Warning: Permanently added '[localhost]:38074' (ECDSA) to the list of known hosts.
2022/10/06 21:42:13 fuzzer started
2022/10/06 21:42:14 dialing manager at localhost:37677
[   64.616611][ T3675] cgroup: Unknown subsys name 'net'
[   64.793733][ T3675] cgroup: Unknown subsys name 'rlimit'
2022/10/06 21:42:22 syscalls: 3774
2022/10/06 21:42:22 code coverage: enabled
2022/10/06 21:42:22 comparison tracing: enabled
2022/10/06 21:42:22 extra coverage: enabled
2022/10/06 21:42:22 delay kcov mmap: enabled
2022/10/06 21:42:22 setuid sandbox: enabled
2022/10/06 21:42:22 namespace sandbox: enabled
2022/10/06 21:42:22 Android sandbox: /sys/fs/selinux/policy does not exist
2022/10/06 21:42:22 fault injection: enabled
2022/10/06 21:42:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2022/10/06 21:42:22 net packet injection: enabled
2022/10/06 21:42:22 net device setup: enabled
2022/10/06 21:42:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/06 21:42:22 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/06 21:42:22 NIC VF setup: PCI device 0000:00:11.0 is not available
2022/10/06 21:42:22 USB emulation: enabled
2022/10/06 21:42:22 hci packet injection: enabled
2022/10/06 21:42:22 wifi device emulation: failed to parse kernel version (6.0.0-syzkaller-06162-g18fd049731e6                              )
2022/10/06 21:42:22 802.15.4 emulation: enabled
2022/10/06 21:42:22 fetching corpus: 0, signal 0/2000 (executing program)
2022/10/06 21:42:23 fetching corpus: 50, signal 30521/34267 (executing program)
2022/10/06 21:42:23 fetching corpus: 100, signal 52739/58069 (executing program)
2022/10/06 21:42:23 fetching corpus: 150, signal 63683/70599 (executing program)
2022/10/06 21:42:23 fetching corpus: 199, signal 76824/85235 (executing program)
2022/10/06 21:42:24 fetching corpus: 249, signal 84496/94389 (executing program)
2022/10/06 21:42:24 fetching corpus: 299, signal 95420/106644 (executing program)
2022/10/06 21:42:24 fetching corpus: 349, signal 101875/114514 (executing program)
2022/10/06 21:42:24 fetching corpus: 398, signal 106967/121027 (executing program)
2022/10/06 21:42:24 fetching corpus: 448, signal 113471/128821 (executing program)
2022/10/06 21:42:25 fetching corpus: 498, signal 117835/134555 (executing program)
2022/10/06 21:42:25 fetching corpus: 548, signal 122585/140576 (executing program)
2022/10/06 21:42:25 fetching corpus: 598, signal 126254/145551 (executing program)
2022/10/06 21:42:25 fetching corpus: 648, signal 131471/151965 (executing program)
2022/10/06 21:42:25 fetching corpus: 698, signal 137358/158955 (executing program)
2022/10/06 21:42:25 fetching corpus: 748, signal 143186/165815 (executing program)
2022/10/06 21:42:26 fetching corpus: 798, signal 147623/171326 (executing program)
2022/10/06 21:42:26 fetching corpus: 848, signal 151893/176673 (executing program)
2022/10/06 21:42:26 fetching corpus: 898, signal 154086/180080 (executing program)
2022/10/06 21:42:26 fetching corpus: 947, signal 159178/186136 (executing program)
2022/10/06 21:42:26 fetching corpus: 997, signal 162516/190535 (executing program)
2022/10/06 21:42:26 fetching corpus: 1047, signal 164548/193758 (executing program)
2022/10/06 21:42:27 fetching corpus: 1097, signal 167424/197696 (executing program)
2022/10/06 21:42:27 fetching corpus: 1147, signal 170847/202103 (executing program)
2022/10/06 21:42:27 fetching corpus: 1197, signal 173025/205369 (executing program)
