last executing test programs:

4m58.531745649s ago: executing program 0 (id=988):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mremap(&(0x7f000054d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0)

4m58.3220305s ago: executing program 0 (id=992):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
fdatasync(0xffffffffffffffff)

4m58.248140828s ago: executing program 0 (id=994):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="38000000100001"], 0x38}], 0x1}, 0x0)

4m58.152896887s ago: executing program 0 (id=996):
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000000edf1139c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd4000bcc2542d0000000000000019493e3186727c6200", "f299aba320ff010000000000002000000004000001000000004000", [0x204]})
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

4m57.547687108s ago: executing program 0 (id=1008):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000)

4m56.844496849s ago: executing program 0 (id=1021):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)

4m56.539533559s ago: executing program 32 (id=1021):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)

3m59.844718049s ago: executing program 1 (id=1815):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3m59.697663994s ago: executing program 1 (id=1818):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3d29)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')

3m59.587850015s ago: executing program 1 (id=1821):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000340)=0xc)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}], [], 0x6b}})

3m59.4443429s ago: executing program 1 (id=1824):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x80001)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x738})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000463000/0x4000)=nil, 0x4000}, 0x1})

3m59.331499521s ago: executing program 1 (id=1828):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c)
recvmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122, 0x7a}], 0x1, &(0x7f0000000a40)=""/126, 0x7e}, 0xe4}], 0x1, 0x40012020, 0x0)

3m58.915606443s ago: executing program 1 (id=1835):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3)

3m58.806436704s ago: executing program 33 (id=1835):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3)

3m36.08181309s ago: executing program 5 (id=2127):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(r3, &(0x7f00000043c0)=[{{&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000004480)=ANY=[@ANYBLOB="9400000000000000000000000700"], 0xb8}}], 0x1, 0x6c9c29cc51bfd534)

3m35.852282173s ago: executing program 5 (id=2131):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4008841)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008"], 0x4c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m35.826422316s ago: executing program 5 (id=2132):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xf, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919f"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)

3m34.578024851s ago: executing program 5 (id=2140):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2009e8dbe108598948faffd54a07c21d875397bdb22d0008b420a1819e0123bab36a84bb840661ac00000080f7fffffffffffdff00170000001b00", "90be8bf4bd00000000000000000000000000001000"}})

3m34.141311355s ago: executing program 5 (id=2143):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000700)={0x8, 0x120, 0xfa00, {0x4, {0x800, 0x7, "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", 0x5, 0xc, 0x5, 0x81, 0xc, 0x8, 0x7}}}, 0x128)

3m33.565824202s ago: executing program 5 (id=2149):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058)

3m33.382032251s ago: executing program 34 (id=2149):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058)

2m50.209489917s ago: executing program 4 (id=2847):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}], [], 0x6b}})

2m49.609623017s ago: executing program 4 (id=2853):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28400, 0x22)
fdatasync(r2)

2m49.452443102s ago: executing program 4 (id=2856):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syslog(0x3, &(0x7f00000011c0)=""/234, 0xea)

2m48.948484813s ago: executing program 4 (id=2867):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mlockall(0x7)

2m48.391186449s ago: executing program 4 (id=2876):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
setpgid(0x0, r0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)

2m48.253662303s ago: executing program 4 (id=2877):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2m33.029278708s ago: executing program 35 (id=2877):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

4.331353466s ago: executing program 7 (id=5079):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a4"], 0x40c}}, 0x0)

4.19485517s ago: executing program 7 (id=5081):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, 0x0)

4.09059875s ago: executing program 7 (id=5083):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0)

1.219531508s ago: executing program 6 (id=5115):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
userfaultfd(0x80000)

1.164208444s ago: executing program 6 (id=5116):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0)
ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000100)=0x1000)

1.059943964s ago: executing program 3 (id=5118):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000140)=0x277, 0x4)

962.079004ms ago: executing program 2 (id=5120):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4)

961.645124ms ago: executing program 3 (id=5121):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2002814, 0x0)

946.623146ms ago: executing program 6 (id=5122):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f00000003c0), 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c)

863.476324ms ago: executing program 2 (id=5123):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="101000000000000008000d0005000000e4031680a4"], 0x40c}}, 0x0)

855.511245ms ago: executing program 6 (id=5124):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, 0x0, 0x0, r3)

801.54185ms ago: executing program 8 (id=5125):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}]}})
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0xe42, 0x1ff)

790.057831ms ago: executing program 6 (id=5126):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)

727.342217ms ago: executing program 3 (id=5127):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800)

686.796782ms ago: executing program 2 (id=5128):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, &(0x7f0000000380)={0x0, "fd16adfafc8a3d8f426a87069624f305d6d3a23ec8098f7277b175381c07ab0ebe849b1192e7b31fba78d52a4f0aab4e2c57243cf42a4f76ac873efc9cb4bb2b", 0x25}, 0x48, 0xffffffffffffffff)

617.835698ms ago: executing program 2 (id=5129):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

617.593658ms ago: executing program 6 (id=5130):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000300)=""/247, 0xf7}], 0x1)

617.402779ms ago: executing program 2 (id=5131):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
rt_sigpending(0x0, 0x0)

546.498325ms ago: executing program 3 (id=5132):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4008000}}], 0x1, 0x0)

528.326137ms ago: executing program 2 (id=5133):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2, 0x4}, 0x0, &(0x7f0000000140)={0x1bf, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0x4}, 0x0, 0x0)

517.507249ms ago: executing program 8 (id=5134):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x90)

484.327742ms ago: executing program 7 (id=5135):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
shutdown(r3, 0x1)

353.860695ms ago: executing program 7 (id=5136):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0)

303.32444ms ago: executing program 7 (id=5137):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_clone(0x80020000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)

254.800115ms ago: executing program 8 (id=5138):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32], 0x50)

205.73982ms ago: executing program 3 (id=5139):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="80"], 0x50)

180.469862ms ago: executing program 8 (id=5140):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x10, 0x10, 0x1, 0x70bd26}, 0x10}], 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x4000005)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

75.414413ms ago: executing program 8 (id=5141):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c12020", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

616.88µs ago: executing program 8 (id=5142):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000100)="240000005a001f211007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)

0s ago: executing program 3 (id=5143):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4004081}, 0x200440c4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM")
creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204bc2f, 0x0, 0x1, 0x0, &(0x7f0000000240))
mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
unlink(&(0x7f00000000c0)='./file0\x00')

kernel console output (not intermixed with test programs):

