last executing test programs:

23.565086638s ago: executing program 3 (id=374):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000b000000000000000000000d0a000000000000000600000d"], 0x0, 0x8f, 0x0, 0x5}, 0x20)

21.629585027s ago: executing program 3 (id=387):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@nobarrier}, {@noquota}, {@barrier_val}, {@jqfmt_vfsv1}, {@block_validity}, {@mblk_io_submit}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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")
r3 = open(&(0x7f00000001c0)='./file1\x00', 0x1cb27e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
read$FUSE(r3, &(0x7f0000001080)={0x2020}, 0x2020)
sendto$packet(r1, &(0x7f0000000180)="05030402d3fc02000000ab5d71acedd7c9560385dcb1655884d7dc049806892f05ce811c88f7", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

21.612503028s ago: executing program 4 (id=388):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002c00)=""/4121, 0x1019}, {&(0x7f00000004c0)=""/196, 0xc4}, {0x0}], 0x3}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0)

20.602019231s ago: executing program 4 (id=393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

20.333460623s ago: executing program 4 (id=396):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f800000016003d1d000000000000000000000000000000000000ffffe0000002ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf8}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4140aecd, &(0x7f00000003c0))

20.065465715s ago: executing program 4 (id=401):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c6e6f636173652c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6d697865642c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c757466383d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030373335312c6572726f72733d72656d6f756e742d726f2c736d61636b6673666c6f6f723d756e8b5f786c2174653d312c00"], 0x6, 0x2d0, &(0x7f00000003c0)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
tee(r5, r3, 0x8, 0x0)
write$binfmt_script(r6, 0x0, 0xfffffe48)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)

19.104266744s ago: executing program 4 (id=408):
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = mq_open(&(0x7f0000004580)='&([&%]\x00', 0x40, 0x0, 0x0)
close(r0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0)

18.461172687s ago: executing program 4 (id=412):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x0, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0x44434241}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

5.701135412s ago: executing program 2 (id=458):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000b00)={[{}]})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)

5.348235121s ago: executing program 1 (id=463):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r1, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)

5.193407334s ago: executing program 1 (id=464):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r3, 0x5abf7901103d9bd3, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0xaa}, [@NDA_LLADDR={0xa, 0x2, @random="2c4e91229fcd"}]}, 0x28}}, 0x0)
pipe(&(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="480000001400010000000000000000000a000000"], 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x3, &(0x7f0000001640)=@framed, &(0x7f00000012c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x5}, 0x10}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000280)=""/136, 0x88, 0x0, &(0x7f0000000cc0)=""/197, 0xc5}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x4b4}, 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000001a0000003100000008000000f56f00000000000900000000050000000000000f02000000384d0000002e5f5f2e615f00b3ef7c07323e3f"], 0x0, 0x3c}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x20}, 0x20)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0), 0x8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe, 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)

3.212509486s ago: executing program 1 (id=466):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xf0}}, 0x0)

2.951213268s ago: executing program 1 (id=468):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
fspick(0xffffffffffffff9c, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0xd, 0x0, &(0x7f0000000100)='\x00'/13, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x0)
setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)=ANY=[@ANYBLOB="0405"], 0x2, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x25)
open$dir(&(0x7f0000000480)='./bus/../file0\x00', 0x0, 0x0)
socket$inet(0xa, 0x0, 0x84)

2.42974837s ago: executing program 2 (id=470):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x3a)
readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/129, 0x81}], 0x1)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0xe8, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt(r0, 0x80000000, 0x4e5, &(0x7f0000000380)="10ec22eb670a26ad29dd2125c2016fd9b7756a95c9fed65fe3abf3cc47c16a034560288f200f5f5973cb023f068aabbac52b85d7e8c6aed17f39b027d3fc7826eee8f1d05e9b6888a8febc9d9cf4b861208695a8c39b0a7424f2060e4c2e8f6280c519214ecdc2d4cf3d56ad2b899a5901e777662935b6f9f1de69ec", 0x7c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000340)=0xc)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40)
sendto$inet6(r0, &(0x7f00000002c0)="e53467e168a336ac964f2888efc6637249415d5e80bd80d71a99f20728e79566accab07a5e9f12343701b5af0be9c7bc1c1dacb23a9bbc77668b354e452ee737cd91fcb7a4e17d48f9c892fdd9d426f9e54a93b59d95001abc1f3cb4a6e14b50b8a4cb3c6a276e32768c77", 0x6b, 0x880, &(0x7f0000000100)={0xa, 0x4e20, 0x40, @loopback, 0x1000}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r9, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000019b0b96cd92c001a00000018000d801400008008000500000000000800030000000000"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xb, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac040000", @ANYRESOCT=r0, @ANYBLOB="00012cbd7000fcdbdf256500000008906be4cb8b58fb80a12cc92b3126337289a39c132ff5f6705ddcbec771e2b79a1d410f9d937bfd7620a70b4c080d3bf8e2703ddba501c08e0f7f4aed48563c9c19a7bf6566e291cb285aeb24721f9e5d3e7b08057f18842aca92095b3e274f138cac95a6b3a2abd5929541b5c789a1ee80d6d6c224154e8209c154969da4e9", @ANYRESDEC=r11, @ANYBLOB="0c009900000000002c00000050010380b4000080ad00020060b48cfcd6b5912258f64cc5915a42c5a2a524df25b8a87c9933abb1887cd4e1ca62ecb26b91956bbea19b7c667ada13e5289fbfbcebf42c6e6b3c280b63addb6d3fffd25c3c1007e9acfe9841b6bcdf6513852f691a53d316a51a8bc496da738a4375284261305bfd6260b2c1eb246703f82af3231ea92eedb464c36224a0518afe657736f87d9f741049c61b7e1c790ff0765f8fd5fdf51d5f9d1a45b968cac65b562c872086feb600000098000080910002003b3b591a87f66484b4051f9b16e7e4c9acda049083a54f0f1f136af18b3d0a7e53fa0998a3472819c9c5798cf55e88301f6eb7f238e6204c1f9e3b4b01ce81545614d33c6a41be9211f1aeeab1ccc45a356f868e20e41b47e2b0bef3e2daa16d634dea4b428691068c99ca45d5441526415fad9ccbd9d0c7648a8eb2500cfe5c79ffb84f9224b8dc053f6c837800000008000100010000000800010008000000100103806c000080660002003aa43a9198eac0cb5e8e0a6bc98f8eddce1214b2d97aae98ed1fda0957e119669bc1fcfa1d43b1f4f65c9c1d7538b0ddc8cb09fcbd13bfa043d99d4004851eb8e9083c2ed9b36affc34b72b14b9d0c66636a46c084963fd533527cf8250a31e5ce9400000c0000800800030002000000940000808d00010061bf7a85314659daaecf9331eab966329a960c83b3868e5fcd09fb71ad0a42bd8913e0c716bd3de7f3b02dac64497f540d826de55d7c75b8c993b61c092bab67590f37cbb6f421076a01e95dfd8ab5d5a1e5b5dfe3bf6b2e63c6bf81cfb458a74f42855505e5492a828e9fc1f2f3d98decf0611f77e91a2ded29ea5ee0f33f0a6d5f1a72cbba2a928a000000300103800c0000800800030004000000e4000080de000100283e167b170bb2b0dc769e8ce6402d59dd7ca5d4489440afa62499dd009ce822ca07599e43138aa33848fc9070fbb14bc3493e9dc6d574c96d4fb3091d8453976217cbd762a240d7f48a35add8a1058f4fde58d8cc1d093597c50e610e296f169819e14b36a6829a48bdfb75fa050701348acff862d8f627de84a749493b2f8fb46b21cecc48c898d057c7d992634488c9159e4f81a93f3849bbe89fa39adc03e7f199629c10cfb17880c9e42f3cebff5f47ebc95f1292a80c68b1f8934d79e90dcea8a938f723c24ff0a13e6c4be03562d275a420952c5010f300003c00008035000100689704dfbaee45934f7acd2b517a61557c791e7464111233d2a098c58b7153ab0b0408d0e9156d211526ac444caaefa3a1000000d4000380c4000080be00010082e541cb0c127de87ebc04839d275186e40b080a58a69bf2bfc9032defd970367ae0ff0079ae5a063a74d47b135e022ca75ab431b45489ce05e445c6c0e098a7c0713e68de0530b509bf5504850b330e519228fe728c9605d0ba163ddea442380fedb04ce03355b83711490c87a24100092d3430b30f5854ee07aec5b5c180ef20d034503d0b1bb7a6f3658b4540806fc51b44e5ce8d477544d56d91fb6585918e44a40ee126d9f622172b2ee4866cc155370806011f33fcfbe300000c000080080003000100000008000100020000000800010006000000"], 0x4ac}, 0x1, 0x0, 0x0, 0xa0}, 0x8000)

2.029831763s ago: executing program 0 (id=473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@nobarrier}, {@noquota}, {@barrier_val}, {@jqfmt_vfsv1}, {@block_validity}, {@mblk_io_submit}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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")
r3 = open(&(0x7f00000001c0)='./file1\x00', 0x1cb27e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020)
sendto$packet(r1, &(0x7f0000000180)="05030402d3fc02000000ab5d71acedd7c9560385dcb1655884d7dc049806892f05ce811c88f7", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

1.763382645s ago: executing program 1 (id=474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r3, 0x5abf7901103d9bd3, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0xaa}, [@NDA_LLADDR={0xa, 0x2, @random="2c4e91229fcd"}]}, 0x28}}, 0x0)
pipe(&(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x3, &(0x7f0000001640)=@framed, &(0x7f00000012c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x5}, 0x10}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r5, 0x20, &(0x7f0000000440)={&(0x7f0000000280)=""/136, 0x88, 0x0, &(0x7f0000000cc0)=""/197, 0xc5}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x4b4}, 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000001a0000003100000008000000f56f00000000000900000000050000000000000f02000000384d0000002e5f5f2e615f00b3ef7c07323e3f"], 0x0, 0x3c}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x20}, 0x20)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0), 0x8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe, 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)

1.713376809s ago: executing program 0 (id=475):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2], 0x24}}, 0x0)

1.468423219s ago: executing program 2 (id=476):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x19}], 0x1, 0x46, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.301796123s ago: executing program 1 (id=477):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x2)
socket$packet(0x11, 0x0, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000100f70000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7000085000000030000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801)
writev(0xffffffffffffffff, &(0x7f00000011c0)=[{&(0x7f0000000100)="0e044fa389d2dd6ff4f2f414b5b963a9b4e79c414f7170", 0x17}, {0x0}], 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000005c83995f000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x80)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

1.005411467s ago: executing program 0 (id=479):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.004483187s ago: executing program 2 (id=480):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000008000000000000000200000d000000000000000000000000000000611e00"], 0x0, 0x3c, 0x0, 0x1}, 0x20)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0x2}, {0xc}}]}, 0x54}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"})
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=@mpls_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_DST={0x8, 0x1, {0x1}}]}, 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r7, &(0x7f0000000500)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="cd", 0x1}], 0x1, &(0x7f0000000400)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @init={0x18}], 0x30}], 0x1, 0x4044040)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001440))
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f00000013c0)={&(0x7f0000001040), 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2c8, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, {{}, 0xfa, 0x40, @device_a, 0x57, @void, 0x6, 0x0, @device_b, 0x91}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x240, 0x2a, [@channel_switch={0x25, 0x3, {0x2, 0x38, 0x9}}, @rann={0x7e, 0x15, {{0x1, 0x16}, 0x0, 0xff, @device_b, 0x81, 0x1000, 0x5}}, @random_vendor={0xdd, 0x6d, "9c52e281f79a9bf5d9ad8d6cedf3562d341eae5bd4a37d28e7247f2171717a6369535df5f614f5604b23ff61ea53b89b116864d97944634db66786cf37e700f8276f490f8378293bc859f7171408d1ed71c6366e84c990bf0c0d076218bab65d63faddbd6d738aaaf24cc917d9"}, @random_vendor={0xdd, 0x96, "35f6f80d9daf5f91aea4d8c34944fd91d8b404c0552636c2cb513e5de27323fb000e8f2c74e0f26cb2f6395d5273f1d273f5c386137eabf4de232429c7d35509b907f3ebcadcf309dfef86c75f4d800a72971334cc9920af4bd365d9a1d4c4db3c5895a1ba4fd08d9bef48e80187d032f7f0e6182ec748b3470c575173e5b4ea5d9b186ab4fd9a327a61a28a842a0e010647092190e4"}, @cf={0x4, 0x6, {0xff, 0x1, 0x3f}}, @challenge={0x10, 0x1, 0x70}, @erp={0x2a, 0x1, {0x1}}, @mic={0x8c, 0x18, {0xf72, "e488d7d09db2", @long="d4d25c4ae557fab974cfca56c1e88208"}}, @cf={0x4, 0x6, {0x3, 0x6, 0x1, 0x645}}, @fast_bss_trans={0x37, 0xe7, {0x5, 0x6, "4d926c5a845113e5b576df0616b71733", "679eb7a7b7f7279d1841df8d831c103157c1d45113e31ed778e05fe0cd702b26", "34304c4bc7ba07740aca820d42ef10cad53147b086b4545ff8568b0cd3fe2f8d", [{0x1, 0x3, "bc5e67"}, {0x4, 0x25, "f6ecb6bf36a828c4f1ae343c67c2331fb77e121052ebba6a1311ad806a5c16055e5d5c8c44"}, {0x1, 0x27, "452b1b3085f68f38df56493e781c0a73c8ee15d93fe38014433ed9932a3cef40cbe285908b6969"}, {0x1, 0x1a, "5fb30105458f745014b179f748febf0a759a4c1b0a051ebcc561"}, {0x4, 0x10, "bf2f6f75eef5568e12a2124901dbf4ee"}, {0x4, 0x10, "6e7fb97a5f606896de170107aa15427c"}]}}]}, @NL80211_ATTR_IE={0x37, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x17}, 0x1, 0x5, @device_a, 0x1000, 0x7, 0x5255}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x6, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x91, 0x1}}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)