2022/10/06 21:42:27 fetching corpus: 1247, signal 176089/209440 (executing program)
2022/10/06 21:42:27 fetching corpus: 1297, signal 178639/212967 (executing program)
2022/10/06 21:42:28 fetching corpus: 1347, signal 181505/216776 (executing program)
2022/10/06 21:42:28 fetching corpus: 1397, signal 183986/220246 (executing program)
2022/10/06 21:42:28 fetching corpus: 1447, signal 186492/223698 (executing program)
2022/10/06 21:42:29 fetching corpus: 1497, signal 189083/227258 (executing program)
2022/10/06 21:42:29 fetching corpus: 1547, signal 190801/229988 (executing program)
2022/10/06 21:42:29 fetching corpus: 1597, signal 194012/234031 (executing program)
2022/10/06 21:42:29 fetching corpus: 1647, signal 196238/237166 (executing program)
2022/10/06 21:42:29 fetching corpus: 1697, signal 197849/239774 (executing program)
2022/10/06 21:42:30 fetching corpus: 1746, signal 200035/242795 (executing program)
2022/10/06 21:42:30 fetching corpus: 1795, signal 202766/246337 (executing program)
2022/10/06 21:42:30 fetching corpus: 1845, signal 204187/248751 (executing program)
2022/10/06 21:42:30 fetching corpus: 1895, signal 206372/251759 (executing program)
2022/10/06 21:42:30 fetching corpus: 1945, signal 209071/255212 (executing program)
2022/10/06 21:42:30 fetching corpus: 1995, signal 211116/258090 (executing program)
2022/10/06 21:42:31 fetching corpus: 2045, signal 213030/260792 (executing program)
2022/10/06 21:42:31 fetching corpus: 2095, signal 215720/264167 (executing program)
2022/10/06 21:42:31 fetching corpus: 2145, signal 218118/267240 (executing program)
2022/10/06 21:42:31 fetching corpus: 2195, signal 219732/269687 (executing program)
2022/10/06 21:42:31 fetching corpus: 2245, signal 221376/272201 (executing program)
2022/10/06 21:42:32 fetching corpus: 2295, signal 223506/275073 (executing program)
2022/10/06 21:42:32 fetching corpus: 2345, signal 225014/277366 (executing program)
2022/10/06 21:42:32 fetching corpus: 2394, signal 227396/280372 (executing program)
2022/10/06 21:42:32 fetching corpus: 2444, signal 229144/282861 (executing program)
2022/10/06 21:42:32 fetching corpus: 2494, signal 230281/284856 (executing program)
2022/10/06 21:42:32 fetching corpus: 2544, signal 231565/286919 (executing program)
2022/10/06 21:42:33 fetching corpus: 2594, signal 232551/288761 (executing program)
2022/10/06 21:42:33 fetching corpus: 2644, signal 234346/291237 (executing program)
2022/10/06 21:42:33 fetching corpus: 2694, signal 235946/293548 (executing program)
2022/10/06 21:42:33 fetching corpus: 2744, signal 237823/296001 (executing program)
2022/10/06 21:42:33 fetching corpus: 2794, signal 239621/298474 (executing program)
2022/10/06 21:42:34 fetching corpus: 2844, signal 241935/301252 (executing program)
2022/10/06 21:42:34 fetching corpus: 2894, signal 243559/303537 (executing program)
2022/10/06 21:42:34 fetching corpus: 2944, signal 244848/305534 (executing program)
2022/10/06 21:42:34 fetching corpus: 2994, signal 245735/307212 (executing program)
2022/10/06 21:42:34 fetching corpus: 3044, signal 247740/309738 (executing program)
2022/10/06 21:42:34 fetching corpus: 3094, signal 250041/312466 (executing program)
2022/10/06 21:42:35 fetching corpus: 3144, signal 251246/314324 (executing program)
2022/10/06 21:42:35 fetching corpus: 3194, signal 253015/316671 (executing program)
2022/10/06 21:42:35 fetching corpus: 3244, signal 254986/319082 (executing program)
[   77.470494][ T1352] ieee802154 phy0 wpan0: encryption failed: -22
