last executing test programs:

4m43.29412231s ago: executing program 4 (id=53):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4m43.132258583s ago: executing program 4 (id=55):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x20000810)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)

4m41.756913906s ago: executing program 4 (id=58):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)

4m41.356578694s ago: executing program 4 (id=60):
socket$inet6(0xa, 0x2, 0x7)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f00000002c0)=ANY=[], 0x3, 0x6c0, &(0x7f00000009c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x20000000)
socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000000), 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xd, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x4, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x1, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000208000/0x2000)=nil, 0x2000, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)

4m40.336969001s ago: executing program 4 (id=61):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m38.750094308s ago: executing program 4 (id=64):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_emit_ethernet(0x79, &(0x7f00000001c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x3f, 0x3a, 0x1, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x3, 0x6, "39afb8", 0xf647, 0x0, 0x0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [@srh={0x32, 0x0, 0x4, 0x0, 0x2, 0xd8, 0x9}], "cb78b2e77777e8"}}}}}}}, 0x0)

4m38.137975019s ago: executing program 32 (id=64):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_emit_ethernet(0x79, &(0x7f00000001c0)={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x3f, 0x3a, 0x1, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x3, 0x6, "39afb8", 0xf647, 0x0, 0x0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [@srh={0x32, 0x0, 0x4, 0x0, 0x2, 0xd8, 0x9}], "cb78b2e77777e8"}}}}}}}, 0x0)

4m27.739902027s ago: executing program 0 (id=90):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32], 0x90}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x20000810)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)

4m26.283803522s ago: executing program 0 (id=94):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2)

4m24.67875852s ago: executing program 0 (id=97):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}]}, 0x98}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ppoll(&(0x7f0000000280)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x80006, 0x1, "403c1f951000007e4f0000000000ff726802de"})
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=';cpu '], 0x5)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xb)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x7, 0x80000002, 0x0, 0x10002, 0x7, "441588b82c05000800000004012556c6b60004"})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

4m22.760408352s ago: executing program 0 (id=99):
socket$inet6(0xa, 0x2, 0x7)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f00000002c0)=ANY=[], 0x3, 0x6c0, &(0x7f00000009c0)="$eJzs3U9oXWndB/DvuU1vcvtCJzPT6ZQXoWEKg06xTXoZW0GYKiJdFCm6mW1o02lo2hnSjLRF7K06Cq5cySxcjEhdjAgiIoyrwXEtCG5cdV9w56KCGjnnnpvcm9xJbtqmN9bPB06e58nznOf5nV/OOfdfyw3wP+vcm9nfSZFzx8/fLNv377WX7t9rX+vVk0wmaSQT3SJFKyk+Sc6m3PZ1pykyWG7y+oOPion3P2x3WxP1Vo1vbLXfJkNHdpKptUYZ0ky3+s+Rp900X7VV81xcn+8RFWtxl0k7VpcwdqubdNY7G9vuPvp1C+xZd9J7KB80nRxI99G1fB6Q+u6w/Z1hHFoDrS3vTZ3djgUAAAB239DX8v2ee5iHuZmDTyccAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDYU3e8MLOqt0avPpOh9/3+z7zv1m2MO9zG9d7kqvvHcuAMBAAAAAAAAgMdy9GEe5mYO9tqrRfWZ/ytV41D18//ybm5kIcs5kZuZz0pWspy5JNN9EzVvzq+sLM9t3vMnKfdcXV29U+95auiepwbj6mwMdNi/NNg0CAAAAAAAAACeLVOjD/1uzq1//g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtBkezrFtV2qFefTmMiyVSSZjGzNrw51mAfSzf0j8cdBgAAADw9B4t/dyurRfWa/3D1un8q7+Z6VrKYlSxlIZeq9wK6L50bf+60l+7fa18rt80TfvlvO1q/mjHd9x6GrzxbjXhpbY9z+Vq+meOZyYUsZzHfynxWspCZfLWqzafIdP3uxfT9e630Yt0c79mB1oWNsR3tq5fxHakiaeVyFqvYTuRisxd6ox53pG+13zWTDSveLbNTvFEbMUeX6rI8oh/X5d4wXR35/rWMzNa5L7PxfH/eN+d+h+fJxpXm0lh7D+rQ+iplc+NKj5TzA3X5FHK9w7fSBjPR+VHZ6p19h7fOefK5v/zhwpXG9atXLt84vndOo0e08Zxo92Xi5ZEysVRmovMYmZh6nPifnGadje5ddGd3y1eqfQ9mMV/P27mUhZzObOZyJrP5Yk6lnVN9eX1p67xW11pjZ9fasc/WlVaSH9blNv6x2jXaCtuZ/LSOMq/P9+W1/043XfX1/2Y9Sy+MkKWimeFZ+uvQUCb+v66Ua3yv7xFn/DZmYq4vEy9unYmf/av8E95Yun51+cr8OyOu92pdlpfte4P36J8/kQPaufpwy/PlhfKPVTZ+kIGzo+x7sde3IV/N+hOXiXqygb5mquu527fdlVrOdPjusJm6fS8PXaVd9R3p6xt4lpO3s7T2LASAPauRA68daLYetP7U+qD1/daV1vmpr0yemfxMM/v/OPH7fb9u/KLxpeK1fJDv5OC4YwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfBjVu3r84vLS0s78FKGiMM/lVGn/Du0K5eKlpJbt1u7vZxdRf7+JdjT+8TrfROpMmtzqjfJNlinuY4gi//6ru7xNHRBmfiKRzyZIZ0nV/7TStprMWT5Ooe+YI7YDecXLn2zskbt25/fvHa/FsLby1cP3Xm9Bun21+Yu3Py8uLSwmz357ijBHbDxuelAAAAAAAAAAAAwN73NP6XxZBli84YjhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD473TuzezvpMjc7InZsn3/Xnup3Hr19ZETSRpJim8nxSfJ2XS3TPdNV3zaOq8/+Oinr77/YXt9rone+MbAfvvz27+vru7wKDr1lpkk++pye5MjzXexb77ODgPrKtaOsEzYsV7iYNz+EwAA//81Gwqq")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x14}}, 0x20000000)
socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000000), 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xd, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x4, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x1, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000208000/0x2000)=nil, 0x2000, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)

4m19.97133613s ago: executing program 0 (id=108):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}]}, 0x98}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ppoll(&(0x7f0000000280)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x80006, 0x1, "403c1f951000007e4f0000000000ff726802de"})
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=';cpu '], 0x5)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xb)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x7, 0x80000002, 0x0, 0x10002, 0x7, "441588b82c05000800000004012556c6b60004"})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

4m19.198209283s ago: executing program 0 (id=111):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)

4m17.936257185s ago: executing program 33 (id=111):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)

4m3.148632959s ago: executing program 2 (id=145):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c00e803000008000d"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

4m1.729100473s ago: executing program 2 (id=138):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB], 0x90}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x20000810)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)

4m1.418763938s ago: executing program 2 (id=140):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4m1.063990484s ago: executing program 2 (id=141):
socket$inet6(0xa, 0x2, 0x7)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f00000002c0)=ANY=[], 0x3, 0x6c0, &(0x7f00000009c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}}, 0x20000000)
socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000000), 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xd, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x4, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x1, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000208000/0x2000)=nil, 0x2000, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)

3m59.915301344s ago: executing program 2 (id=143):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}]}, 0x98}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ppoll(&(0x7f0000000280)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x80006, 0x1, "403c1f951000007e4f0000000000ff726802de"})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=';cpu '], 0x5)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xb)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x7, 0x80000002, 0x0, 0x10002, 0x7, "441588b82c05000800000004012556c6b60004"})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3m59.258120055s ago: executing program 2 (id=147):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)

3m58.553835198s ago: executing program 34 (id=147):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9b5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90501b0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc5867dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eafeffffffffffffff000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99a40b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23eb8c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee36cdad078fc88d17cbde37a2270f90a60afe8548d4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd10459e2f2e267f82bafd5b4c7b481ea5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e00000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)

3m34.710081057s ago: executing program 1 (id=203):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

3m34.221555245s ago: executing program 1 (id=206):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m33.784807892s ago: executing program 1 (id=209):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0xc8, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xb0, 0x1, 0x0, 0x1, [@nested={0xac, 0xd0, 0x0, 0x1, [@nested={0x95, 0xf3, 0x0, 0x1, [@nested={0x4, 0x8f}, @nested={0x4, 0x12b}, @generic="4ce04a0db85a6a74ea331e654e", @nested={0x4, 0x14d}, @generic="e5050ab39a0dee0674f4c8045b9deed6c1a3e7dc0ae33046922bb73e3064ccfeddf70c2a1380a557ecf40abbde0344fb740e6aabf5e0525e7a34420b60b70cc6c553d1f4cf8abd52ef8125a73d0a27755dc396a5f7ea88cbec6e8b10ef3c11fbdd802a56c8fb3615d06b881a", @typed={0x8, 0x2f, 0x0, 0x0, @uid}, @nested={0x4, 0xb0}]}, @typed={0x8, 0x120, 0x0, 0x0, @u32=0x7fff}, @typed={0x4, 0x92}, @nested={0x4, 0xd7}]}]}]}, 0xc8}}, 0x4010)

3m33.201714862s ago: executing program 1 (id=210):
socket$inet6(0xa, 0x2, 0x7)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f00000002c0)=ANY=[], 0x3, 0x6c0, &(0x7f00000009c0)="$eJzs3U9oXWndB/DvuU1vcvtCJzPT6ZQXoWEKg06xTXoZW0GYKiJdFCm6mW1o02lo2hnSjLRF7K06Cq5cySxcjEhdjAgiIoyrwXEtCG5cdV9w56KCGjnnnpvcm9xJbtqmN9bPB06e58nznOf5nV/OOfdfyw3wP+vcm9nfSZFzx8/fLNv377WX7t9rX+vVk0wmaSQT3SJFKyk+Sc6m3PZ1pykyWG7y+oOPion3P2x3WxP1Vo1vbLXfJkNHdpKptUYZ0ky3+s+Rp900X7VV81xcn+8RFWtxl0k7VpcwdqubdNY7G9vuPvp1C+xZd9J7KB80nRxI99G1fB6Q+u6w/Z1hHFoDrS3vTZ3djgUAAAB239DX8v2ee5iHuZmDTyccAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDYU3e8MLOqt0avPpOh9/3+z7zv1m2MO9zG9d7kqvvHcuAMBAAAAAAAAgMdy9GEe5mYO9tqrRfWZ/ytV41D18//ybm5kIcs5kZuZz0pWspy5JNN9EzVvzq+sLM9t3vMnKfdcXV29U+95auiepwbj6mwMdNi/NNg0CAAAAAAAAACeLVOjD/1uzq1//g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtBkezrFtV2qFefTmMiyVSSZjGzNrw51mAfSzf0j8cdBgAAADw9B4t/dyurRfWa/3D1un8q7+Z6VrKYlSxlIZeq9wK6L50bf+60l+7fa18rt80TfvlvO1q/mjHd9x6GrzxbjXhpbY9z+Vq+meOZyYUsZzHfynxWspCZfLWqzafIdP3uxfT9e630Yt0c79mB1oWNsR3tq5fxHakiaeVyFqvYTuRisxd6ox53pG+13zWTDSveLbNTvFEbMUeX6rI8oh/X5d4wXR35/rWMzNa5L7PxfH/eN+d+h+fJxpXm0lh7D+rQ+iplc+NKj5TzA3X5FHK9w7fSBjPR+VHZ6p19h7fOefK5v/zhwpXG9atXLt84vndOo0e08Zxo92Xi5ZEysVRmovMYmZh6nPifnGadje5ddGd3y1eqfQ9mMV/P27mUhZzObOZyJrP5Yk6lnVN9eX1p67xW11pjZ9fasc/WlVaSH9blNv6x2jXaCtuZ/LSOMq/P9+W1/043XfX1/2Y9Sy+MkKWimeFZ+uvQUCb+v66Ua3yv7xFn/DZmYq4vEy9unYmf/av8E95Yun51+cr8OyOu92pdlpfte4P36J8/kQPaufpwy/PlhfKPVTZ+kIGzo+x7sde3IV/N+hOXiXqygb5mquu527fdlVrOdPjusJm6fS8PXaVd9R3p6xt4lpO3s7T2LASAPauRA68daLYetP7U+qD1/daV1vmpr0yemfxMM/v/OPH7fb9u/KLxpeK1fJDv5OC4YwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfBjVu3r84vLS0s78FKGiMM/lVGn/Du0K5eKlpJbt1u7vZxdRf7+JdjT+8TrfROpMmtzqjfJNlinuY4gi//6ru7xNHRBmfiKRzyZIZ0nV/7TStprMWT5Ooe+YI7YDecXLn2zskbt25/fvHa/FsLby1cP3Xm9Bun21+Yu3Py8uLSwmz357ijBHbDxuelAAAAAAAAAAAAwN73NP6XxZBli84YjhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD473TuzezvpMjc7InZsn3/Xnup3Hr19ZETSRpJim8nxSfJ2XS3TPdNV3zaOq8/+Oinr77/YXt9rone+MbAfvvz27+vru7wKDr1lpkk++pye5MjzXexb77ODgPrKtaOsEzYsV7iYNz+EwAA//81Gwqq")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x20000000)
socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xd, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x4, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x1, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000208000/0x2000)=nil, 0x2000, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)

3m31.161691188s ago: executing program 1 (id=214):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x20000810)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)

3m29.977775988s ago: executing program 1 (id=223):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe800000000000000000", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m29.411686967s ago: executing program 35 (id=223):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe800000000000000000", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9.364855179s ago: executing program 7 (id=1160):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x48d2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xa8}, 0x1, 0x7a00}, 0x0)

9.085197354s ago: executing program 7 (id=1163):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]})
mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x1, 0x40000032, r2, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180))
setrlimit(0x9, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES8], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040))
io_setup(0x202, &(0x7f0000000480))
r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000)

8.992388796s ago: executing program 6 (id=1164):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50)
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x29, 0x5, 0x0)
pipe(&(0x7f0000000040))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