1.004351167s ago: executing program 3 (id=389):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ad000000720a00ff000000007900580e00000000950000000000000018100000", @ANYRES32, @ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90)

916.288754ms ago: executing program 3 (id=481):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@local}, 0x0, @in6=@empty}}, 0xe8)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000440)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

809.930493ms ago: executing program 0 (id=482):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720)

809.307213ms ago: executing program 2 (id=483):
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
fchdir(r0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)

687.061633ms ago: executing program 0 (id=484):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0)
pwritev2(r1, &(0x7f0000001b40)=[{&(0x7f0000000680)="43d4ae", 0x4010000bffe}], 0x1, 0x0, 0x0, 0x15)
getdents(r0, 0x0, 0x58)

634.402508ms ago: executing program 3 (id=485):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x3a)
readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/129, 0x81}], 0x1)
connect$inet6(r1, &(0x7f0000000040), 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt(r0, 0x80000000, 0x4e5, &(0x7f0000000380)="10ec22eb670a26ad29dd2125c2016fd9b7756a95c9fed65fe3abf3cc47c16a034560288f200f5f5973cb023f068aabbac52b85d7e8c6aed17f39b027d3fc7826eee8f1d05e9b6888a8febc9d9cf4b861208695a8c39b0a7424f2060e4c2e8f6280c519214ecdc2d4cf3d56ad2b899a5901e777662935b6f9f1de69ec", 0x7c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000340)=0xc)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40)
sendto$inet6(r0, &(0x7f00000002c0)="e53467e168a336ac964f2888efc6637249415d5e80bd80d71a99f20728e79566accab07a5e9f12343701b5af0be9c7bc1c1dacb23a9bbc77668b354e452ee737cd91fcb7a4e17d48f9c892fdd9d426f9e54a93b59d95001abc1f3cb4a6e14b50b8a4cb3c6a276e32768c77", 0x6b, 0x880, &(0x7f0000000100)={0xa, 0x4e20, 0x40, @loopback, 0x1000}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r9, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000019b0b96cd92c001a00000018000d801400008008000500000000000800030000000000"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xb, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac040000", @ANYRESOCT=r0, @ANYBLOB="00012cbd7000fcdbdf256500000008906be4cb8b58fb80a12cc92b3126337289a39c132ff5f6705ddcbec771e2b79a1d410f9d937bfd7620a70b4c080d3bf8e2703ddba501c08e0f7f4aed48563c9c19a7bf6566e291cb285aeb24721f9e5d3e7b08057f18842aca92095b3e274f138cac95a6b3a2abd5929541b5c789a1ee80d6d6c224154e8209c154969da4e9", @ANYRESDEC=r11, @ANYBLOB="0c009900000000002c00000050010380b4000080ad00020060b48cfcd6b5912258f64cc5915a42c5a2a524df25b8a87c9933abb1887cd4e1ca62ecb26b91956bbea19b7c667ada13e5289fbfbcebf42c6e6b3c280b63addb6d3fffd25c3c1007e9acfe9841b6bcdf6513852f691a53d316a51a8bc496da738a4375284261305bfd6260b2c1eb246703f82af3231ea92eedb464c36224a0518afe657736f87d9f741049c61b7e1c790ff0765f8fd5fdf51d5f9d1a45b968cac65b562c872086feb600000098000080910002003b3b591a87f66484b4051f9b16e7e4c9acda049083a54f0f1f136af18b3d0a7e53fa0998a3472819c9c5798cf55e88301f6eb7f238e6204c1f9e3b4b01ce81545614d33c6a41be9211f1aeeab1ccc45a356f868e20e41b47e2b0bef3e2daa16d634dea4b428691068c99ca45d5441526415fad9ccbd9d0c7648a8eb2500cfe5c79ffb84f9224b8dc053f6c837800000008000100010000000800010008000000100103806c000080660002003aa43a9198eac0cb5e8e0a6bc98f8eddce1214b2d97aae98ed1fda0957e119669bc1fcfa1d43b1f4f65c9c1d7538b0ddc8cb09fcbd13bfa043d99d4004851eb8e9083c2ed9b36affc34b72b14b9d0c66636a46c084963fd533527cf8250a31e5ce9400000c0000800800030002000000940000808d00010061bf7a85314659daaecf9331eab966329a960c83b3868e5fcd09fb71ad0a42bd8913e0c716bd3de7f3b02dac64497f540d826de55d7c75b8c993b61c092bab67590f37cbb6f421076a01e95dfd8ab5d5a1e5b5dfe3bf6b2e63c6bf81cfb458a74f42855505e5492a828e9fc1f2f3d98decf0611f77e91a2ded29ea5ee0f33f0a6d5f1a72cbba2a928a000000300103800c0000800800030004000000e4000080de000100283e167b170bb2b0dc769e8ce6402d59dd7ca5d4489440afa62499dd009ce822ca07599e43138aa33848fc9070fbb14bc3493e9dc6d574c96d4fb3091d8453976217cbd762a240d7f48a35add8a1058f4fde58d8cc1d093597c50e610e296f169819e14b36a6829a48bdfb75fa050701348acff862d8f627de84a749493b2f8fb46b21cecc48c898d057c7d992634488c9159e4f81a93f3849bbe89fa39adc03e7f199629c10cfb17880c9e42f3cebff5f47ebc95f1292a80c68b1f8934d79e90dcea8a938f723c24ff0a13e6c4be03562d275a420952c5010f300003c00008035000100689704dfbaee45934f7acd2b517a61557c791e7464111233d2a098c58b7153ab0b0408d0e9156d211526ac444caaefa3a1000000d4000380c4000080be00010082e541cb0c127de87ebc04839d275186e40b080a58a69bf2bfc9032defd970367ae0ff0079ae5a063a74d47b135e022ca75ab431b45489ce05e445c6c0e098a7c0713e68de0530b509bf5504850b330e519228fe728c9605d0ba163ddea442380fedb04ce03355b83711490c87a24100092d3430b30f5854ee07aec5b5c180ef20d034503d0b1bb7a6f3658b4540806fc51b44e5ce8d477544d56d91fb6585918e44a40ee126d9f622172b2ee4866cc155370806011f33fcfbe300000c000080080003000100000008000100020000000800010006000000"], 0x4ac}, 0x1, 0x0, 0x0, 0xa0}, 0x8000)

604.2335ms ago: executing program 2 (id=486):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000001740), 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40041}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000000c0), 0xc, &(0x7f0000000b40)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000008500)=""/4110, 0x100e}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/68, 0x44}, {&(0x7f0000000c00)=""/79, 0x4f}, {&(0x7f0000005700)=""/4096, 0x1000}], 0x6, &(0x7f00000008c0)=[{0x28, 0x0, 0x0, ""/23}], 0x28, 0x10102}, 0x38, 0x40012040)
syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYRES32], 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000940)=[@in={0x2, 0xfffc, @rand_addr=0x64010100}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0xffbffffc, @loopback, 0xfffffffe}], 0x1c)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000007938de0997ac9eed00000000000000006400000000060202020202020107000000000000004f1932becf4fb335da5f43af6de0f54f8beca55d2fa1ae4164ebe2cf2eb3a9c1de9c33ab2f392017be03b103754523a71c00000000000000"], 0x3c)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000})
sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)}}], 0x1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000580)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300), &(0x7f00000003c0)=[0x0], 0x0, 0x67, &(0x7f0000000380), 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000400), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000980)=ANY=[@ANYRES16=r1, @ANYBLOB="bc08a58cb744d5fc84a73ed9edde788924cf781315dcf81f3b24a104653df159d18b99611e3b1c94867f990b0d28ef158a0a133d3b884b93761ed9b27a7638cd15e40c7b5f8131a9dd7a39aef58eaf09e95745f101a42719e0a3cbe59485cffdcd555522f6a6af8b4c94e5acc1856b73e07b01a573a88a9041f3936cbb834e6bffcc4c34ac3b04eb3d5feeeea442df0607b249187d700f", @ANYRES8=r3, @ANYRES64=r4], 0x36)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r4, 0x2f, 0xff, 0x40, 0xd, 0x61, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x80, 0x40, 0x0, 0x7}})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
unshare(0x42000000)
r7 = socket$igmp6(0xa, 0x3, 0x2)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r8, &(0x7f00000007c0)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
sendmsg$tipc(r7, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}})
shutdown(r6, 0x1)
sendmmsg$inet6(r8, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b00)="e4", 0x1}, {&(0x7f0000000d80)="693c764f2299c4033d026aa15ef4ad1528c79d3982e6e795102b963ef23c0b3f12e2e5f98b464766d2fb89051eb5f5a66b3f1b5e2bb2a2d759404de59cb7e08b47649fd5ee5d95495a15583ebaebf21b6f5b521483650f45263947cc66db2667dabcbed2d618dd3b42c0db42e6ff28ec932d3df8000000000000000abd65a07f089bb28a38c820c6583bda3d9a906e8c74eb79f192cece53ea0a576b35ec40f27782b54bba1ee89492270f0a540fef8c34c27c570864b79a96611ece72a21a4c936c58c34d9f2f2b72d2a96d98336509148b630d0faf8d8a429d51f8e276918f4e813a2388d4fbb90edcd4166aae7100000000000000000000000000b1023c59fb204d5bbb9101801d8f8dc0e4afcaaad50ae7ec231d8a4ef117ed2822", 0x11d}, {&(0x7f0000000840)="67478beb973ba59acba35b22db0dfa24bb5e41804065baee59c0e264c1f96036cffa1188ba75a34d538e31019a0cd04637d9a96f8666a409d79994f1cb069d67440112d1a28b7c071d965c7676e3d22eac437491ebf106ee", 0x58}, {&(0x7f0000000680)="264e185cc9407e0a6800"/24, 0x18}], 0x4}}], 0x1, 0x246daa010aa5c862)

371.51707ms ago: executing program 0 (id=487):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x19}], 0x1, 0x46, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 3 (id=488):
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