[   77.476071][ T1352] ieee802154 phy1 wpan1: encryption failed: -22
2022/10/06 21:42:35 fetching corpus: 3294, signal 257899/322169 (executing program)
2022/10/06 21:42:35 fetching corpus: 3344, signal 259213/324099 (executing program)
2022/10/06 21:42:35 fetching corpus: 3394, signal 260294/325837 (executing program)
2022/10/06 21:42:36 fetching corpus: 3444, signal 261990/327979 (executing program)
2022/10/06 21:42:36 fetching corpus: 3494, signal 263522/330015 (executing program)
2022/10/06 21:42:36 fetching corpus: 3544, signal 264534/331649 (executing program)
2022/10/06 21:42:36 fetching corpus: 3594, signal 265145/333049 (executing program)
2022/10/06 21:42:37 fetching corpus: 3644, signal 266574/335001 (executing program)
2022/10/06 21:42:37 fetching corpus: 3694, signal 267950/336885 (executing program)
2022/10/06 21:42:37 fetching corpus: 3744, signal 270073/339305 (executing program)
2022/10/06 21:42:37 fetching corpus: 3794, signal 271491/341217 (executing program)
2022/10/06 21:42:37 fetching corpus: 3844, signal 272775/343004 (executing program)
2022/10/06 21:42:37 fetching corpus: 3893, signal 274125/344754 (executing program)
2022/10/06 21:42:38 fetching corpus: 3943, signal 275075/346282 (executing program)
2022/10/06 21:42:38 fetching corpus: 3993, signal 276065/347777 (executing program)
2022/10/06 21:42:38 fetching corpus: 4043, signal 277478/349611 (executing program)
2022/10/06 21:42:38 fetching corpus: 4093, signal 278636/351272 (executing program)
2022/10/06 21:42:39 fetching corpus: 4143, signal 280705/353501 (executing program)
2022/10/06 21:42:39 fetching corpus: 4193, signal 282902/355832 (executing program)
2022/10/06 21:42:39 fetching corpus: 4243, signal 283801/357267 (executing program)
2022/10/06 21:42:39 fetching corpus: 4293, signal 285374/359189 (executing program)
2022/10/06 21:42:39 fetching corpus: 4343, signal 286139/360538 (executing program)
2022/10/06 21:42:40 fetching corpus: 4393, signal 287105/362051 (executing program)
2022/10/06 21:42:40 fetching corpus: 4443, signal 288535/363808 (executing program)
2022/10/06 21:42:40 fetching corpus: 4493, signal 289797/365416 (executing program)
2022/10/06 21:42:40 fetching corpus: 4543, signal 290583/366743 (executing program)
2022/10/06 21:42:40 fetching corpus: 4592, signal 291767/368336 (executing program)
2022/10/06 21:42:41 fetching corpus: 4642, signal 292684/369684 (executing program)
2022/10/06 21:42:41 fetching corpus: 4692, signal 293316/370860 (executing program)
2022/10/06 21:42:41 fetching corpus: 4742, signal 294286/372306 (executing program)
2022/10/06 21:42:41 fetching corpus: 4792, signal 295750/374048 (executing program)
2022/10/06 21:42:41 fetching corpus: 4842, signal 296878/375541 (executing program)
2022/10/06 21:42:42 fetching corpus: 4892, signal 297657/376766 (executing program)
2022/10/06 21:42:42 fetching corpus: 4942, signal 298366/377940 (executing program)
2022/10/06 21:42:42 fetching corpus: 4992, signal 299321/379338 (executing program)
2022/10/06 21:42:43 fetching corpus: 5042, signal 300242/380663 (executing program)
2022/10/06 21:42:43 fetching corpus: 5090, signal 301135/381969 (executing program)
2022/10/06 21:42:43 fetching corpus: 5140, signal 302161/383319 (executing program)
2022/10/06 21:42:43 fetching corpus: 5190, signal 303429/384856 (executing program)
2022/10/06 21:42:43 fetching corpus: 5238, signal 304714/386342 (executing program)