8.74262428s ago: executing program 6 (id=1166):
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000002c0)='[&\'%\x00', <r3=>0x0}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r3}, 0x4)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0)
setns(0xffffffffffffffff, 0x8020000)
open_tree(0xffffffffffffff9c, 0x0, 0x9801)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
read$FUSE(r5, &(0x7f0000000700)={0x2020}, 0x2020)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_fuse_handle_req(r5, &(0x7f0000004780)="c8b204ae4efa841432e77cec696c1049cd573e1990ffbd21773773a128be7ea25336351497e58bb91afdf6bcef393dbc7d9ce60648e0525a96fc31a7653b3e65806bf5359dbfc95ce15350a0a03c337d8e9d13dc077c12d9e697d27867aceae82526667b5610f1f28219bef059533418f42e509e1d1c9c7891163f8af8dedbac9bc2d350ac884751bb7b3f38555ade025f111cc1f0ba65442854295600b77fa743127d7e236ce9f47a540584fa7e5b98af3d8216032bdfda77d0b5c540118c8dec2f2ce936c7b17f8beed5bb393e95170d203ca1ba24ae80041f0a5f8f123186883f453f4e6b940eed0af78fc3c9d0b33e809e9761d675d32da33137d7e38f868c98e111f17e4ea762d6eb02dd7553cc25b07070129479efac6227d0f3cf6bd24e6c983040707c6f195d73dc603013e794ad8835a98bceb4c99a1df9cac8b52463dc9d2c244cd282d5505f4057a5b0e9b758088f9c62438243d69961044d9bf82a0d389ee9f483a97235b991622995988eb92dc53f599d8d725b62bdf155e374f20b81c41b9f5204892ad4f0a1fba983c6b86107713cf15ef28eb0b6ac817e88c4444a1cfb6f6e61dd60003140722c0db8943dded3f1af0e50b645b315fb37c54d29893bc9daaff1d7ea6a3bfde9b3906a1efcc73cf660792569fb6c72284ef400c3a1f9b2a0ce3dffef6c2d7387a1bd0bc1337a88f1e0a1d1a921c3cacb2cf5e2c476e6797e59b92a5c0faee43d013e22bdc684483d2a007cf1de81bda02b461392b64ee43967b034b350102fbabac740503a24f43c163664feb3690ffba7541319c10210c2029ec6c9748063086b29e3021ad2541d7cca6f4b7575225583799cbc06568920767669c0c303ce1596694f6826c89ea715fae0e5d7e24fe0cce8cec3cdc4aacb13b88b681852f72e116110d812caa56ef9e901bbd1392cdf6029eebbedffc73a98d3b1432f50f2e0ff0d26d72152980d4854f9afd967de2a5b51331e1093efc4e331270fa79f0649142cf39dc8a7586653410717756319d9964e523e6fa95083481bf564a251c6502aad051c8491b318e5f69228456de5f22ee4cf893f57e672e55bf6d72d1b412664dc3264db7a115858d08adf2150c071cbee6e4fa7fc4cf9bcb6ef52ad18bf53b839665033717393b96cd03e13e02260414207858f8890884b04415b8d7632e0aee5d4b2b022d885952f41f8004b64f28ef8c1c5140b50a2c5dea15a4d52ea7622a92a0c2c19eb031023d89191b6d239e7e5d5e89966391b162f5854c1381362c8619657f9774f7980dd52a862e21aac52743dad05371677f0ce3a61fb28dfdcc91881f74a8a610bbddcaa4ba5349e8ed8291a5e760b461cb6ba8ab3403b9173c3e90a60e450ed8c52568d8acc98f4eabe06387462e446aa6adc6bdc08165ec25d5c07b446e1e542e13aa9a51a4fd345d9eef250397f00217ac257925a86e01100e7790d681248958036123b8a431779ebb105bca0a454c14930bbf51b1f397301360c6b17e3f3ac73e11febbe1f400e47b8fc0849e61242d0b95c3c6c8667c31d4d033a001779712a1cad631f58425fd591aa4b9829a0313ec08c51a7e5896631b1b6884a5d487aa342d07fdc0bf216bd353be05b115253b344d729a1c0718c0128350f0c8da350527a2d0bbdd033bab7dc7a57590939511746a6c628c6ea86d636775880595493425f1aafd61e7d635565d5884ed4abd881279d6d4e734935f72891412714b25b1697a06295901c5e5c91add8248f1b0044ddbfa5dcc3c6064bcedf4b3e08523f936b973c1635f6bfec4c18f5b30d1b7e15937ed9f60d2fd252ffc614a2d18d4976737130f938b03b6333068aa057d72bc7a845b9db918d2ca5df4fce63f80aa7025148305835f8d0c254747c1467673bc76946c23c85706abc4cd58099fdfff73963e2a2aa517996a8edd64291e78a5fcc20f3db7f617fa63b08f685c5aa82f902c9a0aea1675754549f015d859656053192947e979c5eaa5023866f52cfa50cbf8382ea09c321b3cf08aec5979d16ee5593d6bb82f0b1e29f8b8f2b7a328fcf81593ea6128cb8797e97fb8b64d0fc1972e3ba6701c0949f0c7f7101a13ad7bbfb5ab82e2321ac311acd102ba76130c88a6fec619aa9f3e5bff2e9a75074089bdd96852187f770197b887ce4825580420ececd9364f512bfd86d4463801518d95abfdf230d949b08fc6d5e3c1fe8ee44040026b26b8bac74256e94eada8de42a8254331151d07b4b33de53b1b2aaa375846e2e5147b7f8562cc908ba5df9aa4976710e60110fca4959ae9c0e009a1e79b990f53c288a627a7d22fa3f55da7d0b96de5c7d1f96da6b5841c4972a196bcc29bdbebbcddbdb598b610b18407842cae7517e529dd8aaa6634c2ccf55651175c51bc0ef7071873e00d343aedd110e410a02f6f514c54f86744ad728551b64ce900daae68c9bf2e92a352046e8ad4b9f5c43629673f3d751d54860cd13f48d8a00d2835aee95adad5950dd1db94bb18243b87aa932cd63aac1394a42b189c520e2845daee7717d464ff2e1fc3dd7e9c2a2287da3b2e2596724adf592382bed9a00f72c2d9657c993308dae8651d24304dba462bc4387e90806d347b879f68e280841fa0fd518d6c619122992ba04ea37e11baa44863d77e4a245bfbcc87977bfdcf44a046e41e21d491fc33fe08de494ec2bc0ef75d9c6c6ad83ac9b962d0644b3db98380facc3804aa710289035c16e1e72ee17f0c6ab9dadffdd1f80a7b40a332d13bad80d4266f238cdc6cc545c4ad9a8be6a40ea07302cd716d4956771da62fdde7556936b8b8e6ad09cd2d714669730bc4c4de3f047892b92a5dd3fb27c32f0c1fa32d29e27755bb7b39cb8004d0e82bc8d1d0f487db6071574bacf3a06161973fd9ae4b003365165c5754059477a212b6f3ba0ebfcde4b7e45cd39f15ba55d907e63478265e796af97cc0fe7e9f5b826504e4388e46041b956e7819bce73c706fd65366ca8fbef7b972d82926cbf8e6381074532524f96f7abe83a47f805aeaf0f3a98fc5051e6a93fd1e152d27fbb1857990a49de8ba85ce327ced1e99513dd2b7a224dec34416d87297a588899e7edea088af7f65e9d59c2d233aa45dc4cc336cfe91cd767b5ba3b192af12b7b428e25caa2579c158f47ce61ebce16dacee4e6f5a364855226166cae127207b9be7bfd0c31fec4cc5301fab63ea43e2455ec8927293c7ba89444d31e200a99ceb0435fd2dd780173a22b0d18ae2ec669ce712dffa54e4950f9b6f386c91044090c0f87c2e96a244d0d79bae0d90ee9552507b70b2d8a1531fe9267f218d94d9e08f404723b9957ae4863c28b5a9ae7bb781214e6fcf0e2353d5e72a29904de86ee7139cac8e12ee246322c20f3a375f01c3c4af3848c824431923582d1fcea21825161f2930021fd4779e16bbe7b52caace9aeae629d7a6c392eaeb56bd3ad8ef8cf20b3632a53c07bfae77eb7a360c993f7c303df511108883013c7bc6a8c618791497346cdbf1d267282b591eacd20c547fc66acc0a1bcd9cf275b4580ba419bbd5abfbb691208ffc2ad99b45726e351f78aaacfb2486bdc7b913077adc2b0136ddd4fd2c7e97b85b4c47bd22a3ec6e16b1b6d15436b3a4168f86275f8076e2738b21806d57a2066cd4b5af8a47242e882651b2e74f98e1daa4b91f53fa6191171559afb741341c3a36fa7a4950c3d600226d611620eb365fc007b8ca7a86a780630242f79a6ea4bb21941dca01af8f9ec0b1d7bcc187f470ba76d7a3a1e961b8c77ebde806acec3765f6f732da248b201b5a974f9e8b7adde46f152a7710bf0fd37f13747fdbb25901630513a477594f53457200b26433b12286a112362ee2c15fe093531a1a70033194e0fb5703a1096cbe270961fa6c666436407636a89381de006b08b4b4918bcf6f62d2f16cd1fc7387c0da89e547687eb28f23df00dd03b0015a2c611e6c59f4dc5dabc890f73493cc66ca92e9f35c1cdee6cfea581540636bec4b159fb810fc9e4308bd3d5530e2e557c8c28a137d37c5ecdff5d31bee68f9719f2414c9018608a363464fb059a987fd7761da88596c18fb23e63bc81bfd5044f13d6b1df7214aea9521177dca605d67378ca9fa13e38e25220a9270781aef5889f1926f901ec807c638f439ed397a575f4b168602a687848c1ccaa3cb674f042cca7301b7069a18b3a63ea1e05e334e21a7c3a199732af3430c036e6cec0fd394fee6d7567331b0e86147f2b77088295b776d23a35b6ea4afad7f38c72885fe29194661fa7d101e05a2e1672e7cb42a32af78577c77262cadabd0f9d407a9ba76068194f5e05a3cb52068304933edf67b4cf9917d8660930671d11a0bdbd82932bc75511b8765ed93a1e6bc8516de27e666d32caa96b0f64ebcd6e93aecde9bf8f942864e46d31b5f3e2af2949905f49625e1ec72148d837f8e47769e2ea6a46c1f2a35c491194baf10445289c2cea48bb4d1719d8d48aa7b0c138af8fbf0cabee99306ded983086c56392aa6d9cdd6a812d37d14493e2c0227da1b5f46e931a8935750cd0d20d0e54fe2cad638d865351800d2c1bebf54934a5dcf04f2a12ad8905c7ed32d90f4f4e28ba22f2ec3bc952cf35781cd5ad552c1d300ba262e702ff8639489aa42917ec4289f5411bfd59ca494244669824a951661e13aad90389a1e51d168ef7c39c114f5204d1989ba7cea3a32c77c816c72d413299029c7411085ccfcc302676bfa0a22ea76c9f2d19b2d18dbb551c7dc243c35688a8571d6ec9af86efc1a0983e7bb9ed36cb2adb925de30baf4f0c5f6ea601b3eb295e33265b4923bd14e72394c10858c1a5a95714746027642a387d925f72594c5e5af19ca1b6ce27e3bc04157a861546dde53b98d490d004ea4b6630e4f721783905b6cfabcdbe5031cfc916241e823c4e73450a3732bb0bce5f844b71117fec8267dd992902607f41c995485aac8283f6259d8b7729a60525152c2ff976303cd1e774dae278c837659d5111e570bb03a248d8dbb468e664b113eceae4967e406a325dc901fb64b2ae07245f0d3b8423f7debb1e06dcffb5483d2bf35d483620c5ced2ea953b190b6092d79ddbac6caaa185322c87da9604831b717096942ea130cc82bfae19f1358c56fdd8f059363d54eafb47654f274d61246a73fc8a562db067d23cfa773269b5f3d8b2752a05472908c5e7f5f460fb241e178bb2d2a8167e273c82dbca72dfda8812b7b0cb3aaab941d85709d4817892f221efe3e91ac314c7a4cb2dfdf4b5711c01591394206b09994f182ec995e0990a06c2fb9c876527b8b906fcda8e051d621a7550b7391c186daf98e6411b3854cb70450a935c114202d18c24a897939e569cf2938b209ed8af52f6081a4a0dca475d738e8725af71356262112974b637be2141e91044e1cdf085ae490e287f9ea4505904e92cd34e0a8c4523cdc9328e578c7a1b186a280c009724b9cbb436e00de804ba0bb80f0c898831b2c02331a8ad335eb21f8970bd2d254d08f05d58ceb1004e3f0f6de11658749c2d8265b54524c17cc34e8f27c64b0fa0e09ea3aa32ccba06f3a8c308e49e19cd43c4c191229addb82de07a15b6ac41ef546986c7fc584b557b0753e202d6afa20790c343182b319da8d01fe6edef5a02ae38ac44c2d08ba75ac77f49c93cbfaa615187aac7bd9ec7ca545d2c0e7ecd2e67233fb83e9bf47ae8aa0398760a09504fb569fff559e1ebcc1fd939f67d9ba51df5ac82df048780e9b5035aa38f7ffec4c76a7bdc945e829110c37422b63f9a94cd354216bb0a935369fcc648ab89afb1a98e6a4933edab05876c22f9ec95036ec9d3ef47bb8785f04c543c1080db7a9d810219d3311ece74750f5a57e5653c999825d444959717f43060f3a31bf727496ca30c60f3100d89c33365c0d2767a782d37aef371171fc4f96e54f69836a4dbf9a9033d096996b26052658d16caa1a8dac944ac940a744c5b82abe1386bef08469e131ef9313cafb245a8cdfd1e14f12fde2467829e2e27fefed04dbf2c5479e1a162379a8201d1600ea9528f23b49fc24dabc8de48519a736adb544b00a9f8d90319415053a5452254bcd94f621325d02dfbf21748c5d5e6e2ee019b49c8a211aa1e9fe05e9a1409200cf3f2a7adc859a70485e356591e1976ea2cdcbd3b7522d353a430315b4a8c851533f84370f0cde2e236ba79f73e6198ae25ca78b9ac065d7245e3ad1b1011ea2deb6376e495e78fcc6030a5ac559a258090ba4777660e4f5c9365d7812739122ee428ca413571ec41b0b14d14f6b697816f4c179948425fc6067fec33372f227b558dbdef708f2f8a11250d23a26b6f5fee15487c62cb0b72f1dff2bd94d5cc3fd9068574df669f6dc41e48704b1d935b00419a4b9757e5234929fe617cb626c51c5c600cf31d8bd32ef2a076a99469f2476c5d677961536f46a697753114882087953b55137ea100728da6cfac9904569288f269a3e813452724b4f196f4ccd0de5b9df7004f566cee2a88b9619353ea48b39c09fe4f036ec124ab21ad7b458568fa0a245fb4db11ee99ab19054d25fc1f3c49922659ccd73b17a64516189b8f2cc06f95ae59883c77cd6497d1146b8dbc6a613aabff636b61beb237bd190e4837d054db449c5166189ef82aeb24ff5bd96ed77bebc4dc36749d5c539c63d8906d045086631b31a7828d05dc808c6b33fc30085a7172a802bc30f48299b1c5c7445352e21587a0500789f7e7edf4c96f5ad02ecee08372ff60d42cd2347e82542e76bc1378cf05d8946048c35beb0b1c5d52013b059c21c8dd978853d6fbf9f709110d054143a60003511be3d0b3bf6a59f385439cb292bffaa3c95581f141d154b09de499810d7bc8c652dcf095c51a8f0ab016d9a2b18e06712b5a1a703ca6796c683ccb4bfbcc4d0975459518579ad069a303fd63cd1d61423ff03c5a09fe4c82506e635355beef84dc7b2cf8079d2a758912a75977271dd56879a1f1205e7f641729945203e94fb818d15034043b24f40bc9fe17eff6974af942b7713933531cdec848cda612f0ee949bb53411fd5be6befd8dc18e778b2fa916ed6ab9569673159d42013f093361dd4a1cbe3156818bcbb9f065e334b5df0b1e200022ad9724116340cdc422b0ade92388ccfff1a146100455d8950b5880947ff27e6660aa1a4271ca352732eeeaba2abe465ae80d518e6fd14db598e0f50eafb99cf29871df6765a93b1f56de42141472154d4213eefc343b7ea556a4c628ce92175ae176f016a3346476e080a6e8d4ee83638412d6d3e19d1fba4173e47ea75a1e39df300bbfb7829e6340aa0811eb8940b19c873eebf35777997ce2a3767370f8c8e5f9c76d8a61fdc56652a68eca0cf4db69111c6d157898c1c40efad9c64c96b96d362f186b7dda29de8f4264ff90dc6d59709caf042114a5e2299633abb351c43ebeca7b6c5615fe0544efc77a2b59f876c1f7aec09da66da1c8e6989a632b066826d6670f5541ccfcd3ae09f6431f5bfc1b6f9ffc281c0339bf0d018586605c6df5f2cc7420867f17995d5d140b5db26291b375b3e47338e362e26d54dc840d9e3c5f33a3f7729dbd22d7dcfca3820c4d699fae48e81c3a802b0a144893f4697cb9d0017504405639b7ec8a83b99d33b733772b1c40552d537709f9bfd0e87a6c9520dc15244320be928ec84e5b1a8892d2b54f5b69145e5de4745d92ddcb12054d2423847564f36143347f6608351258f0aade462c138bccd87e00a93a499b55d67958396074640fcd843f6fdea33189d6da3216ce4bf88b20cf33a05999dabadbc00a135877d3946706125fa3baeeeeb347dd22c6ce3d1cdaac68686c4bb778dad8214213a18fbc59e1b7e9ce67672b5d329f652745386346cdf1c0687d53ae19fa37e7cacf2ff42754a8b6ba985eb753b3ef5a36aefe0a4742744b7fc5b448d5a650b8b4247d6b44402c8a120dda8f2a07192409dba6539c2df6fdfcc630a4717b03ee15ad3eeb2e142e9c1493e50bc2cad5564d994baeba4c6c7c0220feded275e9f65267871b3e3233b8052ad187bd2390ad63dadc00b4a03e81eb4eb3f972391bf996886a3c9ff889d0a82b0d26f44a595e021abb97286b03127e62178948074d12aba2f30c73c053ef2c9dcdae2ba95bf6591bb5d8f44c2b998d188361959591b5b4318ca39331babce10b3661f9c7b4618af1f4b537dd7a82586ca0e8b621d13f208c3490c26976755d48b5c99448ee9adad5669eb633a7037f88d49d5a759d1d405023c8a6aacc819cd5d7c34ac8ff59fc6fb1588b5bff5c077ed61d82cf20467034b442fa0ebd9fa4773c75408367ee5e21c54651ddda90b51976016592176e65d5d77901a524391c57c24c1310782b0b19e6fef82f9ab5fd7100dbfd8f3ef5ddccb1e40c186078dab4828f914829ce6a8a4beafeab860f3c13c90de7f1c788200097fed8919de104f89b1c9820810315d0089547b4401cc512a7c6f7f6bf5d9f59547384b2efbdb0b21a4b0174248e67d8f66b156c8023d8a70a63cf08bf803a79da4867bc9b87b415aa5517e5f0fac9128f7017f0c49888f41184861c4c29c67d5337eab74482b86ac590929467fe52ac580d0ec313b1bff89d8b43ed824f0e3fe43422f6a285a7b012ab778d8c6b6938db4497d94a261b7790b38355db58d1cf03195f9dbaa317f66d8a655ff1e614ad508fef637729eb5cef174e62c67a8feede1e2709c6a9f81d44d43305f83eb49e391e47f3668cb76f06db464bf842fa3a0d0e53a1e5544d5c29548fece975a4dbd7f9278063df3e8efd5835e201def2e7f58f2a2b35991d16a2f4140015d063c754342cce8e99a8349c0c979b0f97b154bc36aa755054afaa1d6a91cc4c0cf7eb070fbff12ef1ddae90edc1ea6b76f6eff4349e4925854ea92fc8875fb6225b167a8ee9a53d87d6670f1d8e32de8782344f2e68a0c16cc3951b05cee07b4f4482157ba2edc9c2e5cff40e97e0a713a046b8cbce62b23f4f8da6c9359fe4db6ac317d8804e90309e2a12a7410842409df5db6f7651962c3252d9897a37b76649c5843bf6da1f1210b7de24ab379f1273493e13f966d8d471a026845f3cfca04ff58c9451ce0c4531cdba9f49d123388fd866dfc8137502628e3351a446a5f4b2ac93986953fdedd32479ab23af3359a9591ed208e42008577a043edb9cd05f00b72e476c05bbebb2941807862b6f7ba63b4156d95108abf16b80b01d0fc61ab19852b566442a4ec5b0861af9cfc22ad9a9d01327206909a6603d2236eab8d50041daf3e02558619918b616b94fe8d623f21552208686417f7183a73d1036f3588bca96e2a8bc867f6b5c12fb8d3d1aa898f5992d91ab7974001af582bb6e0feb97b2cd384e858ae759f075d1f4201e55450c7e951bd544464880298c32020c532c65f35f3bea1f2043d65fa5c7617ee39dfd6ff33b5cd87dd64871b81335f1becb564dd60c1898cd0f2c6a72e18b0ae03429ae8af454b4f64378322dd53d8c706b1cfdb9133a907af241b6a6809e77c3b5c5f33624f615e341afdf0b15964707fae80e357f0e0b64469153a0a2175f4eded6555033aeb309f7684b0c7f6a2319df5988493fdec01bf746c7fc1551c155bfa6a5564b9978aaee041507e2456706b0a2f7948a00a798a4b8730537c9abbdf6d1041e16be76783b0ccb17cf1f4b9d77264120af1f2f761b7e1b434ca8e74714c2740c33fc6c319cd5edde48993505afa8b58a5c83882705eddcdfed3265fee0cb50165dd4d334162278d587177b35cfd4f523d2a2abab55660e5c6bb98541a35bce9321a8aeb53b49a4402016a500f818a05cbcfd42a872e4df516026d638769724af894c672574d9610956bdf6cef70ca9fc1a24f2df08ebb93a7016da824cda934f503f6ce2537cbcee5de6e83d48f1bccd563707ccc2655b16aa270990450ee1750e5480ac8bcbf18f9d426655da7328245d78e080c397b21c2fb7f9fb7fbf229bbe42404e4e48eb0ea209036de85810f854386d9d249a27c53a3ceec02482abdcb49357229ce29410d597c963eb3e3d0ad902700b904393f6874ac687decd0092295a119af6cb9c2a0a67597f9ac928b93781c21cb7b6cfbda07373ded6c3cfd5f46529e8652824c698c332a6d8d3ac756fbf6decea2ddbc7bd5e3b6e4a21f47baa14211d2efda31f925f11110b3a3e7650a7271a114d44327d3bbe3ef692463107367242c367679bc06f126dea44cf72341433c116eaab562975123bda76a1c4d25e6a3b603278eb3d7c6a07e83f3ace396f60afb9b322834fdbca853ab7e4f72a2eb5dd14331e6f4c9ce5d5e792e4ed8da62190d8f53dd21ba7239b7e89fd1c79126f24f9f5c4885abc2864187d7935d64fbd339005ef6cad19cdb933dc8e34ef691cae4c03a63c5b8243e9a933b82aebbff89eb3ef83362735e5a839418f71b98d0b6773dc501260aa64a5e066164070e97509e1bec8b17cccbc182640207453af2bb121cdbeb10208792381cd575ad59cfdcea1d82d5b9044802978ddf1c233e537a9f8b645abe709fbb2948b42a39bda8a3d9c4940f0c77aa625d380467273bcd8c3efff2c8dcbb3416ee6ab1da2b5905d772f9f4755ce256ef3393b5a2d4608484ae38ec0336ea5aae20fd09a74667d0abfa26e8ee4a4c3bd0d63b6d35b77e8249bf85df34399f5dcc29eda14a1f46cd627c2f4847e9522d55c6c0b426e3af4cc96693aff939012761ba7278618406cf27810b230349f343e753facccc975423111b04cf34d52955615abefa9e46bf736de14a7195164651389f78aa8c67f6b6c8369a47f21798e8ac01b6266edea990ecffe26f980ca5aa6e4650202d583b138c452cdcc6abb8039a571363975adc14c4f4c4892f8eef1c89ea62caa0bed2cbe9ab135e803f359a76c67b5e7cbc4a4f0c8ec8cacccf5ad90da7f951e6bfdac74810938744b5721fa41effc3a7df335d9907abebdcd013f911731b6801108df79c39f5365df1800cc46c6e5b0c9ecb4f43378be567d91a913f503044b4589889b38bc458e2143b6d4c947a12c23039e0236e93d90717e5834d254e40c1cd766ae998e299045eea890bfa03c7e76826db6e28014902809a34d509149ec5877aba852aa899e6eb1093c27b4797b0639d5f2ebc4d2d043281c1b90cd90e6d31220d44a11321665ee4a3afa1cdc78356da1fb4478a6779bc89c29094a197edfff59be07c5c3ae533cf3bfbf61de38d92440e5c8c941397983883a6c81ff6a28dfc96f9953f285ee7b32db71d15f5795cbe5ca728a346c0f38d902e1adf727a058d00c64a43c9f0d775a53714196d58f5573b55540d1e9f117143a218110708d2d1fe7fa5d3970c0d57a6313e5881156ae06ad1a9bcdaff524992a4424b8a7e4af245dede9bd6a3d878d5ba88145a7e71f14c53782fd35569ceadca8498e149fe0db62f13615cb5c24bfc61a7e7287c1ac35dedd38d57e5e6a5c9bc9fbfb6ac47fcab799714047ffceb3855d212cbe53d6816a4ac1386d43316f179fdd87d5f2ee5d71ea49b815693905dfb96be132", 0x2000, &(0x7f0000007100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.732422665s ago: executing program 8 (id=1172):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140))