y 0 port 6081 - 0
[   74.814099][ T3559] Bluetooth: hci3: command tx timeout
[   74.821690][ T3553] Bluetooth: hci4: command tx timeout
[   74.827316][ T3559] Bluetooth: hci1: command tx timeout
[   74.836518][ T3567] Bluetooth: hci0: command tx timeout
[   74.849776][ T3555] device veth1_vlan entered promiscuous mode
[   74.884016][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.893017][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.902382][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.910686][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.919231][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.929575][ T3554] device veth0_vlan entered promiscuous mode
[   74.940109][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.952685][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.962116][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.971228][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.980184][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.007416][ T3554] device veth1_vlan entered promiscuous mode
[   75.050753][ T3563] device veth0_macvtap entered promiscuous mode
[   75.082819][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.091380][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.103174][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.111996][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.129034][ T3563] device veth1_macvtap entered promiscuous mode
[   75.157552][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.165928][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.174982][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.198474][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.211894][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.224593][ T3555] device veth0_macvtap entered promiscuous mode
[   75.270461][ T3554] device veth0_macvtap entered promiscuous mode
[   75.290289][ T3554] device veth1_macvtap entered promiscuous mode
[   75.322083][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.334217][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.351240][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.372833][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.385224][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.403518][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.414411][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.425073][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.435786][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.451025][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.460011][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.468859][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.477881][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.486818][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.494825][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.504044][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.513541][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.522653][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.538166][ T3555] device veth1_macvtap entered promiscuous mode
[   75.545049][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.562711][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.568159][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.584515][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.595364][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.606346][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.616557][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.627498][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.640019][ T3563] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.647984][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.659626][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.667864][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.681955][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.693410][ T3554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.707956][ T3554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.716860][ T3554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.725639][ T3554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.764620][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.775261][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.785545][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.796824][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.807035][ T3563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.818033][ T3563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.829696][ T3563] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.849191][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.858152][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.872236][ T3563] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.881437][ T3563] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.890448][ T3563] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.899255][ T3563] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.910148][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.922520][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.922824][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.940697][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.950822][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.961387][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.971357][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.981937][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.992027][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.002758][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.015226][ T3555] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.028575][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.038579][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.048878][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.128725][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.141588][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.152823][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.163489][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.173540][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.184534][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.195526][ T3555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.202458][ T3635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6'.
[   76.211760][ T3555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.228961][ T3555] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.240217][ T3555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.253614][ T3555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.262677][ T3555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.271577][ T3555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.289138][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.302892][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.395877][ T3635] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   76.410059][ T3635] netlink: 'syz.2.6': attribute type 2 has an invalid length.
[   76.487365][ T3636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6'.
[   76.542812][ T3635] team0: Port device team_slave_0 removed
[   76.657434][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.690012][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.700409][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.708853][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.739483][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.782588][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.795526][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.827886][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.869176][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.878174][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.895243][ T3557] Bluetooth: hci0: command tx timeout
[   76.895270][ T3566] Bluetooth: hci4: command tx timeout
[   76.900775][ T3557] Bluetooth: hci2: command tx timeout
[   76.906380][ T3567] Bluetooth: hci1: command tx timeout
[   76.911705][ T3553] Bluetooth: hci3: command tx timeout
[   76.964573][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.968669][ T3651] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.017425][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.026304][ T3650] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET)
[   77.068270][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.094986][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.106892][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.132429][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.156862][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.166831][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.555026][ T3664] Bluetooth: MGMT ver 1.22
[   77.716306][ T3664] Bluetooth: hci3: unsupported parameter 65535
[   77.744229][ T3664] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[   78.687081][ T3680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17'.
[   78.766657][ T3680] netlink: 'syz.4.17': attribute type 1 has an invalid length.
[   78.784614][ T3680] netlink: 'syz.4.17': attribute type 2 has an invalid length.
[   78.805346][ T3683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17'.
[   78.920396][ T3680] team0: Port device team_slave_0 removed
[   79.149284][    T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   79.586287][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.612636][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.623136][    T7] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[   79.633221][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.677555][    T7] usb 2-1: config 0 descriptor??
[   79.727004][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   79.736462][    T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!!
[   79.746817][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   79.999700][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   80.171962][    T7] itetech 0003:258A:6A88.0001: item fetching failed at offset 0/1
[   80.189996][    T7] itetech: probe of 0003:258A:6A88.0001 failed with error -22
[   80.206318][  T152] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   80.335406][ T3729] netlink: 32 bytes leftover after parsing attributes in process `syz.4.32'.
[   80.359368][ T3729] netlink: 'syz.4.32': attribute type 1 has an invalid length.
[   80.378796][    T7] usb 2-1: USB disconnect, device number 2
[   80.391434][ T3729] netlink: 'syz.4.32': attribute type 2 has an invalid length.
[   80.434508][ T3729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.32'.
[   80.637008][  T152] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.655504][  T152] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   80.876105][  T152] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   80.885220][  T152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.902802][  T152] usb 1-1: Product: syz
[   80.907436][  T152] usb 1-1: Manufacturer: syz
[   80.912202][  T152] usb 1-1: SerialNumber: syz
[   81.184199][ T3713] binder: 3712:3713 ioctl 80605414 20000640 returned -22
[   81.237484][ T3761] netlink: 32 bytes leftover after parsing attributes in process `syz.2.44'.
[   81.260674][ T3761] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   81.272524][ T3761] netlink: 'syz.2.44': attribute type 2 has an invalid length.
[   81.287611][  T152] usb 1-1: 0:2 : does not exist
[   81.308490][ T3761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.44'.
[   81.330706][  T152] usb 1-1: USB disconnect, device number 2
[   81.598943][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   81.611586][ T3560] udevd[3560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   81.631983][  T935] cfg80211: failed to load regulatory.db
[   81.865436][ T3774] loop3: detected capacity change from 0 to 1024
[   81.874007][ T3774] EXT4-fs: Ignoring removed mblk_io_submit option
[   81.992152][ T3774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   82.243273][ T3563] EXT4-fs (loop3): unmounting filesystem.
[   83.148717][ T3821] loop2: detected capacity change from 0 to 1024
[   83.160971][ T3823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.67'.
[   83.176730][ T3821] EXT4-fs: Ignoring removed mblk_io_submit option
[   83.178260][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'.
[   83.197212][    T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   83.267215][ T3826] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   83.299249][ T3821] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   83.389527][ T3832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.70'.
[   83.391838][ T3548] EXT4-fs (loop2): unmounting filesystem.
[   83.417674][ T3832] netlink: 'syz.0.70': attribute type 1 has an invalid length.
[   83.428177][ T3832] netlink: 'syz.0.70': attribute type 2 has an invalid length.
[   83.448329][ T3832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'.
[   83.460697][ T3832] netlink: 112 bytes leftover after parsing attributes in process `syz.0.70'.
[   83.475460][ T3832] tipc: Started in network mode
[   83.480989][ T3832] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[   83.489498][ T3832] tipc: Enabled bearer <eth:bridge0>, priority 16
[   83.556384][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.593286][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.606564][  T152] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   83.811957][    T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.834439][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.850360][    T7] usb 5-1: Product: syz
[   83.854691][    T7] usb 5-1: Manufacturer: syz
[   83.861463][    T7] usb 5-1: SerialNumber: syz
[   84.132643][ T3811] binder: 3810:3811 ioctl 80605414 20000640 returned -22
[   84.176397][  T152] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[   84.185526][  T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.209608][  T152] usb 4-1: config 0 descriptor??
[   84.226401][    T7] usb 5-1: 0:2 : does not exist
[   84.285350][    T7] usb 5-1: USB disconnect, device number 2
[   84.526337][  T152] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   84.561039][  T152] asix: probe of 4-1:0.0 failed with error -71
[   84.573064][  T152] usb 4-1: USB disconnect, device number 2
[   84.602333][ T3595] tipc: Node number set to 10922666
[   84.929310][ T3865] loop2: detected capacity change from 0 to 1024
[   84.952818][ T3865] EXT4-fs: Ignoring removed mblk_io_submit option
[   85.045053][ T3865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   85.122850][ T3878] Bluetooth: MGMT ver 1.22
[   85.204193][ T3548] EXT4-fs (loop2): unmounting filesystem.
[   85.346229][ T3595] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   85.763077][ T3595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.801852][ T3595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.842911][ T3595] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[   85.856771][ T3906] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   85.865395][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.901491][ T3595] usb 2-1: config 0 descriptor??
[   85.916781][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   85.924450][ T3908] loop0: detected capacity change from 0 to 1024
[   85.934212][ T3908] EXT4-fs: Ignoring removed mblk_io_submit option
[   85.970495][ T3908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   86.048527][ T3547] EXT4-fs (loop0): unmounting filesystem.
[   86.176232][  T935] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   86.326310][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.337580][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   86.410990][ T3595] itetech 0003:258A:6A88.0002: item fetching failed at offset 0/1
[   86.430388][ T3595] itetech: probe of 0003:258A:6A88.0002 failed with error -22
[   86.509376][ T3933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.106'.
[   86.515896][    T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   86.530315][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.542946][    T7] usb 5-1: Product: syz
[   86.548529][    T7] usb 5-1: Manufacturer: syz
[   86.553166][    T7] usb 5-1: SerialNumber: syz
[   86.566481][  T935] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[   86.575753][  T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.603824][  T935] usb 3-1: config 0 descriptor??
[   86.611365][ T3595] usb 2-1: USB disconnect, device number 3
[   86.782019][ T3943] loop3: detected capacity change from 0 to 1024
[   86.800877][ T3890] binder: 3889:3890 ioctl 80605414 20000640 returned -22
[   86.808758][ T3943] EXT4-fs: Ignoring removed mblk_io_submit option
[   86.843834][ T3943] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   86.866374][  T935] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   86.891818][  T935] asix: probe of 3-1:0.0 failed with error -71
[   86.908586][ T3563] EXT4-fs (loop3): unmounting filesystem.
[   86.912300][    T7] usb 5-1: 0:2 : does not exist
[   86.923025][  T935] usb 3-1: USB disconnect, device number 2
[   86.998956][    T7] usb 5-1: USB disconnect, device number 3
[   87.267357][ T3849] udevd[3849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   87.465713][ T3962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'.
[   87.704766][ T3974] loop1: detected capacity change from 0 to 1024
[   87.752601][ T3974] EXT4-fs: Ignoring removed mblk_io_submit option
[   87.894774][ T3974] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   87.999390][ T3990] loop4: detected capacity change from 0 to 64
[   88.026590][ T3990] =======================================================
[   88.026590][ T3990] WARNING: The mand mount option has been deprecated and
[   88.026590][ T3990]          and is ignored by this kernel. Remove the mand
[   88.026590][ T3990]          option from the mount to silence this warning.
[   88.026590][ T3990] =======================================================
[   88.951720][ T3990] MINIX-fs: mounting file system with errors, running fsck is recommended
[   89.259435][ T3555] EXT4-fs (loop1): unmounting filesystem.
[   89.326278][  T935] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   89.376223][ T3598] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   89.475101][ T4005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'.