2022/10/06 21:42:43 fetching corpus: 5288, signal 305633/387670 (executing program)
2022/10/06 21:42:44 fetching corpus: 5338, signal 306402/388824 (executing program)
2022/10/06 21:42:44 fetching corpus: 5388, signal 306903/389882 (executing program)
2022/10/06 21:42:44 fetching corpus: 5438, signal 307592/391037 (executing program)
2022/10/06 21:42:44 fetching corpus: 5488, signal 308631/392395 (executing program)
2022/10/06 21:42:44 fetching corpus: 5538, signal 309857/393809 (executing program)
2022/10/06 21:42:45 fetching corpus: 5588, signal 310946/395157 (executing program)
2022/10/06 21:42:45 fetching corpus: 5638, signal 311946/396441 (executing program)
2022/10/06 21:42:45 fetching corpus: 5688, signal 312851/397691 (executing program)
2022/10/06 21:42:45 fetching corpus: 5738, signal 314171/399150 (executing program)
2022/10/06 21:42:45 fetching corpus: 5788, signal 315328/400540 (executing program)
2022/10/06 21:42:46 fetching corpus: 5838, signal 316392/401806 (executing program)
2022/10/06 21:42:46 fetching corpus: 5888, signal 317396/402991 (executing program)
2022/10/06 21:42:46 fetching corpus: 5938, signal 318054/404048 (executing program)
2022/10/06 21:42:46 fetching corpus: 5988, signal 318771/405151 (executing program)
2022/10/06 21:42:46 fetching corpus: 6038, signal 319399/406202 (executing program)
2022/10/06 21:42:46 fetching corpus: 6087, signal 320008/407244 (executing program)
2022/10/06 21:42:47 fetching corpus: 6137, signal 320726/408349 (executing program)
2022/10/06 21:42:47 fetching corpus: 6187, signal 321299/409315 (executing program)
2022/10/06 21:42:47 fetching corpus: 6237, signal 321857/410287 (executing program)
2022/10/06 21:42:47 fetching corpus: 6287, signal 323007/411536 (executing program)
2022/10/06 21:42:47 fetching corpus: 6336, signal 323973/412707 (executing program)
2022/10/06 21:42:47 fetching corpus: 6386, signal 324454/413642 (executing program)
2022/10/06 21:42:48 fetching corpus: 6436, signal 325487/414822 (executing program)
2022/10/06 21:42:48 fetching corpus: 6485, signal 326585/416048 (executing program)
2022/10/06 21:42:48 fetching corpus: 6535, signal 327224/416999 (executing program)
2022/10/06 21:42:48 fetching corpus: 6585, signal 328684/418404 (executing program)
2022/10/06 21:42:48 fetching corpus: 6635, signal 329372/419402 (executing program)
2022/10/06 21:42:49 fetching corpus: 6685, signal 330187/420437 (executing program)
2022/10/06 21:42:49 fetching corpus: 6735, signal 331369/421698 (executing program)
2022/10/06 21:42:49 fetching corpus: 6785, signal 332075/422665 (executing program)
2022/10/06 21:42:49 fetching corpus: 6835, signal 332618/423572 (executing program)
2022/10/06 21:42:49 fetching corpus: 6885, signal 333510/424613 (executing program)
2022/10/06 21:42:50 fetching corpus: 6935, signal 334220/425598 (executing program)
2022/10/06 21:42:50 fetching corpus: 6985, signal 334816/426569 (executing program)
2022/10/06 21:42:50 fetching corpus: 7035, signal 335504/427506 (executing program)
[   92.830665][  T174] cfg80211: failed to load regulatory.db
2022/10/06 21:42:50 fetching corpus: 7085, signal 336015/428375 (executing program)
2022/10/06 21:42:51 fetching corpus: 7135, signal 337029/429462 (executing program)
2022/10/06 21:42:51 fetching corpus: 7185, signal 337783/430417 (executing program)
2022/10/06 21:42:51 fetching corpus: 7235, signal 338941/431527 (executing program)
2022/10/06 21:42:51 fetching corpus: 7285, signal 339829/432524 (executing program)