6.401690951s ago: executing program 5 (id=1174):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r1 = fanotify_init(0x200, 0x0)
readv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/100, 0x38}], 0x1)
sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
setitimer(0x2, &(0x7f0000000540)={{}, {0x0, 0x2710}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x25, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0)

6.130452275s ago: executing program 3 (id=1175):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}]}, 0x98}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ppoll(&(0x7f0000000280)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x80006, 0x1, "403c1f951000007e4f0000000000ff726802de"})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=';cpu '], 0x5)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xb)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x7, 0x80000002, 0x0, 0x10002, 0x7, "441588b82c05000800000004012556c6b60004"})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.365913825s ago: executing program 8 (id=1176):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50)
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x29, 0x5, 0x0)
pipe(&(0x7f0000000040))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

4.247352137s ago: executing program 5 (id=1177):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100"])
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0)

3.980129472s ago: executing program 3 (id=1178):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x4000840)

3.921929953s ago: executing program 8 (id=1179):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
memfd_secret(0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xce}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYRES16=r0], 0x1000f)

3.829332584s ago: executing program 5 (id=1180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)

3.782837475s ago: executing program 6 (id=1181):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x8}}}, 0x24}}, 0x0)

3.47887983s ago: executing program 5 (id=1182):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="f36db9d90800000f322e6764260f350f79330f8267333a99c4e17ff057ee66baf80cb8ace60d8aef66bafc0c66ed670f01c8f365f0812109000000f3260fa520", 0x40}], 0x1, 0x51, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))

3.374009922s ago: executing program 6 (id=1183):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92513ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aa38c41a86fd19d8dc6245a1bbee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c10b1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cb"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3)
write$binfmt_misc(r1, &(0x7f0000000140), 0xff79)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

3.177202646s ago: executing program 6 (id=1184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, 0x0, 0x0)
listen(r0, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

2.997919339s ago: executing program 7 (id=1185):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x48d2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xa8}, 0x1, 0x7a00}, 0x0)

2.90637092s ago: executing program 8 (id=1186):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000034c0), 0x2, 0x0)
readv(r0, &(0x7f0000004940)=[{&(0x7f0000003500)=""/156, 0x9c}, {&(0x7f00000035c0)=""/125, 0x7d}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x92}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}})
set_mempolicy(0x6, &(0x7f0000000000)=0x40006, 0x3)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000080)="f2a2", 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
set_mempolicy(0x0, 0x0, 0x5)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000005c0), 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'team0\x00'})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

2.573451346s ago: executing program 7 (id=1187):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x40000)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xfffefffe}, {0x4, 0x0, 0x0, 0x3b03}, {0x6, 0x1}]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x4000, 0xffffffff, 0x5, 0x2, 0x0, [{0x3, 0x8, 0x2, '\x00', 0xb2}, {0x8, 0xe, 0x9, '\x00', 0x7}, {0xfa, 0xff, 0x5, '\x00', 0x8}, {0x0, 0xc, 0x8, '\x00', 0x8}, {0x5, 0x3, 0xb, '\x00', 0x6}, {0x7, 0x3, 0x0, '\x00', 0x8c}, {0x10, 0x27, 0x4, '\x00', 0xf9}, {0x7, 0x8, 0x1, '\x00', 0x58}, {0x8, 0x3, 0x1, '\x00', 0xf}, {0xf7, 0x8a, 0x8, '\x00', 0x81}, {0x4, 0x10, 0x6, '\x00', 0xd}, {0xde, 0x9, 0x7, '\x00', 0x4}, {0x0, 0xf, 0x8, '\x00', 0x9}, {0x4, 0x4, 0x80}, {0x4, 0x7f, 0x7, '\x00', 0x10}, {0x9, 0x4, 0xc, '\x00', 0x5}, {0x3, 0x9, 0x5, '\x00', 0x2}, {0x6, 0x3, 0x35, '\x00', 0xc}, {0x7, 0x8, 0x8, '\x00', 0x3}, {0x9, 0x40, 0xa, '\x00', 0x40}, {0x5, 0x5, 0x18, '\x00', 0xa}, {0x7, 0x0, 0x0, '\x00', 0x4}, {0xfd, 0x9, 0xc3, '\x00', 0x4}, {0x81, 0x5b, 0x0, '\x00', 0x2}]}})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r7=>0x0})
sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r9 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2)
write$FUSE_ATTR(r9, &(0x7f0000000580)={0x78, 0x0, 0x0, {0x2, 0x1, 0x0, {0x0, 0x8000000000000000, 0x8, 0x0, 0x9, 0x4, 0x9, 0x7f, 0x9, 0x4000, 0x6, 0x0, 0xffffffffffffffff, 0x15d, 0x2}}}, 0x78)
write$FUSE_INIT(r9, &(0x7f0000000140)={0x50}, 0xffd3)
read$FUSE(r9, &(0x7f0000000600)={0x2020}, 0x2020)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x34, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0xeeee8000, 0x3c4210})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r10 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000001980)='\xc9$#\xf1\xfe\xb8V\x00\xe9Ps\xfe\xf7\x80\xa2\xb2\xec\';iId\xd2\x1e\xe2g/\xc9\xba\x1d\xc9o9\x89]\xfe \x04\x13\xf0^Kc\rQQ\xf6\x81\'\xf6VM%\x9a\xb3\xeb\xcd;\x99{\xa4\x89/\x80j\x8d\x94\xb7\x89\x11\xc2\b\xb2\xc2\xa1\xaa\x1fQ\xb8\xc9\xc0\xbf\x9f\xf0\a\x04xb;\xc4dQ\x01S\xab\x95H\xadIK\xde\xd7\xaf\xcf\x11\xc2\x0eH\ni\xc1_\xf0\x91_1Z\xca\x7f\xcdn\x85\x83K\xac\xae0Q\x7fr\xe6v\xa2|\xcc\xf1(\xf0\xc1\xa6o\xa2\x87#F\x9d\xb2\x0f\x90\xa6!\x99\x0e\xd9\xa8U\xa5\xe1\x85\xcd&B\x90\xfb\x83\xa1\x1a\xd4[\x05S\xebm\xb3\xef\x19K\x16Gp,\xf2\x82D=', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0)

2.535786697s ago: executing program 8 (id=1188):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}]}, 0x98}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ppoll(&(0x7f0000000280)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x80006, 0x1, "403c1f951000007e4f0000000000ff726802de"})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=';cpu '], 0x5)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xb)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x7, 0x80000002, 0x0, 0x10002, 0x7, "441588b82c05000800000004012556c6b60004"})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.218092592s ago: executing program 3 (id=1189):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50)
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x29, 0x5, 0x0)
pipe(&(0x7f0000000040))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

1.110610891s ago: executing program 6 (id=1190):
socket$nl_route(0x10, 0x3, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
syz_usb_connect(0x0, 0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000081bfe708460d1220577000000001090222002a0000000009040000011a137d00090500000000000000070567"], 0x0)
munmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
rt_sigprocmask(0x0, 0x0, 0xfffffffffffffffe, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
r5 = dup(r4)
write$P9_RGETLOCK(r5, &(0x7f00000003c0)=ANY=[], 0x2)
r6 = syz_io_uring_setup(0x6d8a, &(0x7f00000004c0)={0x0, 0x37b3, 0x2, 0x4}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x20, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r9}})
io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0)
userfaultfd(0x80801)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080004000000000000000000000000180000000000000000000000000000009500000000000000763c5a3225a3406a3d41d4df4f1ec3f458ce0f1b38e004686d30d4b5891d5943055de751af3d13bcce1a89ef98a05fb80db704a1d0000041018ea9d3c63c17e199f098c84a1b3434d84360a8020143873437cec844ec90589c42c93a0275c16962b9ffffffffc909acaa1dfb0d1e75dd7e0bc7f4a0a43a685919e961bbe9b2bba03632724340fd31e30a2f2b2816ef9f69fbab73da584fce001618a3fd7d9d783e296b7b6d8e4e3b3aa2"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r10, 0xffffffffffffffff, 0x36, 0x0, @void}, 0x10)
syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x80500)

1.110234161s ago: executing program 3 (id=1191):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x0, 0x0})

1.039548162s ago: executing program 5 (id=1192):
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r0, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x2, 0x6, 0x5, 0x0, 0x8}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x10d, 0x3}]})

886.120705ms ago: executing program 3 (id=1193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)

778.883857ms ago: executing program 7 (id=1194):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x8}}}, 0x24}}, 0x0)

661.867929ms ago: executing program 8 (id=1195):
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x107142, 0x0)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e6400000008000700000000000800"], 0x4c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x6, 0x7f}, 0x100, './file0\x00'})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe)
sendto$inet6(r7, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r7, 0x1)

386.078704ms ago: executing program 7 (id=1196):
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902"], 0x0)
memfd_secret(0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xce}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYRES16=r0], 0x1000f)

69.319709ms ago: executing program 3 (id=1197):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x48d2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0)

0s ago: executing program 5 (id=1198):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = dup(r0)
io_setup(0x19, &(0x7f00000009c0)=<r2=>0x0)
r3 = syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x0, 0x1}, &(0x7f0000000780)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

kernel console output (not intermixed with test programs):