[   89.606099][ T3599] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.664215][ T4011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.133'.
[   89.696529][  T935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.703613][ T4011] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   89.708095][  T935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.725663][  T935] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[   89.735330][  T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.744115][ T4011] netlink: 'syz.1.133': attribute type 2 has an invalid length.
[   89.755881][ T4013] netlink: 112 bytes leftover after parsing attributes in process `syz.1.133'.
[   89.764375][  T935] usb 4-1: config 0 descriptor??
[   89.771314][ T4013] tipc: Started in network mode
[   89.776296][ T4013] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[   89.783755][ T4013] tipc: Enabled bearer <eth:bridge0>, priority 16
[   89.790729][ T3598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.801191][ T3598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   89.976378][ T3598] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   89.991078][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.000404][ T3598] usb 1-1: Product: syz
[   90.004604][ T3598] usb 1-1: Manufacturer: syz
[   90.014795][ T3598] usb 1-1: SerialNumber: syz
[   90.081143][    T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   90.116207][ T3599] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[   90.125331][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.136421][ T3599] usb 3-1: config 0 descriptor??
[   90.210286][ T4021] loop1: detected capacity change from 0 to 64
[   90.258423][ T4021] MINIX-fs: mounting file system with errors, running fsck is recommended
[   90.336186][    T7] usb 5-1: Using ep0 maxpacket: 32
[   90.456680][    T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10
[   90.509727][    T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.566245][    T7] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[   90.596588][ T3599] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   90.650142][ T3599] asix: probe of 3-1:0.0 failed with error -71
[   90.678288][    T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   90.724427][ T3599] usb 3-1: USB disconnect, device number 3
[   90.750098][    T7] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[   90.804806][  T152] tipc: Node number set to 10922666
[   90.812114][ T3972] binder: 3969:3972 ioctl 80605414 20000640 returned -22
[   90.914268][ T3598] usb 1-1: 0:2 : does not exist
[   90.927269][  T935] itetech 0003:258A:6A88.0003: item fetching failed at offset 0/1
[   90.935704][  T935] itetech: probe of 0003:258A:6A88.0003 failed with error -22
[   90.959291][ T3598] usb 1-1: USB disconnect, device number 3
[   91.031388][  T935] usb 4-1: USB disconnect, device number 3
[   91.056483][    T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   91.065670][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.074061][    T7] usb 5-1: Product: syz
[   91.078474][    T7] usb 5-1: Manufacturer: syz
[   91.083094][    T7] usb 5-1: SerialNumber: syz
[   91.260769][ T3560] udevd[3560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.364632][ T4031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'.
[   91.407440][    T7] cdc_ncm 5-1:1.0: bind() failure
[   91.420877][ T4031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   91.435665][    T7] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   91.471400][    T7] cdc_ncm 5-1:1.1: bind() failure
[   91.503254][    T7] usb 5-1: USB disconnect, device number 4
[   91.712336][ T4035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.142'.
[   92.005278][ T4047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.147'.
[   92.152109][ T4047] netlink: 'syz.1.147': attribute type 1 has an invalid length.
[   92.170816][ T4047] netlink: 'syz.1.147': attribute type 2 has an invalid length.
[   92.210481][ T4047] netlink: 112 bytes leftover after parsing attributes in process `syz.1.147'.
[   92.219799][ T4047] tipc: Enabling of bearer <eth:bridge0> rejected, already enabled
[   92.324092][ T4058] loop2: detected capacity change from 0 to 64
[   92.341954][ T4058] MINIX-fs: mounting file system with errors, running fsck is recommended
[   92.516069][  T152] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   92.966377][  T152] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[   92.993386][  T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.052877][  T152] usb 5-1: config 0 descriptor??
[   93.289995][ T4083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.156'.
[   93.346259][  T152] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   93.372921][  T152] asix: probe of 5-1:0.0 failed with error -71
[   93.437071][  T152] usb 5-1: USB disconnect, device number 5
[   93.456147][ T3606] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   93.604756][ T4091] kvm: emulating exchange as write
[   93.726244][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   93.738963][ T4097] loop1: detected capacity change from 0 to 1024
[   93.746852][ T4097] EXT4-fs: Ignoring removed mblk_io_submit option
[   93.770074][ T4097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   93.844544][ T3555] EXT4-fs (loop1): unmounting filesystem.
[   93.859975][ T3606] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.880656][ T3606] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.087168][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.097666][    T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.260804][ T4114] loop4: detected capacity change from 0 to 64
[   94.273432][ T3606] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.339014][ T4114] MINIX-fs: mounting file system with errors, running fsck is recommended
[   94.425022][ T3606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.602257][ T3606] usb 1-1: Product: syz
[   94.701236][ T3606] usb 1-1: Manufacturer: syz
[   94.873191][ T3606] usb 1-1: SerialNumber: syz
[   94.966400][    T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.975509][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.073610][    T7] usb 3-1: Product: syz
[   95.078910][    T7] usb 3-1: Manufacturer: syz
[   95.083776][    T7] usb 3-1: SerialNumber: syz
[   95.160861][ T4121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.170'.
[   95.209892][ T4069] binder: 4068:4069 ioctl 80605414 20000640 returned -22
[   95.326318][ T3606] usb 1-1: 0:2 : does not exist
[   95.346355][ T4086] binder: 4084:4086 ioctl 80605414 20000640 returned -22
[   95.358919][ T3606] usb 1-1: USB disconnect, device number 4
[   95.437532][    T7] usb 3-1: 0:2 : does not exist
[   95.472678][ T4022] udevd[4022]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.484573][    T7] usb 3-1: USB disconnect, device number 4
[   95.561055][ T4132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'.
[   95.588910][ T4132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.174'.
[   95.651721][ T4132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.174'.
[   95.667320][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.675587][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.729017][ T3671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.738119][ T3849] udevd[3849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[   95.766070][ T3671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.825872][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.844629][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.852299][ T3598] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.051421][ T4149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'.
[   96.091862][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.100734][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.194484][ T4151] loop0: detected capacity change from 0 to 64
[   96.225228][ T4151] MINIX-fs: mounting file system with errors, running fsck is recommended
[   96.806285][ T3598] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[   96.821255][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.846673][ T3598] usb 2-1: config 0 descriptor??
[   96.920038][ T4155] loop3: detected capacity change from 0 to 8
[   96.995316][ T4157] loop0: detected capacity change from 0 to 512
[   97.106739][ T4157] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   97.122429][ T3598] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   97.139274][ T3598] asix: probe of 2-1:0.0 failed with error -71
[   97.155864][ T3598] usb 2-1: USB disconnect, device number 4
[   97.162080][ T4157] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.183: invalid indirect mapped block 8 (level 2)
[   97.219022][ T4157] EXT4-fs (loop0): Remounting filesystem read-only
[   97.227374][ T4157] EXT4-fs (loop0): 1 truncate cleaned up
[   97.233341][ T4157] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   97.291043][   T26] audit: type=1800 audit(1721171169.420:2): pid=4157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.183" name="bus" dev="loop0" ino=18 res=0 errno=0
[   97.393716][ T4171] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   97.430289][ T4170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'.
[   97.439449][ T4171] EXT4-fs (loop0): Remounting filesystem read-only
[   97.458312][ T4170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.189'.
[   97.480228][ T4174] loop2: detected capacity change from 0 to 1024
[   97.483191][ T4170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'.
[   97.527217][ T4174] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   98.077202][ T3599] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   98.469745][ T4189] loop1: detected capacity change from 0 to 64
[   99.469052][ T4186] sched: RT throttling activated
[   99.566490][ T4189] MINIX-fs: mounting file system with errors, running fsck is recommended
[   99.791255][ T4191] netlink: 32 bytes leftover after parsing attributes in process `syz.3.195'.
[   99.828456][ T4191] netlink: 'syz.3.195': attribute type 1 has an invalid length.
[   99.846114][ T4191] netlink: 'syz.3.195': attribute type 2 has an invalid length.
[   99.867787][ T4191] netlink: 112 bytes leftover after parsing attributes in process `syz.3.195'.
[   99.877327][ T4191] tipc: Started in network mode
[   99.882230][ T4191] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[   99.893209][ T4191] tipc: Enabled bearer <eth:bridge0>, priority 16
[   99.936179][ T3599] usb 3-1: config 0 has an invalid interface number: 156 but max is 1
[   99.944859][ T3599] usb 3-1: config 0 has no interface number 1
[   99.972448][ T3599] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  100.006291][ T3599] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  100.036483][ T3599] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  100.071107][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.114860][ T3599] usb 3-1: config 0 descriptor??
[  100.170322][ T3599] usb 3-1: MIDIStreaming interface descriptor not found
[  100.233473][ T3599] gspca_main: spca561-2.14.0 probing abcd:cdee
[  100.674702][   T26] audit: type=1800 audit(1721171172.800:3): pid=4157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.183" name="bus" dev="loop0" ino=18 res=0 errno=0
[  100.735696][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  100.745998][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  100.755292][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  100.765831][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  100.774505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  100.864046][ T3599] spca561: probe of 3-1:0.0 failed with error -22
[  100.940064][ T3571] tipc: Node number set to 10922666
[  100.976541][ T3599] usb 3-1: USB disconnect, device number 5
[  101.007871][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  101.509279][ T3547] EXT4-fs (loop0): unmounting filesystem.
[  101.867105][ T4226] loop1: detected capacity change from 0 to 64
[  103.056349][ T4226] MINIX-fs: mounting file system with errors, running fsck is recommended
[  103.169466][ T4230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.208'.
[  103.278941][ T4235] netlink: 'syz.4.208': attribute type 1 has an invalid length.
[  103.287476][ T4235] netlink: 'syz.4.208': attribute type 2 has an invalid length.
[  103.301434][ T4235] netlink: 112 bytes leftover after parsing attributes in process `syz.4.208'.
[  103.319006][ T4235] tipc: Started in network mode
[  103.324024][ T4235] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[  103.335105][ T4235] tipc: Enabled bearer <eth:bridge0>, priority 10
[  103.346170][ T3599] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  103.575907][ T4246] loop4: detected capacity change from 0 to 512
[  103.582542][    T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  103.590477][ T3599] usb 3-1: Using ep0 maxpacket: 32
[  103.643654][ T4246] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  103.688981][ T4254] mmap: syz.3.215 (4254) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  103.692596][ T4246] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.214: invalid indirect mapped block 8 (level 2)
[  103.717188][ T3599] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  103.733412][ T4246] EXT4-fs (loop4): Remounting filesystem read-only
[  103.750422][ T3599] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.764652][ T3599] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  103.774996][ T3599] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  103.784857][ T3599] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  103.831122][ T4246] EXT4-fs (loop4): 1 truncate cleaned up
[  103.838885][ T4246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  103.927391][   T26] audit: type=1800 audit(1721171176.060:4): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.214" name="bus" dev="loop4" ino=18 res=0 errno=0
[  103.966590][    T7] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  103.976161][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.067503][ T4259] loop3: detected capacity change from 0 to 256
[  104.308186][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.318339][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.327345][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.336237][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.345351][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.354272][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.363152][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.372277][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.381290][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.390204][ T4259] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  104.648059][   T26] audit: type=1800 audit(1721171176.540:5): pid=4259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.215" name="file1" dev="loop3" ino=1048595 res=0 errno=0
[  104.723868][ T4259] syz.3.215 (4259) used greatest stack depth: 18968 bytes left
[  104.744993][ T3571] tipc: Node number set to 10922666
[  104.753179][    T7] usb 1-1: config 0 descriptor??
[  104.771752][ T4264] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  104.796306][ T3599] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  104.831346][ T4264] EXT4-fs (loop4): Remounting filesystem read-only
[  104.838171][ T3599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.866083][ T3599] usb 3-1: Product: syz
[  104.883305][ T3599] usb 3-1: Manufacturer: syz
[  105.201253][ T4272] loop2: detected capacity change from 0 to 64
[  106.241576][ T4272] MINIX-fs: mounting file system with errors, running fsck is recommended
[  106.376325][ T3599] usb 3-1: can't set config #1, error -71
[  106.385191][ T3549] udevd[3549]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.405056][ T3599] usb 3-1: USB disconnect, device number 6
[  106.676186][    T7] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  106.714339][    T7] asix: probe of 1-1:0.0 failed with error -71
[  107.152058][    T7] usb 1-1: USB disconnect, device number 5
[  107.693111][   T26] audit: type=1800 audit(1721171179.820:6): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.214" name="bus" dev="loop4" ino=18 res=0 errno=0
[  107.896104][  T152] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  108.238618][ T3554] EXT4-fs (loop4): unmounting filesystem.
[  108.274181][  T152] usb 3-1: Using ep0 maxpacket: 16
[  108.326959][ T4306] loop3: detected capacity change from 0 to 64
[  109.460779][ T4306] MINIX-fs: mounting file system with errors, running fsck is recommended
[  110.196134][   T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  110.296075][ T3606] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  110.606502][   T27] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  110.621895][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.652999][   T27] usb 1-1: config 0 descriptor??
[  110.686867][ T3606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.711360][ T3606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.726066][ T3606] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  110.735188][ T3606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.749965][ T3606] usb 4-1: config 0 descriptor??
[  110.776239][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  110.856283][  T152] usb 3-1: unable to get BOS descriptor or descriptor too short
[  110.905383][ T4328] loop2: detected capacity change from 0 to 512
[  110.921703][ T4328] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  110.946234][  T152] usb 3-1: unable to read config index 0 descriptor/start: -71
[  110.949066][ T4328] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.238: invalid indirect mapped block 8 (level 2)
[  110.953854][  T152] usb 3-1: can't read configurations, error -71
[  110.954091][   T27] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  110.984945][   T27] asix: probe of 1-1:0.0 failed with error -71
[  111.005447][   T27] usb 1-1: USB disconnect, device number 6
[  111.025065][ T4328] EXT4-fs (loop2): Remounting filesystem read-only
[  111.036632][    T7] usb 5-1: Using ep0 maxpacket: 32
[  111.045503][ T4328] EXT4-fs (loop2): 1 truncate cleaned up
[  111.059980][ T4328] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  111.149616][   T26] audit: type=1800 audit(1721171183.280:7): pid=4328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.238" name="bus" dev="loop2" ino=18 res=0 errno=0
