffffffffffff, 0x3, 0x5, 0x1, 0xe}, 0x6, 0x9, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0x9, 0x1, 0xd09})

4m12.836042422s ago: executing program 4 (id=1047):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

4m11.919514864s ago: executing program 4 (id=1051):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000001020102f50000000000000007000003040001"], 0x18}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000084)

4m11.769981979s ago: executing program 4 (id=1053):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x46, &(0x7f0000000040)={[{@grpid}, {@jqfmt_vfsv0}, {@auto_da_alloc_val}]}, 0x1, 0x746, &(0x7f0000000f40)="$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")
r0 = creat(&(0x7f0000000080)='./bus\x00', 0xa)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f00000016c0)="5fa5daa236", 0x5}], 0x1)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000001, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "035f47c6780820d1cbf7966da2dc499b060000002ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00002f00", "f28359738e229a4c66810000000000d300e6d602000004000000000000000001", [0x81, 0x1]})
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x7f000, 0x4000}])

4m11.382442408s ago: executing program 4 (id=1059):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000040))

4m4.102387813s ago: executing program 4 (id=1062):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000000))

4m3.53494461s ago: executing program 44 (id=1062):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000000))

3m37.700653635s ago: executing program 0 (id=1209):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c)
listen(r1, 0x20000005)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m37.338512022s ago: executing program 0 (id=1211):
getpid()
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0x0)
close(0x3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
fallocate(r1, 0x0, 0x8e14, 0x8ffff)

3m36.46482796s ago: executing program 0 (id=1215):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)

3m36.152777091s ago: executing program 0 (id=1216):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000000000)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x85, 0x20000, {r4}}, 0x20)

3m34.646368803s ago: executing program 0 (id=1226):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0})

3m33.264641342s ago: executing program 0 (id=1236):
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x6c}, 0x0, @in=@local}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x84)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0)

3m32.069687803s ago: executing program 45 (id=1236):
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x6c}, 0x0, @in=@local}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x84)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0)

2m0.77944575s ago: executing program 2 (id=2038):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r3, 0x0, 0x0)

2m0.560286952s ago: executing program 2 (id=2043):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')

2m0.292633578s ago: executing program 2 (id=2047):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
socket$tipc(0x1e, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00')
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40})

2m0.120728946s ago: executing program 2 (id=2051):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

1m59.549220044s ago: executing program 2 (id=2058):
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2000c851, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300))
write(r0, &(0x7f0000000380)="3ace", 0x2)

1m58.733316056s ago: executing program 2 (id=2071):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r2], 0x27)

1m58.511896668s ago: executing program 46 (id=2071):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r2], 0x27)

44.632772249s ago: executing program 3 (id=2635):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)

44.460438946s ago: executing program 3 (id=2637):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4)
sendto$inet(r2, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x4000080, 0x0, 0x0)

43.13117576s ago: executing program 3 (id=2640):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_open_dev$evdev(&(0x7f0000001a80), 0x910, 0x200)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/uts\x00')
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}})

42.680947756s ago: executing program 3 (id=2642):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x253, &(0x7f0000000c00)="$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")
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24841)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f0000000840)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
unlink(&(0x7f0000000000)='./file1\x00')

41.603218145s ago: executing program 3 (id=2650):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000003c0), 0x1, 0x14e1, &(0x7f0000002ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f)
read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5)

40.128572293s ago: executing program 3 (id=2661):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00400806bba9bbbbbbbbaaaaaaaaaabb0806000108000604"], 0x2e)

39.86772377s ago: executing program 47 (id=2661):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00400806bba9bbbbbbbbaaaaaaaaaabb0806000108000604"], 0x2e)

5.831183452s ago: executing program 8 (id=2857):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, 0x0, 0x0)

5.441930421s ago: executing program 8 (id=2861):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="390f1ebd", 0x4}], 0x1}}], 0x2, 0x8080)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40)

5.35395358s ago: executing program 5 (id=2862):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.117013874s ago: executing program 5 (id=2864):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00400806bba9bbbbbbbbaaaaaaaaaabb0806"], 0x2e)

4.96030412s ago: executing program 8 (id=2866):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xc000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x1e, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

4.840954552s ago: executing program 1 (id=2868):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10)
recvmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x3fc}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/168, 0xa8}], 0x1}, 0x2}], 0x2, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@can={{0x2, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "5a08f8daecc6083b"}, 0x10}}, 0x20000000)

4.56173098s ago: executing program 7 (id=2869):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0)

4.442496882s ago: executing program 1 (id=2870):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000021, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ncm(0x7, 0x6e, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000000))

4.386056958s ago: executing program 5 (id=2872):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.320569595s ago: executing program 5 (id=2873):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000300)="580000001500add427323b470c47b45602067fffffff81004e220700000400000000a8002000eaa57b00090080020efffeffe8090200001fe304f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1)

3.241077113s ago: executing program 7 (id=2875):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.094631768s ago: executing program 8 (id=2876):
socket$l2tp(0x2, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
pipe(&(0x7f0000000100))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r2], 0x2c}}, 0x0)

2.795540968s ago: executing program 1 (id=2877):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6)

2.77572781s ago: executing program 7 (id=2878):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x48)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x8, 0x1, 0x7, 0x3, 0xccb, 0x8, 0xab, 0xd, 0x100, 0xffffffff, 0x1, 0x5, 0x1, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0x9, 0x20001e58, 0x9, 0x8, 0x3c, 0xa, 0xc, 0x4, 0xd]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x40000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
unshare(0x22020600)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x20000000000, 0x4, 0x80, 0x0, 0x1000401000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x100000004, 0xfffffffffffffffc, 0xf, 0x80000007, 0x8000000000}, 0x0, 0x0)

2.68223585s ago: executing program 9 (id=2879):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)

2.501132568s ago: executing program 8 (id=2880):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

2.368811071s ago: executing program 9 (id=2881):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

1.379303971s ago: executing program 1 (id=2882):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x5498a8b52a905021)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000140)='./file0\x00')
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0)
setreuid(0x0, 0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x800002, 0x0, 0x1, 0x0, 0x0)

1.267205992s ago: executing program 9 (id=2883):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})

1.266823753s ago: executing program 7 (id=2884):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'vlan1\x00', @random="010000201000"})

816.640108ms ago: executing program 9 (id=2885):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
pidfd_send_signal(r5, 0x2, 0x0, 0x0)

702.437629ms ago: executing program 7 (id=2886):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

514.093599ms ago: executing program 5 (id=2887):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)

408.367359ms ago: executing program 8 (id=2888):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000021, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$cdc_ncm(0x7, 0x6e, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000000))

407.018569ms ago: executing program 1 (id=2898):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
rt_sigpending(&(0x7f0000000040), 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
signalfd(r0, &(0x7f0000000080)={[0x4]}, 0x8)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80004001, 0xd6, 0x9c7, 0xfff, 0x100, 0x1000000000c5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x9, 0x81, 0x6, 0x2, 0x4d9, 0x8, 0x1fe, 0x8005, 0x4})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)

339.925156ms ago: executing program 9 (id=2889):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

318.144338ms ago: executing program 7 (id=2890):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00), 0x1, 0x41)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x31, 0x4, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)

265.146674ms ago: executing program 5 (id=2891):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

547.23µs ago: executing program 9 (id=2892):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

0s ago: executing program 1 (id=2893):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)
write$snddsp(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103)
unlink(&(0x7f0000000100)='./file0/file1\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00')

kernel console output (not intermixed with test programs):