slave_1 added
[  150.545856][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.575838][ T5026] loop1: detected capacity change from 0 to 512
[  150.598407][ T5026] EXT4-fs: Ignoring removed i_version option
[  150.607894][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.628384][ T5026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  150.656330][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.677511][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.690254][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.704387][ T5026] EXT4-fs (loop1): 1 truncate cleaned up
[  150.713114][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  150.718147][ T5026] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  150.745770][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  150.810899][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.837287][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.871857][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.897027][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.917754][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.919119][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  150.945781][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  150.970724][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.983260][ T4886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.990694][ T4886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.019086][ T4886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.070887][ T4643] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.107251][ T4643] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.116125][ T4643] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.143093][ T4643] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.161065][ T4886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.173258][ T4886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.204464][ T4886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.320887][ T4886] device hsr_slave_0 entered promiscuous mode
[  151.348501][ T4886] device hsr_slave_1 entered promiscuous mode
[  151.566235][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.597658][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.664098][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.709298][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.734121][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.766147][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  151.853026][ T4886] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  151.956404][ T4886] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  152.019610][ T4886] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  152.834966][ T4886] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  152.845059][ T5047] netlink: 'syz.5.66': attribute type 2 has an invalid length.
[  152.889794][ T5045] netlink: 'syz.2.145': attribute type 10 has an invalid length.
[  153.087772][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  153.096294][ T5045] netlink: 164 bytes leftover after parsing attributes in process `syz.2.145'.
[  153.348339][ T4886] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.402186][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  153.428437][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.444172][ T4886] 8021q: adding VLAN 0 to HW filter on device team0
[  153.510287][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  153.548709][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.567741][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.574912][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.638187][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  153.720008][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  153.749585][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  153.779231][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.786496][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.812880][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  153.834854][ T5064] netlink: 'syz.2.140': attribute type 2 has an invalid length.
[  153.862600][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  153.908773][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  153.947446][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  153.990766][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  154.067915][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  154.088868][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  154.130958][ T5071] loop1: detected capacity change from 0 to 128
[  154.175425][ T5071] EXT4-fs (loop1): Test dummy encryption mode enabled
[  154.185268][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  154.201908][ T5072] loop2: detected capacity change from 0 to 1024
[  154.238382][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  154.247002][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  154.248188][ T5071] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  154.298431][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  154.823952][ T5071] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.985724][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.108696][ T4255] hfsplus: bad catalog entry type
[  155.375195][ T5057] loop5: detected capacity change from 0 to 40427
[  155.395260][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  155.474866][ T5057] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff
[  155.560217][ T5057] F2FS-fs (loop5): invalid crc value
[  155.595386][ T5057] F2FS-fs (loop5): Found nat_bits in checkpoint
[  155.642337][   T41] hfsplus: b-tree write err: -5, ino 4
[  155.701183][ T5086] loop1: detected capacity change from 0 to 512
[  155.764486][ T5086] EXT4-fs: Ignoring removed i_version option
[  155.833892][ T4442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.847048][ T5086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  155.946027][ T5057] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  155.955790][ T5086] EXT4-fs (loop1): 1 truncate cleaned up
[  155.994018][ T4442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.007603][ T5086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  156.228542][ T4442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.283119][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  156.303371][ T4643] syz-executor: attempt to access beyond end of device
[  156.303371][ T4643] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  156.424253][ T4442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.500761][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.547558][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.589752][ T4886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.637441][ T5105] netlink: 'syz.1.149': attribute type 2 has an invalid length.
[  157.252976][ T5114] netlink: 'syz.1.152': attribute type 10 has an invalid length.
[  157.293454][ T5094] loop3: detected capacity change from 0 to 32768
[  157.356957][ T5094] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.136 (5094)
[  157.466709][ T5094] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  157.507506][ T5094] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  157.571123][ T5094] BTRFS info (device loop3): enabling disk space caching
[  157.597842][ T5094] BTRFS info (device loop3): enabling auto defrag
[  157.604446][ T5094] BTRFS info (device loop3): doing ref verification
[  157.624025][ T5094] BTRFS info (device loop3): use no compression
[  157.631967][ T5094] BTRFS info (device loop3): force clearing of disk cache
[  157.647398][ T5094] BTRFS info (device loop3): disabling disk space caching
[  157.688173][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  157.701648][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  157.710966][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  157.721529][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  157.733241][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  157.742228][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  157.976410][ T5094] BTRFS info (device loop3): enabling ssd optimizations
[  158.024522][ T5094] BTRFS info (device loop3): rebuilding free space tree
[  158.091079][ T5094] BTRFS info (device loop3): disabling free space tree
[  158.112080][ T5094] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  158.144510][ T5156] loop1: detected capacity change from 0 to 1024
[  158.147570][ T5094] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  159.228771][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.247793][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.266439][ T4268] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.298764][   T41] hfsplus: b-tree write err: -5, ino 4
[  159.450993][ T5168] loop1: detected capacity change from 0 to 512
[  159.568265][ T5168] EXT4-fs: Ignoring removed i_version option
[  159.604615][ T5168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  159.897230][ T4275] Bluetooth: hci0: command 0x0409 tx timeout
[  160.037528][ T5168] EXT4-fs (loop1): 1 truncate cleaned up
[  160.052247][ T5168] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  160.983036][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  161.008269][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  161.048002][ T4886] device veth0_vlan entered promiscuous mode
[  161.144616][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  161.285609][ T4442] bond0: (slave wlan1): Releasing backup interface
[  161.373327][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  161.382123][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  161.450920][ T5184] netlink: 'syz.3.155': attribute type 2 has an invalid length.
[  161.463757][ T5186] netlink: 'syz.1.159': attribute type 2 has an invalid length.
[  161.675847][ T4886] device veth1_vlan entered promiscuous mode
[  161.702390][ T5190] netlink: 'syz.1.161': attribute type 10 has an invalid length.
[  161.725972][ T5123] chnl_net:caif_netlink_parms(): no params data found
[  161.830006][ T4442] device hsr_slave_0 left promiscuous mode
[  161.886984][ T4442] device hsr_slave_1 left promiscuous mode
[  161.989527][ T4442] device veth1_macvtap left promiscuous mode
[  161.990144][ T5196] loop1: detected capacity change from 0 to 128
[  161.995635][ T4442] device veth0_macvtap left promiscuous mode
[  162.027436][ T4442] device veth1_vlan left promiscuous mode
[  162.030334][ T4272] Bluetooth: hci0: command 0x041b tx timeout
[  162.033772][ T4442] device veth0_vlan left promiscuous mode
[  162.040190][ T5196] EXT4-fs (loop1): Test dummy encryption mode enabled
[  162.093480][ T5196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  162.123256][ T5196] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  162.356303][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  163.251646][ T5207] loop5: detected capacity change from 0 to 40427
[  163.273474][ T5207] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff
[  163.328776][ T5207] F2FS-fs (loop5): invalid crc value
[  163.337865][ T5207] F2FS-fs (loop5): Found nat_bits in checkpoint
[  163.433238][ T5207] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  163.656973][ T4643] syz-executor: attempt to access beyond end of device
[  163.656973][ T4643] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  164.117200][ T4272] Bluetooth: hci0: command 0x040f tx timeout
[  164.256748][ T5228] loop5: detected capacity change from 0 to 1024
[  165.142791][ T5232] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  165.151880][ T5234] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  165.184204][   T11] hfsplus: b-tree write err: -5, ino 4
[  165.353883][ T5238] loop5: detected capacity change from 0 to 512
[  165.391479][ T5238] EXT4-fs: Ignoring removed i_version option
[  165.443213][ T5238] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  165.512519][ T5238] EXT4-fs (loop5): 1 truncate cleaned up
[  165.530950][ T5238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  166.198466][ T4272] Bluetooth: hci0: command 0x0419 tx timeout
[  166.988742][ T4643] EXT4-fs (loop5): unmounting filesystem.
[  167.246517][ T4442] bond0 (unregistering): Released all slaves
[  167.349614][ T4886] device veth0_macvtap entered promiscuous mode
[  167.384515][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  167.398511][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  167.411418][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  167.461950][ T5244] netlink: 'syz.5.169': attribute type 2 has an invalid length.
[  167.500320][ T4886] device veth1_macvtap entered promiscuous mode
[  167.580927][ T5248] netlink: 'syz.3.171': attribute type 10 has an invalid length.
[  167.703406][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  167.738502][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.757424][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.774144][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.810433][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.838683][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.850512][ T5254] loop3: detected capacity change from 0 to 128
[  167.856211][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.872185][ T5254] EXT4-fs (loop3): Test dummy encryption mode enabled
[  167.904071][ T4886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.913816][ T5254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  167.935274][ T5254] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  167.950967][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.967390][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.012233][ T5123] device bridge_slave_0 entered promiscuous mode
[  168.049829][ T5252] netlink: 'syz.5.172': attribute type 2 has an invalid length.
[  168.065234][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  168.084958][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  168.110597][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.131603][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.143944][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.191461][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.203913][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.215122][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.240071][ T4886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.253274][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.263123][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.264801][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  168.273438][ T5123] device bridge_slave_1 entered promiscuous mode
[  168.330619][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  168.365207][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.460613][ T4886] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.493921][ T4886] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.517451][ T4886] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.545003][ T4886] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.652070][ T5270] loop1: detected capacity change from 0 to 1024
[  168.672722][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.782042][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.748703][   T46] hfsplus: b-tree write err: -5, ino 4
[  169.818005][ T5123] team0: Port device team_slave_0 added
[  169.861188][ T5123] team0: Port device team_slave_1 added
[  169.895211][ T4571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.935976][ T4571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.035661][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  170.064618][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.073998][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.101653][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.105048][ T5260] loop5: detected capacity change from 0 to 40427
[  170.124918][ T5260] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff
[  170.135054][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.143938][ T5260] F2FS-fs (loop5): invalid crc value
[  170.150134][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.186227][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.210401][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.222169][ T5260] F2FS-fs (loop5): Found nat_bits in checkpoint
[  170.224661][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.261647][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  170.297311][ T5123] device hsr_slave_0 entered promiscuous mode
[  170.322341][ T5123] device hsr_slave_1 entered promiscuous mode
[  170.335260][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.349675][ T5123] Cannot create hsr debugfs directory
[  170.387275][ T5260] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  170.625550][ T5297] loop1: detected capacity change from 0 to 1024
[  170.711254][ T4643] syz-executor: attempt to access beyond end of device
[  170.711254][ T4643] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  170.938974][ T5302] loop6: detected capacity change from 0 to 512
[  170.967836][ T5302] EXT4-fs: Ignoring removed i_version option
[  170.991451][ T5302] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  171.049539][ T5123] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  171.135785][ T5302] EXT4-fs (loop6): 1 truncate cleaned up
[  171.142182][ T5302] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  171.207662][ T5123] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  171.271567][ T5123] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  171.679811][ T5123] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  171.797517][ T4886] EXT4-fs (loop6): unmounting filesystem.
[  172.146669][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.176861][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.188494][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.220070][ T5123] 8021q: adding VLAN 0 to HW filter on device team0
[  172.280649][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  173.666412][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  173.747488][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.755109][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.818029][ T5324] netlink: 'syz.3.181': attribute type 2 has an invalid length.
[  173.866924][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  173.899321][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  173.971000][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  173.994968][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.002281][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.122868][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  174.158978][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  174.218304][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  174.246096][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  174.301198][ T5329] netlink: 'syz.3.182': attribute type 10 has an invalid length.
[  174.311493][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  174.335245][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  174.395900][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  174.418536][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  174.438917][ T4442] hfsplus: b-tree write err: -5, ino 4
[  174.450241][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  174.477024][ T5123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.563053][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  174.629937][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  174.646901][ T5342] loop1: detected capacity change from 0 to 128
[  174.654442][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  174.762402][ T5342] EXT4-fs (loop1): Test dummy encryption mode enabled
[  174.853753][ T5342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  174.915110][ T5342] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.942177][ T5348] loop3: detected capacity change from 0 to 2048
[  175.020341][ T5348]  loop3: p1 < > p2 p3 p4 < p5 >
[  175.044311][ T5348] loop3: p2 size 4194304 extends beyond EOD, truncated
[  175.081274][ T5348] loop3: p3 start 4284289 is beyond EOD, truncated
[  175.087730][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  175.118930][ T5348] loop3: p5 size 4194304 extends beyond EOD, truncated
[  175.533451][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.568442][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.648129][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.653324][ T5359] loop1: detected capacity change from 0 to 512
[  175.758148][ T5359] EXT4-fs: Ignoring removed i_version option
[  175.807306][ T5359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  175.863743][ T5359] EXT4-fs (loop1): 1 truncate cleaned up
[  175.880235][ T5359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  175.961796][ T4256] EXT4-fs (loop1): unmounting filesystem.
[  176.182984][ T5374] netlink: 'syz.6.183': attribute type 2 has an invalid length.
[  176.502707][ T5383] netlink: 'syz.1.194': attribute type 2 has an invalid length.
[  177.001774][ T5351] loop5: detected capacity change from 0 to 40427
[  177.067111][ T5351] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff
[  177.151766][ T5351] F2FS-fs (loop5): invalid crc value
[  177.781286][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  177.791459][ T5351] F2FS-fs (loop5): Found nat_bits in checkpoint
[  177.828270][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  177.924505][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  177.943800][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  177.971063][ T5123] device veth0_vlan entered promiscuous mode
[  177.988354][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.030255][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.068681][ T5123] device veth1_vlan entered promiscuous mode
[  178.186071][ T5402] loop3: detected capacity change from 0 to 1024
[  178.222162][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  178.236330][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  178.277884][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.344016][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  179.107372][ T5123] device veth0_macvtap entered promiscuous mode
[  179.230304][ T5123] device veth1_macvtap entered promiscuous mode
[  179.332681][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.341242][ T4511] hfsplus: b-tree write err: -5, ino 4
[  179.377248][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.447284][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.483213][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.493642][ T5392] loop1: detected capacity change from 0 to 32768
[  179.501763][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.522684][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.554272][ T5392] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.196 (5392)
[  179.562192][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.623359][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.664002][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.703756][ T5392] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.737332][ T5392] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  179.746223][ T5392] BTRFS info (device loop1): disabling tree log
[  179.753438][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  179.780140][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  179.807387][ T5392] BTRFS info (device loop1): using free space tree
[  179.819250][ T5412] netlink: 'syz.5.199': attribute type 10 has an invalid length.
[  179.845018][ T5419] loop3: detected capacity change from 0 to 128
[  179.876110][ T5419] EXT4-fs (loop3): Test dummy encryption mode enabled
[  179.941433][ T5419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  179.965383][ T5419] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  180.178973][ T5392] BTRFS error (device loop1): open_ctree failed: -12