 port 2(bridge_slave_1) entered disabled state
[  209.080272][ T9521] device bridge_slave_1 entered promiscuous mode
[  209.242638][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.308561][ T9627] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2194'.
[  209.329863][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.435922][ T9634] binder: 9629:9634 ioctl 40046210 0 returned -14
[  209.493475][ T9521] team0: Port device team_slave_0 added
[  209.513795][ T9521] team0: Port device team_slave_1 added
[  209.600107][ T4247] Bluetooth: hci3: command 0x041b tx timeout
[  209.674202][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.698772][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.750539][ T9652] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2203'.
[  209.763723][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.778298][ T9643] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2201'.
[  209.791467][ T9655] binder: Unknown parameter 'context'
[  209.869693][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.897997][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.984859][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.154195][  T154] device hsr_slave_0 left promiscuous mode
[  210.176222][  T154] device hsr_slave_1 left promiscuous mode
[  210.230598][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.240823][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.284266][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.306595][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.346765][  T154] device bridge_slave_1 left promiscuous mode
[  210.358084][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.382585][  T154] device bridge_slave_0 left promiscuous mode
[  210.389043][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.438115][  T154] device veth1_macvtap left promiscuous mode
[  210.453762][  T154] device veth0_macvtap left promiscuous mode
[  210.460157][  T154] device veth1_vlan left promiscuous mode
[  210.466001][  T154] device veth0_vlan left promiscuous mode
[  210.624089][  T154] team0 (unregistering): Port device team_slave_1 removed
[  210.635730][  T154] team0 (unregistering): Port device team_slave_0 removed
[  210.790702][ T9521] device hsr_slave_0 entered promiscuous mode
[  210.827890][ T9521] device hsr_slave_1 entered promiscuous mode
[  210.868594][ T9521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.894333][ T9521] Cannot create hsr debugfs directory
[  210.930292][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'.
[  210.940907][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'.
[  211.330562][ T9521] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  211.363599][ T9521] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  211.394897][ T9521] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  211.448360][ T9521] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  211.487299][ T9731] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  211.689590][ T4247] Bluetooth: hci3: command 0x040f tx timeout
[  211.769664][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.820575][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  211.828327][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  211.839610][ T9762] loop6: detected capacity change from 0 to 128
[  211.886583][ T9521] 8021q: adding VLAN 0 to HW filter on device team0
[  211.939118][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  211.968633][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  212.017656][  T478] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.024783][  T478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.097867][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  212.122927][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  212.160124][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  212.176426][  T478] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.183584][  T478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.212568][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  212.212653][ T9758] attempt to access beyond end of device
[  212.212653][ T9758] loop6: rw=2049, want=178, limit=128
[  212.270221][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  212.302997][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  212.377108][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  212.481937][ T9521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  212.568696][ T9780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  212.581815][ T9521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.617852][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  212.630124][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  212.660172][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  212.709825][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  212.740025][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  212.759507][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  212.790194][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  212.829739][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  212.903659][ T9794] netlink: 'syz.6.2253': attribute type 1 has an invalid length.
[  212.942366][ T9794] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.030931][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2253'.
[  213.119221][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  213.169616][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.181716][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.769529][ T4298] Bluetooth: hci3: command 0x0419 tx timeout
[  213.785186][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  213.817873][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  213.891186][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  213.916899][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  213.955109][ T9521] device veth0_vlan entered promiscuous mode
[  213.975129][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  214.016186][  T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  214.065406][ T9521] device veth1_vlan entered promiscuous mode
[  214.148011][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  214.180757][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  214.211317][ T9521] device veth0_macvtap entered promiscuous mode
[  214.238764][ T9521] device veth1_macvtap entered promiscuous mode
[  214.313121][   T25] kauditd_printk_skb: 4 callbacks suppressed
[  214.313135][   T25] audit: type=1326 audit(1763299947.334:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  214.352558][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.412372][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.462035][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.480828][   T25] audit: type=1326 audit(1763299947.404:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  214.539593][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.599791][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.609521][   T25] audit: type=1326 audit(1763299947.404:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  214.639550][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.691389][   T25] audit: type=1326 audit(1763299947.404:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  214.695153][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.714724][   T25] audit: type=1326 audit(1763299947.404:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  214.749263][   T25] audit: type=1326 audit(1763299947.414:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  214.780712][   T25] audit: type=1326 audit(1763299947.414:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  214.783728][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.809940][   T25] audit: type=1326 audit(1763299947.414:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.3.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  214.853040][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.879634][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.917547][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.934435][ T9884] netlink: 'syz.4.2279': attribute type 1 has an invalid length.
[  215.068997][ T9884] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.078957][ T9890] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2281'.
[  215.107563][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2279'.
[  215.118979][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'.
[  215.129306][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  215.137479][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  215.152141][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  215.194198][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  215.243825][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.264466][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.281992][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.297406][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.316076][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.327916][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.345775][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.357540][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.374843][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.386625][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.405185][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.470393][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  215.502070][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  215.538788][ T9521] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.575844][ T9521] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.600387][ T9521] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.634342][ T9521] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.875736][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.909639][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.933253][ T9924] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  215.965414][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  216.014804][ T9357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.046511][ T9357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.122657][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  216.238727][ T9937] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2298'.
[  216.504703][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2303'.
[  216.799501][ T4247] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  218.287595][ T4247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.321822][ T4247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.351737][ T4247] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  218.363283][ T9996] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2313'.
[  218.400080][ T4247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.425371][ T4247] usb 4-1: config 0 descriptor??
[  218.469757][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'.
[  218.538323][T10007] Unsupported ieee802154 address type: 0
[  218.849478][ T4247] usbhid 4-1:0.0: can't add hid device: -71
[  218.855474][ T4247] usbhid: probe of 4-1:0.0 failed with error -71
[  218.888912][ T4247] usb 4-1: USB disconnect, device number 3
[  219.113868][   T25] audit: type=1326 audit(1763299952.134:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  219.184231][   T25] audit: type=1326 audit(1763299952.144:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.6.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  219.528665][T10060] netlink: 'syz.7.2338': attribute type 13 has an invalid length.
[  219.603850][T10060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  219.675080][T10060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  219.708838][T10060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  220.637410][T10120] loop6: detected capacity change from 0 to 128
[  220.688639][   T25] kauditd_printk_skb: 6 callbacks suppressed
[  220.688651][   T25] audit: type=1326 audit(1763299953.704:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  220.814726][   T25] audit: type=1326 audit(1763299953.764:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  220.858528][T10120] hpfs: Bad version 183,140. Mount readonly to go around
[  220.950685][T10120] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz
[  220.974424][   T25] audit: type=1326 audit(1763299953.764:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  221.016597][   T25] audit: type=1326 audit(1763299953.764:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  221.039234][   T25] audit: type=1326 audit(1763299953.764:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  221.090188][T10133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.111000][   T25] audit: type=1326 audit(1763299953.764:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  221.267802][   T25] audit: type=1326 audit(1763299953.764:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.3.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998087d6c9 code=0x7ffc0000
[  221.295425][T10133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.427707][T10133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.572755][T10133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.758914][T10133] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.825842][T10133] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.877638][T10133] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.906695][T10133] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.178757][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'.
[  222.487322][T10192] loop2: detected capacity change from 0 to 128
[  222.536249][T10197] loop4: detected capacity change from 0 to 128
[  222.684810][T10197] hpfs: Bad version 183,140. Mount readonly to go around
[  222.753202][T10197] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz
[  223.194364][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'.
[  223.579953][T10243] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  223.606767][T10243] CIFS mount error: No usable UNC path provided in device string!
[  223.606767][T10243] 
[  223.617262][T10243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  224.299453][T10253] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  225.308914][T10309] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.2434' sets config #0
[  225.384010][T10317] binder: Bad value for 'max'
[  225.425904][T10318] loop2: detected capacity change from 0 to 128
[  225.515731][T10318] hpfs: Bad version 183,140. Mount readonly to go around
[  225.577476][T10318] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz
[  225.639593][ T2080] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  225.909475][ T2080] usb 4-1: Using ep0 maxpacket: 8
[  225.995056][T10343] netlink: 628 bytes leftover after parsing attributes in process `syz.7.2447'.
[  226.094984][T10345] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  226.147171][ T2080] usb 4-1: unable to get BOS descriptor or descriptor too short
[  226.245955][ T2080] usb 4-1: config 0 has no interfaces?