2022/10/06 21:42:52 fetching corpus: 7335, signal 340472/433428 (executing program)
2022/10/06 21:42:52 fetching corpus: 7385, signal 341443/434436 (executing program)
2022/10/06 21:42:52 fetching corpus: 7435, signal 342124/435342 (executing program)
2022/10/06 21:42:52 fetching corpus: 7485, signal 343084/436395 (executing program)
2022/10/06 21:42:53 fetching corpus: 7535, signal 344148/437427 (executing program)
2022/10/06 21:42:53 fetching corpus: 7585, signal 345327/438474 (executing program)
2022/10/06 21:42:53 fetching corpus: 7635, signal 346039/439369 (executing program)
2022/10/06 21:42:53 fetching corpus: 7685, signal 346675/440230 (executing program)
2022/10/06 21:42:53 fetching corpus: 7735, signal 347432/441158 (executing program)
2022/10/06 21:42:53 fetching corpus: 7785, signal 348129/442035 (executing program)
2022/10/06 21:42:54 fetching corpus: 7835, signal 349079/442969 (executing program)
2022/10/06 21:42:54 fetching corpus: 7885, signal 350000/443865 (executing program)
2022/10/06 21:42:54 fetching corpus: 7935, signal 350659/444737 (executing program)
2022/10/06 21:42:54 fetching corpus: 7985, signal 351317/445582 (executing program)
2022/10/06 21:42:54 fetching corpus: 8035, signal 352189/446464 (executing program)
2022/10/06 21:42:55 fetching corpus: 8085, signal 352697/447229 (executing program)
2022/10/06 21:42:55 fetching corpus: 8135, signal 353432/448086 (executing program)
2022/10/06 21:42:56 fetching corpus: 8185, signal 353755/448722 (executing program)
2022/10/06 21:42:56 fetching corpus: 8235, signal 354290/449488 (executing program)
2022/10/06 21:42:56 fetching corpus: 8285, signal 355164/450355 (executing program)
2022/10/06 21:42:56 fetching corpus: 8335, signal 355737/451091 (executing program)
2022/10/06 21:42:56 fetching corpus: 8385, signal 356263/451823 (executing program)
2022/10/06 21:42:57 fetching corpus: 8435, signal 356841/452549 (executing program)
2022/10/06 21:42:57 fetching corpus: 8485, signal 357811/453417 (executing program)
2022/10/06 21:42:57 fetching corpus: 8535, signal 358534/454203 (executing program)
2022/10/06 21:42:57 fetching corpus: 8585, signal 359159/454959 (executing program)
2022/10/06 21:42:57 fetching corpus: 8635, signal 359822/455719 (executing program)
2022/10/06 21:42:58 fetching corpus: 8685, signal 360491/456488 (executing program)
2022/10/06 21:42:58 fetching corpus: 8735, signal 361299/457295 (executing program)
2022/10/06 21:42:58 fetching corpus: 8785, signal 361758/457980 (executing program)
2022/10/06 21:42:58 fetching corpus: 8835, signal 362409/458741 (executing program)
2022/10/06 21:42:58 fetching corpus: 8885, signal 362961/459440 (executing program)
2022/10/06 21:42:59 fetching corpus: 8935, signal 364181/460297 (executing program)
2022/10/06 21:42:59 fetching corpus: 8985, signal 364779/460993 (executing program)
2022/10/06 21:42:59 fetching corpus: 9035, signal 365455/461689 (executing program)
2022/10/06 21:42:59 fetching corpus: 9085, signal 366005/462314 (executing program)
2022/10/06 21:43:00 fetching corpus: 9135, signal 366666/463002 (executing program)
2022/10/06 21:43:00 fetching corpus: 9185, signal 367105/463654 (executing program)
2022/10/06 21:43:00 fetching corpus: 9235, signal 367464/464280 (executing program)
2022/10/06 21:43:00 fetching corpus: 9285, signal 368087/464967 (executing program)
2022/10/06 21:43:00 fetching corpus: 9335, signal 368622/465593 (executing program)
