last executing test programs:

5m24.791246717s ago: executing program 32 (id=58):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x1210894, &(0x7f0000000000), 0x1, 0x9772, &(0x7f0000014340)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
lseek(r0, 0x3, 0x1)
getdents64(r0, 0x0, 0x31)

5m19.224055272s ago: executing program 33 (id=88):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
unshare(0x20000400)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'wrr\x00', 0x27, 0x4, 0x8}, 0x2c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)

3m46.695668484s ago: executing program 2 (id=928):
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x88c5)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
read(r1, &(0x7f0000000240)=""/123, 0x7b)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3})

3m46.561714505s ago: executing program 2 (id=920):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000240)=0x2)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000001c0)=0xff)

3m46.438771905s ago: executing program 2 (id=923):
r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x1, 0x86)
fchdir(r2)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2040, 0x0)

3m46.350505016s ago: executing program 2 (id=925):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x200080, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0)
sendfile(r0, r0, 0x0, 0x3d)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xf, r1, 0x1fffffffffe, &(0x7f0000000280))
fchmod(r0, 0x20049549e2a2d659)

3m45.929972269s ago: executing program 2 (id=932):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r1, 0x10000)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000})
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x9000000c})

3m45.207239593s ago: executing program 2 (id=945):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3]})
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x629, 0x70bd2a, 0x25dfdbfd, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x4e22, 0x200, 0x4e23, 0x4, 0x2, 0x20, 0x80, 0x73}, {@in=@multicast1, 0x4cf, 0x33}, @in=@remote, {0x401, 0xd, 0x2, 0xffff, 0x4, 0x6, 0x0, 0xfffffffffffffffa}, {0x4554, 0x0, 0xffffffffffffffff, 0x1000}, {0x5, 0x8, 0x3}, 0x70bd2a, 0x0, 0xa, 0x3, 0xdf, 0x14}, 0x1, 0x6}}, 0xf8}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0)
sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10)

3m44.948407875s ago: executing program 34 (id=945):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3]})
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x629, 0x70bd2a, 0x25dfdbfd, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x4e22, 0x200, 0x4e23, 0x4, 0x2, 0x20, 0x80, 0x73}, {@in=@multicast1, 0x4cf, 0x33}, @in=@remote, {0x401, 0xd, 0x2, 0xffff, 0x4, 0x6, 0x0, 0xfffffffffffffffa}, {0x4554, 0x0, 0xffffffffffffffff, 0x1000}, {0x5, 0x8, 0x3}, 0x70bd2a, 0x0, 0xa, 0x3, 0xdf, 0x14}, 0x1, 0x6}}, 0xf8}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0)
sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10)

3m9.060184581s ago: executing program 5 (id=1340):
r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = dup(r2)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef)
read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c)
close_range(r0, 0xffffffffffffffff, 0x0)

3m8.004255948s ago: executing program 5 (id=1350):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

3m7.343361941s ago: executing program 5 (id=1358):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000900)="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", 0x481}], 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000)

3m7.038594984s ago: executing program 5 (id=1362):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000600)={[{@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0xfb}}, {@user_xattr}, {@usrquota}, {@bsdgroups}, {@minixdf}, {@nobh}, {@init_itable_val={'init_itable', 0x3d, 0x3ff}}, {@nombcache}]}, 0x3, 0x4d9, &(0x7f0000001340)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

3m6.560222356s ago: executing program 5 (id=1367):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x44004})
io_uring_enter(r2, 0x47f4, 0x0, 0x0, 0x0, 0x0)

3m5.326186504s ago: executing program 5 (id=1375):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5)

3m4.915481227s ago: executing program 35 (id=1375):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5)

2m16.73695624s ago: executing program 8 (id=1829):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000001300)=0x80000005, 0x4)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50093}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
sendto$packet(r0, &(0x7f0000000040)="6f3d7b6e3595904ad44263292847", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

2m16.480358052s ago: executing program 8 (id=1831):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0)

2m15.472651958s ago: executing program 8 (id=1842):
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r0, 0xfff)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
accept4$rose(r0, 0x0, 0x0, 0x0)

2m14.482683854s ago: executing program 8 (id=1849):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x253, &(0x7f0000000c00)="$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")
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24841)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f0000000840)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
unlink(&(0x7f0000000000)='./file1\x00')

2m13.961499188s ago: executing program 8 (id=1856):
unshare(0x20000400)
rt_sigaction(0x7, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1c000000, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef64, 0x4})
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4601)

2m13.4603745s ago: executing program 8 (id=1861):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)

2m13.074218613s ago: executing program 36 (id=1861):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="bf16000000000000b7070000ff030000487000000000000050000000000000009500000000000000e83d24a394a293b3bd23212fb56fa54f0b71d0e6adfefc41d86b60717142fa9ea4318123741c0a0f168c1886bf0fccf8d56ccb659427cf8593dbe3a2a3ad358061011fbc5ba1f07318988e6e01a41cc0990d0dc840a23f72eca0b2d89fc474c2a10000000077beee1cebf45fab73962fa8f6296b32a8343881dcc7b1b85f3c3da4cd36414e90a61965c3de4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d0054ce21fa41181a9580cfca031e5388ee5c9a7ddd04201f5200001fcadf95e5a4725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f588cb211624f40401691721715f46e0500000000000000a663739a190a4e825c908c0abc85d457ec5a57cb706eef32a3ed12d63c9c4c508530e173650a8a8f2a9c81bcffe437bccbe158024d8d4939e6fd9adc43f0f4b049218db92bf466e934330ed79bc9f626d68b0000600057d14854eef851bc8c30f5d0df6b94ea0b852d495085ff4eabaac9606f0497958c2c357a7124a69f6770ea6702bc53896a15fad5e55c64efd217450a975221b20d78e445e3da74a3c1e59bae44546bde4ac6de55a480f3ad5dc0f2d1818b696492285f60d914283f8d687b0bdb46261277671bba2c550bfef679bddf38ab35eaaf0268c4efa45b56a188a9195044a222ec06bb49784d5608d87c4832e4305bf8889e5db2a70f6a83d4b3cdc12546d2e9f6720dec489b6276856de6d895704ba3e8ee12c8121ffc4f5d2ae03f0227dcc4f38699d3db16f69ed45e918b07ce58bf576e253364fe0000000084f897400d4f5503a6e9ea4a480e3221f3c247ee8c55e487eaa25a7689689c9c305da4b0181f0f653fec399fcc0cc800e82bde039cc29c19b538c76e65642875bddbef61e5985751d9ebd37d2f32375357b5d2b4dc24baa6a7010038380f7029a292f1ad05000000e4e801a819aef69d081e2cacaa8ad1b4ca6df5dc37962ebc5337379e00645b6d2bec249c0612510000000000a7060d8d9b9ad109b62d1dab0eec6beabc76d765b9caf70900000399772ddfe89be4338e70d0ecfed537780a31fcaf4acaf9bd3711a4359d68ec71b0693ede07e7d18e797697901fbae4a9d9966b68eadae75ef1b8931b0818a57e5136fb8c61d73b17d8fd55c2b8d321a6cba8743114fcff01e5c10200c512000800009a021d377e477ea807cc00919ee8bfbd090034f67609cfde8877b5bb072572b421d6b1fdae83e5e250190628d02d01f978323fe36685e652ceb218a9cc9e125a4880faccaf5ac2345f20b1ee403885790500d0bc75c7e95d23904dc446e0201aafea0d3f4cc0cf285ccd000000000100005aee4199a34686905441c1fa62ed20328a10690432f59a4d3e05bd00997ea2b6f5213cb883d05b620f31869f6cce80f1ae09009ed7e3c5f3aa61bfd240cb9726bc512ba0eb1f68579c76144feb0100809f12bcf79c4d57f66703c2aee08e52de3eff160623e1af555dc7481128ed0bab22dcb6e5b6ac5e4010eaf2510fa440aabfdc80c77108c769ed2d666c555c6c38b30899a688d96a6c6dc0dd4309f6548765d3f53261b4890aa004e7f667a230b22bc6e248bf56b219d9a547b6e1c5077c9ba463329323b53910e7358b4d0c6882c590cf25e4d044a6afb10a070f285e3c94ed405aa8dc41718dd3f4bf474868538aad9a23f85a707e325c10a9f22e37c4213d0ca2910726de8e62d2e3ae7f64e40c7af3dc00bab70cf607869c5a11a03bce8aa43fa010348bc2fb420ba5e344fcdcb302548e571157d323f5fd535800284d32ffff000088ccd685f07309101a3196b705479897f4c9d97c4c7b77db7b15bfb4305d5e954a34385418e665af882a7d505323070929b228bc94b70300000066dab8c4e63debff174621a0ac7dd85b14cb7616ca23f044bd0ccd1c79292c3aa8f6e4a1c27315ef8d55781edbe368f72aeb2f48256131aaab707451c14747dfa3bb5f8725a98f6d3c797573f18810bf378e38107ece5cb7cf3b98975e9254248af60de2f04e2429d9b6eba525fd1b1b665f77710fa494e2b619c975acd535fc78696fc980573c35e9916f0000000000002c8ee5ec55faffffffffffffffcd59cc0600000053d0a1f4ea4477022c9f376b3191efeb46be3c174fb24009379bbc949fd2923715540556450f12d1645177ce3eca0d65d17deff51a024f0180000000006100499e829bda469048c70e5968375feb39e6918e591a384851ba3079ad9c376bdaf0650e212eb4185cbbb6c0dc0e699afc34ca3b9a307cd2519cd9b192d678492ea2228ff0817d68f97b18402d271036067c141b911c4e0207e2c9d37ac203f440e1a065a2d227c6ec860c0104000000000000fe7144ec680c0dac7b5906a6197c8173080c9ab3ecb72820f04a42e4a43ee3f325f93edb3a204b9c9dc8953375e37c83876f248d91f166676b54781c6855c5e067ab2c2c6d22b20a703d68d77312333deff80883cb5a25c738f4e7cbb075e10f5c36396156abb221adebb9303342bfa2b745a5e045d5db847e4810270ed1c5bbb1548ec3184ff9b8ed1687333d0e0412d452ba6b390199bd684ff458d6c8114833efde87215e5f9569d92d24579f3ef473bce24e61eb21336ad441eea93cbcb69d2156b9b6e3000000000000000000fc411d2eadcadc7c0a2c12410e4b9d634807f2a6f1c3a13508e274ecef5cfccb707a1640973973fd2d1d60138d9b7a778827fd07fbd093a0ba779dcd32556613e1fac161825da91acde7fa964c689b1f0ea96047a98260270c3a3ccb2142b074db79aa88614663ff33f9966502a2361e49aabe58eb086c5827dd9d92fa4ff0c0e8b949d585f2cbc111de478905cb37f3cbfb019c6daace508b926718506a577234468f9279a52360d1a80b88b4eb1cda949ca77b6ec43bdf5f5a400989705746b86b400947891b33d591ec5ea9ae45983273f62027998d72f83625021a72e27e0449fa154ade55071546d4000000000000000000000000000000002f907c5db9c967a1f86c57bb5062fed7c37ec16a7e62b6e370c3c5a32adee9032367814394a7a7fd12c44b81fb5ac2ad92220a72aa3355e894cbefe344a6b5eb4c25128d5427a640faae401eccf3aca4294410461e946010c50f9ee556b38eae0b252ef288397672bbbd17e5306589f93dc130b6be5b19dfb2462348355ef24762509cf29becacf8515abe299b8a7dfd585f5dbf7578bfdbfa37deeb872c3291b59349238add315cd18e6f4196b404e48955657d680511c7ba7f5e0f9d97d649583190c78015aaf4db05aa2a6cc9d00084ce958406e09fe508a0ee5feb2d34f48d87000000000000001108780004ec696f618c20771a7ae436d733f603f20c9189567b63d47fae002e616969d888a418d139a25b11c0da7aecb8c14f1a879f7b985ab634b0f5cdb2090ad2c336e9a28289247ef4f3cfcafa393927d27711ed0543a5e8ec6c1c62082549791f75fccd54582f990234496954e6e54bcbb90f2756912ab7e511a55a9e0512e5c1c10bcd76ee4799af611179a39bd0c0323cae1aaaaaa8dafb55bca104ada3252c5d9de5b9cdb6217c35ca3d28b1d8b9d2fa79376c13167a9ef1b1f4b7509debbeacc153ca8bea4a0a65ee1d1d20a9106499f0bf7f416b051e835d790ac978b90143d9125224f74b6167f7a967c7e33eb5f43570b9f3c91371968a30e528968b233d0396db424e5fd73d380318e9676d074dd5ce552a222e250f9f6d0bdd9e46e7f22d9abfd4573b57e3b52d407b464b0146ea15560a2ce034b1623fecc84842928223d17ce4ab31ef4c2a9f9caebf65341fa3da1bbae7972097e24603b9db8edc25a152bd39af179eab23ed555040c2bbb89ea22c08b97264b3616a41abfad0ab12a79574c60cf1841ea45f10e9438e55e1e0eb645200993b08833bb14517b0d0e5ba72bdacd92d57b6029129c95ab0a93857c7205e8450b27aee5e684ece77f53112873f40247a998cc896ab4d55573c7a7ef2936a29425cab46cd4fdd1452ea8429c63c74d5673f5e4d47d1b001d0d3a9e1d5c840ab37a69cb30d17ff7591f01549e552dc43b672e0feff94408171d682565dc2d84476297c6901040000cb9f7f2eb690d7a032c09f0a3d48663fe5ece30f592d71755dd6cbfac96016a2ecd4e499ce9adce6e59db0494fa25117a2bc13275c9a94a3532c1b8417e9ed5e6cd5f51f8ccc878ba73305ad19b0cf05625439cdf688d33c8fd6cf52c5c5685444b65eb918884727d3a780bdac17d447745e4accd85d3aca4d63127bb3a58095cffa08a6cecae329dd5f47552c40b560b05e962363e99300d61931ddd97444c2bae02edb26383cb96ee7d2742d24dc7e9b6dac831674ae09b7d180ebb30b9221480ad78706dadf7ca3540eb6c6c43dc7e31b2c8d188f28d6ab10d3c0c97b9f6b5feb9abeb6a801975c0bbab0b1fed7485f2fca1730906a6dc1914386118646dab2618582c4ce0a8ce7a1a3ca7d56f6ca8c7d43cad0116c70751a0db051d9adc4ab34dafbca31fecd9191d38fa011a4c1fc19df0b9aac3a0de17dc01b413c4d4eccf9eb1cd90569508fc6479111544807f11dad193a170ac290f28d3e7f702c5bced7ed90c3251897446fdbb1195136d9092168e2deedb3e0afdf0f543363fbf8759df07270981c0bd7260998963e45a2c84e8b82ddfa98dab68a23cfb2ffa4fcc4ebcd38f273e9bdb240f77eb51e259bb88dc383b19107af39ffcc708a1278b3e53c2130a9c7150593794f8f22ae9b2ff0d46c8d175bf9ff227870f1dcecd5b564d20230ac32a10982cf1bbe5ca15ed6d85b2c447f3fb0872ea6170352fd4c76c75941d1c3684a466c81a5892e9f56c0b512be586381c2390aaf93347d318aa5de4322b11088435730c69bc1cfd96d869803a3113b2a33dbf7973434ba9e4ec15c0423bb384975498ff56bf8b51237dadf6264532fdca7c44e485e4c9b695cd000"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)