 callbacks suppressed
[  294.475556][   T26] audit: type=1326 audit(1763151062.590:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.514900][ T8111] device veth0_vlan entered promiscuous mode
[  294.524445][   T26] audit: type=1326 audit(1763151062.590:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.547873][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.553418][   T26] audit: type=1326 audit(1763151062.620:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.566643][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.602128][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.613494][   T26] audit: type=1326 audit(1763151062.620:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.617106][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.636539][   T26] audit: type=1326 audit(1763151062.620:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.670112][   T26] audit: type=1326 audit(1763151062.620:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.685540][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.703292][   T26] audit: type=1326 audit(1763151062.620:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.703331][   T26] audit: type=1326 audit(1763151062.620:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.703357][   T26] audit: type=1326 audit(1763151062.630:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.734778][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.780548][   T26] audit: type=1326 audit(1763151062.630:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  294.786432][ T8047] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.815380][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  294.825289][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  294.834006][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  294.843483][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  294.855547][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  294.863822][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  294.872332][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  294.881963][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  294.890638][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.897874][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.916174][ T8449] team0: Port device team_slave_0 added
[  294.926270][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1013'.
[  294.945287][ T8047] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.974939][ T8047] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.991800][ T8047] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.004221][ T8047] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.026237][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  295.043446][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  295.055854][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  295.076731][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.083925][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.102949][ T8449] team0: Port device team_slave_1 added
[  295.182326][ T8111] device veth1_vlan entered promiscuous mode
[  295.194101][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  295.203735][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  295.285737][ T8111] device veth0_macvtap entered promiscuous mode
[  295.313283][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  295.329405][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  295.409048][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.416088][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.488170][ T8449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.516943][ T8111] device veth1_macvtap entered promiscuous mode
[  295.546645][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  295.555219][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  295.566263][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  295.589911][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  295.605584][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  295.617669][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  295.640727][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.656865][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.676210][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.685907][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.726916][ T8449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.785997][ T8106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.805732][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  295.814762][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  295.831593][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.840837][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  295.913563][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.946767][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.985013][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.012992][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.042433][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.067890][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.098338][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.117907][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.141396][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.207467][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  296.218326][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  296.236516][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.248182][ T5479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.256634][ T5479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.267032][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.289371][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.325930][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.337008][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.388073][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.405064][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.415782][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.430919][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.471419][ T8449] device hsr_slave_0 entered promiscuous mode
[  296.508261][ T8449] device hsr_slave_1 entered promiscuous mode
[  296.596046][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  296.609940][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  296.630739][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  296.650159][ T8111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.669790][ T8111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.687900][ T8111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.696768][ T8111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.738722][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  296.740675][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.746374][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  296.783905][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.796647][ T8106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.916750][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  297.114552][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  297.178555][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  297.417098][ T8106] device veth0_vlan entered promiscuous mode
[  297.461806][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  297.475531][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  297.505062][ T8106] device veth1_vlan entered promiscuous mode
[  297.596894][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  297.645445][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  297.668299][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  297.868579][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  297.892358][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  297.936384][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  297.986214][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.001009][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.090690][ T8106] device veth0_macvtap entered promiscuous mode
[  298.113649][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  298.186831][ T8106] device veth1_macvtap entered promiscuous mode
[  298.208173][ T8648] loop7: detected capacity change from 0 to 32768
[  298.248264][ T8648] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 scanned by syz.7.1028 (8648)
[  298.288114][ T8648] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  298.325334][ T8648] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  298.343185][ T8648] BTRFS info (device loop7): using free space tree
[  298.449029][ T4909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.453189][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.457439][ T4909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.517438][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.545695][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.578447][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.619047][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.662847][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.667864][ T8648] BTRFS info (device loop7): enabling ssd optimizations
[  298.697839][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.740902][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.785627][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.830453][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.860913][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.909739][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  298.935470][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  298.983265][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  299.160010][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.191360][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.237879][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.267843][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.297182][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.317818][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.347897][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.387320][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.414592][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.452799][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.479857][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.528252][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  299.536977][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  299.600543][ T8047] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  299.771388][ T8106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.781155][ T8106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.824234][ T8106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.857474][ T8106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.334643][ T8728] loop7: detected capacity change from 0 to 256
[  300.365070][ T8728] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d)
[  301.686750][ T4909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.695327][ T4909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.716971][ T8750] netlink: 'syz.7.1048': attribute type 12 has an invalid length.
[  301.742277][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  301.948793][ T5655] device hsr_slave_0 left promiscuous mode
[  302.007928][ T5655] device hsr_slave_1 left promiscuous mode
[  302.015914][ T8764] loop4: detected capacity change from 0 to 2048
[  302.061233][ T8764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  302.103927][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.118379][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.124847][ T8764] loop4: detected capacity change from 2048 to 0
[  302.133573][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.141346][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.149410][ T5655] device bridge_slave_1 left promiscuous mode
[  302.155818][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.168993][ T8764] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #18: comm syz.4.1053: corrupted in-inode xattr
[  302.209568][ T5655] device bridge_slave_0 left promiscuous mode
[  302.215841][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.307395][ T8111] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  302.347944][ T8111] EXT4-fs (loop4): unmounting filesystem.
[  302.370313][ T5655] device veth1_macvtap left promiscuous mode
[  302.376420][ T5655] device veth0_macvtap left promiscuous mode
[  302.382901][ T5655] device veth1_vlan left promiscuous mode
[  302.390527][ T5655] device veth0_vlan left promiscuous mode
[  304.754167][ T5655] team0 (unregistering): Port device team_slave_1 removed
[  305.019562][ T5655] team0 (unregistering): Port device team_slave_0 removed
[  305.249323][ T5655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.560353][ T5655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.077163][ T5655] bond0 (unregistering): Released all slaves
[  309.346411][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.393942][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.531398][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  309.611133][ T8449] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  309.727900][ T8449] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  309.820400][ T8449] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  309.912959][ T8449] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  310.254403][ T8813] loop7: detected capacity change from 0 to 128
[  310.285740][ T8813] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  310.318700][ T8813] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  310.365937][ T8449] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.428826][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  310.449133][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  310.513850][ T8449] 8021q: adding VLAN 0 to HW filter on device team0
[  310.556519][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  310.580658][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  310.646281][ T5479] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.655645][ T5479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.728128][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  310.756183][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.764833][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.855052][ T8820] device bridge_slave_1 left promiscuous mode
[  310.888717][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.089739][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.104830][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.116397][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.147701][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.157589][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  311.165526][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.218381][ T8820] device bridge_slave_0 left promiscuous mode