[  111.156255][    T7] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  111.182352][    T7] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  111.191794][    T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  111.201827][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  111.213422][    T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  111.230216][ T3606] itetech 0003:258A:6A88.0004: item fetching failed at offset 0/1
[  111.249111][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  111.256515][ T3606] itetech: probe of 0003:258A:6A88.0004 failed with error -22
[  111.276941][ T4331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[  111.287411][ T4332] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  111.304004][    T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  111.322777][ T4332] EXT4-fs (loop2): Remounting filesystem read-only
[  111.330193][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.355436][    T7] usb 5-1: config 0 descriptor??
[  111.433306][ T3606] usb 4-1: USB disconnect, device number 4
[  111.646218][    T7] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  111.710776][    T7] usb 5-1: USB disconnect, device number 6
[  111.734958][    T7] usblp0: removed
[  112.353951][    T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  112.639852][    T7] usb 5-1: Using ep0 maxpacket: 32
[  112.828011][    T7] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  112.836479][    T7] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  112.854217][    T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  112.883844][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  112.927566][    T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  112.965861][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  113.006889][    T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  113.073910][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.133685][    T7] usb 5-1: config 0 descriptor??
[  113.410317][    T7] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  113.606748][    T7] usb 5-1: USB disconnect, device number 7
[  113.625323][    T7] usblp0: removed
[  115.315223][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  115.766206][ T3606] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  115.827669][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'.
[  115.905430][ T4383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.257'.
[  115.945120][ T4383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'.
[  116.176446][ T3606] usb 5-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config
[  116.296278][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.296388][  T152] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  116.376962][ T3606] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.400778][ T3606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.414178][ T3606] usb 5-1: Product: syz
[  116.419078][ T3606] usb 5-1: Manufacturer: syz
[  116.427771][ T3606] usb 5-1: SerialNumber: syz
[  116.487101][ T3606] usb 5-1: bad CDC descriptors
[  116.536203][    T7] usb 4-1: Using ep0 maxpacket: 16
[  116.566544][ T4404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'.
[  116.590872][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'.
[  116.600674][  T152] usb 1-1: Using ep0 maxpacket: 32
[  116.656169][    T7] usb 4-1: unable to get BOS descriptor or descriptor too short
[  116.736193][  T152] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  116.842961][    T7] usb 4-1: unable to read config index 0 descriptor/start: -71
[  116.856023][    T7] usb 4-1: can't read configurations, error -71
[  116.862498][  T152] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  116.875372][  T152] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  116.884989][  T152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  116.895342][  T152] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  116.906132][  T152] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  116.919907][  T152] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  116.929217][  T152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.703092][  T152] usb 1-1: config 0 descriptor??
[  118.400587][  T152] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  118.470508][  T152] usb 1-1: USB disconnect, device number 7
[  118.478498][  T152] usblp0: removed
[  118.532303][ T3599] usb 5-1: USB disconnect, device number 8
[  118.708069][ T4421] netlink: 'syz.3.273': attribute type 29 has an invalid length.
[  118.718004][ T4421] netlink: 'syz.3.273': attribute type 29 has an invalid length.
[  118.732755][ T4421] netlink: 'syz.3.273': attribute type 29 has an invalid length.
[  118.741739][ T4421] netlink: 'syz.3.273': attribute type 29 has an invalid length.
[  118.868681][ T4424] loop3: detected capacity change from 0 to 512
[  118.893065][ T4424] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  118.922057][ T4424] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  118.962650][ T4424] EXT4-fs (loop3): 1 truncate cleaned up
[  118.976342][ T4424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  119.056325][  T152] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  119.121470][ T3563] EXT4-fs (loop3): unmounting filesystem.
[  119.187128][ T4436] loop4: detected capacity change from 0 to 4096
[  119.228585][ T4436] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  119.316141][  T152] usb 1-1: Using ep0 maxpacket: 32
[  119.325913][ T4436] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  119.447661][  T152] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  119.467189][  T152] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  119.503091][  T152] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  119.519804][  T152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  119.529751][  T152] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  119.540219][  T152] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  119.554219][  T152] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  119.564933][  T152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.579826][  T152] usb 1-1: config 0 descriptor??
[  119.592196][ T3554] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  119.653270][ T4450] netlink: 'syz.4.284': attribute type 29 has an invalid length.
[  119.656208][ T3599] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  119.663077][ T4450] netlink: 'syz.4.284': attribute type 29 has an invalid length.
[  119.703192][ T4450] netlink: 'syz.4.284': attribute type 29 has an invalid length.
[  119.762011][  T152] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  119.796227][ T4450] netlink: 'syz.4.284': attribute type 29 has an invalid length.
[  119.814231][  T152] usb 1-1: USB disconnect, device number 8
[  119.858183][  T152] usblp0: removed
[  119.886208][   T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  119.946155][ T3599] usb 3-1: Using ep0 maxpacket: 16
[  120.060271][ T4452] loop3: detected capacity change from 0 to 4096
[  120.066321][ T3599] usb 3-1: unable to get BOS descriptor or descriptor too short
[  120.092834][ T4452] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  120.159714][ T4452] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  120.176163][ T3599] usb 3-1: unable to read config index 0 descriptor/start: -71
[  120.686612][ T3599] usb 3-1: can't read configurations, error -71
[  120.756963][   T27] usb 2-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config
[  120.888828][ T4467] loop0: detected capacity change from 0 to 256
[  120.996435][   T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  121.021120][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.063824][   T27] usb 2-1: Product: syz
[  121.084090][   T27] usb 2-1: Manufacturer: syz
[  121.115911][   T27] usb 2-1: SerialNumber: syz
[  121.207276][   T27] usb 2-1: bad CDC descriptors
[  121.594297][ T4475] loop0: detected capacity change from 0 to 4096
[  122.216053][   T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  122.486042][   T27] usb 1-1: Using ep0 maxpacket: 32
[  122.619776][ T3599] usb 2-1: USB disconnect, device number 5
[  122.626394][   T27] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  122.644495][   T27] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  122.658958][ T4484] loop2: detected capacity change from 0 to 32768
[  122.675443][   T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  122.687100][ T4484] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.297 (4484)
[  122.705028][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  122.721227][   T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  122.742390][   T27] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  122.776048][   T27] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  122.785246][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.826202][   T27] usb 1-1: config 0 descriptor??
[  122.868758][ T4484] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  122.870521][ T4487] netlink: 32 bytes leftover after parsing attributes in process `syz.1.298'.
[  122.889876][ T4484] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  122.911416][ T4484] BTRFS info (device loop2): turning off barriers
[  122.931423][ T4484] BTRFS info (device loop2): force clearing of disk cache
[  122.940207][ T4484] BTRFS info (device loop2): doing ref verification
[  122.953457][ T4487] netlink: 112 bytes leftover after parsing attributes in process `syz.1.298'.
[  122.960027][ T4484] BTRFS info (device loop2): using free space tree
[  122.991595][ T4487] tipc: Enabling of bearer <eth:bridge0> rejected, already enabled
[  123.142610][   T27] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  123.182709][   T27] usb 1-1: USB disconnect, device number 9
[  123.196125][ T4484] BTRFS info (device loop2): enabling ssd optimizations
[  123.210577][   T27] usblp0: removed
[  123.247757][ T4484] BTRFS info (device loop2): rebuilding free space tree
[  123.341163][    T9] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22.
[  123.343981][ T4484] BTRFS info (device loop2): checking UUID tree
[  123.360880][ T3563] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  123.617555][ T3548] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.747286][   T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  123.844448][ T4521] netlink: 'syz.3.305': attribute type 29 has an invalid length.
[  123.872775][ T4521] netlink: 'syz.3.305': attribute type 29 has an invalid length.
[  123.907837][ T4523] capability: warning: `syz.1.306' uses 32-bit capabilities (legacy support in use)
[  123.929036][ T4526] netlink: 'syz.3.305': attribute type 29 has an invalid length.
[  124.036249][   T27] usb 1-1: Using ep0 maxpacket: 32
[  124.058077][ T4521] netlink: 'syz.3.305': attribute type 29 has an invalid length.
[  124.143875][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'.
[  124.160016][   T27] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  124.163665][ T4528] netlink: 32 bytes leftover after parsing attributes in process `syz.4.308'.
[  124.189325][ T4528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.308'.
[  124.198798][   T27] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  124.214854][   T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  124.229674][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  124.242103][   T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  124.252482][   T27] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  124.266757][   T27] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  124.279587][ T4535] netlink: 112 bytes leftover after parsing attributes in process `syz.3.309'.
[  124.302262][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.316360][ T4535] tipc: Enabling of bearer <eth:bridge0> rejected, already enabled
[  124.326073][ T4520] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  124.339780][   T27] usb 1-1: config 0 descriptor??
[  124.470932][ T4538] loop4: detected capacity change from 0 to 4096
[  124.498301][ T4538] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  124.531296][ T4538] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  124.566827][ T4520] usb 3-1: Using ep0 maxpacket: 16
[  124.611288][   T27] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  124.640010][    T9] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22.
[  124.686315][ T4520] usb 3-1: unable to get BOS descriptor or descriptor too short
[  124.748392][ T4520] usb 3-1: unable to read config index 0 descriptor/start: -71
[  124.756632][ T4520] usb 3-1: can't read configurations, error -71
[  124.810537][   T27] usb 1-1: USB disconnect, device number 10
[  124.823156][   T27] usblp0: removed
[  125.101558][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.220612][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.327769][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'.
[  125.341658][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.379413][ T4556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.320'.
[  125.406884][ T4555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'.
[  125.458180][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.523197][ T3567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  125.536451][ T3567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  125.545148][ T3567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  125.554659][ T4558] netlink: 112 bytes leftover after parsing attributes in process `syz.0.321'.
[  125.569945][ T3567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  125.574465][ T4558] tipc: Enabling of bearer <eth:bridge0> rejected, already enabled
[  125.596445][ T3567] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  125.603904][ T3567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  125.972079][   T11] tipc: Disabling bearer <eth:bridge0>
[  125.993926][   T11] tipc: Left network mode
[  126.626066][  T152] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  126.654163][ T4559] chnl_net:caif_netlink_parms(): no params data found
[  126.730842][ T3554] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  127.037295][  T152] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.049174][  T152] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.137953][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.164452][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.210510][ T4559] device bridge_slave_0 entered promiscuous mode
[  127.250906][  T152] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.273284][  T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.304886][  T152] usb 3-1: Product: syz
[  127.320717][  T152] usb 3-1: Manufacturer: syz
[  127.349881][  T152] usb 3-1: SerialNumber: syz
[  127.363332][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.376076][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.408560][ T4559] device bridge_slave_1 entered promiscuous mode
[  127.449977][ T4600] loop4: detected capacity change from 0 to 1024
[  127.474834][ T4600] EXT4-fs: Ignoring removed mblk_io_submit option
[  127.560634][ T4600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  127.606348][ T4573] binder: 4572:4573 ioctl 80605414 20000640 returned -22
[  127.686808][ T3567] Bluetooth: hci2: command tx timeout
[  127.732752][ T3554] EXT4-fs (loop4): unmounting filesystem.
[  127.736261][ T4559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.809440][  T152] usb 3-1: 0:2 : does not exist
[  127.887206][ T4559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.943883][  T152] usb 3-1: USB disconnect, device number 13
[  128.229090][   T11] device hsr_slave_0 left promiscuous mode
[  128.232415][ T4022] udevd[4022]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.251187][   T11] device hsr_slave_1 left promiscuous mode
[  128.259342][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.267329][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.279079][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.287034][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.302310][   T11] device bridge_slave_1 left promiscuous mode
[  128.344763][ T4618] loop4: detected capacity change from 0 to 64
[  128.358811][ T4618] MINIX-fs: mounting file system with errors, running fsck is recommended
[  128.417166][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.549009][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'.
[  128.652233][   T11] device bridge_slave_0 left promiscuous mode
[  128.757826][ T4617] netlink: 32 bytes leftover after parsing attributes in process `syz.0.332'.
[  128.778691][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.906596][ T4620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.332'.
[  128.980516][   T11] device veth1_macvtap left promiscuous mode
[  129.000726][   T11] device veth0_macvtap left promiscuous mode
[  129.007480][   T11] device veth1_vlan left promiscuous mode
[  129.013598][   T11] device veth0_vlan left promiscuous mode
[  129.146366][  T152] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  129.180622][ T4624] loop2: detected capacity change from 0 to 4096
[  129.203284][ T4624] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  129.233207][ T4624] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  129.244429][ T4624] ntfs3: loop2: Failed to load $BadClus.
[  129.396410][  T152] usb 4-1: Using ep0 maxpacket: 32
[  129.424618][ T4627] loop2: detected capacity change from 0 to 512
[  129.464372][ T4627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  129.480117][ T4627] System zones: 1-12
[  129.500681][ T4627] EXT4-fs (loop2): orphan cleanup on readonly fs
[  129.520191][ T4627] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.335: invalid indirect mapped block 1819239214 (level 1)
[  129.526590][  T152] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  129.550047][  T152] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  129.550221][ T4627] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.335: bg 0: block 361: padding at end of block bitmap is not set
[  129.581901][ T4627] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  129.582001][  T152] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  129.604981][  T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  129.612070][ T4627] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.335: attempt to clear invalid blocks 33619980 len 1