1m54.45643297s ago: executing program 7 (id=2037):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write$tun(r2, 0x0, 0x8b)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x5}}, 0x20)
write$cgroup_devices(r2, 0x0, 0x8)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
write(r0, 0x0, 0x0)

1m53.917161263s ago: executing program 7 (id=2044):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)

1m53.636250385s ago: executing program 7 (id=2047):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x2, 0x400000000000003, 0x20, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x4d4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x70}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, 0x0, 0x4000)

1m53.455434826s ago: executing program 7 (id=2048):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd36)

1m52.276164204s ago: executing program 7 (id=2050):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x7, 0x3)
recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=""/17, 0x11}, 0x100}], 0x1, 0x45833af92e4b38ff, 0x0)

1m51.568682598s ago: executing program 7 (id=2055):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x8, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1m51.183789141s ago: executing program 37 (id=2055):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x8, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1m49.303534722s ago: executing program 9 (id=2075):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8}]}}}]}, 0x44}}, 0x8000)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m47.657154913s ago: executing program 9 (id=2079):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0x0, 0xfffffffe})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f00000000c0)=""/192, 0xc0}, {&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000001640)=""/4080, 0xff0}], 0x5}}], 0x1, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780), 0x1)

1m47.285867645s ago: executing program 9 (id=2084):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x3, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1m46.992345067s ago: executing program 9 (id=2089):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d", @ANYRES32], 0x0)
recvmmsg(r0, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}, 0x62}], 0x1, 0x2, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x200, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x20004005)

1m46.747451228s ago: executing program 9 (id=2093):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x30)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)

1m46.401945761s ago: executing program 9 (id=2104):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x4c8c0)

1m31.015422627s ago: executing program 38 (id=2104):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x4c8c0)

3.091853491s ago: executing program 1 (id=3121):
unshare(0x2c020680)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc4c, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

2.913399492s ago: executing program 1 (id=3123):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="fa64d89c0a5dd9f364f466b9860300000f32f20f2086660f323e0fc71e7100440f20c0663505000000440f22c066b93002000066b80400000066ba008000000f30", 0x41}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x8, 0xb}, 0x50)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.688065414s ago: executing program 1 (id=3127):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000020c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)

2.518385454s ago: executing program 0 (id=3130):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000200)={0x6, [0xa, 0x5], [{0x401, 0x10000, 0x1, 0x1, 0x1}, {0x4, 0x4}, {0xe0, 0x3, 0x0, 0x1, 0x1}, {0x8, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x38, 0x0, 0x1, 0x1}, {0xffffffff, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x280, 0x1}, {0x7a78d73d, 0x8, 0x1, 0x1, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x1, 0x1, 0x1}, {0x10000, 0xffff, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x9600000, 0x1, 0x1, 0x1, 0x1}], 0x313})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, <r4=>r2})
ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.415166535s ago: executing program 0 (id=3133):
syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file1\x00', 0x208000, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x41, 0x5e62, &(0x7f0000011a80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

2.396835715s ago: executing program 4 (id=3134):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e6, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

2.359025176s ago: executing program 3 (id=3135):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
pipe2(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140))
fcntl$setpipe(r2, 0x407, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_ENTRY(r2, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r4, 0x3, 0x5}}}, 0x90)
close_range(r0, 0xffffffffffffffff, 0x0)

2.167184787s ago: executing program 6 (id=3137):
pipe(&(0x7f00000000c0))
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001f7, 0x101381)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.166585307s ago: executing program 3 (id=3138):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache'])
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180))

2.155806667s ago: executing program 4 (id=3139):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2.004128017s ago: executing program 6 (id=3140):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x4}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000"], 0xec}}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

1.986122588s ago: executing program 3 (id=3141):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.889967238s ago: executing program 6 (id=3142):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
r0 = syz_open_procfs(0x0, 0x0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0})
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000034c0))
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)

1.728349159s ago: executing program 6 (id=3143):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x1, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1.307138382s ago: executing program 1 (id=3144):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)

1.241797612s ago: executing program 0 (id=3145):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x0, 0x109)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000005d40)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b40)=ANY=[@ANYBLOB="78010000", @ANYRES16, @ANYBLOB="01000000000000440bd910a8ea421c7a4564"], 0x178}}, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000b00)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x2, 0x5, 0xfffffffffffffce3, 0x0})

1.139417053s ago: executing program 4 (id=3146):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r3, &(0x7f00000000c0), 0x12)

1.012245664s ago: executing program 4 (id=3147):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000028000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)

1.012084664s ago: executing program 3 (id=3148):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="fa64d89c0a5dd9f364f466b9860300000f32f20f2086660f323e0fc71e7100440f20c0663505000000440f22c066b93002000066b80400000066ba008000000f30", 0x41}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

936.671205ms ago: executing program 3 (id=3149):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000300)=0x1)
memfd_create(&(0x7f0000000180)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\xd6\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;\xd1^\x95\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89u1\xa5HG\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\x02\x00\x00\x00\x00\x00\x00\x00\xefi\x93\x03\xd2\xf2\bKE\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3a\x97\xfb\xc9\x02\x00\x00\x00\x00\x00\x00eK\x9daW\xf4\x87@\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\xff\xff63~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\t\x00\x00\x00\x00\x00\x00\x00\xc0\x05\aC{\xcc\x03T\xfa\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x19\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xb7\xdaa\xe3\xaee\x00'/378, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434)

849.287155ms ago: executing program 4 (id=3150):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

780.215865ms ago: executing program 3 (id=3151):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="060000000400"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18)
setxattr$security_evm(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000280)=@sha1={0x1, "6e33706926244ebdf58206485eea50be63b2dd7f"}, 0x15, 0x3)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c756d61736b3d30303030303030303030303031343432353036333233362c756e695f786c6174653d312c756e695f786c6174653d302c696f636861727365743d64656661756c742c73686f72746e616d653d77696e393500756e695f786c6174653d312c756e695f786c6174653d312c757466383d312c73686f72746e616d653d6d697865642c696f636861727365743d63703750372c6e6e6f6e756d7461696c3d312c757466383d302c00b08e18498eabf2b4e8ffe85b113a293e45c892212c260a64dbe05913f908a5eddd4b1c3e2d1ac131b189ffdd7e586f437ac8ba15caa40760ab8316f95d1391f13be5f0542e2d5967287ba0887cc6c2c53d25cc823b9f0165c5759a9815ffb91260df9c0eb5b4a989a65a827d632b3991c7c7e82a7b4832302c35b91c130fa616b0de49a164578e95986a1121ffa3ede16d77c439de8d8ab70b3bbf8bf2e9accd9ce7415a40ec2f54d404a28c124868ebb772d7008b10acd1c5414729ed62723496fc30fb0d388dc4ca427559149a66e97b19ef8c648d747efad5cf5cbff32f7226cd3cfb6b995ee76467bed63bf59bca85e08930bd575b83f5ac7a8bc7507b0db30861550426ef104a4fe45c9b4d4390b16d411e8a6b38ec4da423459ef9b9ba5b46f05a4f02b62fb8a635c5a5ef3dd63290b7072b8e"], 0x1, 0x2e0, &(0x7f0000000500)="$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")
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

681.330156ms ago: executing program 0 (id=3152):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x12, 0x3, 0x3c})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)

477.124327ms ago: executing program 0 (id=3153):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

276.191549ms ago: executing program 1 (id=3154):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0)
dup2(r3, r2)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1)
close_range(r0, 0xffffffffffffffff, 0x0)

275.916489ms ago: executing program 6 (id=3155):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x64000)

255.253009ms ago: executing program 0 (id=3156):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1218000, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x306, &(0x7f0000000540)="$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")
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2b9, &(0x7f0000000fc0)="$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")
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe6, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0xeeee0000, 0x8080000, 0xa, 0x0, 0x40, 0x5, 0x7d, 0x7f, 0x5, 0x3, 0x3, 0xfc}, {0xdddd1000, 0x100000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x80, 0xa7, 0x5, 0x81}, {0xf000, 0xeeee0000, 0xc, 0x6, 0x4, 0x42, 0x5, 0xff, 0x8, 0x7, 0xe, 0x7}, {0xeeee0000, 0xdddd1000, 0xb, 0x3, 0x9, 0x4, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0xeeee0000, 0x1, 0x10, 0xa0, 0xb1, 0x8, 0x18, 0xa0, 0x80, 0xf, 0x1, 0xfb}, {0xffff1000, 0x2, 0x10, 0x5, 0x7, 0x5, 0x7, 0x3, 0x4, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x2, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0x8, 0x9}, {0x0, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x6000, 0x20d4, 0x5, 0x10800, 0x8000c00, [0x6800000000000000, 0x2, 0x5e, 0x3]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

132.15044ms ago: executing program 4 (id=3157):
io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
gettid()
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x10)
fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1)

80.769849ms ago: executing program 1 (id=3158):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa13ca8e5839881aa, 0x14})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