[  180.195151][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  180.210482][ T5412] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  180.366496][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.391386][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.411696][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.417406][ T5446] loop3: detected capacity change from 0 to 512
[  180.434357][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.446519][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.464971][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.475916][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.493063][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.500616][ T5446] EXT4-fs: Ignoring removed i_version option
[  180.514160][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.541737][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  180.544457][ T5446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  180.557160][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  180.589277][ T5123] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.624322][ T5446] EXT4-fs (loop3): 1 truncate cleaned up
[  180.630943][ T5446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  180.668276][ T5123] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.677497][ T5123] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.686667][ T5123] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.699018][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  180.791702][ T5446] EXT4-fs (loop3): shut down requested (1)
[  180.894469][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.938667][ T5452] netlink: 'syz.5.204': attribute type 2 has an invalid length.
[  180.954571][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.013669][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  181.014421][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  181.028975][ T5235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.042637][ T5456] netlink: 'syz.1.206': attribute type 2 has an invalid length.
[  181.057737][ T5235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.101526][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  181.380318][ T5470] loop0: detected capacity change from 0 to 128
[  181.419582][ T5470]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  181.449939][ T5470] loop0: partition table partially beyond EOD, truncated
[  181.493662][ T5470] loop0: p1 size 348879409 extends beyond EOD, truncated
[  182.616992][ T5486] loop1: detected capacity change from 0 to 1024
[  182.720984][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  183.728442][ T5496] netlink: 'syz.7.213': attribute type 10 has an invalid length.
[  183.785778][ T5500] loop3: detected capacity change from 0 to 128
[  183.840566][ T5500] EXT4-fs (loop3): Test dummy encryption mode enabled
[  183.855200][ T5496] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  183.873906][ T4256] hfsplus: bad catalog entry type
[  183.881247][ T5500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  183.962063][ T5500] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  184.082266][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  184.167601][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  184.368061][ T5515] netlink: 'syz.3.217': attribute type 2 has an invalid length.
[  184.578181][ T5519] netlink: 'syz.6.219': attribute type 2 has an invalid length.
[  184.712652][   T27] audit: type=1326 audit(1743815350.049:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76178d169 code=0x7ffc0000
[  184.835839][   T27] audit: type=1326 audit(1743815350.049:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76178d169 code=0x7ffc0000
[  184.912832][   T56] hfsplus: b-tree write err: -5, ino 4
[  184.917222][   T27] audit: type=1326 audit(1743815350.049:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd76178d169 code=0x7ffc0000
[  185.057475][   T27] audit: type=1326 audit(1743815350.049:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76178d169 code=0x7ffc0000
[  185.098721][ T5493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.181078][   T27] audit: type=1326 audit(1743815350.049:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76178d169 code=0x7ffc0000
[  185.203666][    C1] vkms_vblank_simulate: vblank timer overrun
[  185.239807][   T27] audit: type=1326 audit(1743815350.049:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd76178d169 code=0x7ffc0000
[  185.307218][   T27] audit: type=1326 audit(1743815350.049:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76178d169 code=0x7ffc0000
[  185.371412][ T5493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.387338][   T27] audit: type=1326 audit(1743815350.049:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd76178bc1f code=0x7ffc0000
[  185.487268][   T27] audit: type=1326 audit(1743815350.049:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76178d169 code=0x7ffc0000
[  185.557294][   T27] audit: type=1326 audit(1743815350.049:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.7.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd76178d169 code=0x7ffc0000
[  185.632196][ T5493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.882382][ T5535] loop6: detected capacity change from 0 to 1024
[  185.901062][ T5493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.779223][ T5541] loop5: detected capacity change from 0 to 512
[  186.786337][ T5541] EXT4-fs: Ignoring removed i_version option
[  186.871438][ T5541] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  186.958695][ T4511] hfsplus: b-tree write err: -5, ino 4
[  187.030129][ T5551] loop7: detected capacity change from 0 to 128
[  187.046589][ T5551] EXT4-fs (loop7): Test dummy encryption mode enabled
[  187.117874][ T5541] EXT4-fs (loop5): 1 truncate cleaned up
[  187.123735][ T5541] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  187.143379][ T5551] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  187.159177][ T5541] EXT4-fs (loop5): shut down requested (1)
[  187.194194][ T5551] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  187.298375][ T5558] netlink: 'syz.3.229': attribute type 10 has an invalid length.
[  187.711592][ T5123] EXT4-fs (loop7): unmounting filesystem.
[  187.821821][ T4643] EXT4-fs (loop5): unmounting filesystem.
[  188.485554][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.495532][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.506074][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.515897][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.524592][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  188.533428][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.760238][ T5575] netlink: 'syz.3.231': attribute type 2 has an invalid length.
[  189.488375][ T5592] loop3: detected capacity change from 0 to 1024
[  190.541219][ T4511] hfsplus: b-tree write err: -5, ino 4
[  190.587576][ T4272] Bluetooth: hci1: command 0x0409 tx timeout
[  190.748866][ T5574] device sit0 entered promiscuous mode
[  190.778781][ T5574] netlink: 'syz.5.232': attribute type 1 has an invalid length.
[  190.786899][ T5574] netlink: 1 bytes leftover after parsing attributes in process `syz.5.232'.
[  191.138856][ T5563] chnl_net:caif_netlink_parms(): no params data found
[  191.622480][ T5493] bond0: (slave wlan1): Releasing backup interface
[  191.680742][ T5620] loop5: detected capacity change from 0 to 512
[  191.712549][ T5620] EXT4-fs: Ignoring removed i_version option
[  191.745393][ T5620] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  191.821083][ T5620] EXT4-fs (loop5): 1 truncate cleaned up
[  191.831697][ T5620] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  191.865808][ T5614] netlink: 'syz.6.234': attribute type 2 has an invalid length.
[  191.891983][ T5618] netlink: 'syz.3.241': attribute type 10 has an invalid length.
[  191.935102][ T5620] EXT4-fs (loop5): shut down requested (1)
[  192.120391][ T5632] netlink: 260 bytes leftover after parsing attributes in process `syz.6.243'.
[  192.135071][ T5563] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.142612][ T5563] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.154850][ T5563] device bridge_slave_0 entered promiscuous mode
[  192.238292][ T4643] EXT4-fs (loop5): unmounting filesystem.
[  192.246015][ T5493] device hsr_slave_0 left promiscuous mode
[  192.293208][ T5493] device hsr_slave_1 left promiscuous mode
[  192.302606][ T5493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.320542][ T5493] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.332750][ T5493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.350722][ T5493] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.408540][ T5493] device bridge_slave_1 left promiscuous mode
[  192.431154][ T5493] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.466034][ T5493] device bridge_slave_0 left promiscuous mode
[  192.475468][ T5493] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.687221][ T4272] Bluetooth: hci1: command 0x041b tx timeout
[  193.685491][ T5493] device veth1_macvtap left promiscuous mode
[  193.725231][ T5493] device veth0_macvtap left promiscuous mode
[  193.752264][ T5493] device veth1_vlan left promiscuous mode
[  193.762344][ T5493] device veth0_vlan left promiscuous mode
[  194.256592][ T5649] loop7: detected capacity change from 0 to 128
[  194.309747][ T5649] EXT4-fs (loop7): Test dummy encryption mode enabled
[  194.321050][ T5649] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  194.330341][ T5649] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.434055][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.440598][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.465840][ T5123] EXT4-fs (loop7): unmounting filesystem.
[  194.733430][ T5654] loop7: detected capacity change from 0 to 1024
[  194.747723][ T4275] Bluetooth: hci1: command 0x040f tx timeout
[  195.902302][ T5493] team0 (unregistering): Port device team_slave_1 removed
[  195.959625][ T5493] team0 (unregistering): Port device team_slave_0 removed
[  196.004701][ T5493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.057009][ T5493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.568813][ T5493] bond0 (unregistering): Released all slaves
[  196.642003][ T5563] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.649563][ T5563] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.659395][ T5563] device bridge_slave_1 entered promiscuous mode
[  196.775455][ T5657] netlink: 'syz.5.246': attribute type 2 has an invalid length.
[  196.828241][ T4275] Bluetooth: hci1: command 0x0419 tx timeout
[  196.839591][ T5406] hfsplus: b-tree write err: -5, ino 4
[  196.851544][ T5563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.892052][ T5563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.090738][ T5668] netlink: 'syz.3.252': attribute type 2 has an invalid length.
[  197.115600][ T5670] syz.7.250 uses obsolete (PF_INET,SOCK_PACKET)
[  197.178152][ T5672] loop6: detected capacity change from 0 to 512
[  197.203332][ T5563] team0: Port device team_slave_0 added
[  197.256760][ T5563] team0: Port device team_slave_1 added
[  197.272949][ T5672] EXT4-fs: Ignoring removed i_version option
[  197.357245][ T5672] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  197.383738][ T5563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.405581][ T5563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.446354][ T5442] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  197.457068][ T5672] EXT4-fs (loop6): 1 truncate cleaned up
[  197.463128][ T5672] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  197.494136][ T5563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.507884][ T5677] netlink: 'syz.3.254': attribute type 10 has an invalid length.
[  197.517819][ T5672] EXT4-fs (loop6): shut down requested (1)
[  197.582363][ T4886] EXT4-fs (loop6): unmounting filesystem.
[  197.599463][ T5563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.606836][ T5563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.671279][ T5563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.733871][ T5442] usb 8-1: Using ep0 maxpacket: 8
[  197.777420][ T5442] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  197.816913][ T5442] usb 8-1: config 0 has no interface number 0
[  197.849770][ T5442] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  198.481629][ T5703] netlink: 260 bytes leftover after parsing attributes in process `syz.3.259'.
[  198.994686][ T5442] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  199.006029][ T5442] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  199.019710][ T5442] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  199.029313][ T5442] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.044515][ T5442] usb 8-1: config 0 descriptor??
[  199.185412][ T5442] ldusb 8-1:0.55: Interrupt in endpoint not found
[  199.330580][ T5563] device hsr_slave_0 entered promiscuous mode
[  199.364708][ T5563] device hsr_slave_1 entered promiscuous mode
[  199.368476][ T5707] loop6: detected capacity change from 0 to 128
[  199.397461][ T5563] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.426482][ T5563] Cannot create hsr debugfs directory
[  199.448711][ T5707] EXT4-fs (loop6): Test dummy encryption mode enabled
[  199.452823][ T4307] usb 8-1: USB disconnect, device number 2
[  199.496543][ T5707] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  199.514451][ T5707] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  199.629877][ T5709] netlink: 'syz.3.261': attribute type 2 has an invalid length.
[  199.689654][ T4886] EXT4-fs (loop6): unmounting filesystem.
[  200.091208][ T5563] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  200.135839][ T5563] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  200.182253][ T5721] netlink: 'syz.6.264': attribute type 2 has an invalid length.
[  200.198266][ T5563] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  200.219917][ T5563] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  200.439854][ T5727] loop7: detected capacity change from 0 to 512
[  200.498374][ T5727] EXT4-fs: Ignoring removed i_version option
[  200.525556][ T5727] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  200.563211][ T5563] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.596971][ T5727] EXT4-fs (loop7): 1 truncate cleaned up
[  200.629321][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.667260][ T5727] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  200.715007][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.771578][ T5727] EXT4-fs (loop7): shut down requested (1)
[  200.800697][ T5563] 8021q: adding VLAN 0 to HW filter on device team0
[  200.820144][ T5741] netlink: 'syz.6.268': attribute type 10 has an invalid length.
[  200.846227][ T5741] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  200.858004][ T5739] loop5: detected capacity change from 0 to 1024
[  200.895571][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.955465][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.226401][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.233899][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.767368][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  201.794749][ T5123] EXT4-fs (loop7): unmounting filesystem.
[  201.808505][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.850299][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.897045][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.904309][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.935994][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.036770][    T9] hfsplus: b-tree write err: -5, ino 4
[  203.524904][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.608376][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.743805][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.787091][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.832738][ T5764] netlink: 260 bytes leftover after parsing attributes in process `syz.6.271'.
[  203.858172][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.884170][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.894840][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.919714][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  203.958766][ T5563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.999153][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.021193][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.052129][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.113109][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  205.009659][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  205.022271][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  205.045185][ T5563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.210135][ T5788] netlink: 'syz.6.277': attribute type 2 has an invalid length.
[  205.334639][ T5790] loop5: detected capacity change from 0 to 512
[  205.394135][ T5790] EXT4-fs: Ignoring removed i_version option
[  205.447899][ T5790] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  205.513744][ T5790] EXT4-fs (loop5): 1 truncate cleaned up
[  205.531056][ T5790] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  205.572721][ T5790] EXT4-fs (loop5): shut down requested (1)
[  205.635554][ T5802] loop6: detected capacity change from 0 to 1024
[  206.560913][ T4331] hfsplus: b-tree write err: -5, ino 4
[  206.561722][ T4643] EXT4-fs (loop5): unmounting filesystem.
[  206.773580][ T5812] netlink: 'syz.7.272': attribute type 2 has an invalid length.
[  206.800472][ T5817] netlink: 'syz.5.281': attribute type 10 has an invalid length.
[  207.024514][ T5826] netlink: 260 bytes leftover after parsing attributes in process `syz.3.283'.
[  208.123169][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  208.186914][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  208.331066][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  208.347915][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  208.389272][ T5563] device veth0_vlan entered promiscuous mode
[  208.403882][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  208.437559][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  208.493163][ T5563] device veth1_vlan entered promiscuous mode
[  208.579890][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  208.628896][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  208.666787][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  208.703792][ T5843] loop3: detected capacity change from 0 to 512
[  208.716581][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  208.739809][ T5563] device veth0_macvtap entered promiscuous mode
[  208.781110][ T5563] device veth1_macvtap entered promiscuous mode
[  208.789484][ T5843] EXT4-fs: Ignoring removed i_version option
[  208.808744][ T5843] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  208.895309][ T5843] EXT4-fs (loop3): 1 truncate cleaned up
[  208.906904][ T5843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  209.016274][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.105277][ T5843] EXT4-fs (loop3): shut down requested (1)
[  209.136610][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.168460][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.207303][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.247245][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.314672][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.344807][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.368415][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.434522][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  209.452667][ T5563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.560071][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  209.619891][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  209.681926][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  209.719277][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  209.762127][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.812680][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.857357][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.909662][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.956765][ T5867] loop7: detected capacity change from 0 to 1024
[  209.977496][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.081099][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.803587][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.814907][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.828494][ T5563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.892572][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  210.934234][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  210.998109][ T5861] netlink: 'syz.3.291': attribute type 2 has an invalid length.
[  211.056308][ T5563] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.106445][ T5563] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.122735][ T5235] hfsplus: b-tree write err: -5, ino 4
[  211.175075][ T5563] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.227364][ T5563] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.425237][ T5879] netlink: 'syz.7.293': attribute type 2 has an invalid length.
[  211.589145][ T5274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.642826][ T5274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.714970][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  211.769530][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.803522][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.841285][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  211.877768][ T4275] Bluetooth: hci4: command 0x0406 tx timeout
[  211.897759][ T5889] netlink: 'syz.7.296': attribute type 10 has an invalid length.
[  212.175190][ T5898] netlink: 260 bytes leftover after parsing attributes in process `syz.3.297'.
[  212.341673][ T5900] loop0: detected capacity change from 0 to 128
[  212.369186][ T5900]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  212.408827][ T5900] loop0: partition table partially beyond EOD, truncated
[  212.431153][ T5900] loop0: p1 size 348879409 extends beyond EOD, truncated
[  212.651205][ T5900]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  212.747453][ T5900] loop0: partition table partially beyond EOD, truncated
[  212.786207][ T5900] loop0: p1 size 348879409 extends beyond EOD, truncated
[  213.902487][ T5923] netlink: 'syz.8.304': attribute type 2 has an invalid length.
[  214.008419][ T5924] loop3: detected capacity change from 0 to 512
[  214.065621][ T5924] EXT4-fs: Ignoring removed i_version option
[  214.089832][ T5928] loop6: detected capacity change from 0 to 1024
[  214.119027][ T5924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  215.012206][ T5931] netlink: 'syz.8.305': attribute type 2 has an invalid length.
[  215.048642][ T5924] EXT4-fs (loop3): 1 truncate cleaned up
[  215.057356][ T5924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  215.104486][ T5924] EXT4-fs (loop3): shut down requested (1)
[  215.158617][   T41] hfsplus: b-tree write err: -5, ino 4
[  215.425164][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  215.637787][ T5947] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  215.687509][ T5950] netlink: 260 bytes leftover after parsing attributes in process `syz.3.311'.
[  215.751517][ T5953] loop8: detected capacity change from 0 to 128
[  215.823832][ T5953] EXT4-fs (loop8): Test dummy encryption mode enabled
[  215.920206][ T5953] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  215.997491][ T5953] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  216.056367][ T5962] loop0: detected capacity change from 0 to 128
[  216.065577][ T5962]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  216.077818][ T5962] loop0: partition table partially beyond EOD, truncated
[  216.085946][ T5962] loop0: p1 size 348879409 extends beyond EOD, truncated
[  216.179324][ T5563] EXT4-fs (loop8): unmounting filesystem.
[  216.287440][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.314'.