[  226.459791][ T2080] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01
[  226.468853][ T2080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.517628][T10360] device bridge1 entered promiscuous mode
[  226.524478][ T2080] usb 4-1: Product: syz
[  226.528649][ T2080] usb 4-1: Manufacturer: syz
[  226.548324][ T2080] usb 4-1: SerialNumber: syz
[  226.557231][T10360] team0: Port device bridge1 added
[  226.564919][ T2080] usb 4-1: config 0 descriptor??
[  226.614586][T10360] bridge0: port 3(team0) entered blocking state
[  226.622602][T10360] bridge0: port 3(team0) entered disabled state
[  226.656330][T10360] device team0 entered promiscuous mode
[  226.679100][T10360] device team_slave_0 entered promiscuous mode
[  226.713143][T10360] device team_slave_1 entered promiscuous mode
[  226.755052][T10360] bridge0: port 3(team0) entered blocking state
[  226.761381][T10360] bridge0: port 3(team0) entered forwarding state
[  226.780458][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2456'.
[  226.790193][T10362] device team0 left promiscuous mode
[  226.795587][T10362] device team_slave_0 left promiscuous mode
[  226.806850][T10362] device team_slave_1 left promiscuous mode
[  226.813210][T10362] bridge0: port 3(team0) entered disabled state
[  226.825121][T10362] device bridge_slave_1 left promiscuous mode
[  226.837821][T10362] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.874522][ T2080] usb 4-1: USB disconnect, device number 4
[  226.887918][T10362] device bridge_slave_0 left promiscuous mode
[  226.895648][T10362] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.445916][T10407] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2474'.
[  228.434135][T10470] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2502'.
[  228.604064][T10482] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2507'.
[  230.427879][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2529'.
[  230.624318][T10539] loop7: detected capacity change from 0 to 1024
[  230.716577][T10539] EXT4-fs (loop7): inodes count not valid: 8 vs 32
[  230.760884][   T25] audit: type=1326 audit(1763299963.784:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  230.904133][   T25] audit: type=1326 audit(1763299963.804:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  231.033464][   T25] audit: type=1326 audit(1763299963.804:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  231.154596][   T25] audit: type=1326 audit(1763299963.804:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  231.302435][   T25] audit: type=1326 audit(1763299963.814:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  231.460529][T10591] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2551' sets config #0
[  231.480259][   T25] audit: type=1326 audit(1763299963.814:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  231.641167][   T25] audit: type=1326 audit(1763299963.814:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  231.663501][    C1] vkms_vblank_simulate: vblank timer overrun
[  231.683179][T10599] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2554'.
[  231.786238][   T25] audit: type=1326 audit(1763299963.814:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.6.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  232.114297][  T263] block nbd7: Attempted send on invalid socket
[  232.121563][  T263] blk_update_request: I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  232.134815][T10627] EXT4-fs (nbd7): unable to read superblock
[  232.789500][ T2080] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  232.984800][T10680] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  233.245784][ T2080] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB3, skipping
[  233.276670][ T2080] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.353465][ T2080] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  233.385392][ T2080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.428483][ T2080] usb 5-1: config 0 descriptor??
[  233.511575][ T2080] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  233.744648][ T8489] usb 5-1: USB disconnect, device number 4
[  234.629399][T10769] loop3: detected capacity change from 0 to 256
[  235.733904][T10798] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2626'.
[  237.045192][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2648'.
[  237.086069][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2648'.
[  238.547238][T10911] IPv6: A: Disabled Multicast RS
[  238.815444][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2667'.
[  239.487805][   T25] audit: type=1326 audit(1763299972.504:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  239.572416][   T25] audit: type=1326 audit(1763299972.504:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  239.649700][   T25] audit: type=1326 audit(1763299972.504:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  239.697039][   T25] audit: type=1326 audit(1763299972.504:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  239.809597][   T25] audit: type=1326 audit(1763299972.504:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  239.895671][   T25] audit: type=1326 audit(1763299972.504:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  240.006527][   T25] audit: type=1326 audit(1763299972.504:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  240.118909][   T25] audit: type=1326 audit(1763299972.554:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f05f7661f85 code=0x7ffc0000
[  240.240251][   T25] audit: type=1326 audit(1763299972.554:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  240.404110][   T25] audit: type=1326 audit(1763299972.554:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.7.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  241.051411][T11031] Unsupported ieee802154 address type: 0
[  241.108788][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'.
[  241.223903][  T263] block nbd6: Attempted send on invalid socket
[  241.230160][  T263] blk_update_request: I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  241.242537][T11043] EXT4-fs (nbd6): unable to read superblock
[  241.417786][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2710'.
[  241.901135][  T263] block nbd4: Attempted send on invalid socket
[  241.907379][  T263] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  241.919738][T11080] EXT4-fs (nbd4): unable to read superblock
[  242.541078][T11115] loop4: detected capacity change from 0 to 256
[  242.681130][T11121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.838140][T11121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.864618][T11130] loop4: detected capacity change from 0 to 128
[  242.945723][T11121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.000840][T11139] netlink: 'syz.6.2752': attribute type 13 has an invalid length.
[  243.026717][T11139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  243.046269][T11139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  243.075223][T11139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  243.258952][T11121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.302122][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2754'.
[  243.428770][T11121] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.506978][T11121] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.593336][T11121] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.612875][T11167] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2763' sets config #0
[  243.627223][T11121] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.657031][T11173] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  244.096369][T11199] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2789'.
[  244.648429][T11228] netlink: 'syz.4.2793': attribute type 13 has an invalid length.
[  244.708803][T11228] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  244.767757][T11228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  244.777467][T11228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  245.149654][ T2080] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  245.369665][ T8489] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  245.443761][T11264] netlink: 628 bytes leftover after parsing attributes in process `syz.4.2811'.
[  245.485678][T11267] netlink: 'syz.2.2810': attribute type 13 has an invalid length.
[  245.509145][T11267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  245.517553][T11267] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  245.537936][T11267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  245.549217][T11267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  245.616567][ T2080] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.619525][ T8489] usb 8-1: Using ep0 maxpacket: 8
[  245.644807][ T2080] usb 4-1: config 0 has no interfaces?
[  245.669470][ T2080] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  245.689125][ T2080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.749920][ T2080] usb 4-1: config 0 descriptor??
[  245.800223][ T8489] usb 8-1: unable to get BOS descriptor or descriptor too short
[  245.892544][ T8489] usb 8-1: config 0 has no interfaces?
[  246.049673][ T8489] usb 8-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01
[  246.067582][ T8489] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.086714][ T8489] usb 8-1: Product: syz
[  246.110224][ T8489] usb 8-1: Manufacturer: syz
[  246.120002][ T8489] usb 8-1: SerialNumber: syz
[  246.147735][ T8489] usb 8-1: config 0 descriptor??
[  246.148375][T11293] No source specified
[  246.432617][ T8489] usb 8-1: USB disconnect, device number 2
[  246.454277][ T4262] usb 4-1: USB disconnect, device number 5
[  247.243291][T11315] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2832'.
[  247.646784][T11337] netlink: 'syz.2.2840': attribute type 10 has an invalid length.
[  247.654736][T11337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2840'.
[  247.667591][T11337] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  247.685711][T11337] batman_adv: batadv0: Adding interface: virt_wifi0
[  247.692381][T11337] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.718044][T11337] batman_adv: batadv0: Interface activated: virt_wifi0
[  247.725281][T11337] batadv0: mtu less than device minimum
[  247.733001][T11337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.745384][T11337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.757750][T11337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.770140][T11337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.782493][T11337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.794849][T11337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.807202][T11337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.819584][T11337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.831964][T11337] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  248.531648][T11354] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2850'.
[  249.090069][T11368] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2866'.
[  249.869602][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2871'.
[  250.144177][T11408] x_tables: duplicate underflow at hook 2
[  250.868871][T11434] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2886' sets config #0
[  251.376250][T11462] 9pnet: Could not find request transport: 0xffffffffffffffff
[  251.394527][T11459] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.409329][ T8489] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  251.459221][T11459] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.619233][T11459] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.700511][T11459] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.712286][ T8489] usb 7-1: Using ep0 maxpacket: 8
[  251.797211][T11459] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.812704][T11459] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.826731][T11459] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.842343][T11459] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.899370][ T8489] usb 7-1: unable to get BOS descriptor or descriptor too short
[  251.999688][ T8489] usb 7-1: config 0 has no interfaces?
[  252.199686][ T8489] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01
[  252.210535][ T8489] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.226216][ T8489] usb 7-1: Product: syz
[  252.230992][ T8489] usb 7-1: Manufacturer: syz
[  252.235592][ T8489] usb 7-1: SerialNumber: syz
[  252.266524][ T8489] usb 7-1: config 0 descriptor??
[  252.546471][ T6169] usb 7-1: USB disconnect, device number 3
[  254.008333][T11522] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2925'.
[  254.852528][T11545] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2937'.
[  255.019216][ T4262] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  255.259206][ T4262] usb 3-1: Using ep0 maxpacket: 8
[  255.421630][ T4262] usb 3-1: unable to get BOS descriptor or descriptor too short
[  255.441738][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.448027][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.520213][ T4262] usb 3-1: config 0 has no interfaces?
[  255.684195][ T4262] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01
[  255.709165][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.717165][ T4262] usb 3-1: Product: syz
[  255.745214][ T4262] usb 3-1: Manufacturer: syz
[  255.750036][ T4262] usb 3-1: SerialNumber: syz
[  255.770173][ T4262] usb 3-1: config 0 descriptor??
[  256.029932][ T4262] usb 3-1: USB disconnect, device number 3
[  256.446547][T11560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.515773][T11560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.631940][T11560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.768418][T11560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.799789][T11584] loop3: detected capacity change from 0 to 512
[  257.505061][T11560] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.528254][T11560] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.541813][T11560] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.617188][T11560] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.638607][T11584] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #16: comm syz.3.2954: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0)
[  257.684060][T11584] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2954: couldn't read orphan inode 16 (err -117)
[  257.706850][T11584] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  257.746381][   T25] kauditd_printk_skb: 28 callbacks suppressed