0s ago: executing program 6 (id=3159):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50)

kernel console output (not intermixed with test programs):

eady exists on: batadv_slave_1
[  179.699297][ T7549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.743266][ T7549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.758872][ T7549] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.778930][ T7549] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.799161][ T7549] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.826121][ T7549] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.913554][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  179.942496][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  180.062343][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'.
[  180.108108][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'.
[  180.228929][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.252211][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.325719][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.423181][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.473199][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.594720][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.761839][ T4283] Bluetooth: hci2: command 0x0406 tx timeout
[  180.767898][ T4283] Bluetooth: hci3: command 0x0406 tx timeout
[  183.041351][ T7975] netlink: 372 bytes leftover after parsing attributes in process `syz.6.1086'.
[  183.525250][ T7999] loop7: detected capacity change from 0 to 764
[  183.630209][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'.
[  183.661410][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'.
[  183.711316][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1093'.
[  183.868641][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1096'.
[  183.904138][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1096'.
[  184.223045][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'.
[  184.255114][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  184.658430][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1104'.
[  184.966153][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'.
[  185.359857][ T8079] netlink: 'syz.3.1112': attribute type 1 has an invalid length.
[  185.373323][ T8079] netlink: 'syz.3.1112': attribute type 4 has an invalid length.
[  185.381246][ T8079] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1112'.
[  185.397572][ T8079] netlink: 'syz.3.1112': attribute type 1 has an invalid length.
[  185.416015][ T8079] netlink: 'syz.3.1112': attribute type 4 has an invalid length.
[  185.535270][ T8086] lo: Caught tx_queue_len zero misconfig
[  186.377785][ T8121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.651736][ T8135] bridge0: port 1(syz_tun) entered blocking state
[  186.681902][ T8135] bridge0: port 1(syz_tun) entered disabled state
[  186.734086][ T8135] device syz_tun entered promiscuous mode
[  186.881304][ T8147] netlink: 'syz.6.1136': attribute type 12 has an invalid length.
[  187.857650][ T8180] loop7: detected capacity change from 0 to 1024
[  187.955434][ T8180] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  188.135331][   T27] audit: type=1800 audit(1761860769.955:88): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1149" name="bus" dev="loop7" ino=18 res=0 errno=0
[  188.174342][ T8180] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3836: comm syz.7.1149: Allocating blocks 385-513 which overlap fs metadata
[  188.251912][ T8180] EXT4-fs (loop7): pa ffff88807435dee0: logic 16, phys. 129, len 24
[  188.260527][ T8180] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8
[  188.451403][   T41] Trying to write to read-only block-device loop7
[  188.451567][ T7549] Trying to write to read-only block-device loop7
[  188.491137][ T7549] Trying to write to read-only block-device loop7
[  188.504697][ T7549] Trying to write to read-only block-device loop7
[  188.506524][   T41] Trying to write to read-only block-device loop7
[  188.511182][ T7549] Trying to write to read-only block-device loop7
[  188.553557][   T41] Trying to write to read-only block-device loop7
[  188.571853][ T7549] Trying to write to read-only block-device loop7
[  188.581767][   T41] Trying to write to read-only block-device loop7
[  188.593588][ T7549] Trying to write to read-only block-device loop7
[  188.615789][ T7549] EXT4-fs (loop7): unmounting filesystem.
[  189.289712][ T8227] bridge0: port 3(erspan0) entered blocking state
[  189.341116][ T8227] bridge0: port 3(erspan0) entered disabled state
[  189.361123][ T8227] device erspan0 entered promiscuous mode
[  189.427928][ T8227] bridge0: port 3(erspan0) entered blocking state
[  189.435006][ T8227] bridge0: port 3(erspan0) entered forwarding state
[  189.501841][ T8230] device erspan0 left promiscuous mode
[  189.510855][ T8230] bridge0: port 3(erspan0) entered disabled state
[  189.592345][ T8235] netlink: 'syz.3.1170': attribute type 10 has an invalid length.
[  189.630329][ T8235] bridge0: port 1(syz_tun) entered disabled state
[  189.656526][ T8235] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  189.835933][ T8225] 9pnet_fd: p9_fd_create_unix (8225): problem connecting socket: ./file0: -103
[  190.911707][ T4507] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  191.110317][ T8291] __nla_validate_parse: 3 callbacks suppressed
[  191.110334][ T8291] netlink: 58 bytes leftover after parsing attributes in process `syz.7.1191'.
[  191.115526][ T4507] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  191.127647][ T8291] loop7: detected capacity change from 0 to 1024
[  191.166567][ T4507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.181682][ T4507] usb 6-1: Product: syz
[  191.192146][ T4507] usb 6-1: Manufacturer: syz
[  191.201088][ T4507] usb 6-1: SerialNumber: syz
[  191.222073][ T4507] usb 6-1: config 0 descriptor??
[  191.233675][ T4530] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  191.250078][ T4507] ch341 6-1:0.0: ch341-uart converter detected
[  191.306374][ T8291] loop7: detected capacity change from 0 to 1024
[  191.306505][ T4530] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  191.335578][ T4530] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  191.352017][ T4530] Buffer I/O error on dev loop7, logical block 0, async page read
[  192.459437][ T4507] ch341-uart ttyUSB0: break control not supported, using simulated break
[  192.480598][ T4507] usb 6-1: ch341-uart converter now attached to ttyUSB0
[  192.502304][ T4507] usb 6-1: USB disconnect, device number 8
[  192.535131][ T4507] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  192.554395][ T4507] ch341 6-1:0.0: device disconnected
[  192.642531][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'.
[  192.664577][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'.
[  193.071980][ T8359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1214'.
[  194.045534][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.051965][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.062925][ T8392] fuse: Bad value for 'fd'
[  194.275308][ T8394] fuse: Bad value for 'fd'
[  194.924333][ T8407] netlink: 'syz.3.1236': attribute type 21 has an invalid length.
[  194.957904][ T8407] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1236'.
[  194.986441][ T8407] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1236'.
[  195.456674][ T8423] overlayfs: failed to clone upperpath
[  195.839785][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1249'.
[  196.121726][ T4275] Bluetooth: hci4: command 0x0406 tx timeout
[  196.471740][ T8459] overlayfs: failed to clone upperpath
[  196.481793][ T8436] netlink: 'syz.7.1248': attribute type 10 has an invalid length.
[  196.494838][ T8436] device syz_tun entered promiscuous mode
[  196.525047][ T8436] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  197.198414][ T8492] netlink: 'syz.6.1269': attribute type 10 has an invalid length.
[  197.318970][ T8492] team0: Port device dummy0 added
[  197.330223][ T8496] netlink: 'syz.6.1269': attribute type 10 has an invalid length.
[  197.589674][ T8496] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  197.684373][ T8496] team0: Failed to send options change via netlink (err -105)
[  197.728037][ T8496] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  197.765076][ T8496] team0: Port device dummy0 removed
[  197.788210][ T8496] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  198.170020][ T8524] netlink: 'syz.6.1274': attribute type 10 has an invalid length.
[  199.424576][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1285'.
[  199.759591][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1285'.
[  199.898587][ T8562] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.1286'.
[  199.946473][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1286'.
[  200.222743][ T8578] fuse: Bad value for 'fd'
[  200.784028][ T4275] Bluetooth: hci2: unexpected event 0x32 length: 16 > 9
[  201.006824][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'.
[  201.160374][ T8627] loop7: detected capacity change from 0 to 256
[  201.213634][ T8627] /dev/loop7: Can't open blockdev
[  201.257848][ T4530] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  201.584833][ T8639] fuse: Bad value for 'fd'
[  202.659589][ T8686] bond0: (slave syz_tun): Releasing backup interface
[  202.718202][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  202.728686][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.736657][ T8686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.749499][ T8686] device bridge_slave_0 left promiscuous mode
[  202.776393][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.812268][ T8691] syz.5.1328 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  202.825869][ T8686] device bridge_slave_1 left promiscuous mode
[  202.835442][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.862461][ T8686] bond0: (slave bond_slave_0): Releasing backup interface
[  202.890393][ T8686] bond0: (slave bond_slave_1): Releasing backup interface
[  203.014643][ T8686] team0: Port device team_slave_0 removed
[  203.040729][ T8686] team0: Port device team_slave_1 removed
[  203.053875][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.061402][ T8686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.084787][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.096140][ T8686] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.156453][ T8687] team0: Mode changed to "activebackup"
[  203.669804][ T8719] overlayfs: failed to clone upperpath