[  129.633393][  T152] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  129.647089][  T152] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  129.660582][  T152] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  129.675809][ T4627] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.335: invalid indirect mapped block 1819239214 (level 0)
[  129.699946][  T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.701238][ T4627] EXT4-fs (loop2): 1 truncate cleaned up
[  129.725201][ T4627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  129.752274][  T152] usb 4-1: config 0 descriptor??
[  129.756380][ T3567] Bluetooth: hci2: command tx timeout
[  130.013282][   T11] team0 (unregistering): Port device team_slave_1 removed
[  130.027813][  T152] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  130.065283][  T152] usb 4-1: USB disconnect, device number 7
[  130.083040][  T152] usblp0: removed
[  130.147141][   T11] team0 (unregistering): Port device team_slave_0 removed
[  130.190625][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.259505][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.636392][  T152] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  130.821468][   T11] bond0 (unregistering): Released all slaves
[  130.896093][  T152] usb 4-1: Using ep0 maxpacket: 32
[  130.920931][ T4559] team0: Port device team_slave_0 added
[  130.964084][ T4626] netlink: 112 bytes leftover after parsing attributes in process `syz.4.334'.
[  130.983359][ T4626] tipc: Enabling of bearer <eth:bridge0> rejected, already enabled
[  130.997223][ T4559] team0: Port device team_slave_1 added
[  131.036251][  T152] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  131.044683][  T152] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  131.099897][  T152] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  131.134327][  T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  131.191181][  T152] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  131.201656][  T152] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  131.257016][  T152] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  131.299380][  T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.387033][  T152] usb 4-1: config 0 descriptor??
[  131.432143][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  131.439210][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.447199][  T152] usb 4-1: can't set config #0, error -71
[  131.471203][  T152] usb 4-1: USB disconnect, device number 8
[  131.477221][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.608640][ T4639] loop3: detected capacity change from 0 to 1024
[  131.662442][ T4559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.666994][ T4639] EXT4-fs: Ignoring removed mblk_io_submit option
[  131.763567][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.789738][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.816612][ T4559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.837038][ T3567] Bluetooth: hci2: command tx timeout
[  131.847403][ T4639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  131.916621][ T4648] loop4: detected capacity change from 0 to 2048
[  132.021958][ T4648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.038087][ T4648] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 1376: 0xcf != 0xd4
[  132.056117][ T4648] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh
[  132.094748][ T4559] device hsr_slave_0 entered promiscuous mode
[  132.107686][ T4648] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0
[  132.126409][ T4559] device hsr_slave_1 entered promiscuous mode
[  132.145871][ T4559] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  132.214511][ T3563] EXT4-fs (loop3): unmounting filesystem.
[  132.228318][ T4559] Cannot create hsr debugfs directory
[  132.281601][ T4656] loop0: detected capacity change from 0 to 256
[  132.356400][    T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  132.691720][ T4671] loop3: detected capacity change from 0 to 64
[  132.760667][ T4671] MINIX-fs: mounting file system with errors, running fsck is recommended
[  132.798438][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  132.805012][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  132.816200][    T7] usb 3-1: Using ep0 maxpacket: 16
[  133.406098][    T7] usb 3-1: unable to get BOS descriptor or descriptor too short
[  133.466211][    T7] usb 3-1: unable to read config index 0 descriptor/start: -71
[  133.476412][ T3596] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  133.497216][    T7] usb 3-1: can't read configurations, error -71
[  133.532783][ T4675] netlink: 112 bytes leftover after parsing attributes in process `syz.3.347'.
[  133.572721][ T4675] tipc: Enabling of bearer <eth:bridge0> rejected, already enabled
[  133.726130][ T3596] usb 5-1: Using ep0 maxpacket: 8
[  133.826182][ T3694] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  133.866270][ T3596] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  133.895795][ T3596] usb 5-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00
[  133.916306][ T3567] Bluetooth: hci2: command tx timeout
[  133.917107][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.960053][ T3596] usb 5-1: config 0 descriptor??
[  134.018444][ T3596] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  134.080418][ T3694] usb 1-1: Using ep0 maxpacket: 32
[  134.199954][ T3694] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  134.220552][ T3694] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  134.229702][ T4687] Zero length message leads to an empty skb
[  134.250159][ T3694] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  134.295803][ T3694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  134.305301][ T4559] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  134.366040][ T3694] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  134.412037][ T3694] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  134.443614][ T4559] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  134.474938][ T4559] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  134.478053][ T3694] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  134.523202][ T4559] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  134.530802][ T3694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.592386][ T3694] usb 1-1: config 0 descriptor??
[  134.789748][ T4697] loop2: detected capacity change from 0 to 1024
[  134.824831][ T4559] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.846902][ T4697] EXT4-fs: Ignoring removed mblk_io_submit option
[  134.868903][ T3694] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  134.897112][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  134.913842][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  134.924129][ T3694] usb 1-1: USB disconnect, device number 11
[  134.959392][ T4559] 8021q: adding VLAN 0 to HW filter on device team0
[  134.963763][ T3694] usblp0: removed
[  134.973805][ T4697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  135.008808][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  135.056992][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.076634][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.083861][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.143158][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  135.150062][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  135.160931][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  135.194984][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  135.240021][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.247283][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.280107][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  135.331540][ T4709] loop2: detected capacity change from 0 to 256
[  135.361294][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  135.390115][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  135.428137][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  135.446074][ T3694] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  135.484386][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  135.527385][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  135.586190][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  135.600522][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  135.610131][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.657399][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.685500][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.706255][ T3694] usb 1-1: Using ep0 maxpacket: 32
[  135.805097][ T4720] netlink: 112 bytes leftover after parsing attributes in process `syz.3.359'.
[  135.864452][ T4720] tipc: Enabling of bearer <eth:bridge0> rejected, already enabled
[  135.966139][ T3694] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  135.974543][ T3694] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  136.000898][ T3694] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  136.057740][ T4724] loop2: detected capacity change from 0 to 64
[  136.075594][ T4724] MINIX-fs: mounting file system with errors, running fsck is recommended
[  136.262829][ T3694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  136.606740][ T3694] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  136.679150][ T3694] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  136.764176][ T4726] loop3: detected capacity change from 0 to 512
[  136.818533][ T3694] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  136.856410][ T3694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.921107][ T3694] usb 1-1: config 0 descriptor??
[  136.935261][ T4737] loop4: detected capacity change from 0 to 1024
[  136.944011][ T4737] EXT4-fs: Ignoring removed mblk_io_submit option
[  136.946373][ T4726] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.360: bad orphan inode 17
[  136.974424][    T7] usb 5-1: USB disconnect, device number 9
[  136.983051][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  136.990594][ T3694] usb 1-1: can't set config #0, error -71
[  136.990765][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  137.023924][ T4559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.041340][ T4726] ext4_test_bit(bit=16, block=4) = 1
[  137.059796][ T3694] usb 1-1: USB disconnect, device number 12
[  137.069990][ T4726] is_bad_inode(inode)=0
[  137.072605][ T4737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  137.074226][ T4726] NEXT_ORPHAN(inode)=0
[  137.074238][ T4726] max_ino=32
[  137.168420][ T4726] i_nlink=1
[  137.185529][ T4726] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  137.210933][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  137.226471][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  137.302593][ T3554] EXT4-fs (loop4): unmounting filesystem.
[  137.320127][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  137.356665][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  137.410451][ T4559] device veth0_vlan entered promiscuous mode
[  137.433661][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  137.443938][ T3563] EXT4-fs (loop3): unmounting filesystem.
[  137.456829][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  137.514933][ T4559] device veth1_vlan entered promiscuous mode
[  137.686933][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  137.712887][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  137.744751][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  137.788899][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  137.832507][ T4559] device veth0_macvtap entered promiscuous mode
[  137.893174][ T4559] device veth1_macvtap entered promiscuous mode
[  137.987153][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.048497][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.088949][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.136030][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.186880][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.241016][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.280941][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.346045][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.387845][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.395430][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  138.408399][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  138.446925][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  138.486749][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  138.504991][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.546102][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.586047][ T3601] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  138.603914][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.645856][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.686069][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.727399][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.757846][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.798990][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.846370][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.878216][ T4740] loop0: detected capacity change from 0 to 32768
[  138.898314][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  138.917049][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  138.959167][ T4559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.996292][ T3601] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.016037][ T3601] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.027823][ T4559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.036873][ T4559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.045601][ T4559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.093827][ T4752] loop3: detected capacity change from 0 to 40427
[  139.133128][ T4740] XFS (loop0): Mounting V5 Filesystem
[  139.186527][ T3601] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  139.195626][ T3601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.209664][ T3601] usb 5-1: Product: syz
[  139.213881][ T3601] usb 5-1: Manufacturer: syz
[  139.219038][ T3601] usb 5-1: SerialNumber: syz
[  139.313725][ T4752] F2FS-fs (loop3): Found nat_bits in checkpoint
[  139.350754][ T4116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.396299][ T4116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.440969][ T4740] XFS (loop0): Ending clean mount
[  139.467109][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  139.482419][ T4762] binder: 4761:4762 ioctl 80605414 20000640 returned -22
[  139.497003][ T4740] XFS (loop0): Quotacheck needed: Please wait.
[  139.516940][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.539749][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.572590][ T4752] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  139.585230][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  139.596427][ T3601] usb 5-1: 0:2 : does not exist
[  139.616241][ T3601] usb 5-1: USB disconnect, device number 10
[  139.670364][ T4740] XFS (loop0): Quotacheck: Done.
[  139.877019][ T4022] udevd[4022]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.103686][ T3563] F2FS-fs (loop3): access invalid blkaddr:2048
[  140.121847][ T3563] CPU: 1 PID: 3563 Comm: syz-executor Not tainted 6.1.99-syzkaller #0
[  140.130080][ T3563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  140.140180][ T3563] Call Trace:
[  140.143494][ T3563]  <TASK>
[  140.146473][ T3563]  dump_stack_lvl+0x1e3/0x2cb
[  140.151227][ T3563]  ? nf_tcp_handle_invalid+0x642/0x642
[  140.156744][ T3563]  ? f2fs_get_next_page_offset+0x6c0/0x6c0
[  140.162618][ T3563]  f2fs_is_valid_blkaddr+0xca6/0x1270
[  140.168047][ T3563]  f2fs_map_blocks+0x15fd/0x3ab0
[  140.173049][ T3563]  ? f2fs_do_map_lock+0x70/0x70
[  140.177941][ T3563]  ? page_index+0xff/0x4b0
[  140.182392][ T3563]  f2fs_mpage_readpages+0xbd5/0x2b90
[  140.187744][ T3563]  ? dquot_release_reservation_block+0x90/0x90
[  140.193157][ T3547] XFS (loop0): Unmounting Filesystem
[  140.193915][ T3563]  ? folio_add_lru+0x34d/0xd70
[  140.204245][ T3563]  ? f2fs_is_compress_backend_ready+0x9d/0x130
[  140.210448][ T3563]  ? f2fs_readahead+0x18a/0x3a0
[  140.215338][ T3563]  ? blk_start_plug+0x95/0x110
[  140.220149][ T3563]  read_pages+0x17f/0x830
[  140.224519][ T3563]  ? folio_add_lru+0x34d/0xd70
[  140.229406][ T3563]  ? folio_add_lru+0x34d/0xd70
[  140.234214][ T3563]  ? page_cache_ra_unbounded+0x7b0/0x7b0
[  140.239903][ T3563]  ? __filemap_add_folio+0x1ba0/0x1ba0
[  140.245411][ T3563]  ? page_cache_ra_order+0xb2a/0xd80
[  140.250749][ T3563]  page_cache_ra_unbounded+0x68b/0x7b0
[  140.256266][ T3563]  f2fs_readdir+0x5ae/0xc30
[  140.260817][ T3563]  ? __might_sleep+0xb0/0xb0
[  140.265507][ T3563]  ? f2fs_fill_dentries+0xd60/0xd60
[  140.270756][ T3563]  ? iterate_dir+0x10a/0x560
[  140.275379][ T3563]  ? __fdget_pos+0x2ba/0x360
[  140.280004][ T3563]  ? common_file_perm+0x17d/0x1d0
[  140.285072][ T3563]  ? fsnotify_perm+0x439/0x590
[  140.289869][ T3563]  iterate_dir+0x224/0x560
[  140.294315][ T3563]  ? f2fs_fill_dentries+0xd60/0xd60
[  140.299573][ T3563]  __se_sys_getdents64+0x209/0x4f0
[  140.304730][ T3563]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  140.310759][ T3563]  ? __x64_sys_getdents64+0x80/0x80
[  140.315989][ T3563]  ? filldir+0x6f0/0x6f0
[  140.320265][ T3563]  ? syscall_enter_from_user_mode+0x2e/0x230
[  140.326272][ T3563]  ? lockdep_hardirqs_on+0x94/0x130
[  140.331515][ T3563]  ? syscall_enter_from_user_mode+0x2e/0x230
[  140.337550][ T3563]  do_syscall_64+0x3b/0xb0
[  140.342029][ T3563]  ? clear_bhb_loop+0x45/0xa0
[  140.346761][ T3563]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.352705][ T3563] RIP: 0033:0x7f402f7a7c73
[  140.357178][ T3563] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 e2 44 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  140.377359][ T3563] RSP: 002b:00007ffda6524d08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  140.385811][ T3563] RAX: ffffffffffffffda RBX: 0000555555867600 RCX: 00007f402f7a7c73
[  140.393814][ T3563] RDX: 0000000000008000 RSI: 0000555555867600 RDI: 0000000000000005
[  140.401818][ T3563] RBP: 00005555558675d4 R08: 0000000000000000 R09: 0000000000000000