[  311.224961][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.638713][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  311.663319][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  311.685558][ T5479] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.693111][ T5479] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.720939][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  311.761867][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  311.792714][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  311.837934][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  311.854282][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  311.866269][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  311.924541][ T8449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  311.969050][ T8449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  312.014233][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  312.036197][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  312.045288][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  312.059849][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  312.076072][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  312.085921][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  312.114019][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1078'.
[  312.439729][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  312.439744][   T26] audit: type=1326 audit(1763151080.560:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  312.569153][   T26] audit: type=1326 audit(1763151080.560:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  312.594417][   T26] audit: type=1326 audit(1763151080.560:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  312.633371][   T26] audit: type=1326 audit(1763151080.560:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  312.707310][   T26] audit: type=1326 audit(1763151080.560:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  312.759981][   T26] audit: type=1326 audit(1763151080.560:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  312.805565][ T5655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.808499][   T26] audit: type=1326 audit(1763151080.560:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  312.902466][ T8876] device veth0 entered promiscuous mode
[  312.920415][ T8875] device veth0 left promiscuous mode
[  312.931669][   T26] audit: type=1326 audit(1763151080.560:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  313.054353][   T26] audit: type=1326 audit(1763151080.560:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  313.167807][   T26] audit: type=1326 audit(1763151080.560:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff689d8f6c9 code=0x7ffc0000
[  313.200009][ T5655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.218226][ T4282] Bluetooth: hci3: command 0x0409 tx timeout
[  313.419945][ T5655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.551540][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  313.602353][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  313.792428][ T5655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.945184][ T8449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.120726][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  314.139532][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  314.181645][ T8829] chnl_net:caif_netlink_parms(): no params data found
[  314.947104][ T8449] device veth0_vlan entered promiscuous mode
[  314.983791][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  315.058903][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  315.066698][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  315.096374][ T8942] device bridge_slave_0 left promiscuous mode
[  315.111073][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.190339][ T8942] device bridge_slave_1 left promiscuous mode
[  315.216071][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.261461][ T8953] loop0: detected capacity change from 0 to 256
[  315.299040][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[  315.344462][ T8953] FAT-fs (loop0): Directory bread(block 64) failed
[  315.356186][ T8953] FAT-fs (loop0): Directory bread(block 65) failed
[  315.363787][ T8953] FAT-fs (loop0): Directory bread(block 66) failed
[  315.371726][ T8953] FAT-fs (loop0): Directory bread(block 67) failed
[  315.380472][ T8953] FAT-fs (loop0): Directory bread(block 68) failed
[  315.388462][ T8953] FAT-fs (loop0): Directory bread(block 69) failed
[  315.398314][ T8953] FAT-fs (loop0): Directory bread(block 70) failed
[  315.405742][ T8953] FAT-fs (loop0): Directory bread(block 71) failed
[  315.413099][ T8953] FAT-fs (loop0): Directory bread(block 72) failed
[  315.422050][ T8953] FAT-fs (loop0): Directory bread(block 73) failed
[  316.203360][ T8942] bond0: (slave bond_slave_0): Releasing backup interface
[  316.315474][ T8942] bond0: (slave bond_slave_1): Releasing backup interface
[  316.391113][ T8942] team0: Port device team_slave_0 removed
[  316.403276][ T8942] team0: Port device team_slave_1 removed
[  316.411166][ T8942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.422208][ T8942] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.431915][ T8942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.441064][ T8942] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.461061][ T8945] netlink: 'syz.7.1101': attribute type 10 has an invalid length.
[  316.495926][ T8945] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.505648][ T8945] team0: Port device bond0 added
[  316.514002][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  316.532017][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  316.586812][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  316.598921][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  316.633425][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.641516][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.650412][ T8829] device bridge_slave_0 entered promiscuous mode
[  316.710492][ T8449] device veth1_vlan entered promiscuous mode
[  316.737152][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.788202][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.828927][ T8829] device bridge_slave_1 entered promiscuous mode
[  316.871380][ T8966] netlink: 'syz.0.1109': attribute type 1 has an invalid length.
[  317.014181][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.085028][ T8449] device veth0_macvtap entered promiscuous mode
[  317.115875][ T8449] device veth1_macvtap entered promiscuous mode
[  317.167645][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  317.192480][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  317.226390][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  317.269351][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.381599][   T48] Bluetooth: hci3: command 0x040f tx timeout
[  317.593169][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  317.643704][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.689276][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.736494][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.773381][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.827402][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.868071][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  317.875352][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  317.880089][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.947494][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.999074][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.054494][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.202463][ T8829] team0: Port device team_slave_0 added
[  318.235870][ T8829] team0: Port device team_slave_1 added
[  318.379447][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  318.415863][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  318.453352][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.479215][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.506266][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.577818][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.609320][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.639751][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.685410][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.738589][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.794528][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.010430][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.028917][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.101540][ T9010] loop0: detected capacity change from 0 to 128
[  319.157809][ T8829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.208333][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  319.232420][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  319.259192][ T8449] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.280396][ T8449] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.309103][ T8449] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.364897][ T8449] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.458043][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[  319.559772][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.584833][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.664956][ T8829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.802046][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1124'.
[  319.821619][ T9029] loop7: detected capacity change from 0 to 128
[  320.031124][ T8829] device hsr_slave_0 entered promiscuous mode
[  320.084878][ T8829] device hsr_slave_1 entered promiscuous mode
[  320.104693][ T8047] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  320.121951][ T8047] FAT-fs (loop7): Filesystem has been set read-only
[  320.147837][ T8829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.159475][ T8829] Cannot create hsr debugfs directory
[  320.761619][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.804048][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.940462][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  320.999893][ T9056] netlink: 'syz.0.1131': attribute type 12 has an invalid length.
[  321.036624][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.087846][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.613361][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  322.545554][ T5655] device hsr_slave_0 left promiscuous mode
[  322.618245][ T5655] device hsr_slave_1 left promiscuous mode
[  322.778079][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.807961][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.855411][ T5655] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.899800][ T5655] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.999273][ T5655] device bridge_slave_1 left promiscuous mode
[  323.007269][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.075866][ T5655] device bridge_slave_0 left promiscuous mode
[  323.155430][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.224567][ T9123] overlayfs: invalid redirect ((null))
[  323.458006][ T5655] device veth1_macvtap left promiscuous mode
[  323.466378][ T5655] device veth0_macvtap left promiscuous mode
[  323.494875][ T5655] device veth1_vlan left promiscuous mode
[  323.522061][ T5655] device veth0_vlan left promiscuous mode
[  326.747509][ T5655] team0 (unregistering): Port device team_slave_1 removed
[  326.983858][ T5655] team0 (unregistering): Port device team_slave_0 removed
[  327.229233][ T5655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.519158][ T5655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.974933][ T5655] bond0 (unregistering): Released all slaves
[  331.308133][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'.
[  331.676984][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'.
[  332.002405][ T8829] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  332.075452][ T8829] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  332.130259][ T8829] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  332.180348][ T8829] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  332.562930][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.656067][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  332.672320][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  332.740866][ T8829] 8021q: adding VLAN 0 to HW filter on device team0
[  332.794849][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  332.814654][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  332.824257][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.831431][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.873316][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  332.886467][ T9212] loop0: detected capacity change from 0 to 2048
[  332.892179][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  332.915805][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  332.926242][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.933416][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.942783][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  332.962056][ T9212]  loop0: p2 p3 < > p4 < p5 >
[  332.967100][ T9212] loop0: partition table partially beyond EOD, truncated
[  332.985870][ T9212] loop0: p2 start 53543428 is beyond EOD, truncated
[  332.993514][ T9212] loop0: p3 start 4284289 is beyond EOD, truncated
[  333.012424][ T9212] loop0: p5 start 53543428 is beyond EOD, truncated
[  333.038383][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  333.087452][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  333.140296][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  333.180075][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  333.226250][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  333.259221][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  333.315552][ T8829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  333.393596][ T8829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  333.479257][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  333.515325][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  333.566032][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  333.593093][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  333.681559][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  334.580082][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  334.605397][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  334.648549][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.699199][ T9271] binder: BINDER_SET_CONTEXT_MGR already set
[  334.705984][ T9271] binder: 9270:9271 ioctl 4018620d 200000000040 returned -16
[  335.462023][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1202'.
[  335.790805][ T9311] loop3: detected capacity change from 0 to 1024
[  335.944396][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  335.971840][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  336.113091][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  336.165486][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  336.216325][ T9332] loop7: detected capacity change from 0 to 16