syzkaller
syzkaller login: [  203.735374][ T8723] fuse: Bad value for 'fd'
[  203.945579][ T8728] netlink: 'syz.3.1339': attribute type 10 has an invalid length.
[  204.048676][ T8728] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  204.272335][ T8746] fuse: Bad value for 'fd'
[  205.975682][ T8803] overlayfs: failed to clone upperpath
[  205.985852][ T8805] loop5: detected capacity change from 0 to 512
[  206.006117][ T8805] EXT4-fs: Ignoring removed nobh option
[  206.029696][ T8805] EXT4-fs: Ignoring removed nobh option
[  206.064320][ T8805] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1362: iget: bad i_size value: 38620345925642
[  206.082977][ T8805] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1362: couldn't read orphan inode 15 (err -117)
[  206.100506][ T8805] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  206.202508][ T4339] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  206.411653][ T4339] usb 8-1: Using ep0 maxpacket: 16
[  206.418464][ T4339] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  206.441067][ T8576] EXT4-fs (loop5): unmounting filesystem.
[  206.443177][ T4339] usb 8-1: config 0 has no interface number 0
[  206.483508][ T4339] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  206.507046][ T4339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.557010][ T4339] usb 8-1: Product: syz
[  206.561202][ T4339] usb 8-1: Manufacturer: syz
[  206.589150][ T4339] usb 8-1: SerialNumber: syz
[  206.621813][ T4339] usb 8-1: config 0 descriptor??
[  206.645800][ T4339] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  207.509499][ T8851] bond0: (slave team0): Releasing backup interface
[  207.544254][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  207.583649][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  207.601483][ T8851] device bridge_slave_0 left promiscuous mode
[  207.642072][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.672755][ T8851] device bridge_slave_1 left promiscuous mode
[  207.678978][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.738496][ T8851] bond0: (slave bond_slave_0): Releasing backup interface
[  207.778963][ T8851] bond0: (slave bond_slave_1): Releasing backup interface
[  207.918300][ T8851] team0: Port device team_slave_0 removed
[  207.988089][ T8851] team0: Port device team_slave_1 removed
[  208.017183][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.035213][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.054448][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.071757][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.121237][ T8851] bond1: (slave gretap2): Releasing active interface
[  208.157516][ T8851] device gretap2 left promiscuous mode
[  208.184309][ T8851] bond2: (slave geneve2): Releasing active interface
[  208.224468][ T8851] batman_adv: batadv0: Interface deactivated: vxlan0
[  208.231187][ T8851] batman_adv: batadv0: Removing interface: vxlan0
[  208.243059][ T4339] gspca_spca1528: reg_r err -71
[  208.252964][ T4339] spca1528: probe of 8-1:0.1 failed with error -71
[  208.265860][ T8856] team0: Mode changed to "activebackup"
[  208.276030][ T4339] usb 8-1: USB disconnect, device number 2
[  208.314530][ T8868] bridge_slave_0: default FDB implementation only supports local addresses
[  208.341915][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1378'.
[  208.365722][ T8871] bridge_slave_0: default FDB implementation only supports local addresses
[  208.455120][ T8875] fuse: Bad value for 'fd'
[  208.574161][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  208.584147][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  208.593849][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  208.609146][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  208.617515][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  208.628076][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  208.897410][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'.
[  209.088429][ T8880] chnl_net:caif_netlink_parms(): no params data found
[  209.376726][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.385159][ T8903] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1390'.
[  209.397888][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.420950][ T8880] device bridge_slave_0 entered promiscuous mode
[  209.443951][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.458831][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.481082][ T8880] device bridge_slave_1 entered promiscuous mode
[  209.590702][ T8880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.618030][ T8880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.698508][ T8880] team0: Port device team_slave_0 added
[  209.713545][ T8880] team0: Port device team_slave_1 added
[  209.795022][ T8918] device vlan2 entered promiscuous mode
[  209.800758][ T8918] device gretap0 entered promiscuous mode
[  209.814719][ T8880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.831739][ T8880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.880950][ T8880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.896518][ T8911] device vlan2 left promiscuous mode
[  209.908345][ T8921] fuse: Unknown parameter '0x0000000000000003'
[  209.915034][ T8911] device gretap0 left promiscuous mode
[  209.935901][ T8880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.951658][ T8880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.005696][ T8880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.095506][ T8880] device hsr_slave_0 entered promiscuous mode
[  210.110821][ T8880] device hsr_slave_1 entered promiscuous mode
[  210.128140][ T8880] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.139275][ T8880] Cannot create hsr debugfs directory
[  210.154176][ T8934] bridge0: port 1(erspan0) entered blocking state
[  210.161493][ T8934] bridge0: port 1(erspan0) entered disabled state
[  210.175048][ T8934] device erspan0 entered promiscuous mode
[  210.205644][ T8934] bridge0: port 1(erspan0) entered blocking state
[  210.212197][ T8934] bridge0: port 1(erspan0) entered forwarding state
[  210.372207][ T8936] device erspan0 left promiscuous mode
[  210.377851][ T8936] bridge0: port 1(erspan0) entered disabled state
[  210.657481][ T8880] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  210.678607][ T8880] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  210.691765][ T4283] Bluetooth: hci4: command 0x0409 tx timeout
[  210.706262][ T8880] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  210.724475][ T8880] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  210.794169][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1412'.
[  210.824916][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1412'.
[  210.887445][ T8963] netlink: 'syz.3.1413': attribute type 12 has an invalid length.
[  210.964615][ T8880] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.998307][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  211.017797][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  211.048044][ T8880] 8021q: adding VLAN 0 to HW filter on device team0
[  211.069932][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  211.089756][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  211.109639][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.116777][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.142688][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  211.163168][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  211.182078][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  211.219258][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.226402][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.264613][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  211.286642][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  211.313165][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  211.340269][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  211.349589][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  211.364769][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  211.386402][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  211.399092][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  211.422636][ T8880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  211.443988][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.463980][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  211.482408][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  211.490872][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  211.505578][ T8981] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1422'.
[  211.518724][ T8981] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1422'.
[  211.826543][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  211.840977][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  211.857262][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.231146][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  212.240563][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  212.260583][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  212.271534][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  212.289434][ T8880] device veth0_vlan entered promiscuous mode
[  212.301068][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  212.308930][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  212.319813][ T8880] device veth1_vlan entered promiscuous mode
[  212.344126][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  212.352458][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  212.361286][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  212.370530][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  212.381868][ T8880] device veth0_macvtap entered promiscuous mode
[  212.394077][ T8880] device veth1_macvtap entered promiscuous mode
[  212.408258][ T8880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.417717][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  212.426061][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  212.434946][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  212.444610][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  212.458914][ T8880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.469115][ T8880] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.478048][ T8880] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.486853][ T8880] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.495691][ T8880] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.506912][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  212.515391][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  212.583863][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.592453][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.605002][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  212.628031][ T5616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.636991][ T5616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.649077][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  212.761865][ T4283] Bluetooth: hci4: command 0x041b tx timeout
[  212.777747][ T8998] loop7: detected capacity change from 0 to 16
[  212.782138][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1435'.
[  212.798112][ T8998] /dev/loop7: Can't open blockdev
[  213.080212][ T9016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  213.101279][ T9016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.120319][ T9016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  213.144019][ T9016] device bridge_slave_0 left promiscuous mode
[  213.197946][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.239223][ T9016] device bridge_slave_1 left promiscuous mode
[  213.257947][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.301047][ T9016] bond0: (slave bond_slave_0): Releasing backup interface
[  213.367143][ T9016] bond0: (slave bond_slave_1): Releasing backup interface
[  213.486735][ T9016] team0: Port device team_slave_0 removed
[  213.549348][ T9016] team0: Port device team_slave_1 removed
[  213.559282][ T9016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.567901][ T9016] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.582645][ T9016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.590337][ T9016] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.629033][ T9022] team0: Mode changed to "activebackup"
[  213.970876][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'.
[  214.050771][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1441'.
[  214.064166][ T9044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.841779][ T4283] Bluetooth: hci4: command 0x040f tx timeout
[  215.325198][ T9071] overlayfs: failed to clone upperpath
[  215.540762][ T9076] netlink: 'syz.8.1454': attribute type 1 has an invalid length.
[  215.561545][ T9076] netlink: 'syz.8.1454': attribute type 4 has an invalid length.
[  215.575611][ T9076] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1454'.
[  215.595869][ T9079] netlink: 'syz.8.1454': attribute type 1 has an invalid length.
[  215.611411][ T9079] netlink: 'syz.8.1454': attribute type 4 has an invalid length.
[  215.637244][ T9079] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1454'.
[  216.916947][ T9114] sd 0:0:1:0: PR command failed: 1026
[  216.922904][ T4283] Bluetooth: hci4: command 0x0419 tx timeout
[  216.932096][ T9114] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  216.938811][ T9114] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  220.179216][ T9133] netlink: 'syz.4.1474': attribute type 4 has an invalid length.
[  220.193767][ T9137] netlink: 'syz.4.1474': attribute type 4 has an invalid length.
[  221.307911][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1505'.
[  221.386913][ T9210] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1505'.
[  221.897630][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1513'.
[  221.964621][ T9226] IPVS: Error connecting to the multicast addr
[  222.291445][ T9242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1519'.
[  222.607138][ T9259] device batadv_slave_1 entered promiscuous mode
[  222.619713][ T9258] device batadv_slave_1 left promiscuous mode
[  223.062849][ T9278] loop7: detected capacity change from 0 to 128
[  223.096350][ T9278] /dev/loop7: Can't open blockdev
[  223.297653][ T9290] input: syz0 as /devices/virtual/input/input9
[  225.888635][ T9374] netlink: 'syz.7.1569': attribute type 10 has an invalid length.
[  225.913335][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.921052][ T9374] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  226.094253][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1572'.
[  226.577240][ T9390] overlayfs: failed to clone upperpath
[  226.997654][ T9402] loop7: detected capacity change from 0 to 1024
[  227.591685][ T5443] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  227.792926][ T5443] usb 8-1: Using ep0 maxpacket: 8
[  227.807723][ T5443] usb 8-1: config index 0 descriptor too short (expected 5924, got 36)
[  227.821639][ T5443] usb 8-1: config 250 has an invalid interface number: 228 but max is -1
[  227.838524][ T5443] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0
[  227.848171][ T5443] usb 8-1: config 250 has no interface number 0
[  227.874662][ T5443] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  227.900507][ T9440] loop8: detected capacity change from 0 to 2048
[  227.911031][ T5443] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  227.927951][ T5443] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  227.952441][ T5443] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  227.968062][ T5443] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  227.996869][ T5443] usb 8-1: config 250 interface 228 has no altsetting 0
[  228.022694][ T9440] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  228.065719][ T5443] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  228.119738][ T5443] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  228.148458][ T9440] EXT4-fs error (device loop8): ext4_read_inode_bitmap:168: comm syz.8.1594: Inode bitmap for bg 0 marked uninitialized
[  228.168924][ T5443] usb 8-1: Product: syz
[  228.178983][ T5443] usb 8-1: SerialNumber: syz
[  228.229317][ T5443] hub 8-1:250.228: bad descriptor, ignoring hub
[  228.251303][ T5443] hub: probe of 8-1:250.228 failed with error -5
[  228.251821][ T9440] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem
[  228.434052][ T5443] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  228.461349][ T8880] EXT4-fs (loop8): unmounting filesystem.
[  228.575518][ T9469] netlink: 'syz.3.1600': attribute type 1 has an invalid length.
[  228.644762][ T9469] 8021q: adding VLAN 0 to HW filter on device bond2
[  228.670876][ T9472] bond2: (slave geneve2): making interface the new active one
[  228.683225][ T9472] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  228.699410][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  228.783641][ T5437] usb 8-1: USB disconnect, device number 3
[  228.812211][ T5437] usblp0: removed
[  228.950263][ T9479] loop8: detected capacity change from 0 to 1024
[  228.974611][ T9479] EXT4-fs: Ignoring removed nomblk_io_submit option
[  229.005068][ T9479] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  229.584961][ T8880] EXT4-fs (loop8): unmounting filesystem.
[  229.612029][ T9495] fuse: Bad value for 'fd'
[  230.439348][ T9541] loop8: detected capacity change from 0 to 1024
[  230.846447][ T9552] loop7: detected capacity change from 0 to 128
[  230.941367][ T9552] /dev/loop7: Can't open blockdev
[  231.744293][ T4509] kernel write not supported for file bpf-prog (pid: 4509 comm: kworker/0:9)
[  240.114510][ T9631] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1662'.
[  240.406491][ T9638] loop8: detected capacity change from 0 to 1024
[  240.545713][ T9638] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  240.561802][ T9638] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.659894][   T27] audit: type=1800 audit(1761860822.475:89): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1664" name="file2" dev="loop8" ino=16 res=0 errno=0
[  240.797980][ T8880] EXT4-fs (loop8): unmounting filesystem.
[  241.397540][ T9657] 
€Â: renamed from vlan0
[  241.398593][ T9607] Set syz1 is full, maxelem 65536 reached
[  241.561841][ T5443] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  241.678923][ T9675] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.1678'.
[  241.691749][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1678'.
[  241.771709][ T5443] usb 9-1: Using ep0 maxpacket: 8
[  241.778502][ T5443] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  241.790280][ T5443] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  241.807322][ T5443] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.834585][ T5443] usb 9-1: config 0 descriptor??
[  241.946198][ T4509] kernel read not supported for file [userfaultfd] (pid: 4509 comm: kworker/0:9)
[  242.063343][ T5443] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  242.086657][ T9687] netlink: 'syz.4.1684': attribute type 1 has an invalid length.
[  242.111920][ T9687] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[  242.122500][ T9687] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  242.134653][ T9687] bond3: (slave vcan0): making interface the new active one
[  242.143602][ T9687] bond3: (slave vcan0): Enslaving as an active interface with an up link
[  242.286571][ T5443] usb 9-1: USB disconnect, device number 2