2022/10/06 21:43:01 fetching corpus: 9385, signal 369203/466282 (executing program)
2022/10/06 21:43:01 fetching corpus: 9435, signal 370195/467043 (executing program)
2022/10/06 21:43:01 fetching corpus: 9485, signal 370662/467651 (executing program)
2022/10/06 21:43:01 fetching corpus: 9534, signal 371343/468349 (executing program)
2022/10/06 21:43:02 fetching corpus: 9584, signal 371904/468991 (executing program)
2022/10/06 21:43:02 fetching corpus: 9634, signal 372431/469642 (executing program)
2022/10/06 21:43:02 fetching corpus: 9684, signal 373009/470257 (executing program)
2022/10/06 21:43:02 fetching corpus: 9734, signal 373819/470925 (executing program)
2022/10/06 21:43:02 fetching corpus: 9784, signal 374458/471540 (executing program)
2022/10/06 21:43:03 fetching corpus: 9834, signal 374909/472131 (executing program)
2022/10/06 21:43:03 fetching corpus: 9884, signal 375516/472729 (executing program)
2022/10/06 21:43:03 fetching corpus: 9934, signal 376345/473384 (executing program)
2022/10/06 21:43:03 fetching corpus: 9984, signal 376811/473962 (executing program)
2022/10/06 21:43:04 fetching corpus: 10034, signal 377339/474541 (executing program)
2022/10/06 21:43:04 fetching corpus: 10084, signal 377829/475104 (executing program)
2022/10/06 21:43:04 fetching corpus: 10134, signal 378402/475678 (executing program)
2022/10/06 21:43:04 fetching corpus: 10184, signal 379135/476285 (executing program)
2022/10/06 21:43:04 fetching corpus: 10234, signal 380011/476925 (executing program)
2022/10/06 21:43:05 fetching corpus: 10284, signal 380581/477505 (executing program)
2022/10/06 21:43:05 fetching corpus: 10334, signal 381256/478054 (executing program)
2022/10/06 21:43:05 fetching corpus: 10384, signal 381741/478621 (executing program)
2022/10/06 21:43:05 fetching corpus: 10434, signal 383013/479260 (executing program)
2022/10/06 21:43:05 fetching corpus: 10484, signal 383568/479818 (executing program)
2022/10/06 21:43:06 fetching corpus: 10534, signal 384157/480368 (executing program)
2022/10/06 21:43:06 fetching corpus: 10584, signal 384558/480906 (executing program)
2022/10/06 21:43:06 fetching corpus: 10634, signal 385095/481438 (executing program)
2022/10/06 21:43:07 fetching corpus: 10684, signal 385538/481942 (executing program)
2022/10/06 21:43:07 fetching corpus: 10734, signal 386025/482478 (executing program)
2022/10/06 21:43:07 fetching corpus: 10784, signal 386487/483016 (executing program)
2022/10/06 21:43:07 fetching corpus: 10834, signal 386902/483528 (executing program)
2022/10/06 21:43:07 fetching corpus: 10884, signal 387251/484035 (executing program)
2022/10/06 21:43:08 fetching corpus: 10934, signal 387905/484537 (executing program)
2022/10/06 21:43:08 fetching corpus: 10984, signal 388339/485018 (executing program)
2022/10/06 21:43:08 fetching corpus: 11034, signal 388995/485521 (executing program)
2022/10/06 21:43:08 fetching corpus: 11084, signal 389677/486054 (executing program)
2022/10/06 21:43:08 fetching corpus: 11134, signal 390181/486509 (executing program)
2022/10/06 21:43:08 fetching corpus: 11184, signal 390563/486966 (executing program)
2022/10/06 21:43:09 fetching corpus: 11234, signal 391136/487434 (executing program)
2022/10/06 21:43:09 fetching corpus: 11284, signal 391816/487894 (executing program)
2022/10/06 21:43:09 fetching corpus: 11334, signal 392406/488364 (executing program)
2022/10/06 21:43:09 fetching corpus: 11384, signal 392927/488815 (executing program)