[  216.322438][ T5965] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  216.322438][ T5965] 
) failed (rc=-16)
[  216.383539][ T5971] netlink: 'syz.8.317': attribute type 2 has an invalid length.
[  216.733386][ T5976] loop8: detected capacity change from 0 to 1024
[  217.811353][ T4331] hfsplus: b-tree write err: -5, ino 4
[  218.245292][ T5992] netlink: 'syz.8.320': attribute type 2 has an invalid length.
[  218.313394][ T5994] netlink: 'syz.5.308': attribute type 10 has an invalid length.
[  219.195024][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.323'.
[  219.236680][ T5998] loop3: detected capacity change from 0 to 512
[  219.297749][ T5998] EXT4-fs: Ignoring removed i_version option
[  219.329914][ T5998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  219.447719][ T5998] EXT4-fs (loop3): 1 truncate cleaned up
[  219.453533][ T5998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  219.590653][ T5998] EXT4-fs (loop3): shut down requested (1)
[  219.766047][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  220.056498][ T6017] loop8: detected capacity change from 0 to 128
[  220.092057][ T6017] EXT4-fs (loop8): Test dummy encryption mode enabled
[  220.175613][ T6017] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  220.209563][ T6020] netlink: 'syz.3.329': attribute type 2 has an invalid length.
[  220.334784][ T6017] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.535114][ T6024] loop0: detected capacity change from 0 to 128
[  220.566601][ T6024]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  220.575031][ T5563] EXT4-fs (loop8): unmounting filesystem.
[  220.607585][ T6024] loop0: partition table partially beyond EOD, truncated
[  220.629105][ T6024] loop0: p1 size 348879409 extends beyond EOD, truncated
[  220.740349][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  220.752171][ T6030] netlink: 'syz.8.332': attribute type 2 has an invalid length.
[  221.126308][ T6037] netlink: 'syz.3.334': attribute type 10 has an invalid length.
[  222.797377][ T4304] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  222.948092][ T6062] netlink: 'syz.5.340': attribute type 2 has an invalid length.
[  223.067225][ T4304] usb 8-1: Using ep0 maxpacket: 16
[  223.118521][ T4304] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  223.159991][ T4304] usb 8-1: config 1 interface 0 has no altsetting 0
[  223.179896][ T6069] loop6: detected capacity change from 0 to 128
[  223.201287][ T6069] EXT4-fs (loop6): Test dummy encryption mode enabled
[  223.295644][ T6069] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  223.341951][ T4304] usb 8-1: string descriptor 0 read error: -22
[  223.361201][ T6069] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  223.367414][ T4304] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  223.387406][ T4302] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  223.472552][ T4304] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.497671][ T6072] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  223.587208][ T4302] usb 9-1: Using ep0 maxpacket: 8
[  223.597540][ T4302] usb 9-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  223.636075][ T4302] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 42
[  223.723457][ T4302] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  223.755259][ T4302] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  223.805802][ T4302] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  223.876529][ T4302] usb 9-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  223.932657][ T4302] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.991204][ T4886] EXT4-fs (loop6): unmounting filesystem.
[  224.012771][ T4302] usb 9-1: config 0 descriptor??
[  224.169125][ T4302] kobil_sct 9-1:0.0: required endpoints missing
[  224.316176][ T6078] loop0: detected capacity change from 0 to 128
[  224.735116][ T6086] netlink: 'syz.6.347': attribute type 10 has an invalid length.
[  225.195129][ T6091] netlink: 'syz.3.343': attribute type 2 has an invalid length.
[  226.223538][ T2166] usb 9-1: USB disconnect, device number 2
[  226.664029][ T6098] dccp_close: ABORT with 60 bytes unread
[  228.140689][ T6120] netlink: 'syz.8.355': attribute type 2 has an invalid length.
[  228.267849][ T6126] loop3: detected capacity change from 0 to 128
[  228.349826][ T6126] EXT4-fs (loop3): Test dummy encryption mode enabled
[  228.426524][ T6126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  228.458795][ T6126] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  228.657531][ T6134] loop0: detected capacity change from 0 to 128
[  228.748634][ T4304] usbhid 8-1:1.0: can't add hid device: -32
[  228.756896][ T4304] usbhid: probe of 8-1:1.0 failed with error -32
[  228.938903][ T4307] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  229.146514][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  229.213326][ T4307] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  229.290572][ T4307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  229.366392][ T4307] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  229.417300][ T4307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.471543][ T6146] netlink: 'syz.3.360': attribute type 2 has an invalid length.
[  229.488598][ T4307] usb 6-1: config 0 descriptor??
[  229.637740][ T6149] tipc: Started in network mode
[  229.643021][ T6149] tipc: Node identity , cluster identity 4711
[  229.674863][ T6149] tipc: Failed to obtain node identity
[  229.695300][ T6149] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  229.756066][ T4414] usb 8-1: USB disconnect, device number 3
[  230.684439][ T6174] netlink: 'syz.6.369': attribute type 2 has an invalid length.
[  232.141738][ T6185] loop3: detected capacity change from 0 to 128
[  232.200557][ T6185] EXT4-fs (loop3): Test dummy encryption mode enabled
[  232.308286][ T6185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  232.337828][ T6187] netlink: 188 bytes leftover after parsing attributes in process `syz.7.372'.
[  232.362558][ T6185] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  232.504378][ T6193] loop0: detected capacity change from 0 to 128
[  232.596589][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  233.723630][ T5442] usb 6-1: USB disconnect, device number 2
[  233.827513][ T6220] netlink: 'syz.3.380': attribute type 2 has an invalid length.
[  234.262347][ T6230] netlink: 'syz.6.373': attribute type 2 has an invalid length.
[  234.525068][ T6237] netlink: 188 bytes leftover after parsing attributes in process `syz.6.386'.
[  236.175466][ T6245] loop6: detected capacity change from 0 to 128
[  236.205820][ T6245] EXT4-fs (loop6): Test dummy encryption mode enabled
[  236.254276][ T6245] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  236.337703][ T6245] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  236.506875][ T4886] EXT4-fs (loop6): unmounting filesystem.
[  237.133047][   T27] kauditd_printk_skb: 44 callbacks suppressed
[  237.133064][   T27] audit: type=1326 audit(1743815402.469:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.6.393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x0
[  237.214828][ T6267] netlink: 'syz.8.395': attribute type 2 has an invalid length.
[  237.259799][ T6269] netlink: 'syz.3.396': attribute type 2 has an invalid length.
[  237.503621][ T6280] netlink: 188 bytes leftover after parsing attributes in process `syz.8.398'.
[  237.629091][ T6287] loop5: detected capacity change from 0 to 128
[  237.675091][ T6287] EXT4-fs (loop5): Test dummy encryption mode enabled
[  237.728783][ T6287] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  237.749998][ T6287] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.080298][ T4643] EXT4-fs (loop5): unmounting filesystem.
[  239.103974][ T6303] trusted_key: encrypted_key: insufficient parameters specified
[  239.710703][ T6319] netlink: 'syz.8.409': attribute type 2 has an invalid length.
[  239.935303][ T6324] netlink: 'syz.8.410': attribute type 2 has an invalid length.
[  240.338154][ T6331] netlink: 180 bytes leftover after parsing attributes in process `syz.8.411'.
[  240.458054][ T6333] loop7: detected capacity change from 0 to 2048
[  240.563389][ T6333]  loop7: p1 < > p2 p3 p4 < p5 >
[  240.589075][ T6333] loop7: p2 size 4194304 extends beyond EOD, truncated
[  240.655696][ T6333] loop7: p3 start 4284289 is beyond EOD, truncated
[  240.757800][ T6333] loop7: p5 size 4194304 extends beyond EOD, truncated
[  241.072268][ T4337] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  241.201051][ T4877] udevd[4877]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  241.201305][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  241.219263][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  241.226014][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  241.310007][ T6351] loop8: detected capacity change from 0 to 128
[  241.403228][ T6351] EXT4-fs (loop8): Test dummy encryption mode enabled
[  241.504594][ T6351] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  241.525193][ T6351] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  241.661267][ T5563] EXT4-fs (loop8): unmounting filesystem.
[  243.187305][ T4272] Bluetooth: hci2: command 0x0406 tx timeout
[  243.405205][ T6371] netlink: 'syz.5.421': attribute type 2 has an invalid length.
[  243.600164][ T6374] netlink: 'syz.7.422': attribute type 2 has an invalid length.
[  244.188394][ T6385] netlink: 180 bytes leftover after parsing attributes in process `syz.7.436'.
[  244.311783][ T6389] loop5: detected capacity change from 0 to 2048
[  244.460162][ T6389]  loop5: p1 < > p2 p3 p4 < p5 >
[  244.521603][ T6389] loop5: p2 size 4194304 extends beyond EOD, truncated
[  244.586055][ T6389] loop5: p3 start 4284289 is beyond EOD, truncated
[  244.606588][ T6389] loop5: p5 size 4194304 extends beyond EOD, truncated
[  245.174973][ T6405] loop7: detected capacity change from 0 to 128
[  245.245707][ T6405] EXT4-fs (loop7): Test dummy encryption mode enabled
[  245.305607][ T6405] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  245.396102][ T6405] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  245.775365][ T5123] EXT4-fs (loop7): unmounting filesystem.
[  245.991434][ T6412] process 'syz.5.431' launched './file0' with NULL argv: empty string added
[  246.177380][ T4304] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  246.336113][   T27] audit: type=1326 audit(1743815411.669:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x7ffc0000
[  246.373324][ T6431] netlink: 'syz.7.434': attribute type 2 has an invalid length.
[  246.407269][ T4304] usb 4-1: Using ep0 maxpacket: 8
[  246.414863][ T4304] usb 4-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  246.434857][ T4304] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 42
[  246.574195][ T4304] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  246.619395][   T27] audit: type=1326 audit(1743815411.729:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e9098d169 code=0x7ffc0000
[  246.676894][ T4304] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  246.804162][ T4304] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  246.865711][   T27] audit: type=1326 audit(1743815411.729:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x7ffc0000
[  246.940410][ T4304] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  247.052927][ T4304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.091980][   T27] audit: type=1326 audit(1743815411.729:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x7ffc0000
[  247.092794][ T4304] usb 4-1: config 0 descriptor??
[  247.115010][    C1] vkms_vblank_simulate: vblank timer overrun
[  247.294526][   T27] audit: type=1326 audit(1743815411.739:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5e9098d169 code=0x7ffc0000
[  247.318656][   T27] audit: type=1326 audit(1743815411.739:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x7ffc0000
[  247.362118][   T27] audit: type=1326 audit(1743815411.739:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x7ffc0000
[  247.363655][ T4304] kobil_sct 4-1:0.0: required endpoints missing
[  247.523884][   T27] audit: type=1326 audit(1743815411.769:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5e9098bc1f code=0x7ffc0000
[  247.575491][ T6443] loop0: detected capacity change from 0 to 127
[  247.582239][ T6441] netlink: 'syz.7.437': attribute type 2 has an invalid length.
[  247.721319][   T27] audit: type=1326 audit(1743815411.769:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x7ffc0000
[  247.937791][   T27] audit: type=1326 audit(1743815411.769:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.6.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x7ffc0000
[  247.960974][    C1] vkms_vblank_simulate: vblank timer overrun
[  247.982023][ T6447] netlink: 172 bytes leftover after parsing attributes in process `syz.7.439'.
[  248.786081][ T6463] loop6: detected capacity change from 0 to 128
[  248.896717][ T4418] usb 4-1: USB disconnect, device number 2
[  248.922379][ T6463] EXT4-fs (loop6): Test dummy encryption mode enabled
[  248.999108][ T6463] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  249.019741][ T6463] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  249.297398][   T22] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  249.423649][ T4886] EXT4-fs (loop6): unmounting filesystem.
[  249.497335][   T22] usb 9-1: Using ep0 maxpacket: 16
[  249.608503][   T22] usb 9-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  249.741109][   T22] usb 9-1: config 1 interface 0 has no altsetting 0
[  249.812552][   T22] usb 9-1: string descriptor 0 read error: -22
[  249.814035][ T6478] netlink: 100 bytes leftover after parsing attributes in process `syz.6.447'.
[  249.848744][   T22] usb 9-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  249.888848][   T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.051531][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.6.447'.
[  250.181283][ T6490] netlink: 'syz.5.450': attribute type 2 has an invalid length.
[  250.507458][ T4414] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  250.614957][ T6497] loop0: detected capacity change from 0 to 127
[  250.717563][ T4414] usb 8-1: Using ep0 maxpacket: 16
[  250.727856][ T6499] netlink: 172 bytes leftover after parsing attributes in process `syz.6.452'.
[  250.730117][ T4414] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  250.922063][ T4414] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  250.989330][ T4414] usb 8-1: Product: syz
[  251.028274][ T4414] usb 8-1: Manufacturer: syz
[  251.059272][ T4414] usb 8-1: SerialNumber: syz
[  251.118136][ T4414] usb 8-1: config 0 descriptor??
[  251.444145][   T27] kauditd_printk_skb: 127 callbacks suppressed
[  251.444165][   T27] audit: type=1326 audit(1743815416.779:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.5.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74738d169 code=0x7ffc0000
[  251.565337][   T27] audit: type=1326 audit(1743815416.779:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.5.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74738d169 code=0x7ffc0000
[  254.256688][ T4523] usb 8-1: USB disconnect, device number 4
[  254.715520][ T6535] loop7: detected capacity change from 0 to 128
[  254.789476][ T6535] EXT4-fs (loop7): Test dummy encryption mode enabled
[  254.991704][   T22] usbhid 9-1:1.0: can't add hid device: -32
[  254.996554][ T6535] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  255.002792][   T22] usbhid: probe of 9-1:1.0 failed with error -32
[  255.065503][ T6535] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  255.120186][   T22] usb 9-1: USB disconnect, device number 3
[  255.360401][ T5123] EXT4-fs (loop7): unmounting filesystem.
[  255.564616][ T6552] netlink: 'syz.7.463': attribute type 2 has an invalid length.
[  255.871535][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.878126][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.969916][ T6560] netlink: 172 bytes leftover after parsing attributes in process `syz.7.464'.
[  256.457552][ T6540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.237382][ T4523] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  257.425287][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'.
[  257.434424][ T4523] usb 7-1: Using ep0 maxpacket: 8
[  257.462852][ T4523] usb 7-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  257.535696][ T4523] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 42
[  257.583463][ T6578] device vlan2 entered promiscuous mode
[  257.602622][ T4523] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  257.636427][ T4523] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  257.692507][ T4523] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  257.847430][ T4523] usb 7-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  257.856939][ T4523] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.991352][ T4523] usb 7-1: config 0 descriptor??
[  258.012547][ T4523] kobil_sct 7-1:0.0: required endpoints missing
[  258.857747][ T4523] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  259.047377][ T4523] usb 6-1: Using ep0 maxpacket: 16
[  259.065880][ T4523] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  259.125824][ T4523] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  259.170618][ T4523] usb 6-1: Product: syz
[  259.190411][ T4523] usb 6-1: Manufacturer: syz
[  259.208761][ T4523] usb 6-1: SerialNumber: syz
[  259.238840][ T4523] usb 6-1: config 0 descriptor??
[  260.077753][ T4414] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  260.155595][ T4304] usb 7-1: USB disconnect, device number 2
[  260.352839][ T4414] usb 8-1: config 0 has no interfaces?
[  260.358500][ T4414] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  260.447501][ T4414] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.520313][ T4414] usb 8-1: config 0 descriptor??
[  261.413255][ T6626] netlink: 100 bytes leftover after parsing attributes in process `syz.8.478'.
[  261.556810][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.8.478'.
[  261.706960][ T4304] usb 6-1: USB disconnect, device number 3
[  263.067533][ T4272] Bluetooth: hci3: command 0x0406 tx timeout
[  264.486626][ T6669] netlink: 'syz.5.487': attribute type 2 has an invalid length.
[  264.495032][ T4414] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  264.570602][ T6673] loop3: detected capacity change from 0 to 128
[  264.637747][ T6673] EXT4-fs (loop3): Test dummy encryption mode enabled
[  264.693932][ T6673] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  264.723634][ T4414] usb 7-1: config 0 has no interfaces?
[  264.732406][ T4414] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  264.750674][ T6673] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  264.777527][ T4414] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.785716][ T4414] usb 7-1: Product: syz
[  264.812401][ T4414] usb 7-1: Manufacturer: syz
[  264.817978][ T4414] usb 7-1: SerialNumber: syz
[  264.848221][ T4414] usb 7-1: config 0 descriptor??
[  265.053566][ T4523] usb 8-1: USB disconnect, device number 5
[  265.060648][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  265.223940][ T4414] usb 7-1: USB disconnect, device number 3
[  265.899132][ T4523] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  266.117224][ T4523] usb 4-1: Using ep0 maxpacket: 16
[  266.126907][ T4523] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  266.160439][ T4523] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  266.170705][ T4523] usb 4-1: Product: syz
[  266.175869][ T4523] usb 4-1: Manufacturer: syz
[  266.222733][ T4523] usb 4-1: SerialNumber: syz
[  266.256959][ T4523] usb 4-1: config 0 descriptor??
[  266.268249][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.497'.
[  268.561612][ T6716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.599210][ T4307] usb 4-1: USB disconnect, device number 3
[  269.777246][ T4307] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  270.006806][ T4307] usb 4-1: config 0 has no interfaces?
[  270.012689][ T4307] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  270.073842][ T4307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.166557][ T4307] usb 4-1: config 0 descriptor??
[  271.207239][ T4307] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  271.467825][ T4307] usb 9-1: Using ep0 maxpacket: 8
[  271.479223][ T4307] usb 9-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  271.532080][ T4307] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 42
[  271.608095][ T4307] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  271.722978][ T4307] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  271.791875][ T4307] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  271.868140][ T4307] usb 9-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  271.918579][ T4307] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.991693][ T4307] usb 9-1: config 0 descriptor??
[  272.029159][ T4307] kobil_sct 9-1:0.0: required endpoints missing
[  272.131448][ T6780] netlink: 'syz.5.512': attribute type 2 has an invalid length.
[  272.146972][   T27] audit: type=1326 audit(1743815437.479:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.6.511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x0
[  274.075790][ T4303] usb 9-1: USB disconnect, device number 4
[  275.185247][ T2166] usb 4-1: USB disconnect, device number 4
[  275.235879][ T6818] netlink: 'syz.5.524': attribute type 2 has an invalid length.
[  275.326791][ T6799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  275.369286][   T27] audit: type=1326 audit(1743815440.709:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6819 comm="syz.8.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcf458d169 code=0x0
[  275.947437][ T5172] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  276.318050][ T5172] usb 6-1: Using ep0 maxpacket: 8
[  277.209322][ T5172] usb 6-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  277.248000][ T5172] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 42
[  277.293356][ T5172] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  277.357231][ T5172] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  277.382624][ T5172] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  277.427447][ T5172] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  277.455026][ T5172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.500786][ T5172] usb 6-1: config 0 descriptor??
[  277.533520][ T5172] kobil_sct 6-1:0.0: required endpoints missing
[  279.186319][ T6872] netlink: 'syz.8.537': attribute type 2 has an invalid length.
[  279.252609][ T5172] usb 6-1: USB disconnect, device number 4
[  279.528671][ T6883] netlink: 132 bytes leftover after parsing attributes in process `syz.8.539'.
[  279.572538][   T27] audit: type=1326 audit(1743815444.909:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6881 comm="syz.5.540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd74738d169 code=0x0
[  280.158361][ T6905] netlink: 'syz.3.543': attribute type 33 has an invalid length.
[  280.193762][ T6905] netlink: 152 bytes leftover after parsing attributes in process `syz.3.543'.
[  280.255560][ T6908] netlink: 'syz.8.545': attribute type 2 has an invalid length.
[  280.630145][ T6921] loop5: detected capacity change from 0 to 128
[  280.639938][ T6922] netlink: 'syz.6.550': attribute type 2 has an invalid length.
[  280.724457][ T6921] EXT4-fs (loop5): Test dummy encryption mode enabled
[  280.839040][ T6921] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  280.869703][ T6921] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  281.121181][ T4643] EXT4-fs (loop5): unmounting filesystem.
[  281.567289][ T4523] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  281.797315][ T4523] usb 4-1: Using ep0 maxpacket: 8
[  281.813975][ T4523] usb 4-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  282.014784][ T4523] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 42
[  282.148176][ T6956] netlink: 'syz.5.559': attribute type 2 has an invalid length.