[  242.792158][ T5611] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.962298][ T5611] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.058544][ T5611] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.245460][ T5611] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.262202][   T27] audit: type=1326 audit(1761860825.075:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.7.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d38efc9 code=0x7ffc0000
[  243.272926][ T9722] syz.7.1698 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  243.348080][   T27] audit: type=1326 audit(1761860825.075:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.7.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d38efc9 code=0x7ffc0000
[  243.448207][   T27] audit: type=1326 audit(1761860825.075:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.7.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d38efc9 code=0x7ffc0000
[  243.562193][   T27] audit: type=1326 audit(1761860825.075:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.7.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d38efc9 code=0x7ffc0000
[  243.704605][   T27] audit: type=1326 audit(1761860825.075:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.7.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f471d38efc9 code=0x7ffc0000
[  243.801906][   T27] audit: type=1326 audit(1761860825.075:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.7.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d38efc9 code=0x7ffc0000
[  243.894657][   T27] audit: type=1326 audit(1761860825.075:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.7.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d38efc9 code=0x7ffc0000
[  244.001722][   T27] audit: type=1326 audit(1761860825.075:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.7.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d38efc9 code=0x7ffc0000
[  244.127496][   T27] audit: type=1326 audit(1761860825.075:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.7.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471d38efc9 code=0x7ffc0000
[  244.330255][ T9757] tipc: Failed to remove unknown binding: 66,1,1/0:3929083995/3929083997
[  244.916403][ T9775] overlayfs: failed to clone upperpath
[  244.968960][ T9778] overlayfs: failed to clone lowerpath
[  245.193692][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1721'.
[  245.403116][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1725'.
[  245.928623][ T5611] device hsr_slave_0 left promiscuous mode
[  245.949582][ T5611] device hsr_slave_1 left promiscuous mode
[  246.049695][ T5611] device veth1_vlan left promiscuous mode
[  246.073385][ T5611] device veth0_vlan left promiscuous mode
[  246.111375][ T9785] loop8: detected capacity change from 0 to 32768
[  246.239975][ T9785] XFS (loop8): Mounting V5 Filesystem
[  246.383586][ T9785] XFS (loop8): Ending clean mount
[  246.447202][ T9785] XFS (loop8): Quotacheck needed: Please wait.
[  246.623613][ T9785] XFS (loop8): Quotacheck: Done.
[  247.130478][ T8880] XFS (loop8): Unmounting Filesystem
[  249.050999][ T5611] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  249.137084][ T5611] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  249.360988][ T5611] bond0 (unregistering): (slave team0): Releasing backup interface
[  249.530497][ T5611] bond0 (unregistering): Released all slaves
[  249.623288][ T9924] fuse: Bad value for 'fd'
[  251.207002][ T9988] overlayfs: failed to clone upperpath
[  251.647973][T10008] overlayfs: failed to clone upperpath
[  251.704126][T10010] overlayfs: failed to clone lowerpath
[  253.037258][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1795'.
[  253.125642][T10058] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1795'.
[  253.960770][T10099] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 4, id = 0
[  254.720957][   T27] kauditd_printk_skb: 18 callbacks suppressed
[  254.720970][   T27] audit: type=1326 audit(1761860836.535:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  254.829121][   T27] audit: type=1326 audit(1761860836.575:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  254.959066][   T27] audit: type=1326 audit(1761860836.575:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  255.020558][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'.
[  255.097092][   T27] audit: type=1326 audit(1761860836.575:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  255.125340][   T27] audit: type=1326 audit(1761860836.575:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  255.229909][   T27] audit: type=1326 audit(1761860836.575:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  255.319116][   T27] audit: type=1326 audit(1761860836.575:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  255.404377][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1825'.
[  255.411787][   T27] audit: type=1326 audit(1761860836.575:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  255.484962][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.485447][   T27] audit: type=1326 audit(1761860836.575:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  255.491275][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.540035][   T27] audit: type=1326 audit(1761860836.575:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.3.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  257.660989][T10213] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 4, id = 0
[  258.577698][T10244] loop8: detected capacity change from 0 to 128
[  258.643846][T10244] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  258.667128][T10244] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  258.863639][T10244] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #2: block 4: comm syz.8.1849: lblock 0 mapped to illegal pblock 4 (length 1)
[  258.971892][ T8880] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1)
[  259.001814][ T8880] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  259.047031][ T8880] EXT4-fs error (device loop8): ext4_dirty_inode:6133: inode #2: comm syz-executor: mark_inode_dirty error
[  259.129071][ T8880] EXT4-fs (loop8): unmounting filesystem.
[  259.286962][T10270] overlayfs: failed to clone upperpath
[  259.340571][T10266] loop7: detected capacity change from 0 to 8192
[  259.364280][T10266] Dev loop7: RDB in block 1 has bad checksum
[  260.143636][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  260.156978][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  260.165205][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  260.175650][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  260.188310][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  260.195980][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  260.423501][T10287] chnl_net:caif_netlink_parms(): no params data found
[  260.675641][T10287] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.704548][T10287] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.739124][T10287] device bridge_slave_0 entered promiscuous mode
[  260.779536][T10287] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.790281][T10287] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.808792][T10287] device bridge_slave_1 entered promiscuous mode
[  260.875403][T10287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.909150][T10287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.999096][T10287] team0: Port device team_slave_0 added
[  261.019595][T10287] team0: Port device team_slave_1 added
[  261.088308][T10287] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.098857][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.128255][T10287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.147700][T10287] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.157493][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.194622][T10287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.309691][T10287] device hsr_slave_0 entered promiscuous mode
[  261.358196][T10287] device hsr_slave_1 entered promiscuous mode
[  261.379771][T10287] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.391642][T10287] Cannot create hsr debugfs directory
[  261.732785][T10287] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  261.763698][T10287] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  261.787722][T10342] fuse: Bad value for 'fd'
[  261.798067][T10287] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  261.830318][T10287] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  262.074231][T10287] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.087929][ T9883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  262.108711][ T9883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  262.119803][T10287] 8021q: adding VLAN 0 to HW filter on device team0
[  262.146844][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  262.162235][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  262.170791][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.177923][ T9891] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.194947][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  262.208527][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  262.220425][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.227573][ T9891] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.259411][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  262.270653][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  262.282121][ T4283] Bluetooth: hci4: command 0x0409 tx timeout
[  262.288390][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  262.319591][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  262.372047][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  262.398289][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  262.441099][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  262.452490][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  262.476721][T10287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  262.540749][T10287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.579287][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  262.602377][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  262.618319][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  262.628111][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  262.647629][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  262.947287][T10385] tipc: Failed to remove unknown binding: 66,1,1/0:348377479/348377481
[  263.238237][ T5437] kernel read not supported for file [userfaultfd] (pid: 5437 comm: kworker/1:11)
[  263.500567][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  263.535468][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  263.593094][T10287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.362037][ T4283] Bluetooth: hci4: command 0x041b tx timeout
[  264.517991][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  264.531184][T10434] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1674768861/1674768863
[  264.539214][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  264.570271][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  264.584679][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  264.598943][T10287] device veth0_vlan entered promiscuous mode
[  264.621080][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  264.649771][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  264.685131][T10287] device veth1_vlan entered promiscuous mode
[  264.741041][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  264.767029][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  264.788908][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  264.813004][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  264.849487][T10287] device veth0_macvtap entered promiscuous mode
[  264.875538][T10287] device veth1_macvtap entered promiscuous mode
[  264.916425][T10287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.944668][T10287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.961789][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  264.981165][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  265.012352][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  265.038820][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  265.059944][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  265.083380][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  265.148233][T10287] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.174998][T10287] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.201735][T10287] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.231768][T10287] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.470256][ T5616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.505733][ T5616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.544752][ T5609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.550968][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  265.572745][ T5609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.616858][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  265.626830][T10452] overlayfs: failed to clone lowerpath
[  266.442567][ T4283] Bluetooth: hci4: command 0x040f tx timeout
[  266.587350][T10484] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.596328][T10484] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  266.605073][T10484] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  266.613803][T10484] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  266.627360][T10484] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.636465][T10484] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.645388][T10484] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.654331][T10484] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  266.809355][T10488] fuse: Bad value for 'fd'
[  266.839104][T10492] fuse: Bad value for 'fd'
[  266.858056][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1924'.
[  266.908265][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1924'.
[  267.860936][ T4507] kernel write not supported for file bpf-prog (pid: 4507 comm: kworker/0:8)
[  268.522137][ T4283] Bluetooth: hci4: command 0x0419 tx timeout
[  268.808672][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1952'.
[  268.831126][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1952'.
[  270.278801][T10621] loop9: detected capacity change from 0 to 128
[  270.326497][T10621] EXT4-fs (loop9): Test dummy encryption mode enabled
[  270.419349][T10621] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  270.445816][T10621] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  270.587270][T10635] fuse: Bad value for 'fd'
[  270.741448][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1975'.
[  270.829843][T10639] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  270.955532][T10287] EXT4-fs (loop9): unmounting filesystem.
[  274.222318][T10739] netlink: 'syz.3.2003': attribute type 4 has an invalid length.
[  274.265569][T10739] netlink: 'syz.3.2003': attribute type 4 has an invalid length.
[  276.800423][T10800] fuse: Bad value for 'fd'
[  277.636540][T10824] overlayfs: failed to clone upperpath
[  278.440347][T10847] binder: 10846:10847 ioctl 40046205 0 returned -22
[  278.465509][T10850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2035'.
[  279.619113][T10897] loop7: detected capacity change from 0 to 2048
[  279.660208][T10897] /dev/loop7: Can't open blockdev
[  280.306599][ T9887] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.490272][ T9887] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.716741][ T9887] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.904819][ T9887] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.473901][T10967] syz.9.2066[10967] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  282.473995][T10967] syz.9.2066[10967] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  282.560576][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  282.590318][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  282.599159][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  282.609336][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  282.617170][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  282.624420][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  282.852633][ T9887] IPVS: stopping master sync thread 10213 ...
[  283.496531][ T9887] device hsr_slave_0 left promiscuous mode
[  283.547114][ T9887] device hsr_slave_1 left promiscuous mode
[  283.669417][ T9887] device veth1_macvtap left promiscuous mode
[  283.692613][ T9887] device veth0_macvtap left promiscuous mode
[  283.717729][ T9887] device veth1_vlan left promiscuous mode
[  283.735224][ T9887] device veth0_vlan left promiscuous mode
[  283.806297][    C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16
[  284.056249][    C1] vcan0: j1939_tp_rxtimer: 0xffff888062f15800: rx timeout, send abort
[  284.573114][    C1] vcan0: j1939_tp_rxtimer: 0xffff888062f15800: abort rx timeout. Force session deactivation
[  284.691886][ T4283] Bluetooth: hci1: command 0x0409 tx timeout
[  284.804600][ T9887] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  285.114224][ T9887] bond0 (unregistering): Released all slaves
[  285.189029][T10997] netlink: 'syz.3.2072': attribute type 4 has an invalid length.
[  285.200154][T11001] netlink: 'syz.3.2072': attribute type 4 has an invalid length.
[  285.228534][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'.
[  285.266773][T11012] bond3: (slave vcan0): Releasing backup interface
[  285.279105][T11012] bond3: Destroying bond
[  285.296631][T11012] bond3 (unregistering): Released all slaves
[  285.361081][T10969] chnl_net:caif_netlink_parms(): no params data found
[  285.576175][T10969] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.644447][T10969] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.693665][T10969] device bridge_slave_0 entered promiscuous mode
[  285.752190][T10969] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.780498][T10969] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.789007][T10969] device bridge_slave_1 entered promiscuous mode
[  285.907153][T10969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.969550][T10969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.973004][T11056] syz.3.2088[11056] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  286.029437][T11056] syz.3.2088[11056] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  286.048645][T10969] team0: Port device team_slave_0 added
[  286.129184][T10969] team0: Port device team_slave_1 added
[  286.289865][T10969] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.323498][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.406252][T10969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.423773][T11070] netlink: 'syz.4.2091': attribute type 4 has an invalid length.
[  286.496600][T11074] netlink: 'syz.4.2091': attribute type 4 has an invalid length.
[  286.545278][T10969] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.561738][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.622966][T10969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.746267][T10969] device hsr_slave_0 entered promiscuous mode
[  286.767352][ T4283] Bluetooth: hci1: command 0x041b tx timeout
[  286.779447][T10969] device hsr_slave_1 entered promiscuous mode
[  288.331485][T10969] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  288.351500][T10969] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  288.373701][T10969] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  288.396451][T10969] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  288.565808][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'.