[  140.409821][ T3563] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  140.417831][ T3563] R13: 0000000000000010 R14: 00005555558675d0 R15: 0000000000021974
[  140.425849][ T3563]  </TASK>
[  140.583794][ T4817] loop4: detected capacity change from 0 to 1024
[  140.617092][ T4817] EXT4-fs: Ignoring removed mblk_io_submit option
[  140.676773][ T4817] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  140.795386][ T3554] EXT4-fs (loop4): unmounting filesystem.
[  141.005627][ T3563] syz-executor: attempt to access beyond end of device
[  141.005627][ T3563] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  141.022665][ T3563] syz-executor: attempt to access beyond end of device
[  141.022665][ T3563] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  141.126196][ T3598] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  141.215235][ T3672] kworker/u4:9: attempt to access beyond end of device
[  141.215235][ T3672] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  141.377781][ T3598] usb 1-1: Using ep0 maxpacket: 32
[  141.518533][ T3598] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  141.557412][ T3598] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  141.594068][ T3598] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  141.614877][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  141.645466][ T3598] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  141.671271][ T3598] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  141.713066][ T3598] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  141.743507][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.781140][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.788322][ T3598] usb 1-1: config 0 descriptor??
[  141.917039][ T3599] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  141.976017][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.073776][ T3598] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  142.117995][ T3598] usb 1-1: USB disconnect, device number 13
[  142.138104][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.150208][ T3598] usblp0: removed
[  142.263696][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.296338][ T3599] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.312211][ T3599] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  142.506552][ T3599] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  142.515715][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.552052][ T3599] usb 2-1: Product: syz
[  142.556707][ T3599] usb 2-1: Manufacturer: syz
[  142.561369][ T3599] usb 2-1: SerialNumber: syz
[  142.568590][   T11] tipc: Disabling bearer <eth:bridge0>
[  142.585928][   T11] tipc: Left network mode
[  142.684211][ T3567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  142.686215][ T3598] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  142.701754][ T3567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  142.711759][ T3567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  142.723011][ T3567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  142.731442][ T3567] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  142.740825][ T3567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  142.852798][ T4845] binder: 4844:4845 ioctl 80605414 20000640 returned -22
[  142.956309][ T3599] usb 2-1: 0:2 : does not exist
[  142.967766][ T3598] usb 1-1: Using ep0 maxpacket: 32
[  142.984276][ T3599] usb 2-1: USB disconnect, device number 6
[  143.126457][ T3598] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  143.145218][ T3598] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  143.165017][ T3598] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  143.236171][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  143.246407][ T4022] udevd[4022]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  143.272746][ T3598] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  143.320576][ T3598] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  143.360317][ T3598] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  143.391017][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.417068][ T3598] usb 1-1: config 0 descriptor??
[  143.632663][ T4902] loop1: detected capacity change from 0 to 1024
[  143.693566][ T4902] EXT4-fs: Ignoring removed mblk_io_submit option
[  143.706491][ T3598] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  143.728604][ T4906] loop4: detected capacity change from 0 to 256
[  143.763717][ T3598] usb 1-1: USB disconnect, device number 14
[  143.783657][ T4866] chnl_net:caif_netlink_parms(): no params data found
[  143.811875][ T4902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  143.823217][ T3598] usblp0: removed
[  143.900697][ T4559] EXT4-fs (loop1): unmounting filesystem.
[  144.263714][ T4866] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.300253][ T4866] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.326329][ T4866] device bridge_slave_0 entered promiscuous mode
[  144.379490][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.403217][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.405797][ T4935] loop0: detected capacity change from 0 to 256
[  144.435682][ T4866] device bridge_slave_1 entered promiscuous mode
[  144.566785][ T3554] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  144.582038][ T3554] FAT-fs (loop4): Filesystem has been set read-only
[  144.604508][ T3554] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  144.806348][ T3557] Bluetooth: hci4: command tx timeout
[  144.878236][ T4866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.923361][ T4866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.932846][    T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  145.182395][   T11] device hsr_slave_0 left promiscuous mode
[  145.187829][ T4958] loop1: detected capacity change from 0 to 1024
[  145.209084][   T11] device hsr_slave_1 left promiscuous mode
[  145.218131][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.225706][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.239105][ T4958] EXT4-fs: Ignoring removed mblk_io_submit option
[  145.257166][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.269218][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.279265][   T11] device bridge_slave_1 left promiscuous mode
[  145.285545][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.314646][ T4958] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  145.316523][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.349129][   T11] device bridge_slave_0 left promiscuous mode
[  145.349496][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.384680][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.387535][    T7] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  145.401055][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.411671][    T7] usb 3-1: config 0 descriptor??
[  145.469600][ T4559] EXT4-fs (loop1): unmounting filesystem.
[  145.552387][   T11] device veth1_macvtap left promiscuous mode
[  145.586712][   T11] device veth0_macvtap left promiscuous mode
[  145.593273][   T11] device veth1_vlan left promiscuous mode
[  145.616141][   T11] device veth0_vlan left promiscuous mode
[  145.874428][ T3557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  145.890626][ T3557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  145.900070][    T7] itetech 0003:258A:6A88.0005: item fetching failed at offset 0/1
[  145.917358][ T3557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  145.925554][ T3557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.926686][    T7] itetech: probe of 0003:258A:6A88.0005 failed with error -22
[  145.942441][ T3557] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  145.950030][ T3557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.107249][ T3694] usb 3-1: USB disconnect, device number 16
[  146.516143][ T3599] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  146.585405][   T11] team0 (unregistering): Port device team_slave_1 removed
[  146.624259][   T11] team0 (unregistering): Port device team_slave_0 removed
[  146.662114][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.724776][ T4976] loop2: detected capacity change from 0 to 256
[  146.756548][ T3599] usb 2-1: Using ep0 maxpacket: 32
[  146.782692][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.876866][ T3599] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  146.879570][ T3557] Bluetooth: hci4: command tx timeout
[  146.895754][ T3599] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  146.904855][ T3599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  146.922670][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.932695][ T3599] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  146.965001][ T3599] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  146.982427][ T3599] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  146.995263][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.012266][ T3599] usb 2-1: config 0 descriptor??
[  147.277934][ T3599] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  147.311877][ T3599] usb 2-1: USB disconnect, device number 7
[  147.329192][ T3599] usblp0: removed
[  147.466790][ T4991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.422'.
[  147.479531][   T11] bond0 (unregistering): Released all slaves
[  147.554902][ T4866] team0: Port device team_slave_0 added
[  147.563505][ T4866] team0: Port device team_slave_1 added
[  147.702006][   T26] audit: type=1326 audit(1721171219.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4995 comm="syz.0.424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b8575bd9 code=0x0
[  147.785471][ T4866] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.795084][ T4866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.854545][ T4866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.856204][ T3599] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  147.897863][ T4866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.932018][ T4866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.000757][ T3557] Bluetooth: hci3: command tx timeout
[  148.018679][ T4866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.146380][ T3599] usb 2-1: Using ep0 maxpacket: 32
[  148.205656][ T4866] device hsr_slave_0 entered promiscuous mode
[  148.222613][ T4866] device hsr_slave_1 entered promiscuous mode
[  148.266297][ T3599] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  148.274987][ T4866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.284986][ T3599] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  148.294151][ T4866] Cannot create hsr debugfs directory
[  148.328773][ T3599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  148.353769][ T5009] loop2: detected capacity change from 0 to 4096
[  148.363904][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  148.385409][ T5009] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  148.404385][ T3599] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  148.429252][ T3599] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  148.443733][ T3599] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  148.477684][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.515430][ T3599] usb 2-1: config 0 descriptor??
[  148.583477][ T4967] chnl_net:caif_netlink_parms(): no params data found
[  148.920769][ T5026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[  148.956454][ T3557] Bluetooth: hci4: command tx timeout
[  149.008817][ T3599] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  149.090915][ T3599] usb 2-1: USB disconnect, device number 8
[  149.138119][ T3599] usblp0: removed
[  149.260986][ T5004] loop0: detected capacity change from 0 to 32768
[  149.342579][ T5004] XFS (loop0): Mounting V5 Filesystem
[  149.384181][ T4967] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.393244][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.401978][ T4967] device bridge_slave_0 entered promiscuous mode
[  149.410942][ T4967] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.418298][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.430168][ T4967] device bridge_slave_1 entered promiscuous mode
[  149.502382][ T5004] XFS (loop0): Ending clean mount
[  149.564675][ T5004] XFS (loop0): Quotacheck needed: Please wait.
[  151.036303][ T3557] Bluetooth: hci4: command tx timeout
[  151.288538][ T4967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.320437][ T5004] XFS (loop0): Quotacheck: Done.
[  151.352787][ T3567] Bluetooth: hci3: command tx timeout
[  151.371156][ T4967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.474623][ T4967] team0: Port device team_slave_0 added
[  151.494974][ T3547] XFS (loop0): Unmounting Filesystem
[  151.532117][ T4967] team0: Port device team_slave_1 added
[  151.669706][ T5051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'.
[  151.734643][ T4967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.740337][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'.
[  151.747350][ T4967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.783333][ T5053] loop2: detected capacity change from 0 to 128
[  151.784227][ T4967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.852729][ T4967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.923422][ T4967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.002767][ T4967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.074729][ T4866] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  152.218467][ T4866] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  152.335081][ T4866] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  152.423367][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.484583][ T4967] device hsr_slave_0 entered promiscuous mode
[  152.519413][ T4967] device hsr_slave_1 entered promiscuous mode
[  152.537363][ T4967] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.579371][ T4967] Cannot create hsr debugfs directory
[  152.623752][ T4866] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  152.664178][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'.
[  152.703328][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.893836][ T3598] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  152.905367][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.018009][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.174257][ T3598] usb 2-1: Using ep0 maxpacket: 32
[  153.326479][ T3598] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  153.341229][ T3598] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  153.437613][ T3598] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  153.523031][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  153.604188][ T3598] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  153.686612][ T3598] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  153.808993][ T3598] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  153.867758][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.882675][ T3598] usb 2-1: config 0 descriptor??
[  154.898480][ T3567] Bluetooth: hci3: command tx timeout
[  155.034461][ T5097] loop0: detected capacity change from 0 to 1024
[  155.050216][ T5097] EXT4-fs: Ignoring removed mblk_io_submit option
[  155.119712][ T4866] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.146723][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  155.161194][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.179377][ T3598] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  155.180918][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.204934][ T3598] usb 2-1: USB disconnect, device number 9
[  155.219054][ T3598] usblp0: removed
[  155.281466][ T4866] 8021q: adding VLAN 0 to HW filter on device team0
[  155.338028][   T11] tipc: Disabling bearer <eth:bridge0>
[  155.349791][   T11] tipc: Left network mode
[  155.359684][ T3547] EXT4-fs (loop0): unmounting filesystem.
[  155.417928][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.429230][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.468624][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.475763][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.613956][ T5107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.444'.
[  155.644020][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.700459][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'.
[  155.719457][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.738735][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.754671][ T5092] loop2: detected capacity change from 0 to 32768
[  155.768734][ T3598] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  155.784929][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.792250][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.823117][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.832808][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.855606][ T5092] XFS (loop2): Mounting V5 Filesystem
[  155.949050][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.968079][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.977486][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.986840][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.995656][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.004533][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.013184][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.022884][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.033492][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.037633][ T5092] XFS (loop2): Ending clean mount
[  156.056135][ T3598] usb 2-1: Using ep0 maxpacket: 32
[  156.088686][ T5092] XFS (loop2): Quotacheck needed: Please wait.
[  156.101962][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.167465][ T5092] XFS (loop2): Quotacheck: Done.
[  156.186343][ T3598] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  156.194760][ T3598] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  156.235548][ T3598] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  156.252124][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  156.297318][   T26] audit: type=1804 audit(1721171228.420:9): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.441" name="/newroot/98/file0/bus" dev="loop2" ino=9291 res=1 errno=0
[  156.326395][ T3598] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  156.356430][ T3598] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  156.389551][ T3598] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  156.411288][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.421874][ T3598] usb 2-1: config 0 descriptor??