[  257.746393][   T25] audit: type=1326 audit(257.708:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.7.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  257.846701][   T25] audit: type=1326 audit(257.708:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.7.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  257.899706][   T25] audit: type=1326 audit(257.738:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.7.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  258.068646][   T25] audit: type=1326 audit(257.738:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.7.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  258.091008][   T25] audit: type=1326 audit(257.738:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.7.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  258.113921][   T25] audit: type=1326 audit(257.738:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.7.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  258.136462][   T25] audit: type=1326 audit(257.738:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.7.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  258.161145][   T25] audit: type=1326 audit(257.738:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.7.2968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  258.911009][T11625] loop2: detected capacity change from 0 to 512
[  259.015718][T11625] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback.
[  259.115697][T11633] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2984'.
[  259.196712][   T25] audit: type=1326 audit(259.158:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11634 comm="syz.2.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  259.285131][   T25] audit: type=1326 audit(259.158:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11634 comm="syz.2.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  259.542595][T11657] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2967'.
[  260.144372][T11683] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2993'.
[  265.604823][  T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.645042][  T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.711163][  T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.731954][T11689] chnl_net:caif_netlink_parms(): no params data found
[  265.767549][T11689] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.774965][T11689] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.782719][T11689] device bridge_slave_0 entered promiscuous mode
[  265.791383][T11689] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.799871][T11689] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.807497][T11689] device bridge_slave_1 entered promiscuous mode
[  265.825630][  T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.846940][T11689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.858135][T11689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.882005][T11689] team0: Port device team_slave_0 added
[  265.891627][T11689] team0: Port device team_slave_1 added
[  265.915647][T11689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.922734][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.959396][T11689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.981191][T11689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.998316][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.118082][T11689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.994939][T11723] binder: 11722:11723 ioctl c0306201 200000000180 returned -14
[  267.059009][T11689] device hsr_slave_0 entered promiscuous mode
[  267.095440][T11689] device hsr_slave_1 entered promiscuous mode
[  267.130206][T11689] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.161720][T11689] Cannot create hsr debugfs directory
[  267.183439][   T25] kauditd_printk_skb: 8 callbacks suppressed
[  267.183450][   T25] audit: type=1326 audit(267.149:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.2.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  267.263536][   T25] audit: type=1326 audit(267.179:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.2.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  267.314449][   T25] audit: type=1326 audit(267.179:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.2.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  267.355394][   T25] audit: type=1326 audit(267.179:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.2.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  267.435976][   T25] audit: type=1326 audit(267.179:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.2.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  267.493624][   T25] audit: type=1326 audit(267.189:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.2.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  267.585886][   T25] audit: type=1326 audit(267.189:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.2.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  267.688730][ T4247] Bluetooth: hci4: command 0x0409 tx timeout
[  267.730216][T11689] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  267.760114][T11689] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  267.817050][T11689] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  267.842137][T11689] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  268.345898][T11689] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.401682][  T154] device hsr_slave_0 left promiscuous mode
[  268.431646][  T154] device hsr_slave_1 left promiscuous mode
[  268.445150][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.491750][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.529738][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.537145][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.561166][  T154] device bridge_slave_1 left promiscuous mode
[  268.607696][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.627125][  T154] device bridge_slave_0 left promiscuous mode
[  268.635693][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.657837][  T154] device veth0_macvtap left promiscuous mode
[  268.686649][  T154] device veth1_vlan left promiscuous mode
[  268.725324][  T154] device veth0_vlan left promiscuous mode
[  268.987500][  T154] bond0 (unregistering): Released all slaves
[  269.220169][  T154] team0 (unregistering): Port device team_slave_1 removed
[  269.235952][  T154] team0 (unregistering): Port device team_slave_0 removed
[  269.407305][T11689] 8021q: adding VLAN 0 to HW filter on device team0
[  269.426257][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  269.447715][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  269.512886][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  269.557228][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  269.602014][ T4465] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.609165][ T4465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.684753][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  269.713975][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  269.722796][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.729886][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.746263][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  269.758489][ T4239] Bluetooth: hci4: command 0x041b tx timeout
[  269.779489][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  269.798711][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  269.817354][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  269.886632][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  269.965531][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  269.999317][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  270.008134][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  270.029297][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  270.105977][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  270.148848][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  270.163937][ T9356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  270.205857][T11689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  270.808750][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  270.816945][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  270.856352][T11689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.838235][ T8488] Bluetooth: hci4: command 0x040f tx timeout
[  272.752893][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  272.763155][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  272.882031][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  272.901411][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  272.949567][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  272.981563][   T25] audit: type=1326 audit(272.949:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  272.998651][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  273.075497][   T25] audit: type=1326 audit(272.969:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  273.089722][T11689] device veth0_vlan entered promiscuous mode
[  273.182820][   T25] audit: type=1326 audit(272.969:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  273.197583][T11689] device veth1_vlan entered promiscuous mode
[  273.284335][   T25] audit: type=1326 audit(272.969:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  273.324202][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  273.355438][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  273.370350][   T25] audit: type=1326 audit(272.969:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  273.422454][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  273.462091][   T25] audit: type=1326 audit(272.969:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  273.492182][ T9357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  273.515549][   T25] audit: type=1326 audit(272.969:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  273.540206][   T25] audit: type=1326 audit(272.969:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.2.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  273.569419][T11689] device veth0_macvtap entered promiscuous mode
[  273.592027][T11689] device veth1_macvtap entered promiscuous mode
[  273.832257][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  273.976057][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  274.262821][   T26] Bluetooth: hci4: command 0x0419 tx timeout
[  274.312716][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.325510][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.335356][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.346073][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.355993][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.366585][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.376405][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.386890][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.397769][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.439171][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.479109][T11689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.504732][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  274.513512][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  274.573413][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.626480][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.701975][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.744853][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.775778][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.792284][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.808446][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.826244][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.836489][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.853661][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.868734][T11689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.977520][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  275.002125][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  275.034287][T11998] syz.2.3104 (11998) used greatest stack depth: 20288 bytes left
[  275.041807][T11689] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.069384][T11689] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.115192][T11689] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.134114][T11689] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.160629][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3109'.
[  275.275059][T12021] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3113'.
[  275.329483][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'.
[  275.354183][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'.
[  275.399781][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.423627][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.468108][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  275.509527][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.539712][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.621309][ T6514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  275.667416][T12035] overlayfs: overlapping lowerdir path
[  275.679279][T12030] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  275.695329][T12030] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  276.021287][T12051] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.111522][T12051] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.344521][T12051] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.505546][T12051] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.584506][T12051] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.599424][T12051] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.614543][T12051] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.650592][T12051] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.347083][   T25] audit: type=1326 audit(278.309:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  278.428744][   T25] audit: type=1326 audit(278.339:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  278.548220][   T25] audit: type=1326 audit(278.339:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  279.394583][   T25] audit: type=1326 audit(278.339:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  279.537206][   T25] audit: type=1326 audit(278.339:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  279.615682][   T25] audit: type=1326 audit(278.339:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  279.706449][   T25] audit: type=1326 audit(278.339:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  279.729860][   T25] audit: type=1326 audit(278.339:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  279.843958][   T25] audit: type=1326 audit(278.349:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  280.556767][   T25] audit: type=1326 audit(278.349:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.2.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  280.893762][T12210] netlink: 'syz.8.3174': attribute type 8 has an invalid length.
[  283.010332][T12304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  283.284611][T12316] lo: Caught tx_queue_len zero misconfig
[  283.462660][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3216'.
[  283.623698][T12343] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3232'.
[  286.978812][T12413] loop2: detected capacity change from 0 to 1024
[  287.137911][T12413] EXT4-fs (loop2): Ignoring removed bh option
[  287.144325][T12413] EXT4-fs (loop2): inline encryption not supported
[  287.323780][T12413] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.3240: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  287.345288][T12413] EXT4-fs error (device loop2): ext4_quota_enable:6420: comm syz.2.3240: Bad quota inode: 3, type: 0