[  288.590456][T11144] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready
[  288.743222][T10969] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.780619][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  288.808714][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  288.835471][T10969] 8021q: adding VLAN 0 to HW filter on device team0
[  288.842548][ T4283] Bluetooth: hci1: command 0x040f tx timeout
[  288.875194][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  288.921305][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  288.957231][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.964404][ T9887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.011300][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  289.173237][T10969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  289.244559][T10969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  289.912672][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  289.938643][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  289.974132][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.981301][ T9887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.009596][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  290.069377][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  290.096122][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  290.134404][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  290.143006][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  290.157162][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  290.167869][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  290.196526][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  290.222840][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  290.231280][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  290.255154][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  290.272343][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  290.579075][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  290.587354][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  290.620724][T10969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.736316][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  290.757596][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  290.845287][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  290.865175][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  290.877285][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  290.878318][T11183] xt_hashlimit: size too large, truncated to 1048576
[  290.897112][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  290.921831][ T4283] Bluetooth: hci1: command 0x0419 tx timeout
[  290.934775][T10969] device veth0_vlan entered promiscuous mode
[  291.001400][T10969] device veth1_vlan entered promiscuous mode
[  291.113276][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  291.123099][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  291.160476][T10969] device veth0_macvtap entered promiscuous mode
[  291.184133][T10969] device veth1_macvtap entered promiscuous mode
[  291.220071][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.241023][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.262822][T10969] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.286736][ T9893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  291.306577][ T9893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  291.332566][ T9893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  291.362399][ T9893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  291.391299][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.415850][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.444957][T10969] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.464150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  291.476678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  291.500082][T10969] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.522109][T10969] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.544141][T10969] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.565300][T10969] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.715471][ T5611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.750482][ T5611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.802951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  291.827281][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.851905][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.891409][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  293.397187][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2126'.
[  293.450176][T11216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2127'.
[  293.501770][T11216] netlink: 'syz.3.2127': attribute type 1 has an invalid length.
[  294.678861][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2138'.
[  296.720222][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2147'.
[  298.129315][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'.
[  299.136045][T11332] xt_hashlimit: size too large, truncated to 1048576
[  299.330554][   T27] kauditd_printk_skb: 15 callbacks suppressed
[  299.330568][   T27] audit: type=1326 audit(1761860881.145:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.6.2175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd8bd8efc9 code=0x0
[  299.453251][T11341] loop0: detected capacity change from 0 to 8192
[  301.351753][T11387] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.2193'.
[  301.360912][T11387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2193'.
[  302.426473][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  302.437408][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  302.446135][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  302.475282][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  302.486519][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  302.497063][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  302.623943][T11401] loop2: detected capacity change from 0 to 7
[  302.636253][T11401] Dev loop2: unable to read RDB block 7
[  302.648741][T11401]  loop2: unable to read partition table
[  302.658469][T11401] loop2: partition table beyond EOD, truncated
[  302.677287][T11401] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  302.946420][ T9893] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.980865][T11405] device syz_tun entered promiscuous mode
[  302.994076][T11405] device syz_tun left promiscuous mode
[  303.143771][ T9893] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.185024][T11397] chnl_net:caif_netlink_parms(): no params data found
[  303.345535][T11415] overlayfs: failed to clone upperpath
[  303.382914][ T9893] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.573138][ T9893] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.604248][T11397] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.610190][T11433] overlayfs: failed to clone upperpath
[  303.613300][T11397] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.627702][T11397] device bridge_slave_0 entered promiscuous mode
[  303.662924][T11397] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.729293][T11397] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.760722][T11397] device bridge_slave_1 entered promiscuous mode
[  303.829141][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.847007][T11441] netlink: 'syz.6.2214': attribute type 10 has an invalid length.
[  303.857787][T11441] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2214'.
[  304.128219][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.355622][T11397] team0: Port device team_slave_0 added
[  304.413669][T11397] team0: Port device team_slave_1 added
[  304.547996][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.578308][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.722447][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.742645][ T4275] Bluetooth: hci5: command 0x0409 tx timeout
[  304.783600][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.790569][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.817391][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.699365][T11397] device hsr_slave_0 entered promiscuous mode
[  305.718301][T11397] device hsr_slave_1 entered promiscuous mode
[  305.756118][T11397] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  305.792786][T11397] Cannot create hsr debugfs directory
[  305.810999][T11461] tipc: Started in network mode
[  305.831808][T11461] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  305.841886][T11461] tipc: Enabled bearer <eth:team0>, priority 0
[  306.149204][T11475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2227'.
[  306.831465][T11490] loop0: detected capacity change from 0 to 1024
[  306.849192][ T4275] Bluetooth: hci5: command 0x041b tx timeout
[  306.867667][T11490] EXT4-fs: Ignoring removed nomblk_io_submit option
[  306.964030][ T5443] tipc: Node number set to 11578026
[  306.970269][T11490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  307.029578][T11499] overlayfs: failed to clone upperpath
[  307.273212][T10969] EXT4-fs (loop0): unmounting filesystem.
[  307.793708][T11515] netlink: 'syz.4.2242': attribute type 10 has an invalid length.
[  308.189175][T11531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2249'.
[  308.242174][ T9893] device hsr_slave_0 left promiscuous mode
[  308.266345][ T9893] device hsr_slave_1 left promiscuous mode
[  308.300295][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.328831][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.349349][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.389359][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.410127][ T9893] device bridge_slave_1 left promiscuous mode
[  308.429778][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.454180][ T9893] device bridge_slave_0 left promiscuous mode
[  308.471015][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.566259][ T9893] device veth1_macvtap left promiscuous mode
[  308.573098][ T9893] device veth0_macvtap left promiscuous mode
[  308.581383][ T9893] device veth1_vlan left promiscuous mode
[  308.588307][T11548] loop0: detected capacity change from 0 to 512
[  308.599730][ T9893] device veth0_vlan left promiscuous mode
[  308.656870][T11548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  308.674423][T11548] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.769412][T10969] EXT4-fs (loop0): unmounting filesystem.
[  308.929138][ T4275] Bluetooth: hci5: command 0x040f tx timeout
[  310.505160][ T9893] team0 (unregistering): Port device team_slave_1 removed
[  310.677485][ T9893] team0 (unregistering): Port device team_slave_0 removed
[  310.865000][ T9893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.001893][ T4275] Bluetooth: hci5: command 0x0419 tx timeout
[  311.111351][ T9893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  312.469788][T11629] overlayfs: failed to resolve './file0': -2
[  312.520606][ T9893] bond0 (unregistering): Released all slaves
[  312.668772][T11578] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2269'.
[  312.805705][T11397] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  312.839889][T11397] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  312.857103][T11397] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  312.879680][T11397] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  313.087078][T11397] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.104238][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  313.142995][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  313.203634][T11397] 8021q: adding VLAN 0 to HW filter on device team0
[  313.250256][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  313.264615][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  313.310761][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.317924][ T5611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.346996][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  313.364226][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  313.375817][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  313.384925][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.392067][ T5611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.401651][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  313.429156][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  313.448802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  313.489858][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  313.537623][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  313.565971][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  313.584387][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  313.628033][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  313.682642][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  313.716593][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  313.742698][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  313.767532][T11397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  313.855175][T11673] loop0: detected capacity change from 0 to 1024
[  313.890427][T11673] EXT4-fs: Ignoring removed bh option
[  313.972463][T11673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  314.269656][T10969] EXT4-fs (loop0): unmounting filesystem.
[  314.437499][T11694] overlayfs: failed to clone upperpath
[  314.478908][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  314.513443][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  314.523417][T11397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.615090][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  314.639548][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  314.685753][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  314.713345][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  314.748427][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  314.757592][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  314.795270][T11397] device veth0_vlan entered promiscuous mode
[  314.829852][T11397] device veth1_vlan entered promiscuous mode
[  314.899391][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  314.915006][ T9891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  314.925947][T11397] device veth0_macvtap entered promiscuous mode
[  314.955089][T11397] device veth1_macvtap entered promiscuous mode
[  314.977037][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.990923][T11713] loop0: detected capacity change from 0 to 8
[  315.003461][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.039058][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.060124][ T9893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  315.072855][ T9893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  315.097469][ T9893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  315.130789][ T9893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  315.163420][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.199994][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.238021][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.262142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  315.272507][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  315.293411][T11397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.324560][T11397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.335035][T11397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.343960][T11397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.492638][ T9893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.510972][ T9893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.544523][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  315.570669][ T9891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.587103][ T9891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.616055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  316.260531][T11749] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2318'.
[  316.276825][T11745] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2318'.
[  316.420324][    C1] Unknown status report in ack skb
[  316.684487][T11766] loop1: detected capacity change from 0 to 256
[  316.839263][T11768] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  316.928366][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  316.934726][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.803186][ T4509] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  317.998946][ T4509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.016155][ T4509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.028741][ T4509] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  318.038648][ T4509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.051241][ T4509] usb 1-1: config 0 descriptor??
[  318.452579][T11840] sd 0:0:1:0: PR command failed: 1026
[  318.468060][ T4509] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  318.471946][T11840] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  318.484430][ T4509] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  318.506739][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2360'.
[  318.513107][T11840] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  318.668282][ T4509] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE
[  318.868819][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2364'.
[  319.298629][T11808] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38
[  319.349462][ T4509] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71
[  319.390531][ T4509] usb 1-1: USB disconnect, device number 3
[  319.669628][T11875] fido_id[11875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  320.088773][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'.
[  320.491422][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'.
[  321.131245][T11921] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2391'.
[  321.590489][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2401'.
[  321.676508][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'.
[  323.328903][T12002] netlink: 'syz.0.2424': attribute type 22 has an invalid length.
[  323.338302][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'.
[  323.351258][T12002] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  323.360216][T12002] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  323.368978][T12002] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  323.377712][T12002] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.387478][T12002] netlink: 'syz.0.2424': attribute type 22 has an invalid length.
[  323.395444][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'.
[  323.600411][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2428'.
[  324.868245][T12053] mmap: syz.1.2443 (12053) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  325.199405][T12062] syz.4.2449[12062] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  325.199602][T12062] syz.4.2449[12062] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  326.741888][T12089] loop1: detected capacity change from 0 to 2048
[  326.785052][T12089] EXT4-fs: Ignoring removed mblk_io_submit option
[  326.893513][T12089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  327.278943][T12089] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2456: bg 0: block 234: padding at end of block bitmap is not set
[  327.299562][T12089] EXT4-fs (loop1): Remounting filesystem read-only
[  327.354325][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2462'.
[  327.591267][T11397] EXT4-fs (loop1): unmounting filesystem.