[  336.217008][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  336.274719][ T9332] erofs: (device loop7): mounted with root inode @ nid 36.
[  336.322729][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  336.367258][ T8829] device veth0_vlan entered promiscuous mode
[  336.515837][ T8829] device veth1_vlan entered promiscuous mode
[  336.669667][   T26] kauditd_printk_skb: 34 callbacks suppressed
[  336.669772][   T26] audit: type=1400 audit(1763151104.760:133): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="://" pid=9329 comm="syz.7.1210"
[  337.067182][ T5655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  337.104702][ T5655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  337.172252][ T8829] device veth0_macvtap entered promiscuous mode
[  337.240119][ T5655] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  337.240387][ T4351] hfsplus: bad catalog file entry
[  337.278668][ T8829] device veth1_macvtap entered promiscuous mode
[  337.381137][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.409674][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.438625][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.491627][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.534154][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.564056][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.617194][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.668411][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.685689][ T9356] loop0: detected capacity change from 0 to 128
[  337.704754][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.765420][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  337.808666][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  337.850386][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.900823][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.936184][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.966418][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.028816][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.031766][ T9370] loop7: detected capacity change from 0 to 16
[  338.063268][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.089759][ T9370] erofs: (device loop7): mounted with root inode @ nid 36.
[  338.107791][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.154669][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.187339][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.241152][ T8829] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.310661][ T8829] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.320711][ T8829] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.330480][ T8829] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.446142][   T26] audit: type=1400 audit(1763151106.540:134): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="://" pid=9368 comm="syz.7.1222"
[  338.897843][ T5655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  338.958264][ T5655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  339.148670][ T8106] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000)
[  339.202534][ T8106] FAT-fs (loop0): Filesystem has been set read-only
[  339.223783][ T5655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.243661][ T5655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.303139][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  339.324541][ T5655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.355661][ T5655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.394190][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  340.145229][ T9409] 9pnet_fd: Insufficient options for proto=fd
[  340.379907][ T9417] loop7: detected capacity change from 0 to 16
[  340.444243][ T9417] erofs: (device loop7): mounted with root inode @ nid 36.
[  340.620027][ T9419] netlink: 'syz.9.1235': attribute type 6 has an invalid length.
[  340.741761][   T26] audit: type=1400 audit(1763151108.830:135): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="://" pid=9416 comm="syz.7.1234"
[  341.450615][ T4556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.796690][ T9434] loop7: detected capacity change from 0 to 1024
[  341.849175][ T4556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.974623][ T9434] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  342.068376][ T9434] mmap: syz.7.1241 (9434) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  342.189877][ T4556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.261668][ T9448] tipc: Can't bind to reserved service type 1
[  342.387615][ T8047] EXT4-fs (loop7): unmounting filesystem.
[  342.466150][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  342.493179][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  342.513933][ T4556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.516238][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  342.541871][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  342.550350][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  342.564748][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  342.603197][ T9450] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[  343.062137][ T9451] chnl_net:caif_netlink_parms(): no params data found
[  343.506396][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.524211][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.541627][ T9451] device bridge_slave_0 entered promiscuous mode
[  344.131067][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.183098][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.411122][ T9451] device bridge_slave_1 entered promiscuous mode
[  344.657879][   T48] Bluetooth: hci2: command 0x0409 tx timeout
[  344.792718][ T9506] binder: 9505:9506 ioctl c018620b 0 returned -14
[  344.944929][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.000940][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.172681][ T9451] team0: Port device team_slave_0 added
[  345.273920][ T9451] team0: Port device team_slave_1 added
[  345.488110][ T9526] loop7: detected capacity change from 0 to 2048
[  345.506426][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.524583][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.578083][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.612294][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.620683][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.653375][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.667564][ T9526] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  345.913701][ T9526] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz.7.1265: Invalid inode table block 4 in block_group 0
[  346.016262][ T9526] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz.7.1265: Invalid inode table block 4 in block_group 0
[  346.085142][ T9526] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  346.112219][ T9526] EXT4-fs error (device loop7): ext4_dirty_inode:6133: inode #12: comm syz.7.1265: mark_inode_dirty error
[  346.258131][   T46] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm kworker/u4:3: Invalid inode table block 4 in block_group 0
[  346.298354][ T8047] EXT4-fs (loop7): unmounting filesystem.
[  346.330317][ T9451] device hsr_slave_0 entered promiscuous mode
[  346.488323][ T9451] device hsr_slave_1 entered promiscuous mode
[  346.547949][ T9451] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.555836][ T9451] Cannot create hsr debugfs directory
[  346.737852][   T48] Bluetooth: hci2: command 0x041b tx timeout
[  347.925797][ T4556] device hsr_slave_0 left promiscuous mode
[  347.990304][ T4556] device hsr_slave_1 left promiscuous mode
[  348.100657][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.118285][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.146562][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.179673][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.338778][ T4556] device veth1_macvtap left promiscuous mode
[  348.345090][ T4556] device veth0_macvtap left promiscuous mode
[  348.367983][ T4556] device veth1_vlan left promiscuous mode
[  348.384383][ T4556] device veth0_vlan left promiscuous mode
[  348.821548][   T48] Bluetooth: hci2: command 0x040f tx timeout
[  350.883282][ T4556] team0 (unregistering): Port device team_slave_1 removed
[  350.910876][   T48] Bluetooth: hci2: command 0x0419 tx timeout
[  351.136022][ T4556] team0 (unregistering): Port device team_slave_0 removed
[  351.380118][ T4556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.710311][ T4556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.192426][ T4556] bond0 (unregistering): Released all slaves
[  356.506436][ T9451] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  356.620902][ T9451] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  356.700538][ T9451] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  356.756155][ T9451] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  357.209833][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.322008][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  357.383356][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  357.410707][ T9451] 8021q: adding VLAN 0 to HW filter on device team0
[  357.454612][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  357.478606][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  357.537523][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.544850][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.571221][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  357.598043][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  357.628240][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  357.647199][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.654734][ T4556] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.689569][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  357.725479][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  357.772830][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  357.812521][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  357.848905][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  357.893658][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  357.926918][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  357.964732][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  358.016863][ T9451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  358.054161][ T9451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  358.089294][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  358.110069][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  358.150883][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  359.021375][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  359.032188][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  359.057444][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.176542][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  359.198976][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  359.280131][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  359.297235][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  359.347947][ T9451] device veth0_vlan entered promiscuous mode
[  359.364164][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  359.386304][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  359.462173][ T9451] device veth1_vlan entered promiscuous mode
[  359.503270][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  359.610472][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  359.630366][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  359.673922][ T9759] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  359.820813][ T9451] device veth0_macvtap entered promiscuous mode
[  359.886647][ T9451] device veth1_macvtap entered promiscuous mode
[  359.950025][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.002340][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.035352][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.073369][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.121325][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.161901][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.202099][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.240917][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.299426][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.344727][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  360.364642][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  360.399297][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  360.420456][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  360.503879][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.521761][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.569714][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.630246][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.666574][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.736794][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.754713][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  360.777246][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.799259][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.826627][ T9451] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.864370][ T9451] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.905086][ T9451] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.931010][ T9451] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.956110][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  360.972712][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  361.026194][ T9806] binder: 9805:9806 ioctl c0306201 2000000001c0 returned -14
[  361.409628][ T4556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.463658][ T4556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.509920][ T6571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.519912][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  361.549888][ T6571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.624755][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  361.858938][ T7116] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  362.052944][ T7116] usb 10-1: Using ep0 maxpacket: 8
[  362.061696][ T7116] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  362.107853][ T7116] usb 10-1: config 179 has no interface number 0
[  362.114281][ T7116] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  362.177822][ T7116] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  362.209263][ T7116] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  362.237917][ T7116] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  362.268102][ T7116] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  362.286129][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1357'.
[  362.315851][ T7116] usb 10-1: config 179 interface 65 has no altsetting 0
[  362.341201][ T7116] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  362.375293][ T7116] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.531022][ T7116] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input12
[  362.654975][ T7116] usb 10-1: USB disconnect, device number 3