[  287.358916][T12413] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  287.407482][T12413] EXT4-fs (loop2): mount failed
[  288.598420][ T4239] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  290.256742][T12476] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3265'.
[  291.016836][T12520] netlink: 756 bytes leftover after parsing attributes in process `syz.3.3283'.
[  294.282530][T12568] netlink: 172 bytes leftover after parsing attributes in process `syz.8.3296'.
[  295.371177][T12592] binder: Bad value for 'stats'
[  295.960186][   T25] kauditd_printk_skb: 29 callbacks suppressed
[  295.960201][   T25] audit: type=1326 audit(295.930:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.6.3319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x0
[  296.901917][T12649] netlink: 'syz.7.3328': attribute type 4 has an invalid length.
[  297.203764][T12651] netlink: 'syz.7.3328': attribute type 4 has an invalid length.
[  297.693440][   T25] audit: type=1326 audit(297.660:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  297.767031][   T25] audit: type=1326 audit(297.690:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  297.788889][   T25] audit: type=1326 audit(297.690:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  297.816486][   T25] audit: type=1326 audit(297.690:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  297.843598][   T25] audit: type=1326 audit(297.690:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  297.976829][   T25] audit: type=1326 audit(297.690:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  298.090746][   T25] audit: type=1326 audit(297.690:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  298.195536][   T25] audit: type=1326 audit(297.690:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  298.306775][   T25] audit: type=1326 audit(297.690:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.2.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  300.106450][T12755] TCP: TCP_TX_DELAY enabled
[  302.140661][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3382'.
[  302.463490][T12832] loop2: detected capacity change from 0 to 512
[  303.966178][T12832] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  304.007602][ T8489] Bluetooth: hci0: command 0x0406 tx timeout
[  304.012780][T12832] EXT4-fs (loop2): invalid journal inode
[  304.089205][T12832] EXT4-fs (loop2): can't get journal size
[  304.213398][T12832] EXT4-fs (loop2): 1 truncate cleaned up
[  304.224204][T12832] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none.
[  305.946587][T12912] loop6: detected capacity change from 0 to 512
[  306.222625][T12917] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.266997][T12912] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  306.284280][T12912] EXT4-fs (loop6): invalid journal inode
[  306.309925][T12912] EXT4-fs (loop6): can't get journal size
[  306.338268][T12912] EXT4-fs (loop6): 1 truncate cleaned up
[  306.359407][T12912] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none.
[  306.434484][T12917] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.539900][T12917] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.739421][T12917] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.820473][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3424'.
[  306.972929][   T25] kauditd_printk_skb: 5 callbacks suppressed
[  306.972943][   T25] audit: type=1326 audit(562.940:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12952 comm="syz.7.3427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x0
[  307.015837][T12917] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.079470][T12917] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.133730][T12917] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.179341][T12917] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.298010][T12965] ODEBUG: Out of memory. ODEBUG disabled
[  307.366963][T12970] loop6: detected capacity change from 0 to 16
[  307.416773][T12970] erofs: (device loop6): mounted with root inode @ nid 36.
[  307.729413][ T4232] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  307.917365][T12977] erofs: (device loop6): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36
[  308.517079][ T4232] usb 8-1: config 1 has an invalid interface number: 105 but max is 0
[  308.535171][ T4232] usb 8-1: config 1 has no interface number 0
[  308.566528][ T4232] usb 8-1: config 1 interface 105 has no altsetting 0
[  308.787098][ T4232] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  309.149876][ T4232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.158714][ T4232] usb 8-1: Product: syz
[  309.166926][ T4232] usb 8-1: Manufacturer: syz
[  309.171537][ T4232] usb 8-1: SerialNumber: syz
[  309.508229][ T4232] aqc111: probe of 8-1:1.105 failed with error -71
[  309.539562][ T4232] usb 8-1: USB disconnect, device number 3
[  309.669897][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'.
[  309.700526][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'.
[  310.050553][T13032] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3451'.
[  310.071039][T13032] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3451'.
[  310.117721][T13032] netlink: 'syz.8.3451': attribute type 5 has an invalid length.
[  310.151269][T13032] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3451'.
[  310.380433][T13004] loop6: detected capacity change from 0 to 32768
[  310.390562][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3459'.
[  310.482693][T13058] tmpfs: Unknown parameter 'noswap'
[  310.490174][T13055] overlayfs: unrecognized mount option "/" or missing value
[  310.601697][T13004] XFS (loop6): Mounting V5 Filesystem
[  310.614471][T13067] netlink: 'syz.2.3466': attribute type 1 has an invalid length.
[  310.778649][T13004] XFS (loop6): Ending clean mount
[  310.818525][T13004] XFS (loop6): Quotacheck needed: Please wait.
[  310.824240][T13074] 8021q: adding VLAN 0 to HW filter on device bond1
[  310.902918][T13074] bond0: (slave bond1): making interface the new active one
[  310.918508][T13004] XFS (loop6): Quotacheck: Done.
[  310.959931][T13074] bond0: (slave bond1): Enslaving as an active interface with an up link
[  311.001174][T13067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3466'.
[  311.035688][T13067] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.165597][T13097] binder: Unknown parameter 'contextÌ'
[  311.200235][ T8746] XFS (loop6): Unmounting Filesystem
[  311.687715][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  311.767176][T13126] loop7: detected capacity change from 0 to 512
[  311.855673][T13126] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  311.895819][T13126] EXT4-fs (loop7): invalid journal inode
[  311.939170][T13126] EXT4-fs (loop7): can't get journal size
[  312.034381][T13126] EXT4-fs (loop7): 1 truncate cleaned up
[  312.040419][T13126] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none.
[  312.079652][   T25] audit: type=1804 audit(568.050:230): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3495" name="bus" dev="ramfs" ino=71556 res=1 errno=0
[  312.148869][T13119] loop2: detected capacity change from 0 to 32768
[  312.199109][   T25] audit: type=1804 audit(568.070:231): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3495" name="bus" dev="ramfs" ino=71556 res=1 errno=0
[  312.320093][T13119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3489 (13119)
[  312.449201][T13119] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  312.490591][T13119] BTRFS info (device loop2): using free space tree
[  312.502489][T13119] BTRFS info (device loop2): has skinny extents
[  312.556903][T13152] loop8: detected capacity change from 0 to 512
[  312.795701][T13162] xt_bpf: check failed: parse error
[  313.014604][T13119] BTRFS info (device loop2): enabling ssd optimizations
[  313.067047][ T6169] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  313.316915][ T6169] usb 9-1: Using ep0 maxpacket: 32
[  313.473179][ T6169] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.485128][ T6169] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.495259][ T6169] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  313.505276][ T6169] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.533558][ T6169] usb 9-1: config 0 descriptor??
[  313.598773][ T6169] hub 9-1:0.0: USB hub found
[  313.826905][ T6169] hub 9-1:0.0: 1 port detected
[  313.912523][   T25] audit: type=1326 audit(569.880:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  313.995936][T13211] loop6: detected capacity change from 0 to 128
[  314.022309][   T25] audit: type=1326 audit(569.920:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  314.061558][   T25] audit: type=1326 audit(569.920:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  314.084284][   T25] audit: type=1326 audit(569.920:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  314.113281][   T25] audit: type=1326 audit(569.920:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  314.137360][   T25] audit: type=1326 audit(569.920:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  314.162263][   T25] audit: type=1326 audit(569.920:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  314.203873][   T25] audit: type=1326 audit(569.930:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  314.354254][T13224] xt_bpf: check failed: parse error
[  314.365059][T13227] 9pnet: Insufficient options for proto=fd
[  314.546802][ T4247] hub 9-1:0.0: activate --> -90
[  314.605737][T13243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3534'.
[  315.042662][ T4239] usb 9-1: USB disconnect, device number 2
[  315.854848][T13304] netlink: 208 bytes leftover after parsing attributes in process `syz.8.3562'.
[  315.873777][ T4247] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  315.929159][T13308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3563'.
[  315.958986][T13308] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3563'.
[  315.987723][T13308] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3563'.
[  316.242983][T13322] loop7: detected capacity change from 0 to 8192
[  316.277583][ T4247] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  316.292558][ T4247] usb 3-1: config 1 has no interface number 0
[  316.298856][ T4247] usb 3-1: config 1 interface 105 has no altsetting 0
[  316.587797][ T4247] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  316.598391][ T4247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.607048][ T4247] usb 3-1: Product: syz
[  316.611713][ T4247] usb 3-1: Manufacturer: syz
[  316.616466][ T4247] usb 3-1: SerialNumber: syz
[  316.897605][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  316.921381][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.127660][ T4247] aqc111: probe of 3-1:1.105 failed with error -71
[  317.201273][ T4247] usb 3-1: USB disconnect, device number 4
[  317.625470][T13357] 9pnet: p9_errstr2errno: server reported unknown error 184467
[  318.326672][T13403] loop2: detected capacity change from 0 to 128
[  318.403170][   T25] kauditd_printk_skb: 16 callbacks suppressed
[  318.403185][   T25] audit: type=1326 audit(574.370:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20fa456c9 code=0x7ffc0000
[  318.553517][   T25] audit: type=1326 audit(574.370:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.8.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20fa456c9 code=0x7ffc0000
[  318.575251][    C0] vkms_vblank_simulate: vblank timer overrun
[  318.655058][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3624'.
[  318.799743][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3615'.
[  318.816493][T13423] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3619'.
[  319.207002][   T25] audit: type=1326 audit(575.180:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.7.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  319.268888][   T25] audit: type=1326 audit(575.210:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.7.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  319.293495][   T25] audit: type=1326 audit(575.210:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.7.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  319.325230][   T25] audit: type=1326 audit(575.210:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.7.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  319.403994][   T25] audit: type=1326 audit(575.210:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.7.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  319.425716][    C0] vkms_vblank_simulate: vblank timer overrun
[  319.515191][   T25] audit: type=1326 audit(575.210:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.7.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  319.545991][   T25] audit: type=1326 audit(575.210:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.7.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  319.577031][   T25] audit: type=1326 audit(575.210:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.7.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  321.407435][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3664'.
[  321.889943][T13551] overlayfs: unrecognized mount option "verity=on" or missing value
[  322.241762][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3691'.
[  322.573337][T13601] netlink: 'syz.8.3702': attribute type 4 has an invalid length.
[  322.668531][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3708'.
[  322.794030][T13617] mmap: syz.7.3709 (13617) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  325.822568][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3753'.
[  325.982539][T13723] sit0: Caught tx_queue_len zero misconfig
[  325.998808][T13723] netem: change failed
[  326.479442][T13747] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3768'.
[  326.611337][T13754] dns_resolver: Unsupported content type (240)
[  326.747519][T13758] loop7: detected capacity change from 0 to 1024
[  326.843208][T13765] binder: Unknown parameter 'fscontext?'
[  326.915268][T13758] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000003,abort,,errors=continue. Quota mode: none.
[  327.889283][T13780] 9pnet_virtio: no channels available for device syz
[  328.548999][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3798'.
[  328.718638][T13826] loop3: detected capacity change from 0 to 128
[  329.396254][ T6169] Bluetooth: hci3: command 0x0406 tx timeout
[  330.371912][T13857] 9pnet: Could not find request transport: 0xffffffffffffffff
[  330.612760][T13865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3815'.
[  330.959838][T13891] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3829'.
[  331.145060][T13900] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  331.488871][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3841'.
[  331.952864][T13949] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3855'.
[  332.302605][T13972] 9pnet: p9_errstr2errno: server reported unknown error 
[  332.365066][T13977] loop2: detected capacity change from 0 to 512
[  332.408955][T13980] batadv_slave_0: Caught tx_queue_len zero misconfig