[  328.867066][T12129] loop1: detected capacity change from 0 to 512
[  328.908300][T12129] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  328.962909][T12129] EXT4-fs (loop1): 1 truncate cleaned up
[  328.969158][T12129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  329.020740][T12129] syz.1.2474 (pid 12129) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  329.086454][T12129] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only
[  329.124857][T12129] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only
[  329.184400][T11397] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  329.575142][T11397] EXT4-fs (loop1): unmounting filesystem.
[  329.751105][ T5616] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.910947][ T5616] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.044146][ T5616] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.145702][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2483'.
[  330.396528][ T5616] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.590453][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  330.601462][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  330.611006][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  330.618937][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  330.638278][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  330.648388][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  331.458518][T12164] chnl_net:caif_netlink_parms(): no params data found
[  331.750837][T12164] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.759799][T12164] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.784513][T12164] device bridge_slave_0 entered promiscuous mode
[  331.798453][T12199] fuse: Bad value for 'fd'
[  331.869136][T12164] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.878887][T12164] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.899533][T12164] device bridge_slave_1 entered promiscuous mode
[  332.000637][T12164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.052912][T12164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.125572][T12164] team0: Port device team_slave_0 added
[  332.138899][T12164] team0: Port device team_slave_1 added
[  332.273825][T12164] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.294049][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.341198][T12164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.390391][T12164] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.407725][T12164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.501660][T12164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.686608][ T4275] Bluetooth: hci4: command 0x0409 tx timeout
[  332.835814][ T5616] device hsr_slave_0 left promiscuous mode
[  332.859029][ T5616] device hsr_slave_1 left promiscuous mode
[  332.887608][ T5616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.928783][ T5616] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.939033][ T5616] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.948856][ T5616] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.959984][ T5616] device bridge_slave_1 left promiscuous mode
[  332.968431][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.978564][ T5616] device bridge_slave_0 left promiscuous mode
[  332.990217][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.080144][ T5616] device veth1_macvtap left promiscuous mode
[  333.105068][ T5616] device veth0_macvtap left promiscuous mode
[  333.119109][ T5616] device veth1_vlan left promiscuous mode
[  333.129850][ T5616] device veth0_vlan left promiscuous mode
[  334.170858][ T5616] team0 (unregistering): Port device team_slave_1 removed
[  334.237717][ T5616] team0 (unregistering): Port device team_slave_0 removed
[  334.320857][ T5616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.396717][ T5616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.767050][ T4275] Bluetooth: hci4: command 0x041b tx timeout
[  334.998285][ T5616] bond0 (unregistering): Released all slaves
[  335.094179][T12164] device hsr_slave_0 entered promiscuous mode
[  335.108123][T12164] device hsr_slave_1 entered promiscuous mode
[  335.116082][T12164] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  335.125192][T12164] Cannot create hsr debugfs directory
[  335.147614][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'.
[  335.959525][   T27] audit: type=1326 audit(1761860917.775:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12278 comm="syz.0.2529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d9858efc9 code=0x0
[  336.126554][T12164] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  336.136589][T12164] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  336.160823][T12164] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  336.178339][T12164] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  336.394252][T12164] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.417052][T12303] netlink: 'syz.6.2537': attribute type 2 has an invalid length.
[  336.456631][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  336.465910][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  336.487304][T12164] 8021q: adding VLAN 0 to HW filter on device team0
[  336.514102][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  336.523257][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  336.532189][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.539339][ T5611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.548231][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  336.575486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  336.596548][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  336.610625][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.617805][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.658333][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  336.680306][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  336.717710][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  336.730509][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  336.740264][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  336.754937][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  336.789949][T12164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  336.802389][T12164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  336.833778][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  336.842845][ T4275] Bluetooth: hci4: command 0x040f tx timeout
[  336.844038][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  336.858290][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  336.869050][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  336.878340][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  336.888129][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  337.429904][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  337.454531][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  337.493576][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.572349][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  337.591340][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  337.654441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  337.670899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  337.689952][T12164] device veth0_vlan entered promiscuous mode
[  337.698349][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2555'.
[  337.720531][T12350] 8021q: adding VLAN 0 to HW filter on device bond1
[  337.750048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  337.758011][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  337.775410][T12164] device veth1_vlan entered promiscuous mode
[  337.799891][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  337.810683][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  337.819031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  337.828624][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  337.842925][T12354] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  337.854609][T12355] bond0: (slave dummy0): Error: Slave device does not support XDP
[  337.869268][T12357] netlink: 'syz.6.2557': attribute type 10 has an invalid length.
[  337.883594][T12164] device veth0_macvtap entered promiscuous mode
[  337.900195][T12350] device bond1 entered promiscuous mode
[  337.919570][T12350] device geneve2 entered promiscuous mode
[  337.945148][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  337.969211][T12164] device veth1_macvtap entered promiscuous mode
[  338.031044][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.058817][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.090549][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.136037][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  338.152667][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  338.192950][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  338.224970][T12164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.246555][T12164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.280669][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.306077][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  338.323340][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  338.362510][T12164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.389303][T12164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.433201][T12164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.460173][T12164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.664234][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.689639][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.738450][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  338.752857][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.786920][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.832435][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  338.921725][ T4275] Bluetooth: hci4: command 0x0419 tx timeout
[  339.959394][T12394] netlink: 'syz.0.2567': attribute type 10 has an invalid length.
[  339.989759][T12394] bond0: (slave bond_slave_0): Releasing backup interface
[  340.208243][T12397] 9pnet: p9_errstr2errno: server reported unknown error 184467440
[  340.301229][T12401] netlink: 'syz.4.2570': attribute type 12 has an invalid length.
[  342.565098][T12408] Set syz1 is full, maxelem 65536 reached
[  343.071473][T12451] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4061880702/4061880704
[  343.113346][T12451] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4061880702/4061880704
[  344.195337][   T27] audit: type=1326 audit(1761860926.015:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.6.2614" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd8bd8efc9 code=0x0
[  344.463672][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2617'.
[  344.526639][T12514] 8021q: adding VLAN 0 to HW filter on device bond3
[  344.576552][T12514] device bond3 entered promiscuous mode
[  346.240323][T12557] netlink: 'syz.0.2635': attribute type 12 has an invalid length.
[  349.029183][T12623] xt_hashlimit: max too large, truncated to 1048576
[  349.219782][T12619] tipc: Started in network mode
[  349.246419][T12619] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  349.301953][T12619] tipc: Enabled bearer <eth:team0>, priority 0
[  349.790210][   T27] audit: type=1326 audit(1761860931.605:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  349.849179][   T27] audit: type=1326 audit(1761860931.605:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  349.874441][   T27] audit: type=1326 audit(1761860931.645:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  349.982986][T12649] loop1: detected capacity change from 0 to 512
[  350.010248][   T27] audit: type=1326 audit(1761860931.645:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  350.035469][T12653] fuse: Bad value for 'fd'
[  350.042587][T12649] EXT4-fs: Ignoring removed nobh option
[  350.078927][   T27] audit: type=1326 audit(1761860931.645:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  350.103412][T12649] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  350.122006][T12649] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  350.175508][T12649] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2667: Corrupt directory, running e2fsck is recommended
[  350.190432][   T27] audit: type=1326 audit(1761860931.645:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  350.224942][   T27] audit: type=1326 audit(1761860931.645:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  350.272894][   T27] audit: type=1326 audit(1761860931.645:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  350.307373][T12649] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  350.321634][ T4509] tipc: Node number set to 11578026
[  350.350940][T12649] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.2667: corrupted in-inode xattr
[  350.377530][T12649] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2667: couldn't read orphan inode 15 (err -117)
[  350.390143][   T27] audit: type=1326 audit(1761860931.645:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  350.408024][T12649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  350.433790][   T27] audit: type=1326 audit(1761860931.645:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  350.519830][T12649] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  350.545127][T12649] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  350.556486][T12649] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2667: Corrupt directory, running e2fsck is recommended
[  350.610447][T12672] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  350.633876][T12672] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  350.658719][T12672] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2667: Corrupt directory, running e2fsck is recommended
[  350.682500][T12649] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  350.694342][T12649] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  350.720971][T12649] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2667: Corrupt directory, running e2fsck is recommended
[  350.746750][T12672] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  350.856742][T12164] EXT4-fs (loop1): unmounting filesystem.
[  351.124373][T12669] tipc: Started in network mode
[  351.134954][T12669] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  351.176448][T12669] tipc: Enabled bearer <eth:team0>, priority 0
[  351.729220][T12695] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2683'.
[  352.291754][ T5443] tipc: Node number set to 11578026
[  352.389915][T12712] tipc: Started in network mode
[  352.397749][T12712] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  352.408651][T12712] tipc: Enabled bearer <eth:team0>, priority 0
[  353.210624][T12750] netlink: 'syz.1.2717': attribute type 12 has an invalid length.
[  353.542932][ T4507] tipc: Node number set to 11578026
[  354.502286][T12793] xt_hashlimit: max too large, truncated to 1048576
[  355.386591][T12816] overlayfs: failed to clone upperpath
[  355.740660][T12836] netlink: 'syz.1.2740': attribute type 4 has an invalid length.
[  356.287277][   T27] kauditd_printk_skb: 66 callbacks suppressed
[  356.287292][   T27] audit: type=1326 audit(1761860938.105:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  356.365712][   T27] audit: type=1326 audit(1761860938.105:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  356.462270][   T27] audit: type=1326 audit(1761860938.105:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  356.548200][   T27] audit: type=1326 audit(1761860938.105:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  356.712597][   T27] audit: type=1326 audit(1761860938.105:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  356.799075][   T27] audit: type=1326 audit(1761860938.105:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  356.849079][   T27] audit: type=1326 audit(1761860938.105:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  356.905180][   T27] audit: type=1326 audit(1761860938.125:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  356.988858][   T27] audit: type=1326 audit(1761860938.125:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  357.047369][T12879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2756'.
[  357.065033][   T27] audit: type=1326 audit(1761860938.125:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.0.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d9858efc9 code=0x7ffc0000
[  358.392415][ T4509] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  358.581755][ T4509] usb 1-1: Using ep0 maxpacket: 16
[  358.588681][ T4509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  358.628545][ T4509] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  358.654743][ T4509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.687438][ T4509] usb 1-1: Product: syz
[  358.697827][ T4509] usb 1-1: Manufacturer: syz
[  358.713909][ T4509] usb 1-1: SerialNumber: syz
[  358.753860][ T4509] usb 1-1: config 0 descriptor??
[  358.777638][ T4509] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  358.797312][ T4509] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  359.276493][T12934] netlink: 'syz.6.2778': attribute type 4 has an invalid length.
[  359.386026][ T4509] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  359.819785][ T4509] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  359.843674][ T4509] em28xx 1-1:0.0: board has no eeprom
[  360.131600][ T4509] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  360.139451][ T4509] em28xx 1-1:0.0: dvb set to bulk mode.
[  360.185523][ T4509] usb 1-1: USB disconnect, device number 4
[  360.212499][ T4509] em28xx 1-1:0.0: Disconnecting em28xx
[  360.218117][ T4507] em28xx 1-1:0.0: Binding DVB extension
[  360.398529][ T4507] em28xx 1-1:0.0: Registering input extension
[  360.433885][ T4509] em28xx 1-1:0.0: Closing input extension
[  360.467982][ T4509] em28xx 1-1:0.0: Freeing device
[  361.808129][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2804'.
[  362.737075][T13013] loop0: detected capacity change from 0 to 32768
[  362.840077][T13013] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  362.855358][T13013] XFS (loop0): Mounting V5 Filesystem
[  362.983725][T13013] XFS (loop0): Ending clean mount
[  363.027845][T13013] XFS (loop0): Quotacheck needed: Please wait.
[  363.218110][T13013] XFS (loop0): Quotacheck: Done.
[  363.326631][   T27] kauditd_printk_skb: 63 callbacks suppressed
[  363.326646][   T27] audit: type=1804 audit(1761860945.145:294): pid=13048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2811" name="/newroot/139/file0/file1" dev="loop0" ino=6150 res=1 errno=0
[  363.431844][   T27] audit: type=1804 audit(1761860945.175:295): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2811" name="/newroot/139/file0/file1" dev="loop0" ino=6150 res=1 errno=0
[  363.486347][T10969] XFS (loop0): Unmounting Filesystem
[  365.228285][T13093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  365.306805][T13093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  365.333167][T13104] fuse: Bad value for 'fd'
[  365.344388][T13093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  365.540856][T13105] device syzkaller0 entered promiscuous mode
[  365.650096][T13113] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2848'.
[  366.229098][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2857'.
[  366.386626][T13139] netlink: 'syz.4.2858': attribute type 1 has an invalid length.
[  366.395187][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2858'.