[  362.705071][ T7116] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  366.028068][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  366.537955][ T7116] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  366.749235][ T7116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.761046][ T7116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.771714][ T7116] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  366.781057][ T7116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.815922][ T7116] usb 4-1: config 0 descriptor??
[  367.249654][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  367.257412][ T7116] usbhid 4-1:0.0: can't add hid device: -71
[  367.264668][ T7116] usbhid: probe of 4-1:0.0 failed with error -71
[  367.282251][ T7116] usb 4-1: USB disconnect, device number 3
[  371.306856][T10017] syz.7.1411 (10017): drop_caches: 2
[  371.337052][T10041] netlink: 'syz.2.1415': attribute type 4 has an invalid length.
[  371.366803][T10017] syz.7.1411 (10017): drop_caches: 2
[  371.732782][   T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.134532][   T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.147148][T10095] overlayfs: failed to clone upperpath
[  372.299953][   T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.630811][   T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.412510][T10135] loop7: detected capacity change from 0 to 2048
[  373.524346][T10135] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  373.652113][T10152] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  373.671183][T10152] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28
[  373.684045][T10152] EXT4-fs (loop7): This should not happen!! Data will be lost
[  373.684045][T10152] 
[  373.693782][T10152] EXT4-fs (loop7): Total free blocks count 0
[  373.699803][T10152] EXT4-fs (loop7): Free/Dirty block details
[  373.705709][T10152] EXT4-fs (loop7): free_blocks=2415919504
[  373.711474][T10152] EXT4-fs (loop7): dirty_blocks=240
[  373.716679][T10152] EXT4-fs (loop7): Block reservation details
[  373.722687][T10152] EXT4-fs (loop7): i_reserved_data_blocks=15
[  374.283362][ T4556] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 1778 with error 28
[  375.486248][T10164] loop7: detected capacity change from 0 to 32768
[  375.515323][T10164] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10
[  375.675403][T10177] tipc: Started in network mode
[  375.681057][T10177] tipc: Node identity 4, cluster identity 4711
[  375.702661][T10177] tipc: Node number set to 4
[  375.728703][ T9867] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10
[  376.424194][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.457065][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.473378][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.495317][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.511062][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.527979][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.549065][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.562336][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.576846][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.591722][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.606275][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.625174][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.651066][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.666983][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.682430][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.698657][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.719295][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.730938][   T14] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0
[  376.752887][   T14] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  377.012798][T10220] fido_id[10220]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  377.055370][   T11] device hsr_slave_0 left promiscuous mode
[  377.114738][   T11] device hsr_slave_1 left promiscuous mode
[  377.208052][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.219560][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.235713][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.245269][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.255071][   T11] device bridge_slave_1 left promiscuous mode
[  377.262692][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.339291][   T11] device bridge_slave_0 left promiscuous mode
[  377.347991][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.559971][   T11] device veth1_macvtap left promiscuous mode
[  377.566732][   T11] device veth0_macvtap left promiscuous mode
[  377.581467][   T11] device veth1_vlan left promiscuous mode
[  377.618007][   T11] device veth0_vlan left promiscuous mode
[  379.315349][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  379.321795][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  381.049282][T10327] binder_alloc: 10326: pid 10326 spamming oneway? 1 buffers allocated for a total size of 4096
[  382.350396][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.639821][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.540439][T10369] overlayfs: failed to clone upperpath
[  384.992069][   T11] bond0 (unregistering): Released all slaves
[  385.280452][T10340] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  385.582123][T10380] loop2: detected capacity change from 0 to 64
[  385.623851][T10381] fuse: Bad value for 'group_id'
[  387.527841][ T5262] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  387.671361][T10447] netlink: 'syz.9.1557': attribute type 4 has an invalid length.
[  387.724569][ T5262] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.757325][ T5262] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  387.780926][ T5262] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.813059][ T5262] usb 8-1: config 0 descriptor??
[  387.846579][T10449] netlink: 'syz.9.1557': attribute type 4 has an invalid length.
[  388.234921][ T5262] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  388.280088][ T5262] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.000D/input/input13
[  388.548633][ T5262] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[  388.715073][   T14] usb 8-1: USB disconnect, device number 2
[  388.886912][T10473] fido_id[10473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  389.052450][T10490] loop3: detected capacity change from 0 to 128
[  389.092475][T10490] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  389.216281][T10490] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  389.323483][T10490] ext2 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  389.670122][ T8449] EXT4-fs (loop3): unmounting filesystem.
[  391.427926][   T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  391.617901][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  391.639642][   T22] usb 4-1: config 0 has no interfaces?
[  391.647195][   T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  391.708791][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.754479][   T22] usb 4-1: Product: syz
[  391.770210][   T22] usb 4-1: Manufacturer: syz
[  391.792791][   T22] usb 4-1: SerialNumber: syz
[  391.826345][   T22] usb 4-1: config 0 descriptor??
[  391.876455][T10588] overlayfs: failed to clone lowerpath
[  392.068177][   T22] usb 4-1: USB disconnect, device number 4
[  392.994230][T10631] loop2: detected capacity change from 0 to 2048
[  393.103336][T10631] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  393.135811][T10631] UDF-fs: Scanning with blocksize 512 failed
[  393.226357][T10631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  393.483198][T10647] netlink: 'syz.3.1618': attribute type 4 has an invalid length.
[  393.600100][T10650] netlink: 'syz.3.1618': attribute type 4 has an invalid length.
[  393.880558][T10660] binder: Unknown parameter 'context'
[  394.688004][   T14] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  394.904200][   T14] usb 3-1: unable to read config index 0 descriptor/start: -71
[  394.932701][   T14] usb 3-1: can't read configurations, error -71
[  396.509451][T10729] loop3: detected capacity change from 0 to 32768
[  396.613666][T10729] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  396.897016][ T8449] ocfs2: Unmounting device (7,3) on (node local)
[  397.585995][T10798] overlayfs: failed to clone upperpath
[  399.303831][   T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  399.428800][T10825] loop7: detected capacity change from 0 to 32768
[  399.516928][   T22] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  399.540671][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.579587][   T22] usb 4-1: Product: syz
[  399.591671][   T22] usb 4-1: Manufacturer: syz
[  399.607042][   T22] usb 4-1: SerialNumber: syz
[  399.635147][   T26] audit: type=1800 audit(1763151167.750:136): pid=10825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1675" name="file1" dev="loop7" ino=12 res=0 errno=0
[  399.657621][   T22] usb 4-1: config 0 descriptor??
[  399.874087][   T22] usb 4-1: USB disconnect, device number 5
[  400.064373][T10873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1690'.
[  400.199555][ T9863] udevd[9863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  400.881108][T10907] overlayfs: failed to clone upperpath
[  400.914957][T10907] overlayfs: failed to clone upperpath
[  401.190957][T10917] input: syz1 as /devices/virtual/input/input15
[  401.455534][T10935] overlayfs: failed to clone lowerpath
[  401.505851][T10935] overlayfs: failed to clone lowerpath
[  401.545206][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1711'.
[  403.963089][T11032] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1737'.
[  404.004432][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1737'.
[  404.370092][T11044] loop7: detected capacity change from 0 to 4096
[  404.598054][T11044] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  404.707285][T11056] ntfs3: loop7: ino=9, attr_set_size
[  405.082623][T11044] ntfs3: loop7: ino=9, attr_set_size
[  405.157225][T11056] ntfs3: loop7: ino=9, attr_set_size
[  406.527895][   T22] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  406.736943][   T22] usb 8-1: unable to read config index 0 descriptor/start: -71
[  406.755158][   T22] usb 8-1: can't read configurations, error -71
[  406.977949][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  408.319303][T11154] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1771'.
[  408.358135][T11154] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1771'.
[  408.547871][ T4316] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  408.738149][ T4316] usb 3-1: Using ep0 maxpacket: 16
[  408.752330][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  408.801691][ T4316] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  408.841866][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.872003][ T4316] usb 3-1: Product: syz
[  408.876470][ T4316] usb 3-1: Manufacturer: syz
[  408.884303][ T4316] usb 3-1: SerialNumber: syz
[  408.915518][ T4316] usb 3-1: config 0 descriptor??
[  408.945657][ T4316] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  408.961006][ T4316] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  409.562864][ T4316] em28xx 3-1:0.0: chip ID is em2765
[  409.824838][T11210] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1787'.
[  409.859403][T11210] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1787'.
[  409.889710][T11218] netlink: 'syz.3.1789': attribute type 10 has an invalid length.
[  410.188646][ T4316] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  410.218150][ T4316] em28xx 3-1:0.0: board has no eeprom
[  410.517789][ T4316] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  410.537262][ T4316] em28xx 3-1:0.0: dvb set to bulk mode.
[  410.573479][ T5262] em28xx 3-1:0.0: Binding DVB extension
[  410.604252][ T4316] usb 3-1: USB disconnect, device number 5
[  410.631108][ T4316] em28xx 3-1:0.0: Disconnecting em28xx
[  410.906481][ T5262] em28xx 3-1:0.0: Registering input extension
[  410.926745][ T4316] em28xx 3-1:0.0: Closing input extension
[  411.055270][ T4316] em28xx 3-1:0.0: Freeing device
[  411.578089][   T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  411.768087][   T22] usb 3-1: Using ep0 maxpacket: 32
[  411.777479][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.824670][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.865505][   T22] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  411.928937][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.981162][   T22] usb 3-1: config 0 descriptor??
[  412.413995][   T22] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  412.440561][T11301] binder: 11299:11301 ioctl c0306201 200000000100 returned -14
[  412.682738][   T22] usb 3-1: USB disconnect, device number 6
[  412.732714][T11304] fido_id[11304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  413.230618][T11310] loop3: detected capacity change from 0 to 32768
[  413.290310][T11310] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  413.607265][ T9867] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  413.994015][T11341] loop2: detected capacity change from 0 to 4096
[  414.043333][T11352] overlayfs: failed to clone lowerpath
[  414.166187][T11341] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  414.232887][T11341] ntfs3: loop2: ino=9, attr_set_size
[  414.275630][T11341] ntfs3: loop2: ino=9, attr_set_size
[  414.313023][T11341] ntfs3: loop2: ino=9, attr_set_size
[  416.068655][T11442] netlink: 'syz.5.1866': attribute type 4 has an invalid length.
[  416.952945][T11486] loop3: detected capacity change from 0 to 512
[  417.007594][T11486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  417.056261][T11486] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  417.104377][T11486] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  417.158146][T11486] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  417.196560][T11496] overlayfs: failed to clone upperpath
[  417.235526][T11486] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  417.287659][T11486] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[  417.296997][T11486] EXT4-fs (loop3): failed to initialize system zone (-117)
[  417.370054][T11486] EXT4-fs (loop3): mount failed
[  417.388947][T11504] fuse: Bad value for 'group_id'
[  418.165020][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.193838][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.212288][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.252618][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.289185][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.318074][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.342511][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.370153][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.396840][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.424480][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.449100][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.482686][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.517035][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.545247][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.571885][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.601297][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.642903][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.667082][   T22] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0