[  282.230470][ T4523] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  282.247435][ T6954] netlink: 'syz.8.558': attribute type 33 has an invalid length.
[  282.292683][ T6954] netlink: 152 bytes leftover after parsing attributes in process `syz.8.558'.
[  282.531743][ T4523] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  282.683114][   T27] audit: type=1326 audit(1743815448.019:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6973 comm="syz.6.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x0
[  282.727379][ T4523] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  282.782344][ T4523] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  282.819303][ T4523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.896691][ T6976] netlink: 'syz.8.563': attribute type 2 has an invalid length.
[  282.925524][ T4523] usb 4-1: config 0 descriptor??
[  282.970164][ T6981] loop5: detected capacity change from 0 to 128
[  283.009300][ T4523] kobil_sct 4-1:0.0: required endpoints missing
[  283.067061][ T6981] EXT4-fs (loop5): Test dummy encryption mode enabled
[  283.210873][ T6981] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  283.257459][ T6981] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  283.547246][ T4275] Bluetooth: hci0: command 0x0406 tx timeout
[  283.563491][ T4643] EXT4-fs (loop5): unmounting filesystem.
[  285.197281][ T2166] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  285.246857][ T7015] netlink: 'syz.6.572': attribute type 2 has an invalid length.
[  285.469298][ T2166] usb 9-1: config 0 has no interfaces?
[  285.494580][ T2166] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  285.567198][ T2166] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.597768][ T2166] usb 9-1: Product: syz
[  285.602080][ T2166] usb 9-1: Manufacturer: syz
[  285.606722][ T2166] usb 9-1: SerialNumber: syz
[  285.691913][ T2166] usb 9-1: config 0 descriptor??
[  285.713331][ T4416] usb 4-1: USB disconnect, device number 5
[  286.022687][   T27] audit: type=1326 audit(1743815451.359:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.5.576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd74738d169 code=0x0
[  286.185621][ T7036] loop0: detected capacity change from 0 to 128
[  286.428604][ T7044] loop6: detected capacity change from 0 to 128
[  286.474739][ T7044] EXT4-fs (loop6): Test dummy encryption mode enabled
[  286.623624][ T7044] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  286.638612][ T7044] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  286.780130][ T4886] EXT4-fs (loop6): unmounting filesystem.
[  287.135716][ T7060] device hsr0 entered promiscuous mode
[  287.203972][ T7059] netlink: 'syz.5.583': attribute type 2 has an invalid length.
[  289.632041][ T5172] usb 9-1: USB disconnect, device number 5
[  290.032202][ T7105] netlink: 'syz.7.596': attribute type 2 has an invalid length.
[  290.436303][ T7115] loop0: detected capacity change from 0 to 128
[  290.462511][ T7115]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  290.476027][ T7115] loop0: partition table partially beyond EOD, truncated
[  290.504479][ T7115] loop0: p1 size 348879409 extends beyond EOD, truncated
[  290.570357][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  290.757183][ T4303] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  290.957276][ T4303] usb 8-1: Using ep0 maxpacket: 16
[  291.014342][ T4303] usb 8-1: unable to get BOS descriptor or descriptor too short
[  291.037164][ T4303] usb 8-1: unable to read config index 0 descriptor/start: -71
[  291.066676][ T4303] usb 8-1: can't read configurations, error -71
[  291.440590][ T7151] netlink: 'syz.5.609': attribute type 2 has an invalid length.
[  292.135619][ T7174] loop0: detected capacity change from 0 to 128
[  292.176204][ T7174]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  292.186367][ T7174] loop0: partition table partially beyond EOD, truncated
[  292.257858][ T7174] loop0: p1 size 348879409 extends beyond EOD, truncated
[  292.356927][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  292.845934][ T7198] netlink: 'syz.3.623': attribute type 2 has an invalid length.
[  293.561985][ T7223] loop0: detected capacity change from 0 to 128
[  293.605338][ T7223]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  293.635635][ T7223] loop0: partition table partially beyond EOD, truncated
[  293.643238][   T27] audit: type=1326 audit(1743815458.979:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.3.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f8838d169 code=0x0
[  293.687414][ T7223] loop0: p1 size 348879409 extends beyond EOD, truncated
[  293.769838][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  294.003870][ T7241] netlink: 'syz.5.636': attribute type 2 has an invalid length.
[  294.061076][ T7238] netlink: 'syz.8.635': attribute type 4 has an invalid length.
[  294.176791][ T7238] loop2: detected capacity change from 0 to 7
[  294.209865][ T7238]  loop2: [POWERTEC] p1 p2 p3 p4
[  294.275754][ T7238] loop2: p1 size 20971520 extends beyond EOD, truncated
[  294.326428][ T7238] loop2: p2 start 12582912 is beyond EOD, truncated
[  294.384216][ T7238] loop2: p3 start 1310720 is beyond EOD, truncated
[  294.441401][ T7238] loop2: p4 start 1818361856 is beyond EOD, truncated
[  294.761423][ T7257] netlink: 'syz.3.641': attribute type 2 has an invalid length.
[  295.524327][ T7275] netlink: 'syz.6.648': attribute type 2 has an invalid length.
[  295.898697][   T27] audit: type=1326 audit(1743815461.239:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.3.651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f8838d169 code=0x0
[  296.217288][ T7294] netlink: 'syz.6.654': attribute type 2 has an invalid length.
[  296.535380][ T7302] loop0: detected capacity change from 0 to 128
[  296.580107][ T7302]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  296.597053][ T7302] loop0: partition table partially beyond EOD, truncated
[  296.626184][ T7302] loop0: p1 size 348879409 extends beyond EOD, truncated
[  296.750050][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  297.028666][ T7317] netlink: 'syz.3.662': attribute type 2 has an invalid length.
[  297.341351][ T7333] netlink: 'syz.3.667': attribute type 2 has an invalid length.
[  297.371378][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.668'.
[  297.629200][ T7341] netlink: 'syz.3.671': attribute type 4 has an invalid length.
[  297.688620][ T7341] loop2: detected capacity change from 0 to 7
[  297.732559][ T7341]  loop2: [POWERTEC] p1 p2 p3 p4
[  297.767489][ T7341] loop2: p1 size 20971520 extends beyond EOD, truncated
[  297.803933][ T7341] loop2: p2 start 12582912 is beyond EOD, truncated
[  297.834750][ T7341] loop2: p3 start 1310720 is beyond EOD, truncated
[  297.854242][ T7341] loop2: p4 start 1818361856 is beyond EOD, truncated
[  297.865184][   T27] audit: type=1326 audit(1743815463.209:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.6.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x0
[  298.394375][ T7365] netlink: 'syz.7.677': attribute type 2 has an invalid length.
[  298.649574][ T7373] netlink: 'syz.3.681': attribute type 2 has an invalid length.
[  299.411904][ T7402] netlink: 'syz.7.690': attribute type 2 has an invalid length.
[  299.643092][   T27] audit: type=1326 audit(1743815464.979:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.6.692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x0
[  300.027831][ T4416] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  300.136753][ T7426] netlink: 'syz.7.695': attribute type 2 has an invalid length.
[  300.227403][ T4416] usb 4-1: Using ep0 maxpacket: 8
[  300.239568][ T4416] usb 4-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  300.326311][ T4416] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 42
[  300.366290][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.694'.
[  300.604742][ T4416] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  300.827318][ T4416] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  301.055658][ T4416] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  301.420173][ T4416] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  301.545898][ T4416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.619211][ T4416] usb 4-1: config 0 descriptor??
[  301.665140][ T4416] kobil_sct 4-1:0.0: required endpoints missing
[  302.575604][ T7478] netlink: 'syz.7.706': attribute type 2 has an invalid length.
[  302.723413][ T7483] netlink: 'syz.8.703': attribute type 2 has an invalid length.
[  304.247993][ T4523] usb 4-1: USB disconnect, device number 6
[  304.803154][ T7506] loop0: detected capacity change from 0 to 128
[  305.227358][ T4523] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  305.437232][ T4523] usb 4-1: Using ep0 maxpacket: 8
[  305.446517][ T4523] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  305.484099][ T4523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.506316][ T4523] usb 4-1: Product: syz
[  305.515488][ T4523] usb 4-1: Manufacturer: syz
[  305.523789][ T4523] usb 4-1: SerialNumber: syz
[  305.546650][ T4523] usb 4-1: config 0 descriptor??
[  305.765008][ T4523] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  306.047690][ T7539] netlink: 'syz.5.720': attribute type 33 has an invalid length.
[  306.115964][ T7539] netlink: 152 bytes leftover after parsing attributes in process `syz.5.720'.
[  306.978338][ T7513] misc userio: The device must be registered before sending interrupts
[  307.047228][ T4307] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  307.245333][ T4523] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  307.267194][ T4307] usb 9-1: Using ep0 maxpacket: 8
[  307.281402][ T4307] usb 9-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  307.362484][ T4523] usb 4-1: USB disconnect, device number 7
[  307.427572][ T4307] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 42
[  307.623131][ T7557] netlink: 'syz.6.718': attribute type 2 has an invalid length.
[  307.677587][ T4307] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  307.960325][ T7562] loop0: detected capacity change from 0 to 128
[  308.083573][ T4307] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  308.211300][ T7568] netlink: 'syz.3.727': attribute type 2 has an invalid length.
[  308.290869][ T4307] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  308.345169][ T4307] usb 9-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  308.357291][ T4307] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.370591][ T4307] usb 9-1: config 0 descriptor??
[  308.383943][ T4307] kobil_sct 9-1:0.0: required endpoints missing
[  309.505397][ T4416] usb 9-1: USB disconnect, device number 6
[  309.969089][ T7597] netlink: 'syz.7.733': attribute type 33 has an invalid length.
[  310.027480][ T7597] netlink: 152 bytes leftover after parsing attributes in process `syz.7.733'.
[  311.675390][ T7616] netlink: 'syz.8.736': attribute type 2 has an invalid length.
[  312.118485][ T7624] netlink: 'syz.8.739': attribute type 2 has an invalid length.
[  313.297683][ T4416] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  313.497165][ T4416] usb 6-1: Using ep0 maxpacket: 8
[  313.515921][ T4416] usb 6-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  313.575767][ T4416] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 42
[  313.621068][ T7663] netlink: 'syz.3.748': attribute type 2 has an invalid length.
[  313.817455][ T4416] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  313.877243][ T4416] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  313.888590][ T4416] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  313.902213][ T4416] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  313.920568][ T4416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.964456][ T4416] usb 6-1: config 0 descriptor??
[  314.003958][ T4416] kobil_sct 6-1:0.0: required endpoints missing
[  314.267468][ T4272] Bluetooth: hci1: command 0x0406 tx timeout
[  314.537305][ T4303] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  314.624919][ T7682] netlink: 'syz.8.752': attribute type 10 has an invalid length.
[  314.730841][ T7682] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  314.747243][ T4303] usb 4-1: Using ep0 maxpacket: 16
[  314.808939][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  314.912669][ T4303] usb 4-1: unable to get BOS descriptor or descriptor too short
[  314.949652][ T4303] usb 4-1: unable to read config index 0 descriptor/start: -71
[  314.977395][ T4303] usb 4-1: can't read configurations, error -71
[  315.720748][ T7714] netlink: 'syz.3.760': attribute type 2 has an invalid length.
[  315.803144][ T7709] loop0: detected capacity change from 0 to 128
[  316.248192][ T5172] usb 6-1: USB disconnect, device number 5
[  316.717169][ T7732] netlink: 'syz.8.766': attribute type 10 has an invalid length.
[  317.317948][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.324473][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.390312][ T7764] netlink: 'syz.3.773': attribute type 2 has an invalid length.
[  317.467518][ T4303] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  317.808134][ T4303] usb 9-1: Using ep0 maxpacket: 16
[  318.129199][ T4303] usb 9-1: unable to get BOS descriptor or descriptor too short
[  318.161695][ T4303] usb 9-1: unable to read config index 0 descriptor/start: -71
[  318.187290][ T4303] usb 9-1: can't read configurations, error -71
[  318.527764][ T7785] netlink: 'syz.3.779': attribute type 2 has an invalid length.
[  318.587485][ T2166] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  318.781234][ T2166] usb 8-1: Using ep0 maxpacket: 8
[  318.790444][ T2166] usb 8-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  318.840642][ T2166] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 42
[  318.901108][ T2166] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  318.962793][ T2166] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  319.046858][ T2166] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  319.112225][ T2166] usb 8-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  319.146451][ T2166] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.203980][ T2166] usb 8-1: config 0 descriptor??
[  319.244341][ T2166] kobil_sct 8-1:0.0: required endpoints missing
[  319.426081][ T7796] netlink: 'syz.8.782': attribute type 10 has an invalid length.
[  320.130909][ T7813] netlink: 'syz.6.788': attribute type 2 has an invalid length.
[  320.543529][ T7824] netlink: 'syz.5.790': attribute type 2 has an invalid length.
[  320.777216][ T4523] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  320.967444][ T4523] usb 4-1: Using ep0 maxpacket: 16
[  321.061036][ T4523] usb 4-1: unable to get BOS descriptor or descriptor too short
[  321.085991][ T4523] usb 4-1: unable to read config index 0 descriptor/start: -71
[  321.121055][ T4523] usb 4-1: can't read configurations, error -71
[  321.189453][ T7842] netlink: 'syz.8.797': attribute type 10 has an invalid length.
[  321.552655][ T4525] usb 8-1: USB disconnect, device number 8
[  321.803851][ T7857] netlink: 'syz.7.801': attribute type 2 has an invalid length.
[  321.866606][ T7860] loop0: detected capacity change from 0 to 128
[  322.425242][ T7879] netlink: 'syz.7.804': attribute type 33 has an invalid length.
[  322.487357][ T7879] netlink: 152 bytes leftover after parsing attributes in process `syz.7.804'.
[  322.983267][ T7891] netlink: 'syz.7.809': attribute type 10 has an invalid length.
[  323.872750][ T7910] netlink: 'syz.3.814': attribute type 2 has an invalid length.
[  323.947243][ T5172] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  324.157254][ T5172] usb 8-1: Using ep0 maxpacket: 8
[  324.165525][ T5172] usb 8-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  324.219009][ T5172] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 42
[  324.262448][ T5172] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  324.330873][ T5172] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  324.400822][ T5172] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  324.511825][ T5172] usb 8-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  324.562884][ T5172] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.612632][ T5172] usb 8-1: config 0 descriptor??
[  324.674150][ T5172] kobil_sct 8-1:0.0: required endpoints missing
[  326.962455][ T4523] usb 8-1: USB disconnect, device number 9
[  327.302578][ T7942] netlink: 'syz.6.822': attribute type 10 has an invalid length.
[  327.670550][ T7952] netlink: 'syz.7.826': attribute type 2 has an invalid length.
[  328.159418][ T7966] loop0: detected capacity change from 0 to 128
[  328.777215][ T4525] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  328.977197][ T4525] usb 8-1: Using ep0 maxpacket: 8
[  328.984701][ T4525] usb 8-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  329.027314][ T4525] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 42
[  329.088158][ T4525] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  329.113127][ T7989] netlink: 'syz.8.839': attribute type 2 has an invalid length.
[  329.152793][ T4525] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  329.174298][ T7988] netlink: 'syz.5.837': attribute type 10 has an invalid length.
[  329.217177][ T4525] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  329.311873][ T4525] usb 8-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  329.387683][ T4525] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.431015][ T4525] usb 8-1: config 0 descriptor??
[  329.478630][ T4525] kobil_sct 8-1:0.0: required endpoints missing
[  330.502472][ T8023] loop0: detected capacity change from 0 to 128
[  332.135521][ T4414] usb 8-1: USB disconnect, device number 10
[  332.369691][ T8042] netlink: 'syz.6.851': attribute type 2 has an invalid length.
[  332.422710][ T8045] netlink: 'syz.7.852': attribute type 10 has an invalid length.
[  333.370437][ T8057] device dummy0 entered promiscuous mode
[  333.376448][ T8057] device vlan2 entered promiscuous mode
[  333.461499][ T8057] device dummy0 left promiscuous mode
[  334.008136][ T8070] netlink: 'syz.8.863': attribute type 33 has an invalid length.
[  334.047912][ T8070] netlink: 152 bytes leftover after parsing attributes in process `syz.8.863'.
[  334.209737][ T4523] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  334.330716][   T27] audit: type=1326 audit(1743815499.669:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.7.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd76178d169 code=0x0
[  334.417380][ T4523] usb 7-1: Using ep0 maxpacket: 8
[  334.425860][ T4523] usb 7-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  334.460972][ T4523] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 42
[  334.475823][ T8077] netlink: 'syz.8.865': attribute type 10 has an invalid length.
[  334.500940][ T4523] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  334.533400][ T4523] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  334.574984][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.864'.
[  334.596598][ T4523] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  334.653205][ T4523] usb 7-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  334.712953][ T4523] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.810104][ T4523] usb 7-1: config 0 descriptor??
[  334.853122][ T4523] kobil_sct 7-1:0.0: required endpoints missing
[  336.090971][ T8108] device dummy0 entered promiscuous mode
[  336.134965][ T8108] device vlan2 entered promiscuous mode
[  336.191110][ T8108] device dummy0 left promiscuous mode
[  336.434927][ T8117] loop0: detected capacity change from 0 to 128
[  336.696323][ T8119] netlink: 'syz.8.879': attribute type 10 has an invalid length.
[  337.088581][ T4416] usb 7-1: USB disconnect, device number 4
[  337.400500][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.884'.
[  337.825451][ T8153] netlink: 'syz.7.892': attribute type 10 has an invalid length.
[  337.854092][ T8155] loop0: detected capacity change from 0 to 128
[  337.889252][ T8151] device dummy0 entered promiscuous mode
[  337.901060][ T8151] device vlan2 entered promiscuous mode
[  337.931248][ T8151] device dummy0 left promiscuous mode
[  339.993360][ T8191] netlink: 'syz.8.907': attribute type 10 has an invalid length.
[  340.087213][ T4413] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  340.231102][ T8200] netlink: 'syz.6.908': attribute type 33 has an invalid length.
[  340.283395][ T8200] netlink: 152 bytes leftover after parsing attributes in process `syz.6.908'.
[  340.308992][ T4413] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.337456][ T4413] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  340.373295][ T4413] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  340.427233][ T4413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.444719][ T4413] usb 4-1: Product: syz
[  340.496020][ T4413] usb 4-1: Manufacturer: syz
[  340.526422][ T4413] usb 4-1: SerialNumber: syz
[  341.677373][ T4525] usb 4-1: USB disconnect, device number 12
[  341.764124][ T8218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.901'.
[  341.967285][ T4523] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  342.166041][ T4523] usb 8-1: config 0 has no interfaces?
[  342.387570][ T4523] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  342.422665][ T4523] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.462523][ T4523] usb 8-1: Product: syz
[  342.517335][ T4523] usb 8-1: Manufacturer: syz
[  342.522990][ T4523] usb 8-1: SerialNumber: syz
[  342.548472][ T4523] usb 8-1: config 0 descriptor??
[  342.600707][ T8237] loop0: detected capacity change from 0 to 128
[  343.074709][ T8245] netlink: 'syz.3.920': attribute type 10 has an invalid length.
[  343.840653][ T8265] device erspan0 entered promiscuous mode
[  343.886060][ T8265] device vlan2 entered promiscuous mode
[  344.208242][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.8.928'.
[  344.604223][ T8287] loop0: detected capacity change from 0 to 128
[  344.624574][ T8289] netlink: 'syz.6.933': attribute type 10 has an invalid length.
[  345.063353][ T2166] usb 8-1: USB disconnect, device number 11
[  345.321620][ T8310] device erspan0 entered promiscuous mode
[  345.333386][ T8310] device vlan2 entered promiscuous mode
[  345.797545][   T27] audit: type=1326 audit(1743815511.129:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.6.944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9098d169 code=0x0
[  345.903840][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.944'.
[  345.905637][ T8332] loop0: detected capacity change from 0 to 128
[  346.181510][ T8333] netlink: 'syz.3.947': attribute type 33 has an invalid length.
[  346.206891][ T8333] netlink: 152 bytes leftover after parsing attributes in process `syz.3.947'.
[  346.236470][ T8342] netlink: 'syz.7.948': attribute type 10 has an invalid length.
[  346.906342][ T8368] device erspan0 entered promiscuous mode
[  346.969380][ T8368] device vlan2 entered promiscuous mode
[  347.264132][   T27] audit: type=1326 audit(1743815512.599:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.8.961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcf458d169 code=0x0
[  347.523611][ T8389] netlink: 'syz.3.963': attribute type 10 has an invalid length.
[  347.742280][ T8398] netlink: 'syz.5.964': attribute type 33 has an invalid length.
[  347.763401][ T8398] netlink: 152 bytes leftover after parsing attributes in process `syz.5.964'.
[  348.401966][   T27] audit: type=1326 audit(1743815513.739:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.3.970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f8838d169 code=0x0
[  348.510144][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'.
[  349.417263][   T27] audit: type=1326 audit(1743815514.749:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.7.981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd76178d169 code=0x0
[  349.568608][ T8453] netlink: 'syz.6.980': attribute type 33 has an invalid length.