[  366.776163][T13151] netlink: 'syz.0.2864': attribute type 11 has an invalid length.
[  367.189508][T13170] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2870'.
[  367.280318][T13174] fuse: Bad value for 'fd'
[  367.427938][T13188] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2874'.
[  367.692640][T13194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  367.700323][T13194] IPv6: NLM_F_CREATE should be set when creating new route
[  368.000730][T13201] loop1: detected capacity change from 0 to 164
[  368.588608][T13209] overlayfs: failed to clone upperpath
[  369.274426][T13194] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.308368][T13194] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.334578][T13194] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.366954][T13194] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.532630][T13222] loop1: detected capacity change from 0 to 32768
[  369.953260][T13194] device bond1 left promiscuous mode
[  370.046720][T13194] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.056154][T13194] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.065073][T13194] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.073963][T13194] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.197850][T13194] device bond3 left promiscuous mode
[  370.204520][T13196] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2880'.
[  370.664275][T13196] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.671569][T13196] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.694713][T13241] device bridge1 entered promiscuous mode
[  370.717497][T13241] team0: Port device bridge1 added
[  370.740353][T13242] bridge0: port 3(team0) entered blocking state
[  370.790786][T13242] bridge0: port 3(team0) entered disabled state
[  370.810529][T13242] device team0 entered promiscuous mode
[  370.824532][T13242] device team_slave_0 entered promiscuous mode
[  370.850585][T13242] device team_slave_1 entered promiscuous mode
[  370.879519][T13242] bridge0: port 3(team0) entered blocking state
[  370.885896][T13242] bridge0: port 3(team0) entered forwarding state
[  370.905362][T13253] fuse: Bad value for 'fd'
[  371.097063][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2908'.
[  371.528643][T13285] overlayfs: failed to clone upperpath
[  371.586509][T13288] binder: 13287:13288 unknown command 0
[  371.601014][T13288] binder: 13287:13288 ioctl c0306201 200000000240 returned -22
[  373.498629][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2931'.
[  373.562253][T13326] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready
[  373.842852][   T27] audit: type=1326 audit(1761860955.665:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  373.911153][   T27] audit: type=1326 audit(1761860955.665:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  373.961912][   T27] audit: type=1326 audit(1761860955.685:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  374.045655][   T27] audit: type=1326 audit(1761860955.685:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  374.100923][T13349] netlink: 'syz.6.2939': attribute type 10 has an invalid length.
[  374.119038][   T27] audit: type=1326 audit(1761860955.685:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  374.181619][ T5438] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  374.210119][T13349] bond0: (slave dummy0): Releasing backup interface
[  374.221607][   T27] audit: type=1326 audit(1761860955.685:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  374.247928][T13349] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  374.270714][T13349] team0: Failed to send options change via netlink (err -105)
[  374.291767][   T27] audit: type=1326 audit(1761860955.695:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  374.341983][T13349] team0: Port device dummy0 added
[  374.347525][   T27] audit: type=1326 audit(1761860955.695:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  374.379138][ T5438] usb 1-1: Using ep0 maxpacket: 16
[  374.421752][   T27] audit: type=1326 audit(1761860955.695:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  374.537538][   T27] audit: type=1326 audit(1761860955.695:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  374.809257][ T5438] usb 1-1: unable to get BOS descriptor or descriptor too short
[  374.832468][ T5438] usb 1-1: unable to read config index 0 descriptor/start: -71
[  374.840191][ T5438] usb 1-1: can't read configurations, error -71
[  374.954460][T13370] loop1: detected capacity change from 0 to 1024
[  374.969864][T13370] EXT4-fs: Ignoring removed nomblk_io_submit option
[  374.991467][T13370] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  375.026090][T13370] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  375.041264][T13370] System zones: 0-1, 3-36
[  375.050524][T13370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  375.145663][T13375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.164584][T12164] EXT4-fs (loop1): unmounting filesystem.
[  375.243721][T13375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.350829][T13375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.444548][T13375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.586918][T13375] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.613999][T13375] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.666798][T13375] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.716771][T13375] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.991690][ T5438] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  376.012979][T13400] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2960'.
[  376.183863][ T5438] usb 1-1: config 1 interface 0 has no altsetting 0
[  376.204733][ T5438] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40
[  376.220429][ T5438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.240191][ T5438] usb 1-1: Product: syz
[  376.251838][ T5438] usb 1-1: Manufacturer: syz
[  376.259683][ T5438] usb 1-1: SerialNumber: syz
[  376.266784][T13408] overlayfs: failed to clone upperpath
[  376.550225][ T5438] usbhid 1-1:1.0: can't add hid device: -71
[  376.566825][ T5438] usbhid: probe of 1-1:1.0 failed with error -71
[  376.589184][ T5438] usb 1-1: USB disconnect, device number 6
[  376.869478][T13437] overlayfs: failed to clone lowerpath
[  378.374196][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.380930][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.788091][T13483] overlayfs: failed to clone upperpath
[  378.800280][T13483] overlayfs: failed to clone lowerpath
[  378.988088][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2998'.
[  379.018316][T13491] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  379.193788][   T27] kauditd_printk_skb: 127 callbacks suppressed
[  379.193802][   T27] audit: type=1326 audit(1761860961.015:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.285818][   T27] audit: type=1326 audit(1761860961.015:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.391951][   T27] audit: type=1326 audit(1761860961.055:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.461783][   T27] audit: type=1326 audit(1761860961.055:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.521675][   T27] audit: type=1326 audit(1761860961.055:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.589931][   T27] audit: type=1326 audit(1761860961.055:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.619386][T13519] binder_alloc: 13518: binder_alloc_buf, no vma
[  379.629884][   T27] audit: type=1326 audit(1761860961.055:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.689749][   T27] audit: type=1326 audit(1761860961.055:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.809958][   T27] audit: type=1326 audit(1761860961.055:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.840206][T13522] loop1: detected capacity change from 0 to 2048
[  379.850496][   T27] audit: type=1326 audit(1761860961.055:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.3.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x7ffc0000
[  379.897653][T13522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  379.955135][T13522] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.3011: corrupted in-inode xattr
[  380.097620][T12164] EXT4-fs (loop1): unmounting filesystem.
[  382.305529][T13602] loop0: detected capacity change from 0 to 4096
[  382.357552][T13602] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  383.163169][T13627] netlink: 'syz.4.3055': attribute type 4 has an invalid length.
[  383.179117][T13627] netlink: 'syz.4.3055': attribute type 17 has an invalid length.
[  383.293967][T13629] loop0: detected capacity change from 0 to 760
[  383.900354][T13645] loop0: detected capacity change from 0 to 8192
[  384.490472][   T27] kauditd_printk_skb: 125 callbacks suppressed
[  384.490486][   T27] audit: type=1326 audit(1761860966.043:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13643 comm="syz.3.3061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1538efc9 code=0x0
[  384.558643][ T4275] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  384.567458][ T4275] Bluetooth: hci4: Injecting HCI hardware error event
[  384.577639][ T4284] Bluetooth: hci4: hardware error 0x00
[  386.447555][T13718] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3088'.
[  386.717450][T13729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3093'.
[  387.039603][ T4284] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  387.681646][T13750] loop1: detected capacity change from 0 to 2048
[  387.720843][T13750] EXT4-fs: Ignoring removed nomblk_io_submit option
[  387.774761][T13750] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  387.934086][T13758] overlayfs: failed to clone upperpath
[  387.935058][T13750] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  388.005632][T13750] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 254 with error 28
[  388.043548][T13750] EXT4-fs (loop1): This should not happen!! Data will be lost
[  388.043548][T13750] 
[  388.053475][T13750] EXT4-fs (loop1): Total free blocks count 0
[  388.071820][T13750] EXT4-fs (loop1): Free/Dirty block details
[  388.118099][T13750] EXT4-fs (loop1): free_blocks=2415919104
[  388.124283][T13750] EXT4-fs (loop1): dirty_blocks=256
[  388.130008][T13750] EXT4-fs (loop1): Block reservation details
[  388.142603][T13750] EXT4-fs (loop1): i_reserved_data_blocks=16
[  388.245199][T12164] EXT4-fs (loop1): unmounting filesystem.
[  388.417819][T13767] NILFS (nullb0): couldn't find nilfs on the device
[  388.907000][T13772] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3110'.
[  390.594774][   T27] audit: type=1326 audit(1761860971.749:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  390.646496][   T27] audit: type=1326 audit(1761860971.749:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  390.679919][   T27] audit: type=1326 audit(1761860971.786:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  390.770864][   T27] audit: type=1326 audit(1761860971.786:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  390.821906][   T27] audit: type=1326 audit(1761860971.786:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  390.883761][   T27] audit: type=1326 audit(1761860971.786:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  390.945325][   T27] audit: type=1326 audit(1761860971.823:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  391.002816][   T27] audit: type=1326 audit(1761860971.823:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  391.049852][   T27] audit: type=1326 audit(1761860971.823:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  391.074925][   T27] audit: type=1326 audit(1761860971.823:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.4.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ccd8efc9 code=0x7ffc0000
[  391.102674][T13844] loop0: detected capacity change from 0 to 32768
[  391.591529][T13865] read_mapping_page failed!
[  391.827551][T13872] loop0: detected capacity change from 0 to 2048
[  391.891257][T13872] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  391.908336][T13872] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  391.972888][T13872] fs-verity: sha512 using implementation "sha512-avx2"
[  392.246696][T10969] EXT4-fs (loop0): unmounting filesystem.
[  392.527335][T13887] infiniband syz!: set down
[  392.541998][T13887] infiniband syz!: added team_slave_0
[  392.693506][T13899] loop0: detected capacity change from 0 to 128
[  392.757195][ T9650] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  392.768232][T13899] loop0: detected capacity change from 0 to 128
[  392.802245][ T9650] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.823428][T13887] RDS/IB: syz!: added
[  392.825998][T13899] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  392.858999][T13887] smc: adding ib device syz! with port count 1
[  392.879644][ T9650] Buffer I/O error on dev loop0, logical block 0, async page read
[  392.891917][T13887] smc:    ib device syz! port 1 has pnetid 
[  392.904664][T13899] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  392.989809][T13899] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2099479611 (4198959222 ns) > initial count (1125603166 ns). Using initial count to start timer.
[  393.062672][T13912] ------------[ cut here ]------------
[  393.068481][T13912] WARNING: CPU: 0 PID: 13912 at arch/x86/kvm/x86.c:11235 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390
[  393.078918][T13912] Modules linked in:
[  393.082922][T13912] CPU: 0 PID: 13912 Comm: syz.0.3156 Not tainted syzkaller #0
[  393.090425][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  393.100546][T13912] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390
[  393.106981][T13912] Code: e8 c7 3b c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 8c 3b c1 00 e9 ce e5 ff ff e8 b2 0c 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb
[  393.126677][T13912] RSP: 0018:ffffc90005807c48 EFLAGS: 00010287
[  393.132779][T13912] RAX: ffffffff810fc9ae RBX: ffff888077d10000 RCX: 0000000000080000
[  393.140738][T13912] RDX: ffffc90015363000 RSI: 00000000000003c4 RDI: 00000000000003c5
[  393.148733][T13912] RBP: ffff88807d717000 R08: dffffc0000000000 R09: fffffbfff215c468
[  393.156738][T13912] R10: fffffbfff215c468 R11: 1ffffffff215c467 R12: ffff888077d102f4
[  393.164720][T13912] R13: ffff888077d100d8 R14: dffffc0000000000 R15: 0000000000000000
[  393.172677][T13912] FS:  00007f6d994a06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  393.181615][T13912] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  393.188210][T13912] CR2: 00007f6d9949ff98 CR3: 000000005f975000 CR4: 00000000003526f0
[  393.196178][T13912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  393.204176][T13912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  393.212166][T13912] Call Trace:
[  393.215443][T13912]  <TASK>
[  393.218411][T13912]  ? mutex_lock_nested+0x10/0x10
[  393.223343][T13912]  ? kvm_arch_vcpu_ioctl_run+0x139/0x2390
[  393.229078][T13912]  kvm_vcpu_ioctl+0x887/0xb80
[  393.233744][T13912]  ? xa_release+0x50/0x50
[  393.238065][T13912]  ? __fget_files+0x28/0x4d0
[  393.242671][T13912]  ? bpf_lsm_file_ioctl+0x5/0x10
[  393.247595][T13912]  ? security_file_ioctl+0x7c/0xa0
[  393.252716][T13912]  ? xa_release+0x50/0x50
[  393.257031][T13912]  __se_sys_ioctl+0xfa/0x170
[  393.261630][T13912]  do_syscall_64+0x4c/0xa0
[  393.266039][T13912]  ? clear_bhb_loop+0x60/0xb0
[  393.270729][T13912]  ? clear_bhb_loop+0x60/0xb0
[  393.275415][T13912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  393.281292][T13912] RIP: 0033:0x7f6d9858efc9
[  393.285721][T13912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.305342][T13912] RSP: 002b:00007f6d994a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  393.313746][T13912] RAX: ffffffffffffffda RBX: 00007f6d987e6090 RCX: 00007f6d9858efc9
[  393.321723][T13912] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  393.329708][T13912] RBP: 00007f6d98611f91 R08: 0000000000000000 R09: 0000000000000000
[  393.337684][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.345645][T13912] R13: 00007f6d987e6128 R14: 00007f6d987e6090 R15: 00007ffd10629a08
[  393.353629][T13912]  </TASK>
[  393.356648][T13912] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  393.363907][T13912] CPU: 0 PID: 13912 Comm: syz.0.3156 Not tainted syzkaller #0
[  393.371342][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  393.381377][T13912] Call Trace:
[  393.384647][T13912]  <TASK>
[  393.387562][T13912]  dump_stack_lvl+0x168/0x22e
[  393.392228][T13912]  ? memcpy+0x3c/0x60
[  393.396194][T13912]  ? show_regs_print_info+0x12/0x12
[  393.401373][T13912]  ? load_image+0x3b0/0x3b0
[  393.405868][T13912]  panic+0x2c9/0x710
[  393.409746][T13912]  ? bpf_jit_dump+0xd0/0xd0
[  393.414239][T13912]  __warn+0x2f8/0x4f0
[  393.418205][T13912]  ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390
[  393.423992][T13912]  ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390
[  393.429776][T13912]  report_bug+0x2ba/0x4f0
[  393.434087][T13912]  ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390
[  393.439874][T13912]  handle_bug+0x3a/0x70
[  393.444013][T13912]  exc_invalid_op+0x16/0x40
[  393.448496][T13912]  asm_exc_invalid_op+0x16/0x20
[  393.453328][T13912] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390
[  393.459725][T13912] Code: e8 c7 3b c1 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 8c 3b c1 00 e9 ce e5 ff ff e8 b2 0c 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb
[  393.479316][T13912] RSP: 0018:ffffc90005807c48 EFLAGS: 00010287
[  393.485367][T13912] RAX: ffffffff810fc9ae RBX: ffff888077d10000 RCX: 0000000000080000
[  393.493327][T13912] RDX: ffffc90015363000 RSI: 00000000000003c4 RDI: 00000000000003c5
[  393.501285][T13912] RBP: ffff88807d717000 R08: dffffc0000000000 R09: fffffbfff215c468
[  393.509242][T13912] R10: fffffbfff215c468 R11: 1ffffffff215c467 R12: ffff888077d102f4
[  393.517215][T13912] R13: ffff888077d100d8 R14: dffffc0000000000 R15: 0000000000000000
[  393.525202][T13912]  ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390
[  393.531018][T13912]  ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390
[  393.536845][T13912]  ? mutex_lock_nested+0x10/0x10
[  393.541790][T13912]  ? kvm_arch_vcpu_ioctl_run+0x139/0x2390
[  393.547495][T13912]  kvm_vcpu_ioctl+0x887/0xb80
[  393.552161][T13912]  ? xa_release+0x50/0x50
[  393.556481][T13912]  ? __fget_files+0x28/0x4d0
[  393.561059][T13912]  ? bpf_lsm_file_ioctl+0x5/0x10
[  393.565984][T13912]  ? security_file_ioctl+0x7c/0xa0
[  393.571082][T13912]  ? xa_release+0x50/0x50
[  393.575395][T13912]  __se_sys_ioctl+0xfa/0x170
[  393.579978][T13912]  do_syscall_64+0x4c/0xa0
[  393.584377][T13912]  ? clear_bhb_loop+0x60/0xb0
[  393.589036][T13912]  ? clear_bhb_loop+0x60/0xb0
[  393.593699][T13912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  393.599572][T13912] RIP: 0033:0x7f6d9858efc9
[  393.603969][T13912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.623582][T13912] RSP: 002b:00007f6d994a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  393.631981][T13912] RAX: ffffffffffffffda RBX: 00007f6d987e6090 RCX: 00007f6d9858efc9
[  393.639939][T13912] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  393.647897][T13912] RBP: 00007f6d98611f91 R08: 0000000000000000 R09: 0000000000000000
[  393.655850][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.663803][T13912] R13: 00007f6d987e6128 R14: 00007f6d987e6090 R15: 00007ffd10629a08
[  393.671764][T13912]  </TASK>
[  393.675020][T13912] Kernel Offset: disabled
[  393.679401][T13912] Rebooting in 86400 seconds..