[  418.752288][   T22] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  419.038228][T11548] fido_id[11548]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  419.126087][T11556] binder: 11555:11556 ioctl c018620c 200000000000 returned -22
[  419.958037][   T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  420.160420][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.184863][   T22] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  420.215936][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.284872][   T22] usb 4-1: config 0 descriptor??
[  420.710177][   T22] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor
[  420.773138][   T22] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0010/input/input17
[  421.010871][   T22] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  421.172225][   T22] usb 4-1: USB disconnect, device number 6
[  421.301680][T11618] fido_id[11618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  422.371412][T11669] loop2: detected capacity change from 0 to 1024
[  422.495639][T11669] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  422.725325][ T9451] EXT4-fs (loop2): unmounting filesystem.
[  423.149559][T11697] bridge: RTM_NEWNEIGH with invalid ether address
[  424.439256][T11723] netlink: 'syz.9.1954': attribute type 4 has an invalid length.
[  424.696852][T11731] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1957'.
[  427.251459][   T26] audit: type=1804 audit(1763151195.370:137): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1972" name="/newroot/96/file0" dev="fuse" ino=1 res=1 errno=0
[  427.693523][T11809] can0: slcan on ttyS3.
[  427.849422][T11809] can0 (unregistered): slcan off ttyS3.
[  430.813323][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2004'.
[  431.212011][T11901] debugfs: Directory 'netdev:nicvf0' with parent 'phy31' already present!
[  432.077955][T11933] overlayfs: failed to clone lowerpath
[  433.725439][T12015] loop2: detected capacity change from 0 to 2048
[  433.822413][T12015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  434.113047][T12037] device vlan2 entered promiscuous mode
[  434.178352][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'.
[  435.456963][ T4364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.228475][ T4364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.609788][ T4364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.842591][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  436.857018][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  436.867052][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  436.875925][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  436.884398][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  436.896085][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  436.949837][ T4364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.326939][T12119] chnl_net:caif_netlink_parms(): no params data found
[  437.717934][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  437.853021][T12119] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.870660][T12119] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.905023][T12119] device bridge_slave_0 entered promiscuous mode
[  438.205957][T12119] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.220431][T12119] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.264790][T12119] device bridge_slave_1 entered promiscuous mode
[  438.633054][T12170] ptrace attach of "./syz-executor exec"[8047] was attempted by "                                                                �   ��\x09��\x09�\x1bD\x09\x09���8����S�\x0d=��\x0720l\x09����\x0a\x0a��\x0a�3a��K�$\x0d[\x0a�~�R
 ���xp�R<�\x1b\x1b[1\x07\x0d\x07J\x096�;x\x0d�a��   X�\x07\x22r'��g��W��¨t�*����\x0c�1�\x0d��;�`�3�Jb�o0�e�[��\x0aᓗ75�m[\x1bc� 0]?Fc^�ձݩ�-t����;#��Pu����i�\x09       u'\x1b(c)�i�B��x��}n��$�D�[13O�Û�:�.Ͱ��o����\x0d�8��D��� IA����c�p��\x5cUC*�����T�#n������vbIkݻ    /��AnV�\x1b1�b��
�B�k��~}�$Q�d[�\x0cavi1N/�pޘ�v��\x0d�G�o����*K_����o�b�ؠ�q<Xc\x093��J�t���4�#|�-�\x09�Ш��wtz�6\x094�)���ٕ;�)��s���'�E�F�\x0b�o�JĈ���\x0a'��D���TޠY�CQ?       \x0a6!�l� ��\x0cA�n���d�vyT�K��c�OK�0��ԫ�b�\x1b[�A�u��\x0dx$��M�� &�OgL$1ܡA��iʷ�f�é�>�9����&Ƶ�K\x07�^�4�\x09���pw���~�3Iu��4���/�x�����*xi�Xde&���C�`�W\x22�R$I�Flc+5p$?���|��e�a\x0c �!�S�R   ����/�u�g����y\x09PpA�
[  438.639993][T12119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.896664][T12178] overlayfs: failed to clone upperpath
[  438.977827][   T48] Bluetooth: hci2: command 0x0409 tx timeout
[  439.137068][T12119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.354116][T12119] team0: Port device team_slave_0 added
[  439.527537][T12119] team0: Port device team_slave_1 added
[  439.726278][T12119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.744283][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.785687][T12119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.912130][T12119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.927284][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.019987][T12119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.491414][T12119] device hsr_slave_0 entered promiscuous mode
[  440.538350][T12119] device hsr_slave_1 entered promiscuous mode
[  440.558052][T12119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  440.567480][T12119] Cannot create hsr debugfs directory
[  440.742192][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  440.749596][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  441.058437][   T48] Bluetooth: hci2: command 0x041b tx timeout
[  442.013423][T12268] device syzkaller0 entered promiscuous mode
[  442.254799][ T4364] device hsr_slave_0 left promiscuous mode
[  442.298849][ T4364] device hsr_slave_1 left promiscuous mode
[  442.369741][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.377480][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.402495][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.421289][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  442.440117][ T4364] device bridge_slave_1 left promiscuous mode
[  442.455080][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.509800][ T4364] device bridge_slave_0 left promiscuous mode
[  442.521136][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.773540][ T4364] device veth1_macvtap left promiscuous mode
[  442.785809][ T4364] device veth0_macvtap left promiscuous mode
[  442.804915][ T4364] device veth1_vlan left promiscuous mode
[  442.815233][ T4364] device veth0_vlan left promiscuous mode
[  443.137882][   T48] Bluetooth: hci2: command 0x040f tx timeout
[  445.220061][   T48] Bluetooth: hci2: command 0x0419 tx timeout
[  445.253288][ T4364] team0 (unregistering): Port device team_slave_1 removed
[  445.502223][ T4364] team0 (unregistering): Port device team_slave_0 removed
[  445.739823][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.039526][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.750715][ T4364] bond0 (unregistering): Released all slaves
[  450.052024][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2147'.
[  450.134639][T12337] bridge1: port 1(veth0_to_bond) entered blocking state
[  450.166137][T12337] bridge1: port 1(veth0_to_bond) entered disabled state
[  450.182488][T12337] device veth0_to_bond entered promiscuous mode
[  450.506824][ T9995] Bluetooth: hci5: Frame reassembly failed (-84)
[  451.139682][T12119] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  451.190016][T12119] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  451.220452][T12119] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  451.281411][T12119] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  451.709140][T12119] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.331693][T12119] 8021q: adding VLAN 0 to HW filter on device team0
[  452.448090][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  452.467033][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  452.498335][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  452.548755][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  452.593923][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  452.655326][T10039] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.662596][T10039] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.711952][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  452.731205][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  452.750815][T10039] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.758758][T10039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.808129][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  452.825803][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  452.921420][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  452.929323][T12421] overlayfs: failed to clone lowerpath
[  452.939785][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  453.058562][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  453.085920][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  453.134021][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  453.166020][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  453.186402][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  453.242773][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  453.269265][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  453.278766][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  453.299832][T12119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  454.160904][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  454.190712][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  454.229260][T12119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.527861][ T7115] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  454.717857][ T7115] usb 4-1: Using ep0 maxpacket: 16
[  454.735170][ T7115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  454.779171][ T7115] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  454.816364][ T7115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.842338][ T7115] usb 4-1: Product: syz
[  454.853400][ T7115] usb 4-1: Manufacturer: syz
[  454.870742][ T7115] usb 4-1: SerialNumber: syz
[  454.905736][ T7115] usb 4-1: config 0 descriptor??
[  454.936902][ T7115] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  454.995212][ T7115] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  455.307567][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  455.352246][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  455.412456][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  455.448771][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  455.482899][T12119] device veth0_vlan entered promiscuous mode
[  455.500440][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  455.524538][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  455.547944][ T7115] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  455.550858][T12119] device veth1_vlan entered promiscuous mode
[  455.630374][T12119] device veth0_macvtap entered promiscuous mode
[  455.660220][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  455.688949][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  455.736220][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  455.769694][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  455.787612][ T9995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  455.819752][T12119] device veth1_macvtap entered promiscuous mode
[  455.863757][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.902975][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.923699][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.942858][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.962067][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.974279][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.002314][ T7115] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  456.016651][T12119] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.033381][ T7115] em28xx 4-1:0.0: board has no eeprom
[  456.042753][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.085524][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.127783][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.177787][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.217760][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.264786][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.309403][T12119] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.330950][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  456.342865][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  456.378809][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  456.414516][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  456.449508][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  456.650036][T12119] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.698251][T12119] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.733746][T12119] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.793762][T12119] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.142200][T12480] em28xx 4-1:0.0: reading from i2c device at 0x6 failed (error=-5)
[  457.148368][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.207887][ T7115] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  457.215863][ T7115] em28xx 4-1:0.0: dvb set to bulk mode.
[  457.217720][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.262454][ T7115] usb 4-1: USB disconnect, device number 7
[  457.264145][ T9995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.278356][ T7115] em28xx 4-1:0.0: Disconnecting em28xx
[  457.286022][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  457.302958][ T9995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.315477][ T7116] em28xx 4-1:0.0: Binding DVB extension
[  457.381145][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  457.632732][ T7116] em28xx 4-1:0.0: Registering input extension
[  457.650911][ T7115] em28xx 4-1:0.0: Closing input extension
[  457.692251][ T7115] em28xx 4-1:0.0: Freeing device
[  460.337258][T12699] input: syz1 as /devices/virtual/input/input19
[  461.168409][T12684] syz.3.2253 (12684) used greatest stack depth: 18176 bytes left
[  465.402202][T12827] overlayfs: failed to clone upperpath
[  465.627815][ T7116] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  465.827776][ T7116] usb 4-1: Using ep0 maxpacket: 16
[  465.835643][ T7116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  465.935674][ T7116] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  466.111290][ T7116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.322627][ T7116] usb 4-1: Product: syz
[  466.437136][ T7116] usb 4-1: Manufacturer: syz
[  466.555069][ T7116] usb 4-1: SerialNumber: syz
[  466.586776][ T7116] usb 4-1: config 0 descriptor??
[  466.619160][ T7116] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  466.683866][ T7116] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  467.122430][T12880] batman_adv: batadv0: Adding interface: dummy0