[  332.743978][T14009] netlink: 'syz.2.3882': attribute type 8 has an invalid length.
[  332.753394][T14009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3882'.
[  332.857806][T14019] binder: BINDER_SET_CONTEXT_MGR already set
[  332.897148][T14019] binder: 14018:14019 ioctl 40046207 0 returned -16
[  335.725696][T14068] loop6: detected capacity change from 0 to 1024
[  335.784691][T14068] EXT4-fs (loop6): Ignoring removed orlov option
[  335.846510][T14068] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue. Quota mode: none.
[  335.957082][T14068] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.3909: inode has both inline data and extents flags
[  335.975255][T14068] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.3909: inode has both inline data and extents flags
[  336.588538][T14097] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3920'.
[  337.116470][T14125] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3934'.
[  337.226761][ T2080] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  338.374573][ T2080] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  338.438437][ T2080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.459168][ T2080] usb 3-1: Product: syz
[  338.463349][ T2080] usb 3-1: Manufacturer: syz
[  338.492162][ T2080] usb 3-1: SerialNumber: syz
[  338.524935][ T2080] usb 3-1: config 0 descriptor??
[  338.598858][ T2080] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 005
[  338.798482][T14169] loop8: detected capacity change from 0 to 2048
[  338.934592][T14169] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  338.938322][T14176] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  338.993782][T14169] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  339.218869][T14189] loop8: detected capacity change from 0 to 1024
[  339.252798][ T2080] i2c i2c-1: failure reading functionality
[  339.271777][ T2080] i2c i2c-1: connected i2c-tiny-usb device
[  339.290384][ T2080] usb 3-1: USB disconnect, device number 5
[  339.307324][T14189] EXT4-fs (loop8): Ignoring removed orlov option
[  339.353680][T14189] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000000003,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,nolazytime,orlov,user_xattr,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none.
[  341.808133][T14251] loop7: detected capacity change from 0 to 512
[  342.211693][T14281] binder: 14280:14281 ioctl 4018620d 0 returned -22
[  342.383686][T14292] loop6: detected capacity change from 0 to 512
[  343.236189][T14296] loop7: detected capacity change from 0 to 2048
[  343.357003][T14296] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  343.394920][T14296] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  343.420835][T14302] device batadv_slave_1 entered promiscuous mode
[  343.428589][T14300] device batadv_slave_1 left promiscuous mode
[  343.576750][ T1346] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  344.076875][ T1346] usb 9-1: Using ep0 maxpacket: 32
[  344.217693][T14320] netlink: 'syz.2.4021': attribute type 4 has an invalid length.
[  344.218348][ T1346] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  344.225435][T14320] netlink: 'syz.2.4021': attribute type 5 has an invalid length.
[  344.225452][T14320] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4021'.
[  344.302021][ T1346] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  344.316724][ T1346] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  344.342616][ T1346] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  344.386787][ T1346] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  344.403576][ T1346] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  344.446641][ T1346] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  344.456847][ T1346] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  344.478502][ T1346] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  344.488062][ T1346] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.499968][ T1346] usb 9-1: config 0 descriptor??
[  344.659219][T14339] Cannot find set identified by id 0 to match
[  345.471392][ T1346] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  345.569210][ T1346] usb 9-1: USB disconnect, device number 3
[  345.626179][ T1346] usblp0: removed
[  346.066862][ T1346] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  346.326901][ T1346] usb 9-1: Using ep0 maxpacket: 32
[  346.462279][ T1346] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[  346.485552][ T1346] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  346.501827][ T1346] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[  346.523505][ T1346] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  346.558095][ T1346] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  346.603596][ T1346] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  346.642128][ T1346] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  346.654406][T14424] netlink: 'syz.7.4062': attribute type 4 has an invalid length.
[  346.676682][T14424] netlink: 'syz.7.4062': attribute type 5 has an invalid length.
[  346.688195][ T1346] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  346.701382][T14424] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.4062'.
[  346.729381][ T1346] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  346.744460][ T1346] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.764224][ T1346] usb 9-1: config 0 descriptor??
[  346.793814][ T1346] usb 9-1: can't set config #0, error -71
[  346.805242][ T1346] usb 9-1: USB disconnect, device number 4
[  347.953136][T14467] netlink: 'syz.8.4080': attribute type 4 has an invalid length.
[  347.979693][T14467] netlink: 'syz.8.4080': attribute type 5 has an invalid length.
[  348.004727][T14467] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.4080'.
[  348.220504][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4092'.
[  348.274137][T14493] netlink: 'syz.6.4093': attribute type 1 has an invalid length.
[  348.297777][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4093'.
[  348.463006][T14505] netlink: 'syz.6.4098': attribute type 4 has an invalid length.
[  348.474955][T14505] netlink: 'syz.6.4098': attribute type 5 has an invalid length.
[  348.487144][T14505] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.4098'.
[  348.581599][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4102'.
[  348.906519][T14527] loop6: detected capacity change from 0 to 2048
[  349.061541][T14527] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  349.132218][T14527] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  349.182482][T14537] loop7: detected capacity change from 0 to 4096
[  349.411678][   T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  350.234985][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4111'.
[  350.296874][   T13] usb 3-1: Using ep0 maxpacket: 16
[  350.417866][   T13] usb 3-1: config 8 has an invalid interface number: 108 but max is 0
[  350.436819][   T13] usb 3-1: config 8 has no interface number 0
[  350.557382][ T6169] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  350.596934][   T13] usb 3-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=6e.97
[  350.618126][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.626130][   T13] usb 3-1: Product: syz
[  350.640810][   T13] usb 3-1: Manufacturer: syz
[  350.651311][   T13] usb 3-1: SerialNumber: syz
[  350.831804][T14606] netlink: 'syz.7.4139': attribute type 32 has an invalid length.
[  350.966852][ T6169] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  350.981190][   T13] usb 3-1: bad CDC descriptors
[  350.991127][   T13] usb 3-1: bad CDC descriptors
[  351.001091][ T6169] usb 4-1: config 0 has no interface number 0
[  351.025315][   T13] cdc_acm 3-1:8.108: Zero length descriptor references
[  351.034897][ T6169] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  351.062923][   T13] cdc_acm: probe of 3-1:8.108 failed with error -22
[  351.074089][T14623] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4148'.
[  351.082895][ T6169] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  351.103388][   T13] usb 3-1: USB disconnect, device number 6
[  351.132031][ T6169] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  351.170664][ T6169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.204630][ T6169] usb 4-1: config 0 descriptor??
[  351.252404][   T25] kauditd_printk_skb: 49 callbacks suppressed
[  351.252418][   T25] audit: type=1326 audit(50332942.213:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.8.4151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc20fa456c9 code=0x0
[  351.254679][T14572] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  351.333546][ T6169] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  351.406574][T14634] device batadv_slave_1 entered promiscuous mode
[  351.413862][T14633] device batadv_slave_1 left promiscuous mode
[  351.700148][   T13] usb 4-1: USB disconnect, device number 6
[  352.693407][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4165'.
[  354.125765][T14686] loop2: detected capacity change from 0 to 1024
[  354.238925][T14686] EXT4-fs (loop2): Ignoring removed orlov option
[  354.357989][T14686] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000000003,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,nolazytime,orlov,user_xattr,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none.
[  355.966270][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4197'.
[  356.146921][ T1346] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  356.177773][   T25] audit: type=1326 audit(50332947.133:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.7.4202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x0
[  356.656421][T14774] binder: 14773:14774 ioctl c0306201 200000000100 returned -14
[  356.717036][ T1346] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  356.730122][ T1346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.756724][ T1346] usb 9-1: Product: syz
[  356.764899][ T1346] usb 9-1: Manufacturer: syz
[  356.784933][ T1346] usb 9-1: SerialNumber: syz
[  356.830741][ T1346] usb 9-1: config 0 descriptor??
[  356.872691][ T1346] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 005
[  356.885591][T14785] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4217'.
[  357.028121][T14789] loop7: detected capacity change from 0 to 512
[  357.096976][T14789] EXT4-fs (loop7): Ignoring removed orlov option
[  357.103417][T14789] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  357.242906][T14789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  357.327678][T14789] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2229: inode #15: comm syz.7.4219: corrupted in-inode xattr
[  357.348138][T14789] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.4219: couldn't read orphan inode 15 (err -117)
[  357.360872][T14789] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  357.737100][ T1346] i2c i2c-1: failure reading functionality
[  357.892762][ T1346] i2c i2c-1: connected i2c-tiny-usb device
[  358.088849][ T1346] usb 9-1: USB disconnect, device number 5
[  358.546798][T13191] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  358.796730][T13191] usb 8-1: Using ep0 maxpacket: 32
[  358.910109][T14840] net_ratelimit: 10 callbacks suppressed
[  358.910126][T14840] sock: sock_set_timeout: `syz.6.4239' (pid 14840) tries to set negative timeout
[  358.928010][T13191] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  358.936358][T13191] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  358.973320][T13191] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  358.992004][T13191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  359.002058][T13191] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  359.014521][T13191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  359.026570][T13191] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  359.037261][T13191] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  359.051395][T13191] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  359.061652][T13191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.083179][T13191] usb 8-1: config 0 descriptor??
[  359.373729][T13191] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  359.414792][T13191] usb 8-1: USB disconnect, device number 4
[  359.444453][T13191] usblp0: removed
[  359.794720][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4253'.
[  359.976792][T13191] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  360.168433][T14876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4255'.
[  360.238522][T13191] usb 8-1: Using ep0 maxpacket: 32
[  360.260224][T14897] device sit0 entered promiscuous mode
[  360.282013][T14897] netlink: 'syz.6.4266': attribute type 1 has an invalid length.
[  360.305736][T14897] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4266'.
[  360.377262][T13191] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  360.391186][T13191] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  360.411980][T13191] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  360.433200][T13191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  360.460390][T13191] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  360.489353][T13191] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  360.520908][T13191] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  360.537429][T13191] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  360.577629][T13191] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  360.592878][T13191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.603076][T13191] usb 8-1: config 0 descriptor??
[  360.623414][T14919] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4276'.
[  360.633344][T14919] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4276'.
[  360.642625][T14919] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4276'.
[  360.878593][T13191] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  360.917902][T13191] usb 8-1: USB disconnect, device number 5
[  360.945537][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4287'.
[  360.956538][T13191] usblp0: removed
[  361.705233][T14973] loop7: detected capacity change from 0 to 512
[  361.829815][T14973] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  362.019820][T14973] EXT4-fs (loop7): 1 orphan inode deleted
[  362.025764][T14973] EXT4-fs (loop7): 1 truncate cleaned up
[  362.155339][T14973] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback.
[  362.716299][T14973] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 7: comm syz.7.4301: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  362.761730][T14973] EXT4-fs (loop7): Remounting filesystem read-only
[  362.780581][T14973] EXT4-fs (loop7): shut down requested (2)
[  362.950720][T15007] loop3: detected capacity change from 0 to 2048
[  362.963221][T15014] binder: 15012:15014 ioctl c0306201 2000000001c0 returned -14
[  363.316356][T15034] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4325'.
[  363.334577][T15034] device ip_vti0 entered promiscuous mode
[  363.445112][T15007] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  363.513021][T15007] fs-verity: sha512 using implementation "sha512-avx2"