[  156.468653][ T3548] XFS (loop2): Unmounting Filesystem
[  156.526307][ T3598] usb 2-1: can't set config #0, error -71
[  156.554299][ T3598] usb 2-1: USB disconnect, device number 10
[  156.673183][ T5144] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  156.717324][ T5144] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  156.864980][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.887750][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.935355][ T5150] loop0: detected capacity change from 0 to 1024
[  156.951227][ T5150] EXT4-fs: Ignoring removed mblk_io_submit option
[  156.956752][ T3567] Bluetooth: hci3: command tx timeout
[  156.994247][ T4967] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  157.047335][ T5150] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  157.085647][ T4866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.125652][ T5156] loop2: detected capacity change from 0 to 256
[  157.183938][ T4967] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  157.213323][ T3547] EXT4-fs (loop0): unmounting filesystem.
[  157.244931][ T4967] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  157.272850][   T26] audit: type=1800 audit(1721171229.400:10): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.448" name="bus" dev="loop2" ino=1048610 res=0 errno=0
[  157.447558][ T4967] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  157.472796][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'.
[  157.492693][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  157.520479][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.557708][ T5168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.454'.
[  157.611381][ T5169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'.
[  157.676009][ T4866] device veth0_vlan entered promiscuous mode
[  157.688441][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.698255][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.741287][   T11] device hsr_slave_0 left promiscuous mode
[  157.775480][   T11] device hsr_slave_1 left promiscuous mode
[  157.794911][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.810767][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.820285][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.833425][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.843250][   T11] device bridge_slave_1 left promiscuous mode
[  157.862582][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.899532][   T11] device bridge_slave_0 left promiscuous mode
[  157.916317][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.018953][   T11] device veth1_macvtap left promiscuous mode
[  158.035286][   T11] device veth0_macvtap left promiscuous mode
[  158.070203][   T11] device veth1_vlan left promiscuous mode
[  158.084172][   T11] device veth0_vlan left promiscuous mode
[  158.336177][ T3694] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  158.393125][ T5200] loop0: detected capacity change from 0 to 1024
[  158.428265][ T5200] EXT4-fs: Ignoring removed mblk_io_submit option
[  158.545284][ T5200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  158.587073][ T3694] usb 3-1: Using ep0 maxpacket: 32
[  158.712852][ T3547] EXT4-fs (loop0): unmounting filesystem.
[  158.722508][ T3694] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  158.737311][ T3694] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  158.751084][ T3694] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  158.765358][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  158.781842][ T3694] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  158.804714][ T3694] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  158.824505][ T3694] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  158.834113][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.884877][ T3694] usb 3-1: config 0 descriptor??
[  159.170341][ T3694] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  159.182719][   T11] team0 (unregistering): Port device team_slave_1 removed
[  159.196085][ T3557] Bluetooth: hci3: command tx timeout
[  159.204069][ T3694] usb 3-1: USB disconnect, device number 17
[  159.916449][ T3694] usblp0: removed
[  159.962070][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.993408][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.286064][ T3694] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  160.287310][   T11] bond0 (unregistering): Released all slaves
[  160.387788][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  160.395615][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.413201][ T4866] device veth1_vlan entered promiscuous mode
[  160.424507][ T5218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.526503][ T3694] usb 3-1: Using ep0 maxpacket: 32
[  160.610960][ T4967] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.656247][ T3694] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  160.664651][ T3694] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  160.677881][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  160.693135][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.704673][ T3694] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  160.726627][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'.
[  160.749948][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  160.765179][ T4967] 8021q: adding VLAN 0 to HW filter on device team0
[  160.772621][ T3694] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  160.785976][ T4866] device veth0_macvtap entered promiscuous mode
[  160.812301][ T3694] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  160.835198][ T4866] device veth1_macvtap entered promiscuous mode
[  160.872659][ T3694] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  160.887422][ T4866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.898368][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.913203][ T4866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.925376][ T3694] usb 3-1: config 0 descriptor??
[  160.939900][ T4866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.965806][ T4866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.977876][ T4866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.015893][ T4866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.035482][ T4866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.046445][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  161.061905][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  161.073680][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  161.086694][ T3694] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  161.102384][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.113538][ T3694] usb 3-1: USB disconnect, device number 18
[  161.121630][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.130589][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.137765][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.152389][ T3694] usblp0: removed
[  161.160460][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.174976][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  161.201308][ T5230] overlayfs: './file0' not a directory
[  161.252594][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.259833][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.297273][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  161.313919][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  161.324159][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.343307][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.372638][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  161.384588][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'.
[  161.411146][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  161.431344][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  161.443628][ T5244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.470'.
[  161.468947][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  161.478942][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  161.498641][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  161.513058][ T5248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'.
[  161.532048][ T4866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.572585][ T4866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.621754][ T4866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.659095][ T4866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.683130][ T4866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.689111][ T5252] loop0: detected capacity change from 0 to 1024
[  161.707202][ T5252] EXT4-fs: Ignoring removed mblk_io_submit option
[  161.720631][ T4866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.732716][ T4866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.749331][ T4967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.765617][ T5252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  161.784218][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.798318][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  161.823752][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  161.855541][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  161.865557][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.880946][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.890146][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  161.902310][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  161.915132][ T4866] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.924773][ T4866] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.933711][ T4866] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.942873][ T4866] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.975033][ T3547] EXT4-fs (loop0): unmounting filesystem.
[  162.347814][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.367253][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.415929][ T3621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.431058][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  162.444513][ T3621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.477028][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  162.553242][ T4967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.590742][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  162.602212][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  162.699382][ T5271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'.
[  162.720900][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'.
[  163.114096][ T5289] loop0: detected capacity change from 0 to 256
[  163.199806][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'.
[  163.211706][   T26] audit: type=1800 audit(1721171235.340:11): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.484" name="bus" dev="loop0" ino=1048614 res=0 errno=0
[  163.222748][ T5292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.259346][ T5291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.485'.
[  163.295741][ T5288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'.
[  163.332947][ T4116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.373866][ T4116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.384793][ T5296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.407817][ T3567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  163.417582][ T3567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  163.425703][ T3567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  163.433991][ T3553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  163.448367][ T3553] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  163.455683][ T3553] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  163.485226][ T4116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.526101][ T4116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.619302][ T3621] ------------[ cut here ]------------
[  163.625032][ T3621] WARNING: CPU: 0 PID: 3621 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x42b/0x4b0
[  163.635149][ T3621] Modules linked in:
[  163.639214][ T3621] CPU: 0 PID: 3621 Comm: kworker/u4:5 Not tainted 6.1.99-syzkaller #0
[  163.647461][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  163.657685][ T3621] Workqueue: cfg80211 cfg80211_event_work
[  163.663467][ T3621] RIP: 0010:__cfg80211_ibss_joined+0x42b/0x4b0
[  163.669994][ T3621] Code: 3b 84 24 80 00 00 00 0f 85 8e 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ee 6f 94 f7 0f 0b eb bf e8 e5 6f 94 f7 <0f> 0b eb b1 e8 dc 6f 94 f7 0f 0b e9 70 fd ff ff e8 d0 6f 94 f7 0f
[  163.689713][ T3621] RSP: 0018:ffffc90004737ac0 EFLAGS: 00010293
[  163.695847][ T3621] RAX: ffffffff89f6266b RBX: 0000000000000006 RCX: ffff8880234fbb80
[  163.703940][ T3621] RDX: 0000000000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d47e0
[  163.712000][ T3621] RBP: ffffc90004737ba0 R08: dffffc0000000000 R09: fffffbfff2093851
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  163.720067][ T3621] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805adb0c90
[  163.728122][ T3621] R13: dffffc0000000000 R14: ffff88805b2eb5b8 R15: 1ffff920008e6f60
[  163.736184][ T3621] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  163.743447][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  163.745122][ T3621] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.759937][ T3621] CR2: 00007f07b940d578 CR3: 000000006769c000 CR4: 00000000003526f0
[  163.768023][ T3621] Call Trace:
[  163.771326][ T3621]  <TASK>
[  163.774292][ T3621]  ? __warn+0x15a/0x520
[  163.778534][ T3621]  ? __cfg80211_ibss_joined+0x42b/0x4b0
[  163.784132][ T3621]  ? report_bug+0x2af/0x500
[  163.784158][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.788687][ T3621]  ? __cfg80211_ibss_joined+0x42b/0x4b0
[  163.788725][ T3621]  ? handle_bug+0x3d/0x70
[  163.788745][ T3621]  ? exc_invalid_op+0x16/0x40
[  163.788766][ T3621]  ? asm_exc_invalid_op+0x16/0x20
[  163.788810][ T3621]  ? __cfg80211_ibss_joined+0x42b/0x4b0
[  163.788842][ T3621]  ? __cfg80211_ibss_joined+0x42b/0x4b0
[  163.788873][ T3621]  ? mutex_lock_nested+0x10/0x10
[  163.788899][ T3621]  ? trace_rdev_return_void+0x270/0x270
[  163.838350][ T3621]  ? cfg80211_event_work+0x23/0x40
[  163.843501][ T3621]  ? read_lock_is_recursive+0x10/0x10
[  163.848960][ T3621]  ? mutex_lock_nested+0x10/0x10
[  163.853933][ T3621]  cfg80211_process_wdev_events+0x39f/0x4c0
[  163.859924][ T3621]  cfg80211_process_rdev_events+0xa8/0x100
[  163.865772][ T3621]  ? process_one_work+0x7a9/0x11d0
[  163.870949][ T3621]  cfg80211_event_work+0x2b/0x40
[  163.875909][ T3621]  process_one_work+0x8a9/0x11d0
[  163.881010][ T3621]  ? worker_detach_from_pool+0x260/0x260
[  163.886736][ T3621]  ? _raw_spin_lock_irqsave+0x120/0x120
[  163.892342][ T3621]  ? kthread_data+0x4e/0xc0
[  163.896938][ T3621]  ? wq_worker_running+0x97/0x190
[  163.902011][ T3621]  worker_thread+0xa47/0x1200
[  163.906861][ T3621]  ? __sched_text_start+0x8/0x8
[  163.911786][ T3621]  kthread+0x28d/0x320
[  163.915892][ T3621]  ? worker_clr_flags+0x190/0x190
[  163.921007][ T3621]  ? kthread_blkcg+0xd0/0xd0
[  163.925627][ T3621]  ret_from_fork+0x1f/0x30
[  163.930155][ T3621]  </TASK>
[  163.933196][ T3621] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  163.940490][ T3621] CPU: 0 PID: 3621 Comm: kworker/u4:5 Not tainted 6.1.99-syzkaller #0
[  163.948659][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  163.958743][ T3621] Workqueue: cfg80211 cfg80211_event_work
[  163.964509][ T3621] Call Trace:
[  163.967819][ T3621]  <TASK>
[  163.970761][ T3621]  dump_stack_lvl+0x1e3/0x2cb
[  163.975478][ T3621]  ? nf_tcp_handle_invalid+0x642/0x642
[  163.980981][ T3621]  ? panic+0x764/0x764
[  163.985083][ T3621]  ? vscnprintf+0x59/0x80
[  163.989439][ T3621]  panic+0x318/0x764
[  163.993362][ T3621]  ? __warn+0x169/0x520
[  163.997581][ T3621]  ? memcpy_page_flushcache+0xfc/0xfc
[  164.002981][ T3621]  ? ret_from_fork+0x1f/0x30
[  164.007600][ T3621]  __warn+0x348/0x520
[  164.011596][ T3621]  ? __cfg80211_ibss_joined+0x42b/0x4b0
[  164.017178][ T3621]  report_bug+0x2af/0x500
[  164.021531][ T3621]  ? __cfg80211_ibss_joined+0x42b/0x4b0
[  164.027116][ T3621]  handle_bug+0x3d/0x70
[  164.031296][ T3621]  exc_invalid_op+0x16/0x40
[  164.035825][ T3621]  asm_exc_invalid_op+0x16/0x20
[  164.040710][ T3621] RIP: 0010:__cfg80211_ibss_joined+0x42b/0x4b0
[  164.046898][ T3621] Code: 3b 84 24 80 00 00 00 0f 85 8e 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ee 6f 94 f7 0f 0b eb bf e8 e5 6f 94 f7 <0f> 0b eb b1 e8 dc 6f 94 f7 0f 0b e9 70 fd ff ff e8 d0 6f 94 f7 0f
[  164.066536][ T3621] RSP: 0018:ffffc90004737ac0 EFLAGS: 00010293
[  164.072629][ T3621] RAX: ffffffff89f6266b RBX: 0000000000000006 RCX: ffff8880234fbb80
[  164.080630][ T3621] RDX: 0000000000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d47e0
[  164.088632][ T3621] RBP: ffffc90004737ba0 R08: dffffc0000000000 R09: fffffbfff2093851
[  164.096635][ T3621] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805adb0c90
[  164.104627][ T3621] R13: dffffc0000000000 R14: ffff88805b2eb5b8 R15: 1ffff920008e6f60
[  164.112632][ T3621]  ? __cfg80211_ibss_joined+0x42b/0x4b0
[  164.118228][ T3621]  ? mutex_lock_nested+0x10/0x10
[  164.123192][ T3621]  ? trace_rdev_return_void+0x270/0x270
[  164.128777][ T3621]  ? cfg80211_event_work+0x23/0x40
[  164.133915][ T3621]  ? read_lock_is_recursive+0x10/0x10
[  164.139322][ T3621]  ? mutex_lock_nested+0x10/0x10
[  164.144287][ T3621]  cfg80211_process_wdev_events+0x39f/0x4c0
[  164.150220][ T3621]  cfg80211_process_rdev_events+0xa8/0x100
[  164.156057][ T3621]  ? process_one_work+0x7a9/0x11d0
[  164.161169][ T3621]  cfg80211_event_work+0x2b/0x40
[  164.166106][ T3621]  process_one_work+0x8a9/0x11d0
[  164.171058][ T3621]  ? worker_detach_from_pool+0x260/0x260
[  164.176698][ T3621]  ? _raw_spin_lock_irqsave+0x120/0x120
[  164.182246][ T3621]  ? kthread_data+0x4e/0xc0
[  164.186779][ T3621]  ? wq_worker_running+0x97/0x190
[  164.191833][ T3621]  worker_thread+0xa47/0x1200
[  164.196525][ T3621]  ? __sched_text_start+0x8/0x8
[  164.201403][ T3621]  kthread+0x28d/0x320
[  164.205469][ T3621]  ? worker_clr_flags+0x190/0x190
[  164.210498][ T3621]  ? kthread_blkcg+0xd0/0xd0
[  164.215090][ T3621]  ret_from_fork+0x1f/0x30
[  164.219528][ T3621]  </TASK>
[  164.222881][ T3621] Kernel Offset: disabled
[  164.227274][ T3621] Rebooting in 86400 seconds..