[  467.144569][T12880] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.190793][T12884] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2315'.
[  467.223921][ T7116] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  467.271047][T12880] batman_adv: batadv0: Interface activated: dummy0
[  467.347389][T12890] batadv0: mtu less than device minimum
[  467.376903][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  467.390209][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  467.402985][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  467.415395][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  467.427898][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  467.440561][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  467.453125][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  467.465943][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  467.478372][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  467.713805][ T7116] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  467.739170][ T7116] em28xx 4-1:0.0: board has no eeprom
[  468.122973][ T7116] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  468.143775][ T7116] em28xx 4-1:0.0: dvb set to bulk mode.
[  468.200944][ T7116] em28xx 4-1:0.0: Binding DVB extension
[  469.081899][T12829] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5)
[  469.113461][ T4272] usb 4-1: USB disconnect, device number 8
[  469.212102][ T4272] em28xx 4-1:0.0: Disconnecting em28xx
[  469.658045][ T7116] em28xx 4-1:0.0: Registering input extension
[  469.675246][ T4272] em28xx 4-1:0.0: Closing input extension
[  469.746152][ T4272] em28xx 4-1:0.0: Freeing device
[  471.173715][T12995] tipc: Started in network mode
[  471.190642][T12995] tipc: Node identity 7a64f4c9a19b, cluster identity 4711
[  471.212747][T12995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.254798][T12994] tipc: Disabling bearer <eth:syzkaller0>
[  471.699884][T13012] batman_adv: batadv0: Adding interface: dummy0
[  471.716105][T13012] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.777456][T13012] batman_adv: batadv0: Interface activated: dummy0
[  472.066085][T13028] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.074519][T13028] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.174838][T13028] device bridge_slave_1 left promiscuous mode
[  472.321554][T13028] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.724494][T13028] device bridge_slave_0 left promiscuous mode
[  472.837607][T13028] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.453629][T13034] input: syz1 as /devices/virtual/input/input21
[  475.726219][T13053] tipc: Started in network mode
[  475.737813][T13053] tipc: Node identity 2ab2b69a149e, cluster identity 4711
[  475.776661][T13053] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  475.825416][T13051] tipc: Disabling bearer <eth:syzkaller0>
[  477.057854][T10033] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96
[  477.116703][T13102] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2376'.
[  477.403960][T13124] binder_alloc: 13123: pid 13123 spamming oneway? 2 buffers allocated for a total size of 5120
[  477.421376][T13124] binder_alloc: 13123: pid 13123 spamming oneway? 3 buffers allocated for a total size of 5128
[  478.914026][T13128] sched: RT throttling activated
[  484.283635][T13268] overlayfs: missing 'lowerdir'
[  487.989265][ T4746] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  488.620691][ T4746] usb 4-1: Using ep0 maxpacket: 16
[  488.636168][ T4746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  488.747893][ T4746] usb 4-1: config 0 has no interfaces?
[  488.769556][ T4746] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  488.787764][ T4746] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  488.807760][ T4746] usb 4-1: Manufacturer: syz
[  488.817553][ T4746] usb 4-1: config 0 descriptor??
[  488.963998][T13395] 
[  489.164065][ T4746] usb 4-1: USB disconnect, device number 9
[  492.247853][   T22] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  492.467931][   T22] usb 9-1: Using ep0 maxpacket: 8
[  492.488771][   T22] usb 9-1: config 0 has no interfaces?
[  492.555863][   T22] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  492.635724][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.065953][   T22] usb 9-1: config 0 descriptor??
[  493.300406][ T5260] usb 9-1: USB disconnect, device number 5
[  495.369969][T13571] netlink: 'syz.8.2520': attribute type 4 has an invalid length.
[  497.863531][ T4285] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  497.873312][ T4285] Bluetooth: hci1: Injecting HCI hardware error event
[  497.887162][ T4285] Bluetooth: hci1: hardware error 0x00
[  498.693074][   T26] audit: type=1326 audit(1763151266.810:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  498.787591][   T26] audit: type=1326 audit(1763151266.810:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  498.908008][   T26] audit: type=1326 audit(1763151266.810:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  499.000371][   T26] audit: type=1326 audit(1763151266.810:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  499.124582][   T26] audit: type=1326 audit(1763151266.810:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  499.279128][   T26] audit: type=1326 audit(1763151266.810:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  499.374222][   T26] audit: type=1326 audit(1763151266.810:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  499.484638][   T26] audit: type=1326 audit(1763151266.810:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  499.649546][   T26] audit: type=1326 audit(1763151266.810:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  499.714588][   T26] audit: type=1326 audit(1763151266.810:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.3.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeebf8f6c9 code=0x7ffc0000
[  499.978270][T13707] loop8: detected capacity change from 0 to 16
[  500.023225][T13707] erofs: (device loop8): mounted with root inode @ nid 36.
[  500.105074][T13707] syz.8.2562: attempt to access beyond end of device
[  500.105074][T13707] loop8: rw=0, sector=296, nr_sectors = 16 limit=16
[  500.179037][ T4285] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  500.200903][T13707] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  500.333414][T13709] syz.8.2562: attempt to access beyond end of device
[  500.333414][T13709] loop8: rw=0, sector=8, nr_sectors = 16 limit=16
[  500.703360][T13711] syz.8.2562 (13711): drop_caches: 2
[  501.006832][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2572'.
[  501.174903][T13746] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  501.344904][T13749] device bond1 entered promiscuous mode
[  501.437249][T13749] device bridge0 entered promiscuous mode
[  502.401157][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  502.408470][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  507.117571][T13868] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  507.165511][T13868] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  507.384524][T13868] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  507.430652][T13868] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  507.441544][T13868] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  507.548475][T13868] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  507.599653][T13868] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  507.684951][T13868] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  507.739796][T13868] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  507.840273][T13868] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  507.930711][T13868] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  508.019049][T13868] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  508.497800][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout
[  508.512469][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'.
[  508.613933][T13934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2631'.
[  510.131724][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout
[  510.141376][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout
[  510.149059][   T48] Bluetooth: hci2: command 0x0c1a tx timeout
[  510.577800][ T4285] Bluetooth: hci4: command 0x0406 tx timeout
[  511.156466][T13966] loop3: detected capacity change from 0 to 128
[  511.267976][T13966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  511.343120][T13966] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  511.660559][T13966] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.2642: Invalid inode table block 13168 in block_group 0
[  511.772018][T13966] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  511.817302][T13966] EXT4-fs error (device loop3): __ext4_unlink:3327: inode #2: comm syz.3.2642: mark_inode_dirty error
[  512.070375][ T8449] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 13168 in block_group 0
[  512.115594][ T8449] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  512.179250][ T4285] Bluetooth: hci3: command 0x0406 tx timeout
[  512.187971][ T4282] Bluetooth: hci2: command 0x0406 tx timeout
[  512.195196][ T4282] Bluetooth: hci0: command 0x0406 tx timeout
[  512.215089][ T8449] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #2: comm syz-executor: mark_inode_dirty error
[  512.233731][ T8449] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 13168 in block_group 0
[  512.280912][ T8449] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 13168 in block_group 0
[  513.225881][T14012] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2655'.
[  513.252065][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2655'.
[  513.307964][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2655'.
[  513.350460][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2655'.
[  513.370359][    T9] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm kworker/u4:0: Invalid inode table block 13168 in block_group 0
[  513.412094][ T8449] EXT4-fs (loop3): unmounting filesystem.
[  515.219205][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  515.233408][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  515.244300][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  515.256735][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  515.273619][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  515.284383][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  515.381682][T14060] binder: 14059:14060 ioctl c0306201 0 returned -14
[  516.391709][T14056] chnl_net:caif_netlink_parms(): no params data found
[  517.906398][T13997] Bluetooth: hci0: command 0x0409 tx timeout
[  518.170662][T14056] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.258587][T14056] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.328050][T14056] device bridge_slave_0 entered promiscuous mode
[  518.366670][T14056] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.400349][T14056] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.438958][T14056] device bridge_slave_1 entered promiscuous mode
[  518.687538][T14056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  518.734833][T14056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.917043][T14056] team0: Port device team_slave_0 added
[  518.974584][T14128] netlink: 'syz.8.2687': attribute type 12 has an invalid length.
[  519.070980][T14056] team0: Port device team_slave_1 added
[  519.378547][T14056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.404627][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.523984][T14056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.578993][T14056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.610225][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.699582][T14056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.881993][T14056] device hsr_slave_0 entered promiscuous mode
[  519.928176][T14056] device hsr_slave_1 entered promiscuous mode
[  519.938187][T13997] Bluetooth: hci0: command 0x041b tx timeout
[  519.978161][T14056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  520.000129][T14056] Cannot create hsr debugfs directory
[  520.333606][T14168] loop8: detected capacity change from 0 to 512
[  520.391339][T14168] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2697'.
[  521.780958][T14056] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  521.875834][T14056] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  521.951853][T14056] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  522.018126][T13997] Bluetooth: hci0: command 0x040f tx timeout
[  522.080609][T14056] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  522.468189][T14056] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.521932][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  522.553036][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  522.600842][T14056] 8021q: adding VLAN 0 to HW filter on device team0
[  522.656837][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  522.699696][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  522.758815][T11876] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.767105][T11876] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.820279][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  522.870454][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  522.891464][T11876] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.903356][T11876] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.954483][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  523.103000][T14246] overlayfs: failed to clone upperpath
[  523.293637][T14236] netlink: 'syz.7.2715': attribute type 10 has an invalid length.
[  523.472538][T14236] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  523.661285][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  523.785773][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  523.842671][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  523.892238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  523.948366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  523.998748][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  524.054037][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  524.105525][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  524.121857][T13997] Bluetooth: hci0: command 0x0419 tx timeout
[  524.226467][T14056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  524.314428][T14056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  524.353485][T14265] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2722'.
[  524.455503][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  524.488831][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  524.527518][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  524.547057][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  524.619465][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  525.457589][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  525.473520][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  525.690311][T14056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.746439][T14299] overlayfs: failed to clone lowerpath