[  363.586183][T15026] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4321'.
[  364.233668][T15074] device syzkaller0 entered promiscuous mode
[  364.641731][T15091] loop7: detected capacity change from 0 to 512
[  364.809747][T15091] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  365.780199][   T25] audit: type=1326 audit(50332956.743:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15150 comm="syz.7.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  365.843775][   T25] audit: type=1326 audit(50332956.763:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15150 comm="syz.7.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  365.951030][   T25] audit: type=1326 audit(50332956.763:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15150 comm="syz.7.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  365.973302][   T25] audit: type=1326 audit(50332956.763:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15150 comm="syz.7.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  366.239285][   T25] audit: type=1326 audit(50332956.763:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15150 comm="syz.7.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f762f6c9 code=0x7ffc0000
[  366.980580][T15174] netlink: 'syz.6.4388': attribute type 32 has an invalid length.
[  367.118971][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4392'.
[  367.235110][T15189] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4395'.
[  367.363343][T15196] binder: 15195:15196 ioctl c0306201 2000000001c0 returned -14
[  367.425372][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4399'.
[  367.506689][T13191] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  367.515486][T15202] netlink: 'syz.2.4401': attribute type 3 has an invalid length.
[  367.550336][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4401'.
[  367.689252][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4404'.
[  367.896973][T13191] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.915298][T13191] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  368.007228][T13191] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  368.027204][T13191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  368.056350][T13191] usb 9-1: SerialNumber: syz
[  368.119718][T13191] usb 9-1: 0:2 : does not exist
[  368.149676][T15232] loop6: detected capacity change from 0 to 128
[  368.994851][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4418'.
[  369.189199][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4421'.
[  369.220260][T15244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.239297][   T25] audit: type=1326 audit(50332961.203:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.8.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20fa456c9 code=0x7fc00000
[  370.554952][T15251] loop6: detected capacity change from 0 to 40427
[  370.821012][T15251] F2FS-fs (loop6): Found nat_bits in checkpoint
[  370.950942][T15251] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  371.133703][T15251] attempt to access beyond end of device
[  371.133703][T15251] loop6: rw=2049, want=45104, limit=40427
[  371.237547][T15244] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.048271][T13191] usb 9-1: USB disconnect, device number 6
[  372.062961][ T8746] attempt to access beyond end of device
[  372.062961][ T8746] loop6: rw=2049, want=45112, limit=40427
[  372.178240][   T25] audit: type=1326 audit(50332963.143:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.2.4429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x0
[  372.289285][ T4345] udevd[4345]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  373.307810][T15326] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  374.473263][T15354] loop2: detected capacity change from 0 to 128
[  374.566686][T15354] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  374.793336][T15369] loop6: detected capacity change from 0 to 512
[  374.904678][T15369] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  374.922948][T15369] EXT4-fs (loop6): inline encryption not supported
[  374.949791][T15369] EXT4-fs (loop6): Test dummy encryption mode enabled
[  374.964502][T15369] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  374.985294][T15369] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  375.058206][T15369] EXT4-fs (loop6): 1 truncate cleaned up
[  375.068851][T15369] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  375.509271][T15395] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4483'.
[  375.751091][T15397] loop8: detected capacity change from 0 to 8192
[  375.845729][T15397] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal
[  375.914103][T15397] REISERFS (device loop8): using ordered data mode
[  375.921149][T15397] reiserfs: using flush barriers
[  375.927715][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4489'.
[  375.952835][T15409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4490'.
[  375.968380][T15397] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  376.009675][T15397] REISERFS (device loop8): checking transaction log (loop8)
[  376.039968][T15397] REISERFS (device loop8): Using r5 hash to sort names
[  376.096350][T15397] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  376.120264][T15424] loop6: detected capacity change from 0 to 128
[  376.154281][T15425] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  376.257392][T15397] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2
[  376.408979][T15429] fuse: Bad value for 'fd'
[  376.420696][T15397] REISERFS error (device loop8): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  376.450817][T15397] REISERFS (device loop8): Remounting filesystem read-only
[  377.239624][T11689] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2
[  377.341202][T11689] REISERFS error (device loop8): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  378.294129][T15488] overlayfs: overlapping lowerdir path
[  378.326990][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.333650][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  378.975444][T15506] loop6: detected capacity change from 0 to 164
[  379.353881][T15514] loop6: detected capacity change from 0 to 512
[  379.430792][T15514] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  379.488540][T15514] EXT4-fs (loop6): 1 truncate cleaned up
[  379.503176][T15514] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  380.189791][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4553'.
[  380.248692][T15561] loop2: detected capacity change from 0 to 128
[  382.171067][T15613] loop7: detected capacity change from 0 to 128
[  382.578704][T15618] overlayfs: conflicting lowerdir path
[  383.786008][T15641] overlayfs: overlapping lowerdir path
[  383.945040][T15646] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4586'.
[  384.100439][T15652] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4597'.
[  384.450601][T15660] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  385.589364][T15680] loop7: detected capacity change from 0 to 164
[  385.836251][T15691] overlayfs: missing 'lowerdir'
[  386.126344][T15706] lo: Caught tx_queue_len zero misconfig
[  386.214101][T15703] loop8: detected capacity change from 0 to 4096
[  386.287311][T15703] ntfs3: Unknown parameter 'windows_names'
[  386.668876][T15732] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4630'.
[  386.817682][T15743] loop8: detected capacity change from 0 to 128
[  388.044441][T15764] 9pnet: Insufficient options for proto=fd
[  388.892240][T15819] netlink: 'syz.8.4672': attribute type 12 has an invalid length.
[  389.672060][T15837] loop3: detected capacity change from 0 to 128
[  389.762552][T15863] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  390.636755][ T6169] Bluetooth: hci4: command 0x0406 tx timeout
[  391.182027][T15919] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  391.601143][T15918] trusted_key: encrypted_key: keyword 'new0default' not recognized
[  393.363177][T15995] lo: Caught tx_queue_len zero misconfig
[  393.379751][T15995] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  394.791781][T16053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.876993][T16056] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  395.042831][T16053] device batadv_slave_0 entered promiscuous mode
[  395.703337][T16061] device syzkaller0 entered promiscuous mode
[  396.623315][T16090] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  396.783704][   T25] audit: type=1326 audit(67110432.751:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  396.836507][   T25] audit: type=1326 audit(67110432.751:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  396.995698][   T25] audit: type=1326 audit(67110432.751:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  397.061174][   T25] audit: type=1326 audit(67110432.751:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  397.193631][   T25] audit: type=1326 audit(67110432.751:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  397.292764][   T25] audit: type=1326 audit(67110432.751:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  397.375852][   T25] audit: type=1326 audit(67110432.751:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  397.445126][T16125] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4805'.
[  397.461727][   T25] audit: type=1326 audit(67110432.751:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  397.484359][T16125] device gretap0 entered promiscuous mode
[  397.497680][   T25] audit: type=1326 audit(67110432.751:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  397.536820][T16127] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4805'.
[  397.545851][T16127] 0ªî{X¹¦: renamed from gretap0
[  397.562552][T16127] device 
30ªî{X¹¦ left promiscuous mode
[  397.596775][   T25] audit: type=1326 audit(67110432.751:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f717e2776c9 code=0x7ffc0000
[  397.620754][T16127] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  397.834480][T16137] loop7: detected capacity change from 0 to 128
[  399.290014][T16161] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  399.323252][T16161] overlayfs: missing 'lowerdir'
[  399.427583][T16167] loop7: detected capacity change from 0 to 512
[  399.476469][T16167] EXT4-fs (loop7): Ignoring removed orlov option
[  399.500996][T16167] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  399.552625][T16167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  399.563355][T16170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4823'.
[  399.591212][T16167] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2229: inode #15: comm syz.7.4821: corrupted in-inode xattr
[  399.602957][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4823'.
[  399.622022][T16167] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.4821: couldn't read orphan inode 15 (err -117)
[  399.676647][T16167] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  400.116789][T16195] device syzkaller0 entered promiscuous mode
[  400.508042][T16210] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4839'.
[  401.192539][T16265] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  401.222477][T16265] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  401.402069][T16283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4875'.
[  401.419452][T16283] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4875'.
[  401.446693][T16283] tipc: Invalid UDP bearer configuration
[  401.446759][T16283] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  401.557489][T16293] fuseblk: Bad value for 'fd'
[  402.119015][T16310] loop2: detected capacity change from 0 to 4096
[  402.130247][T16314] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  402.169488][T16314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  402.761338][T16335] netlink: 'syz.2.4897': attribute type 16 has an invalid length.
[  402.778671][T16335] netlink: 'syz.2.4897': attribute type 2 has an invalid length.
[  402.796982][T16335] netlink: 64086 bytes leftover after parsing attributes in process `syz.2.4897'.
[  403.123140][T16352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4905'.
[  403.157619][T16352] tipc: Started in network mode
[  403.162507][T16352] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  403.194096][T16352] tipc: Enabled bearer <udp:syz0>, priority 10
[  404.504016][ T1108] tipc: Node number set to 1
[  404.779270][T16407] loop8: detected capacity change from 0 to 164
[  404.840294][T16412] loop6: detected capacity change from 0 to 512
[  404.873555][T16407] rock: corrupted directory entry. extent=32, offset=0, size=65773
[  404.910625][T16412] EXT4-fs (loop6): Ignoring removed orlov option
[  404.942440][T16412] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  405.027406][T16412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  405.056900][T16412] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2229: inode #15: comm syz.6.4934: corrupted in-inode xattr
[  405.193321][T16412] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.4934: couldn't read orphan inode 15 (err -117)
[  405.216084][T16412] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  405.248736][T16423] netlink: 'syz.8.4938': attribute type 4 has an invalid length.
[  405.278977][T16423] netlink: 'syz.8.4938': attribute type 17 has an invalid length.
[  405.321732][T16423] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  405.652897][T16432] overlayfs: missing 'lowerdir'
[  406.022136][T16449] loop8: detected capacity change from 0 to 128
[  406.397900][T16467] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4959'.
[  406.690576][T16488] sctp: [Deprecated]: syz.2.4969 (pid 16488) Use of int in max_burst socket option deprecated.
[  406.690576][T16488] Use struct sctp_assoc_value instead
[  408.027773][T16554] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4997'.
[  408.063063][T16554] device gretap0 entered promiscuous mode
[  408.088324][T16550] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4997'.
[  408.133311][T16550] 0ªî{X¹¦: renamed from gretap0
[  408.148881][T16550] device 
30ªî{X¹¦ left promiscuous mode
[  408.158360][T16550] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  408.665801][T16577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5005'.
[  412.590697][T16648] input: syz0 as /devices/virtual/input/input8
[  412.592314][T16645] loop8: detected capacity change from 0 to 16
[  412.663620][T16645] erofs: (device loop8): mounted with root inode @ nid 36.
[  413.448570][T16714] overlayfs: failed to resolve '/
[  413.448570][T16714] MOì"Ù': -2
[  413.764018][T16731] loop6: detected capacity change from 0 to 1024
[  413.810807][T16731] EXT4-fs (loop6): inline encryption not supported
[  413.832769][T16731] EXT4-fs (loop6): Ignoring removed nobh option
[  413.844626][T16731] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  413.858130][T16731] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  413.914266][T16731] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,nouid32,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,nomblk_io_submit,grpid,dioread_nolock,,errors=continue. Quota mode: writeback.