[  350.123791][ T8453] netlink: 152 bytes leftover after parsing attributes in process `syz.6.980'.
[  351.275606][ T8485] netlink: 'syz.6.992': attribute type 13 has an invalid length.
[  351.364005][   T27] audit: type=1326 audit(1743815516.699:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.8.993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcf458d169 code=0x0
[  352.077311][ T4525] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  352.427236][ T4525] usb 4-1: Using ep0 maxpacket: 16
[  352.545175][ T4525] usb 4-1: unable to get BOS descriptor or descriptor too short
[  352.564575][ T4525] usb 4-1: unable to read config index 0 descriptor/start: -71
[  352.575344][ T4525] usb 4-1: can't read configurations, error -71
[  354.233385][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.241205][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.908079][ T8485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.943076][ T8485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.587895][ T4414] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  356.777225][ T4414] usb 9-1: Using ep0 maxpacket: 16
[  356.798792][ T4414] usb 9-1: unable to get BOS descriptor or descriptor too short
[  356.823782][ T4414] usb 9-1: unable to read config index 0 descriptor/start: -71
[  356.836405][ T4414] usb 9-1: can't read configurations, error -71
[  357.904783][ T8485] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.914239][ T8485] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.924843][ T8485] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.935170][ T8485] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.219180][ T8548] loop0: detected capacity change from 0 to 128
[  361.046364][ T8593] loop0: detected capacity change from 0 to 128
[  361.287234][ T4413] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  361.517283][ T4413] usb 8-1: Using ep0 maxpacket: 16
[  361.540545][ T4413] usb 8-1: unable to get BOS descriptor or descriptor too short
[  361.588118][ T4413] usb 8-1: unable to read config index 0 descriptor/start: -71
[  361.616136][ T4413] usb 8-1: can't read configurations, error -71
[  362.003430][ T8626] loop0: detected capacity change from 0 to 128
[  363.805088][ T8678] loop0: detected capacity change from 0 to 128
[  363.887493][ T4413] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  364.097391][ T4413] usb 8-1: Using ep0 maxpacket: 16
[  364.127295][ T4413] usb 8-1: unable to get BOS descriptor or descriptor too short
[  364.169725][ T4413] usb 8-1: unable to read config index 0 descriptor/start: -71
[  364.208582][ T4413] usb 8-1: can't read configurations, error -71
[  364.675510][ T8704] netlink: 'syz.8.1060': attribute type 13 has an invalid length.
[  365.544118][ T4413] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  365.749270][ T4413] usb 8-1: config 0 has an invalid interface number: 9 but max is 0
[  365.767335][ T4413] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.784334][ T4413] usb 8-1: config 0 has no interface number 0
[  365.831225][ T4413] usb 8-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8
[  365.859162][ T4413] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.890002][ T4413] usb 8-1: config 0 descriptor??
[  365.961442][ T4413] usb 8-1: bad CDC descriptors
[  366.000351][ T4413] usb 8-1: bad CDC descriptors
[  366.576018][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.584573][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.653721][ T8728] sock: sock_set_timeout: `syz.7.1062' (pid 8728) tries to set negative timeout
[  366.766600][ T8732] loop0: detected capacity change from 0 to 128
[  367.647481][ T4307] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  367.837243][ T4307] usb 6-1: Using ep0 maxpacket: 16
[  368.585465][ T8704] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.634470][ T8704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.758944][ T4525] usb 8-1: USB disconnect, device number 16
[  369.879095][ T8704] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.897515][ T8704] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.907462][ T8704] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.916784][ T8704] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.205584][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1077'.
[  370.405542][ T4307] usb 6-1: unable to get BOS descriptor or descriptor too short
[  370.434739][ T4307] usb 6-1: unable to read config index 0 descriptor/start: -71
[  370.455540][ T4307] usb 6-1: can't read configurations, error -71
[  370.493012][ T8769] loop0: detected capacity change from 0 to 128
[  372.399641][ T8807] loop0: detected capacity change from 0 to 128
[  372.480217][ T2166] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  372.687276][ T2166] usb 8-1: Using ep0 maxpacket: 16
[  372.702739][ T2166] usb 8-1: unable to get BOS descriptor or descriptor too short
[  372.738446][ T2166] usb 8-1: unable to read config index 0 descriptor/start: -71
[  372.769170][ T2166] usb 8-1: can't read configurations, error -71
[  373.612092][ T8821] netlink: 'syz.5.1099': attribute type 33 has an invalid length.
[  373.626994][ T8821] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1099'.
[  374.862440][ T8842] loop0: detected capacity change from 0 to 128
[  375.545991][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1108'.
[  375.767607][ T4307] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  375.967235][ T4307] usb 9-1: Using ep0 maxpacket: 16
[  376.057214][ T4525] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  376.267745][ T4525] usb 4-1: Using ep0 maxpacket: 8
[  376.277465][ T4525] usb 4-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  376.368672][ T4525] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 42
[  376.380962][ T8848] team0 (unregistering): Port device team_slave_0 removed
[  376.418685][ T4525] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  376.455586][ T4525] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  376.475168][ T4525] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  376.493898][ T4525] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  376.504214][ T4525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.524044][ T4525] usb 4-1: config 0 descriptor??
[  376.559634][ T4525] kobil_sct 4-1:0.0: required endpoints missing
[  376.731010][ T8848] team0 (unregistering): Port device team_slave_1 removed
[  378.560441][ T4307] usb 9-1: unable to get BOS descriptor or descriptor too short
[  378.594746][ T4307] usb 9-1: unable to read config index 0 descriptor/start: -71
[  378.643192][ T4307] usb 9-1: can't read configurations, error -71
[  378.751350][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.758313][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.815282][ T4523] usb 4-1: USB disconnect, device number 15
[  379.097266][ T8891] capability: warning: `syz.8.1121' uses deprecated v2 capabilities in a way that may be insecure
[  379.789818][ T8906] loop0: detected capacity change from 0 to 128
[  381.167509][ T8925] netlink: 'syz.6.1131': attribute type 10 has an invalid length.
[  381.238176][ T5235] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  381.297206][ T4525] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  381.477223][ T4525] usb 9-1: Using ep0 maxpacket: 16
[  382.037240][ T4523] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  382.250178][ T4523] usb 8-1: Using ep0 maxpacket: 8
[  382.279958][ T4523] usb 8-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  382.297300][ T4523] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 42
[  382.308474][ T4523] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  382.319938][ T4523] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  382.331790][ T4523] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  382.346402][ T4523] usb 8-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  382.356897][ T4523] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.374735][ T4523] usb 8-1: config 0 descriptor??
[  382.384045][ T4523] kobil_sct 8-1:0.0: required endpoints missing
[  383.048679][ T8946] loop0: detected capacity change from 0 to 128
[  383.561280][ T4307] usb 8-1: USB disconnect, device number 19
[  383.976044][ T8957] netlink: 'syz.6.1141': attribute type 33 has an invalid length.
[  384.010287][ T8957] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1141'.
[  384.096683][ T4525] usb 9-1: unable to get BOS descriptor or descriptor too short
[  384.124101][ T4525] usb 9-1: unable to read config index 0 descriptor/start: -71
[  384.156470][ T4525] usb 9-1: can't read configurations, error -71
[  386.507315][ T4525] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  386.718581][ T4525] usb 8-1: Using ep0 maxpacket: 16
[  386.744824][ T4525] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  386.775391][ T4525] usb 8-1: config 1 interface 0 has no altsetting 0
[  386.815571][ T4525] usb 8-1: string descriptor 0 read error: -22
[  386.823637][ T4525] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  386.853551][ T4525] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.423408][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.518844][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.063666][ T9049] device gretap0 entered promiscuous mode
[  388.081652][ T9049] device vlan2 entered promiscuous mode
[  391.397943][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1181'.
[  391.733292][ T9084] loop0: detected capacity change from 0 to 128
[  391.948585][ T4525] usbhid 8-1:1.0: can't add hid device: -32
[  391.959203][ T4523] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  391.969522][ T4525] usbhid: probe of 8-1:1.0 failed with error -32
[  392.013560][ T4525] usb 8-1: USB disconnect, device number 20
[  392.157287][ T4523] usb 6-1: Using ep0 maxpacket: 8
[  392.164880][ T4523] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  392.176210][ T4523] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  392.192481][ T4523] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  392.204790][ T4523] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  392.219739][ T4523] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  392.234067][ T4523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.287960][ T9093] netlink: 'syz.8.1186': attribute type 33 has an invalid length.
[  392.303724][ T9093] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1186'.
[  392.470301][ T4523] usb 6-1: GET_CAPABILITIES returned 0
[  392.476226][ T4523] usbtmc 6-1:16.0: can't read capabilities
[  392.653488][   T27] audit: type=1326 audit(1743815557.989:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.7.1187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd76178d169 code=0x0
[  392.699553][ T4525] usb 6-1: USB disconnect, device number 8
[  392.840541][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1187'.
[  394.386656][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1194'.
[  394.472532][ T4416] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  394.677553][ T4416] usb 7-1: Using ep0 maxpacket: 8
[  394.690063][ T4416] usb 7-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[  394.734487][ T4416] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 42
[  394.760920][ T4416] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  394.806362][ T4416] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x67, skipping
[  394.851733][ T4416] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  394.895355][ T4416] usb 7-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[  394.925581][ T4416] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.982903][ T4416] usb 7-1: config 0 descriptor??
[  395.002076][ T4416] kobil_sct 7-1:0.0: required endpoints missing
[  395.357377][ T5172] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  395.375537][ T9134] ------------[ cut here ]------------
[  395.382678][ T9134] WARNING: CPU: 1 PID: 9134 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x162/0x190
[  395.393469][ T9134] Modules linked in:
[  395.397707][ T9134] CPU: 1 PID: 9134 Comm: syz.3.1197 Not tainted 6.1.132-syzkaller #0
[  395.406002][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  395.416546][ T9134] RIP: 0010:taprio_get_start_time+0x162/0x190
[  395.422710][ T9134] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 18 ad 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 4b b0 f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b
[  395.443057][ T9134] RSP: 0018:ffffc900059eedc0 EFLAGS: 00010287
[  395.449488][ T9134] RAX: ffffffff88da5f12 RBX: 0000000000000000 RCX: 0000000000080000
[  395.457574][ T9134] RDX: ffffc9000e2d9000 RSI: 0000000000001713 RDI: 0000000000001714
[  395.465880][ T9134] RBP: ffff888078d102d4 R08: ffffffff88da5ebf R09: fffffbfff2257680
[  395.474385][ T9134] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  395.483003][ T9134] R13: 183347036ab5ad65 R14: dffffc0000000000 R15: 0000000000000000
[  395.491885][ T9134] FS:  00007f0f890ff6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  395.502639][ T9134] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  395.509509][ T9134] CR2: 000000110c2de47a CR3: 0000000020723000 CR4: 00000000003506e0
[  395.517859][ T9134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  395.525972][ T9134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  395.534094][ T9134] Call Trace:
[  395.537469][ T9134]  <TASK>
[  395.540435][ T9134]  ? __warn+0x15a/0x520
[  395.544656][ T9134]  ? taprio_get_start_time+0x162/0x190
[  395.550298][ T9134]  ? report_bug+0x2af/0x500
[  395.555129][ T9134]  ? taprio_get_start_time+0x162/0x190
[  395.560802][ T9134]  ? handle_bug+0x3d/0x70
[  395.565543][ T9134]  ? exc_invalid_op+0x16/0x40
[  395.570605][ T9134]  ? asm_exc_invalid_op+0x16/0x20
[  395.575720][ T9134]  ? taprio_get_start_time+0x10f/0x190
[  395.577445][ T5172] usb 8-1: Using ep0 maxpacket: 16
[  395.581680][ T9134]  ? taprio_get_start_time+0x162/0x190
[  395.592412][ T9134]  ? taprio_get_start_time+0x162/0x190
[  395.598436][ T9134]  taprio_change+0x4319/0x5600
[  395.603391][ T9134]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  395.609553][ T9134]  ? taprio_destroy+0x4a0/0x4a0
[  395.614488][ T9134]  ? lockdep_init_map_type+0x9d/0x900
[  395.620412][ T9134]  ? rtnetlink_rcv_msg+0x822/0x1000
[  395.625689][ T9134]  ? netlink_rcv_skb+0x1cd/0x410
[  395.630777][ T9134]  ? netlink_unicast+0x7e2/0x970
[  395.635958][ T9134]  ? netlink_sendmsg+0xa26/0xd60
[  395.641397][ T9134]  ? ____sys_sendmsg+0x5d3/0x9a0
[  395.646530][ T9134]  ? __sys_sendmsg+0x2a9/0x390
[  395.651661][ T9134]  ? memset+0x1f/0x40
[  395.656096][ T9134]  ? fifo_init+0x41e/0x760
[  395.660727][ T9134]  ? qdisc_peek_head+0x40/0x40
[  395.665605][ T9134]  ? taprio_peek+0x590/0x590
[  395.670338][ T9134]  qdisc_create+0x8a1/0x1220
[  395.675153][ T9134]  ? qdisc_notify+0x390/0x390
[  395.680024][ T9134]  ? lockdep_rtnl_is_held+0x22/0x30
[  395.685414][ T9134]  tc_modify_qdisc+0xb6d/0x1e60
[  395.690955][ T9134]  ? qdisc_offload_query_caps+0x170/0x170
[  395.696857][ T9134]  ? qdisc_offload_query_caps+0x170/0x170
[  395.702765][ T9134]  rtnetlink_rcv_msg+0x822/0x1000
[  395.707973][ T9134]  ? rtnetlink_bind+0x80/0x80
[  395.712725][ T9134]  ? __local_bh_enable_ip+0x164/0x1f0
[  395.718316][ T9134]  ? __dev_queue_xmit+0x2d6/0x3d50
[  395.723795][ T9134]  ? _local_bh_enable+0xa0/0xa0
[  395.728775][ T9134]  ? __dev_queue_xmit+0x2d6/0x3d50
[  395.734389][ T9134]  ? __dev_queue_xmit+0x173c/0x3d50
[  395.739893][ T9134]  ? __dev_queue_xmit+0x2d6/0x3d50
[  395.745284][ T9134]  ? netdev_core_pick_tx+0x320/0x320
[  395.750772][ T9134]  ? ref_tracker_free+0x638/0x7d0
[  395.756026][ T9134]  ? memcpy+0x3c/0x60
[  395.760137][ T9134]  ? refcount_inc+0x80/0x80
[  395.764712][ T9134]  ? __copy_skb_header+0x47b/0x600
[  395.770427][ T9134]  netlink_rcv_skb+0x1cd/0x410
[  395.775448][ T9134]  ? rtnetlink_bind+0x80/0x80
[  395.780447][ T9134]  ? netlink_ack+0x12a0/0x12a0
[  395.785358][ T9134]  ? __netlink_deliver_tap+0x748/0x780
[  395.791075][ T9134]  ? netlink_deliver_tap+0x2e/0x1b0
[  395.796372][ T9134]  netlink_unicast+0x7e2/0x970
[  395.801397][ T9134]  ? netlink_detachskb+0x90/0x90
[  395.806651][ T9134]  ? __virt_addr_valid+0x45b/0x530
[  395.811923][ T9134]  ? __phys_addr_symbol+0x2b/0x70
[  395.817429][ T9134]  ? __check_object_size+0x4dd/0xa30
[  395.822878][ T9134]  ? bpf_lsm_netlink_send+0x5/0x10
[  395.828380][ T9134]  netlink_sendmsg+0xa26/0xd60
[  395.833305][ T9134]  ? netlink_getsockopt+0x580/0x580
[  395.838717][ T9134]  ? aa_sock_msg_perm+0x91/0x150
[  395.843908][ T9134]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  395.849379][ T9134]  ? security_socket_sendmsg+0x7d/0xa0
[  395.855276][ T9134]  ? netlink_getsockopt+0x580/0x580
[  395.860760][ T9134]  ____sys_sendmsg+0x5d3/0x9a0
[  395.865900][ T9134]  ? __sys_sendmsg_sock+0x30/0x30
[  395.871090][ T9134]  __sys_sendmsg+0x2a9/0x390
[  395.875747][ T9134]  ? ____sys_sendmsg+0x9a0/0x9a0
[  395.880842][ T9134]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  395.887009][ T9134]  ? syscall_enter_from_user_mode+0x2e/0x230
[  395.893183][ T9134]  ? lockdep_hardirqs_on+0x94/0x130
[  395.898813][ T9134]  ? syscall_enter_from_user_mode+0x2e/0x230
[  395.904922][ T9134]  do_syscall_64+0x3b/0xb0
[  395.910118][ T9134]  ? clear_bhb_loop+0x45/0xa0
[  395.915387][ T9134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.921793][ T9134] RIP: 0033:0x7f0f8838d169
[  395.926593][ T9134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  395.946662][ T9134] RSP: 002b:00007f0f890ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.956022][ T9134] RAX: ffffffffffffffda RBX: 00007f0f885a5fa0 RCX: 00007f0f8838d169
[  395.964100][ T9134] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004
[  395.972538][ T9134] RBP: 00007f0f8840e2a0 R08: 0000000000000000 R09: 0000000000000000
[  395.980631][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.988834][ T9134] R13: 0000000000000000 R14: 00007f0f885a5fa0 R15: 00007ffec8c48098
[  395.997083][ T9134]  </TASK>
[  396.000317][ T9134] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  396.007922][ T9134] CPU: 1 PID: 9134 Comm: syz.3.1197 Not tainted 6.1.132-syzkaller #0
[  396.016080][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  396.026168][ T9134] Call Trace:
[  396.029478][ T9134]  <TASK>
[  396.032554][ T9134]  dump_stack_lvl+0x1e3/0x2cb
[  396.037363][ T9134]  ? nf_tcp_handle_invalid+0x647/0x647
[  396.043017][ T9134]  ? panic+0x764/0x764
[  396.047331][ T9134]  ? vscnprintf+0x59/0x80
[  396.051728][ T9134]  panic+0x318/0x764
[  396.055938][ T9134]  ? __warn+0x169/0x520
[  396.060367][ T9134]  ? memcpy_page_flushcache+0xfc/0xfc
[  396.065824][ T9134]  __warn+0x348/0x520
[  396.069861][ T9134]  ? taprio_get_start_time+0x162/0x190
[  396.075949][ T9134]  report_bug+0x2af/0x500
[  396.080632][ T9134]  ? taprio_get_start_time+0x162/0x190
[  396.086250][ T9134]  handle_bug+0x3d/0x70
[  396.090602][ T9134]  exc_invalid_op+0x16/0x40
[  396.095258][ T9134]  asm_exc_invalid_op+0x16/0x20
[  396.100337][ T9134] RIP: 0010:taprio_get_start_time+0x162/0x190
[  396.106788][ T9134] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 18 ad 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 4b b0 f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b
[  396.126455][ T9134] RSP: 0018:ffffc900059eedc0 EFLAGS: 00010287
[  396.132574][ T9134] RAX: ffffffff88da5f12 RBX: 0000000000000000 RCX: 0000000000080000
[  396.140675][ T9134] RDX: ffffc9000e2d9000 RSI: 0000000000001713 RDI: 0000000000001714
[  396.148787][ T9134] RBP: ffff888078d102d4 R08: ffffffff88da5ebf R09: fffffbfff2257680
[  396.156932][ T9134] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  396.164972][ T9134] R13: 183347036ab5ad65 R14: dffffc0000000000 R15: 0000000000000000
[  396.173110][ T9134]  ? taprio_get_start_time+0x10f/0x190
[  396.178750][ T9134]  ? taprio_get_start_time+0x162/0x190
[  396.184457][ T9134]  taprio_change+0x4319/0x5600
[  396.189375][ T9134]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  396.195410][ T9134]  ? taprio_destroy+0x4a0/0x4a0
[  396.200315][ T9134]  ? lockdep_init_map_type+0x9d/0x900
[  396.206271][ T9134]  ? rtnetlink_rcv_msg+0x822/0x1000
[  396.211505][ T9134]  ? netlink_rcv_skb+0x1cd/0x410
[  396.216614][ T9134]  ? netlink_unicast+0x7e2/0x970
[  396.221720][ T9134]  ? netlink_sendmsg+0xa26/0xd60
[  396.226715][ T9134]  ? ____sys_sendmsg+0x5d3/0x9a0
[  396.231714][ T9134]  ? __sys_sendmsg+0x2a9/0x390
[  396.236546][ T9134]  ? memset+0x1f/0x40
[  396.240589][ T9134]  ? fifo_init+0x41e/0x760
[  396.245244][ T9134]  ? qdisc_peek_head+0x40/0x40
[  396.250103][ T9134]  ? taprio_peek+0x590/0x590
[  396.254740][ T9134]  qdisc_create+0x8a1/0x1220
[  396.259389][ T9134]  ? qdisc_notify+0x390/0x390
[  396.264129][ T9134]  ? lockdep_rtnl_is_held+0x22/0x30
[  396.269627][ T9134]  tc_modify_qdisc+0xb6d/0x1e60
[  396.274511][ T9134]  ? qdisc_offload_query_caps+0x170/0x170
[  396.280371][ T9134]  ? qdisc_offload_query_caps+0x170/0x170
[  396.286137][ T9134]  rtnetlink_rcv_msg+0x822/0x1000
[  396.291327][ T9134]  ? rtnetlink_bind+0x80/0x80
[  396.296053][ T9134]  ? __local_bh_enable_ip+0x164/0x1f0
[  396.301495][ T9134]  ? __dev_queue_xmit+0x2d6/0x3d50
[  396.306724][ T9134]  ? _local_bh_enable+0xa0/0xa0
[  396.311605][ T9134]  ? __dev_queue_xmit+0x2d6/0x3d50
[  396.316740][ T9134]  ? __dev_queue_xmit+0x173c/0x3d50
[  396.322031][ T9134]  ? __dev_queue_xmit+0x2d6/0x3d50
[  396.327185][ T9134]  ? netdev_core_pick_tx+0x320/0x320
[  396.332491][ T9134]  ? ref_tracker_free+0x638/0x7d0
[  396.337534][ T9134]  ? memcpy+0x3c/0x60
[  396.341629][ T9134]  ? refcount_inc+0x80/0x80
[  396.346144][ T9134]  ? __copy_skb_header+0x47b/0x600
[  396.351359][ T9134]  netlink_rcv_skb+0x1cd/0x410
[  396.356424][ T9134]  ? rtnetlink_bind+0x80/0x80
[  396.361287][ T9134]  ? netlink_ack+0x12a0/0x12a0
[  396.366115][ T9134]  ? __netlink_deliver_tap+0x748/0x780
[  396.371832][ T9134]  ? netlink_deliver_tap+0x2e/0x1b0
[  396.377143][ T9134]  netlink_unicast+0x7e2/0x970
[  396.382036][ T9134]  ? netlink_detachskb+0x90/0x90
[  396.387026][ T9134]  ? __virt_addr_valid+0x45b/0x530
[  396.392264][ T9134]  ? __phys_addr_symbol+0x2b/0x70
[  396.397306][ T9134]  ? __check_object_size+0x4dd/0xa30
[  396.402637][ T9134]  ? bpf_lsm_netlink_send+0x5/0x10
[  396.407914][ T9134]  netlink_sendmsg+0xa26/0xd60
[  396.412807][ T9134]  ? netlink_getsockopt+0x580/0x580
[  396.418046][ T9134]  ? aa_sock_msg_perm+0x91/0x150
[  396.423133][ T9134]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  396.428468][ T9134]  ? security_socket_sendmsg+0x7d/0xa0
[  396.433966][ T9134]  ? netlink_getsockopt+0x580/0x580
[  396.439188][ T9134]  ____sys_sendmsg+0x5d3/0x9a0
[  396.444016][ T9134]  ? __sys_sendmsg_sock+0x30/0x30
[  396.449095][ T9134]  __sys_sendmsg+0x2a9/0x390
[  396.453817][ T9134]  ? ____sys_sendmsg+0x9a0/0x9a0
[  396.458811][ T9134]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  396.464869][ T9134]  ? syscall_enter_from_user_mode+0x2e/0x230
[  396.470960][ T9134]  ? lockdep_hardirqs_on+0x94/0x130
[  396.476288][ T9134]  ? syscall_enter_from_user_mode+0x2e/0x230
[  396.482337][ T9134]  do_syscall_64+0x3b/0xb0
[  396.486915][ T9134]  ? clear_bhb_loop+0x45/0xa0
[  396.491678][ T9134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  396.497694][ T9134] RIP: 0033:0x7f0f8838d169
[  396.502257][ T9134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.521895][ T9134] RSP: 002b:00007f0f890ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.530440][ T9134] RAX: ffffffffffffffda RBX: 00007f0f885a5fa0 RCX: 00007f0f8838d169
[  396.538445][ T9134] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004
[  396.546548][ T9134] RBP: 00007f0f8840e2a0 R08: 0000000000000000 R09: 0000000000000000
[  396.554814][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.563084][ T9134] R13: 0000000000000000 R14: 00007f0f885a5fa0 R15: 00007ffec8c48098
[  396.571464][ T9134]  </TASK>
[  396.574843][ T9134] Kernel Offset: disabled
[  396.579304][ T9134] Rebooting in 86400 seconds..