[  525.792076][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  525.859076][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  525.919787][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  525.984996][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  526.016714][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  526.052288][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  526.086313][T14056] device veth0_vlan entered promiscuous mode
[  526.150457][T14056] device veth1_vlan entered promiscuous mode
[  526.275021][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  526.298822][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  526.378353][T14056] device veth0_macvtap entered promiscuous mode
[  526.458900][T14056] device veth1_macvtap entered promiscuous mode
[  526.564327][T14317] loop8: detected capacity change from 0 to 1024
[  526.618447][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.628426][T14317] EXT4-fs: Ignoring removed orlov option
[  526.811142][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.131684][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.276447][T14317] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  527.323763][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.336812][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.353260][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.368670][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.382324][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.396397][T14056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.408129][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  527.450709][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  527.616135][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  527.635150][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  528.357892][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.374744][T12119] EXT4-fs (loop8): unmounting filesystem.
[  528.458079][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.507036][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.572738][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.623916][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.660810][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.690871][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.718960][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.763163][T14056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  528.809145][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  528.839885][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  528.884852][T14056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.909654][T14056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.954289][T14056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.987412][T14056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.254177][ T5483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.287548][ T5483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.355432][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  529.364732][T11876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.415756][T11876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.525687][T10036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  530.545973][T14396] binder_alloc: 14391: pid 14391 spamming oneway? 1 buffers allocated for a total size of 4096
[  531.507170][T14408] tipc: Cannot configure node identity twice
[  532.951583][    T7] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  533.243484][    T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.291912][    T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.327983][    T7] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  533.362496][    T7] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  533.432210][    T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.467080][    T7] usb 9-1: config 0 descriptor??
[  533.832266][T14469] overlayfs: failed to clone upperpath
[  533.890809][    T7] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[  533.948614][    T7] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  534.274415][    T7] usb 9-1: USB disconnect, device number 6
[  534.288173][T14440] usb 9-1: string descriptor 0 read error: -19
[  534.327870][   T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  534.385476][T14479] fido_id[14479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  534.558679][   T22] usb 2-1: Using ep0 maxpacket: 32
[  534.579207][   T22] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  534.601775][   T22] usb 2-1: config 0 has no interface number 0
[  534.635098][   T22] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  534.671403][   T22] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  534.691792][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.712186][   T22] usb 2-1: Product: syz
[  534.726570][   T22] usb 2-1: Manufacturer: syz
[  534.742066][   T22] usb 2-1: SerialNumber: syz
[  534.755598][   T22] usb 2-1: config 0 descriptor??
[  534.771115][T14478] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  535.018234][T14478] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  535.161230][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2791'.
[  537.968665][   T22] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71
[  538.208050][   T22] asix: probe of 2-1:0.188 failed with error -71
[  538.439459][   T22] usb 2-1: USB disconnect, device number 9
[  538.533270][T14548] overlayfs: failed to clone upperpath
[  538.762631][T14554] binder_alloc: 14553: pid 14553 spamming oneway? 1 buffers allocated for a total size of 4096
[  541.514210][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2808'.
[  544.002142][T14626] IPv6: A: Disabled Multicast RS
[  544.942889][T14653] 
[  545.394618][T14672] binder: Unknown parameter 'context'
[  545.815073][   T26] kauditd_printk_skb: 17 callbacks suppressed
[  545.815087][   T26] audit: type=1326 audit(1763151313.930:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  545.878744][   T26] audit: type=1326 audit(1763151313.970:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  546.181330][   T26] audit: type=1326 audit(1763151313.970:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  546.320787][   T26] audit: type=1326 audit(1763151313.970:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  546.434419][   T26] audit: type=1326 audit(1763151313.970:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  546.571172][   T26] audit: type=1326 audit(1763151313.970:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  546.738001][   T26] audit: type=1326 audit(1763151313.970:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  546.887800][   T26] audit: type=1326 audit(1763151313.970:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  547.075891][   T26] audit: type=1326 audit(1763151313.980:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  547.187741][   T26] audit: type=1326 audit(1763151313.980:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.1.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f28b818f6c9 code=0x7ffc0000
[  548.050329][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2859'.
[  550.488852][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2874'.
[  550.706671][T14797] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  550.769531][T14798] device bond1 entered promiscuous mode
[  550.788430][T14798] device bridge1 entered promiscuous mode
[  551.772866][T13997] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  551.785710][T13997] Bluetooth: hci0: Injecting HCI hardware error event
[  551.822558][T13997] Bluetooth: hci0: hardware error 0x00
[  554.049919][T14854] ------------[ cut here ]------------
[  554.060440][T14854] WARNING: CPU: 0 PID: 14854 at mm/page_alloc.c:5590 __alloc_pages+0x2f4/0x4e0
[  554.072948][T14854] Modules linked in:
[  554.077407][T14854] CPU: 0 PID: 14854 Comm: syz.8.2888 Not tainted syzkaller #0
[  554.088532][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  554.102199][T14854] RIP: 0010:__alloc_pages+0x2f4/0x4e0
[  554.108795][T14854] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 32 1f 45 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff
[  554.136377][T14854] RSP: 0018:ffffc9000c0cfa00 EFLAGS: 00010246
[  554.144146][T14854] RAX: ffffc9000c0cfa00 RBX: 1ffff92001819f44 RCX: 0000000000000000
[  554.153998][T14854] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000c0cfa68
[  554.165295][T14854] RBP: ffffc9000c0cfb00 R08: dffffc0000000000 R09: ffffc9000c0cfa40
[  554.176170][T14854] R10: fffff52001819f4d R11: 1ffff92001819f48 R12: 0000000000000013
[  554.187965][T14854] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000
[  554.200266][T14854] FS:  00007fc17dd986c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  554.210964][T14854] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  554.219750][T14854] CR2: 000000110c37831e CR3: 0000000058726000 CR4: 00000000003506f0
[  554.231985][T14854] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  554.242949][T14854] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  554.252730][T14854] Call Trace:
[  554.257267][T14854]  <TASK>
[  554.260592][T14854]  ? zone_statistics+0x170/0x170
[  554.266626][T14854]  ? __might_fault+0xa6/0x120
[  554.272892][T14854]  ? __lock_acquire+0x7c50/0x7c50
[  554.278746][T14854]  ? do_vfs_ioctl+0xcb5/0x1d10
[  554.284746][T14854]  __kmalloc_large_node+0x8c/0x1e0
[  554.290932][T14854]  ? raw_ioctl+0x17c7/0x39c0
[  554.298767][T14854]  __kmalloc+0x110/0x240
[  554.303344][T14854]  ? _copy_from_user+0x10b/0x170
[  554.309887][T14854]  raw_ioctl+0x17c7/0x39c0
[  554.315100][T14854]  ? tomoyo_path_number_perm+0x4ae/0x600
[  554.323756][T14854]  ? __kmem_cache_free+0xb6/0x1f0
[  554.331762][T14854]  ? tomoyo_path_number_perm+0x503/0x600
[  554.338480][T14854]  ? tomoyo_path_number_perm+0x1b6/0x600
[  554.346383][T14854]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  554.353251][T14854]  ? make_qualifier+0x3f0/0x3f0
[  554.358735][T14854]  ? __fget_files+0x28/0x4d0
[  554.363083][T13997] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  554.365624][T14854]  ? bpf_lsm_file_ioctl+0x5/0x10
[  554.382381][T14854]  ? security_file_ioctl+0x7c/0xa0
[  554.389054][T14854]  ? make_qualifier+0x3f0/0x3f0
[  554.395117][T14854]  __se_sys_ioctl+0xfa/0x170
[  554.400619][T14854]  do_syscall_64+0x4c/0xa0
[  554.407618][T14854]  ? clear_bhb_loop+0x60/0xb0
[  554.413204][T14854]  ? clear_bhb_loop+0x60/0xb0
[  554.418762][T14854]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  554.426331][T14854] RIP: 0033:0x7fc17cf8f6c9
[  554.431860][T14854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  554.456677][T14854] RSP: 002b:00007fc17dd98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  554.468579][T14854] RAX: ffffffffffffffda RBX: 00007fc17d1e5fa0 RCX: 00007fc17cf8f6c9
[  554.482094][T14854] RDX: 0000200000000000 RSI: 00000000c0085508 RDI: 0000000000000005
[  554.490981][T14854] RBP: 00007fc17d011f91 R08: 0000000000000000 R09: 0000000000000000
[  554.500723][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.510789][T14854] R13: 00007fc17d1e6038 R14: 00007fc17d1e5fa0 R15: 00007ffe93e04a98
[  554.521580][T14854]  </TASK>
[  554.524755][T14854] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  554.534054][T14854] CPU: 0 PID: 14854 Comm: syz.8.2888 Not tainted syzkaller #0
[  554.543616][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  554.556759][T14854] Call Trace:
[  554.560770][T14854]  <TASK>
[  554.565633][T14854]  dump_stack_lvl+0x168/0x22e
[  554.571671][T14854]  ? memcpy+0x3c/0x60
[  554.577552][T14854]  ? show_regs_print_info+0x12/0x12
[  554.584262][T14854]  ? load_image+0x3b0/0x3b0
[  554.591654][T14854]  panic+0x2c9/0x710
[  554.595951][T14854]  ? bpf_jit_dump+0xd0/0xd0
[  554.603047][T14854]  __warn+0x2f8/0x4f0
[  554.608223][T14854]  ? __alloc_pages+0x2f4/0x4e0
[  554.614535][T14854]  ? __alloc_pages+0x2f4/0x4e0
[  554.619687][T14854]  report_bug+0x2ba/0x4f0
[  554.625164][T14854]  ? __alloc_pages+0x2f4/0x4e0
[  554.631037][T14854]  handle_bug+0x3a/0x70
[  554.635728][T14854]  exc_invalid_op+0x16/0x40
[  554.640763][T14854]  asm_exc_invalid_op+0x16/0x20
[  554.646711][T14854] RIP: 0010:__alloc_pages+0x2f4/0x4e0
[  554.652834][T14854] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 32 1f 45 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff
[  554.677752][T14854] RSP: 0018:ffffc9000c0cfa00 EFLAGS: 00010246
[  554.686221][T14854] RAX: ffffc9000c0cfa00 RBX: 1ffff92001819f44 RCX: 0000000000000000
[  554.696874][T14854] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000c0cfa68
[  554.707388][T14854] RBP: ffffc9000c0cfb00 R08: dffffc0000000000 R09: ffffc9000c0cfa40
[  554.717312][T14854] R10: fffff52001819f4d R11: 1ffff92001819f48 R12: 0000000000000013
[  554.727154][T14854] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000
[  554.737097][T14854]  ? zone_statistics+0x170/0x170
[  554.742613][T14854]  ? __might_fault+0xa6/0x120
[  554.750894][T14854]  ? __lock_acquire+0x7c50/0x7c50
[  554.756920][T14854]  ? do_vfs_ioctl+0xcb5/0x1d10
[  554.763204][T14854]  __kmalloc_large_node+0x8c/0x1e0
[  554.769639][T14854]  ? raw_ioctl+0x17c7/0x39c0
[  554.776277][T14854]  __kmalloc+0x110/0x240
[  554.781454][T14854]  ? _copy_from_user+0x10b/0x170
[  554.791793][T14854]  raw_ioctl+0x17c7/0x39c0
[  554.797675][T14854]  ? tomoyo_path_number_perm+0x4ae/0x600
[  554.804771][T14854]  ? __kmem_cache_free+0xb6/0x1f0
[  554.811828][T14854]  ? tomoyo_path_number_perm+0x503/0x600
[  554.818461][T14854]  ? tomoyo_path_number_perm+0x1b6/0x600
[  554.825699][T14854]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  554.832152][T14854]  ? make_qualifier+0x3f0/0x3f0
[  554.837996][T14854]  ? __fget_files+0x28/0x4d0
[  554.844286][T14854]  ? bpf_lsm_file_ioctl+0x5/0x10
[  554.850068][T14854]  ? security_file_ioctl+0x7c/0xa0
[  554.856792][T14854]  ? make_qualifier+0x3f0/0x3f0
[  554.862744][T14854]  __se_sys_ioctl+0xfa/0x170
[  554.869178][T14854]  do_syscall_64+0x4c/0xa0
[  554.874678][T14854]  ? clear_bhb_loop+0x60/0xb0
[  554.880364][T14854]  ? clear_bhb_loop+0x60/0xb0
[  554.886500][T14854]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  554.894963][T14854] RIP: 0033:0x7fc17cf8f6c9
[  554.900841][T14854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  554.922943][T14854] RSP: 002b:00007fc17dd98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  554.934624][T14854] RAX: ffffffffffffffda RBX: 00007fc17d1e5fa0 RCX: 00007fc17cf8f6c9
[  554.945054][T14854] RDX: 0000200000000000 RSI: 00000000c0085508 RDI: 0000000000000005
[  554.956796][T14854] RBP: 00007fc17d011f91 R08: 0000000000000000 R09: 0000000000000000
[  554.967232][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.977686][T14854] R13: 00007fc17d1e6038 R14: 00007fc17d1e5fa0 R15: 00007ffe93e04a98
[  554.989582][T14854]  </TASK>
[  554.994221][T14854] Kernel Offset: disabled
[  554.999905][T14854] Rebooting in 86400 seconds..