[  414.195174][T16746] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  415.396634][ T2080] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  415.666754][ T2080] usb 8-1: Using ep0 maxpacket: 32
[  416.566909][ T2080] usb 8-1: config 0 has an invalid interface number: 188 but max is 0
[  416.576004][ T2080] usb 8-1: config 0 has no interface number 0
[  416.599748][   T25] kauditd_printk_skb: 13 callbacks suppressed
[  416.599760][   T25] audit: type=1326 audit(67110452.571:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  416.656344][ T2080] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  416.693309][   T25] audit: type=1326 audit(67110452.591:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  416.726148][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5103'.
[  416.784105][   T25] audit: type=1326 audit(67110452.621:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  416.866689][   T25] audit: type=1326 audit(67110452.621:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  416.927048][ T2080] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  416.939501][ T2080] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.954394][ T2080] usb 8-1: Product: syz
[  416.965683][ T2080] usb 8-1: Manufacturer: syz
[  416.965703][   T25] audit: type=1326 audit(67110452.621:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  416.975954][ T2080] usb 8-1: SerialNumber: syz
[  417.040401][ T2080] usb 8-1: config 0 descriptor??
[  417.053620][   T25] audit: type=1326 audit(67110452.621:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  417.076991][T16757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  417.123009][   T25] audit: type=1326 audit(67110452.621:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  417.176961][   T25] audit: type=1326 audit(67110452.621:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  417.238444][T16836] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  417.251327][   T25] audit: type=1326 audit(67110452.621:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  417.284540][   T25] audit: type=1326 audit(67110452.631:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16798 comm="syz.2.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a57396c9 code=0x7ffc0000
[  417.367121][ T2080] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  417.388074][ T2080] asix: probe of 8-1:0.188 failed with error -71
[  417.452689][ T2080] usb 8-1: USB disconnect, device number 6
[  417.668405][T16859] loop8: detected capacity change from 0 to 512
[  417.728186][T16860] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  417.800131][T16859] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.5125: bad orphan inode 11862016
[  417.841070][T16859] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  418.515394][T16903] loop3: detected capacity change from 0 to 512
[  523.436533][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  523.443516][    C0] rcu: 	1-...!: (0 ticks this GP) idle=07b/1/0x4000000000000000 softirq=50445/50448 fqs=2 
[  523.454926][    C0] 	(detected by 0, t=10502 jiffies, g=58145, q=290)
[  523.461509][    C0] Sending NMI from CPU 0 to CPUs 1:
[  523.466709][    C1] NMI backtrace for cpu 1
[  523.466718][    C1] CPU: 1 PID: 16889 Comm: syz.7.5137 Not tainted syzkaller #0
[  523.466732][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  523.466751][    C1] RIP: 0010:lock_is_held_type+0x1/0x190
[  523.466772][    C1] Code: c0 03 00 75 d6 48 c7 c7 00 1b 0b 8a 48 c7 c6 40 1b 0b 8a e8 c1 37 f5 ff 0f 0b eb bf e8 98 fd ff ff 0f 1f 84 00 00 00 00 00 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00
[  523.466783][    C1] RSP: 0018:ffffc90000dd0c70 EFLAGS: 00000002
[  523.466795][    C1] RAX: ffffffff880972ff RBX: 0000000000000001 RCX: ffff888023b09dc0
[  523.466805][    C1] RDX: 0000000000010000 RSI: 00000000ffffffff RDI: ffff888142fdab00
[  523.466814][    C1] RBP: ffff888142fdab40 R08: 0000000000000004 R09: 0000000000000003
[  523.466823][    C1] R10: fffff520001ba180 R11: 1ffff920001ba180 R12: ffff888142fda800
[  523.466833][    C1] R13: dffffc0000000000 R14: ffff888022189780 R15: ffff88801dcd4c00
[  523.466843][    C1] FS:  00007f05f58966c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  523.466855][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  523.466865][    C1] CR2: 00005560f24fb168 CR3: 000000006493c000 CR4: 00000000003506e0
[  523.466878][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  523.466886][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  523.466894][    C1] Call Trace:
[  523.466899][    C1]  <IRQ>
[  523.466906][    C1]  advance_sched+0x141/0x940
[  523.466923][    C1]  ? _raw_spin_unlock+0x40/0x40
[  523.466941][    C1]  __hrtimer_run_queues+0x53d/0xc40
[  523.466960][    C1]  ? taprio_free_sched_cb+0x190/0x190
[  523.466980][    C1]  ? hrtimer_interrupt+0x8d0/0x8d0
[  523.466994][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  523.467011][    C1]  hrtimer_interrupt+0x3bb/0x8d0
[  523.467036][    C1]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  523.467051][    C1]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  523.467065][    C1]  </IRQ>
[  523.467069][    C1]  <TASK>
[  523.467074][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  523.467088][    C1] RIP: 0010:mark_page_accessed+0x1ec/0x12b0
[  523.467106][    C1] Code: ff 0f 84 29 0f 00 00 4d 85 e4 0f 85 03 0d 00 00 e8 a9 52 d7 ff 49 89 de 4c 89 f7 be 08 00 00 00 e8 59 bc 1b 00 f0 41 80 0e 02 <e9> 82 0a 00 00 4d 85 ed 0f 85 ce 0c 00 00 e8 81 52 d7 ff 49 89 df
[  523.467117][    C1] RSP: 0018:ffffc90003f2f9b8 EFLAGS: 00000206
[  523.467128][    C1] RAX: ffffffff81a07901 RBX: ffffea00010ff900 RCX: ffffffff81a07977
[  523.467138][    C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffea00010ff900
[  523.467147][    C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffff9400021ff21
[  523.467157][    C1] R10: fffff9400021ff21 R11: 1ffffd400021ff20 R12: 0000000000000000
[  523.467166][    C1] R13: 0000000000000000 R14: ffffea00010ff900 R15: 00fff00000280004
[  523.467179][    C1]  ? mark_page_accessed+0x171/0x12b0
[  523.467193][    C1]  ? mark_page_accessed+0x1e7/0x12b0
[  523.467212][    C1]  ? mark_page_accessed+0x1e7/0x12b0
[  523.467227][    C1]  ? try_grab_page+0x70/0x460
[  523.467243][    C1]  follow_page_pte+0x912/0xc20
[  523.467261][    C1]  ? __might_sleep+0xf0/0xf0
[  523.467274][    C1]  follow_page_mask+0xa6e/0x12d0
[  523.467294][    C1]  __get_user_pages+0xdb5/0x11c0
[  523.467315][    C1]  ? populate_vma_page_range+0x290/0x290
[  523.467330][    C1]  ? read_lock_is_recursive+0x10/0x10
[  523.467352][    C1]  populate_vma_page_range+0x213/0x290
[  523.467374][    C1]  __mm_populate+0x26f/0x3a0
[  523.467390][    C1]  ? check_vma_flags+0x480/0x480
[  523.467404][    C1]  ? preempt_count_add+0x8d/0x190
[  523.467419][    C1]  ? up_write+0x1bb/0x420
[  523.467434][    C1]  __se_sys_mremap+0x5a7/0x990
[  523.467453][    C1]  ? __x64_sys_mremap+0xc0/0xc0
[  523.467468][    C1]  ? lock_chain_count+0x20/0x20
[  523.467485][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  523.467498][    C1]  ? __x64_sys_mremap+0x1c/0xc0
[  523.467513][    C1]  do_syscall_64+0x4c/0xa0
[  523.467525][    C1]  ? clear_bhb_loop+0x30/0x80
[  523.467537][    C1]  ? clear_bhb_loop+0x30/0x80
[  523.467550][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  523.467564][    C1] RIP: 0033:0x7f05f762f6c9
[  523.467579][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  523.467590][    C1] RSP: 002b:00007f05f5896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  523.467603][    C1] RAX: ffffffffffffffda RBX: 00007f05f7885fa0 RCX: 00007f05f762f6c9
[  523.467612][    C1] RDX: 0000000005000000 RSI: 0000000000002000 RDI: 0000200000ff5000
[  523.467621][    C1] RBP: 00007f05f76b1f91 R08: 0000200000ffd000 R09: 0000000000000000
[  523.467630][    C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  523.467639][    C1] R13: 00007f05f7886038 R14: 00007f05f7885fa0 R15: 00007ffd4d7643c8
[  523.467655][    C1]  </TASK>
[  523.467702][    C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g58145 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  523.942222][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  523.952179][    C0] rcu: RCU grace-period kthread stack dump:
[  523.958052][    C0] task:rcu_preempt     state:R  running task     stack:28064 pid:   15 ppid:     2 flags:0x00004000
[  523.968820][    C0] Call Trace:
[  523.972090][    C0]  <TASK>
[  523.975016][    C0]  __schedule+0x11bb/0x4390
[  523.979519][    C0]  ? _raw_spin_lock_irqsave+0x7f/0xf0
[  523.984885][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  523.990772][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  523.996652][    C0]  ? _raw_spin_unlock+0x40/0x40
[  524.001492][    C0]  ? rcu_is_watching+0x11/0xa0
[  524.006247][    C0]  ? release_firmware_map_entry+0x190/0x190
[  524.012149][    C0]  schedule+0x11b/0x1e0
[  524.016298][    C0]  schedule_timeout+0x15c/0x280
[  524.021139][    C0]  ? console_conditional_schedule+0x40/0x40
[  524.027022][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  524.032904][    C0]  ? update_process_times+0x200/0x200
[  524.038275][    C0]  ? prepare_to_swait_event+0x331/0x350
[  524.043819][    C0]  rcu_gp_fqs_loop+0x29e/0x11b0
[  524.048671][    C0]  ? dyntick_save_progress_counter+0x230/0x230
[  524.054819][    C0]  ? rcu_gp_init+0x10e0/0x10e0
[  524.059580][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  524.064765][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  524.069956][    C0]  rcu_gp_kthread+0x98/0x350
[  524.074542][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  524.079651][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  524.085539][    C0]  ? __kthread_parkme+0x157/0x1b0
[  524.090572][    C0]  kthread+0x436/0x520
[  524.094630][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  524.099731][    C0]  ? kthread_blkcg+0xd0/0xd0
[  524.104311][    C0]  ret_from_fork+0x1f/0x30
[  524.108728][    C0]  </TASK>
[  524.111736][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  524.118041][    C0] NMI backtrace for cpu 0
[  524.122351][    C0] CPU: 0 PID: 16903 Comm: syz.3.5143 Not tainted syzkaller #0
[  524.129794][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  524.139839][    C0] Call Trace:
[  524.143108][    C0]  <IRQ>
[  524.145946][    C0]  dump_stack_lvl+0x168/0x230
[  524.150622][    C0]  ? show_regs_print_info+0x20/0x20
[  524.155812][    C0]  ? load_image+0x3b0/0x3b0
[  524.160312][    C0]  ? irq_work_queue+0xbf/0x140
[  524.165072][    C0]  nmi_cpu_backtrace+0x397/0x3d0
[  524.170002][    C0]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  524.176235][    C0]  ? _printk+0xcc/0x110
[  524.180388][    C0]  ? cpu_online+0x1d/0x30
[  524.184715][    C0]  ? load_image+0x3b0/0x3b0
[  524.189212][    C0]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  524.195270][    C0]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  524.201241][    C0]  rcu_check_gp_kthread_starvation+0x1cd/0x250
[  524.207387][    C0]  print_other_cpu_stall+0x10c8/0x1220
[  524.212848][    C0]  ? print_cpu_stall+0x5f0/0x5f0
[  524.217777][    C0]  ? timekeeping_advance+0x7f6/0xac0
[  524.223057][    C0]  ? __lock_acquire+0x7c60/0x7c60
[  524.228081][    C0]  rcu_sched_clock_irq+0x831/0x1110
[  524.233282][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  524.238130][    C0]  ? account_process_tick+0x227/0x3a0
[  524.243494][    C0]  update_process_times+0x193/0x200
[  524.248689][    C0]  tick_sched_timer+0x37d/0x560
[  524.253537][    C0]  __hrtimer_run_queues+0x4fe/0xc40
[  524.258737][    C0]  ? tick_setup_sched_timer+0x2c0/0x2c0
[  524.264283][    C0]  ? hrtimer_interrupt+0x8d0/0x8d0
[  524.269384][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  524.275450][    C0]  hrtimer_interrupt+0x3bb/0x8d0
[  524.280397][    C0]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  524.286371][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  524.291996][    C0]  </IRQ>
[  524.294915][    C0]  <TASK>
[  524.297841][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  524.303809][    C0] RIP: 0010:smp_call_function_many_cond+0xb88/0xd70
[  524.310390][    C0] Code: b6 44 05 00 84 c0 0f 85 9d 00 00 00 41 8b 1c 24 89 de 83 e6 01 31 ff e8 66 49 0b 00 83 e3 01 75 07 e8 fc 45 0b 00 eb 43 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 11 41 f7
[  524.329981][    C0] RSP: 0018:ffffc900032ef900 EFLAGS: 00000246
[  524.336038][    C0] RAX: ffffffff816c863b RBX: 0000000000000001 RCX: 0000000000080000
[  524.343999][    C0] RDX: ffffc9000d101000 RSI: 000000000007ffff RDI: 0000000000080000
[  524.351960][    C0] RBP: ffffc900032efa40 R08: dffffc0000000000 R09: fffffbfff1ff7c2e
[  524.359922][    C0] R10: fffffbfff1ff7c2e R11: 1ffffffff1ff7c2d R12: ffff8880b91405c8
[  524.367884][    C0] R13: 1ffff110172280b9 R14: ffff8880b903b3c0 R15: 0000000000000001
[  524.375852][    C0]  ? smp_call_function_many_cond+0xbab/0xd70
[  524.381837][    C0]  ? invalidate_bh_lrus+0x30/0x30
[  524.386850][    C0]  ? __bread_gfp+0x380/0x380
[  524.391440][    C0]  ? smp_call_function_many+0x30/0x30
[  524.396811][    C0]  ? __bread_gfp+0x380/0x380
[  524.401388][    C0]  ? invalidate_bh_lrus+0x30/0x30
[  524.406404][    C0]  on_each_cpu_cond_mask+0x3b/0x80
[  524.411511][    C0]  set_blocksize+0x2eb/0x370
[  524.416099][    C0]  sb_min_blocksize+0xdc/0x1a0
[  524.420854][    C0]  ext4_fill_super+0x642/0x9a60
[  524.425704][    C0]  ? vsnprintf+0x1905/0x1a00
[  524.430292][    C0]  ? snprintf+0xd7/0x120
[  524.434534][    C0]  ? ext4_mount+0x40/0x40
[  524.438858][    C0]  ? set_blocksize+0x1f1/0x370
[  524.443619][    C0]  ? sb_set_blocksize+0xa5/0xe0
[  524.448463][    C0]  mount_bdev+0x287/0x3c0
[  524.452783][    C0]  ? ext4_mount+0x40/0x40
[  524.457104][    C0]  legacy_get_tree+0xe6/0x180
[  524.461770][    C0]  ? ext4_errno_to_code+0x160/0x160
[  524.466961][    C0]  vfs_get_tree+0x88/0x270
[  524.471371][    C0]  do_new_mount+0x24a/0xa40
[  524.475871][    C0]  __se_sys_mount+0x2d6/0x3c0
[  524.480548][    C0]  ? __x64_sys_mount+0xc0/0xc0
[  524.485308][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  524.490501][    C0]  ? __x64_sys_mount+0x1c/0xc0
[  524.495262][    C0]  do_syscall_64+0x4c/0xa0
[  524.499665][    C0]  ? clear_bhb_loop+0x30/0x80
[  524.504334][    C0]  ? clear_bhb_loop+0x30/0x80
[  524.509005][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  524.514896][    C0] RIP: 0033:0x7f998087ee6a
[  524.519304][    C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.538900][    C0] RSP: 002b:00007f997eae3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  524.547304][    C0] RAX: ffffffffffffffda RBX: 00007f997eae3ef0 RCX: 00007f998087ee6a
[  524.555267][    C0] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 00007f997eae3eb0
[  524.563227][    C0] RBP: 0000200000000100 R08: 00007f997eae3ef0 R09: 0000000002008002
[  524.571187][    C0] R10: 0000000002008002 R11: 0000000000000246 R12: 0000200000000500
[  524.579233][    C0] R13: 00007f997eae3eb0 R14: 0000000000000549 R15: 0000200000000080
[  524.587206][    C0]  </TASK>