2022/10/06 21:43:09 fetching corpus: 11434, signal 393441/489282 (executing program)
2022/10/06 21:43:10 fetching corpus: 11484, signal 393914/489707 (executing program)
2022/10/06 21:43:10 fetching corpus: 11534, signal 394299/490134 (executing program)
2022/10/06 21:43:10 fetching corpus: 11584, signal 394713/490563 (executing program)
2022/10/06 21:43:10 fetching corpus: 11634, signal 395223/491020 (executing program)
2022/10/06 21:43:10 fetching corpus: 11684, signal 395793/491486 (executing program)
2022/10/06 21:43:10 fetching corpus: 11734, signal 396279/491937 (executing program)
2022/10/06 21:43:11 fetching corpus: 11784, signal 396872/492355 (executing program)
2022/10/06 21:43:11 fetching corpus: 11834, signal 397310/492789 (executing program)
2022/10/06 21:43:11 fetching corpus: 11884, signal 397801/493220 (executing program)
2022/10/06 21:43:11 fetching corpus: 11934, signal 398228/493644 (executing program)
2022/10/06 21:43:11 fetching corpus: 11984, signal 398934/494031 (executing program)
2022/10/06 21:43:11 fetching corpus: 12034, signal 399720/494437 (executing program)
2022/10/06 21:43:12 fetching corpus: 12084, signal 400205/494825 (executing program)
2022/10/06 21:43:12 fetching corpus: 12134, signal 400544/495211 (executing program)
2022/10/06 21:43:12 fetching corpus: 12184, signal 401133/495605 (executing program)
2022/10/06 21:43:12 fetching corpus: 12234, signal 401934/496018 (executing program)
2022/10/06 21:43:12 fetching corpus: 12284, signal 402294/496371 (executing program)
2022/10/06 21:43:12 fetching corpus: 12334, signal 403293/496733 (executing program)
2022/10/06 21:43:13 fetching corpus: 12384, signal 403711/496872 (executing program)
2022/10/06 21:43:13 fetching corpus: 12434, signal 404031/496872 (executing program)
2022/10/06 21:43:13 fetching corpus: 12484, signal 404447/496872 (executing program)
2022/10/06 21:43:13 fetching corpus: 12534, signal 404809/496872 (executing program)
2022/10/06 21:43:13 fetching corpus: 12584, signal 405113/496872 (executing program)
2022/10/06 21:43:13 fetching corpus: 12634, signal 405518/496872 (executing program)
2022/10/06 21:43:14 fetching corpus: 12684, signal 406049/496872 (executing program)
2022/10/06 21:43:14 fetching corpus: 12734, signal 406337/496872 (executing program)
2022/10/06 21:43:14 fetching corpus: 12784, signal 406824/496872 (executing program)
2022/10/06 21:43:14 fetching corpus: 12834, signal 407202/496872 (executing program)
2022/10/06 21:43:14 fetching corpus: 12884, signal 407914/496872 (executing program)
2022/10/06 21:43:14 fetching corpus: 12934, signal 408280/496890 (executing program)
2022/10/06 21:43:15 fetching corpus: 12984, signal 408697/496890 (executing program)
2022/10/06 21:43:15 fetching corpus: 13034, signal 409117/496890 (executing program)
2022/10/06 21:43:15 fetching corpus: 13084, signal 409860/496890 (executing program)
2022/10/06 21:43:15 fetching corpus: 13134, signal 410187/496890 (executing program)
2022/10/06 21:43:15 fetching corpus: 13184, signal 410580/496890 (executing program)
2022/10/06 21:43:15 fetching corpus: 13234, signal 410928/496890 (executing program)
2022/10/06 21:43:16 fetching corpus: 13284, signal 411424/496890 (executing program)
2022/10/06 21:43:16 fetching corpus: 13334, signal 412251/496890 (executing program)
2022/10/06 21:43:16 fetching corpus: 13384, signal 412679/496890 (executing program)
2022/10/06 21:43:16 fetching corpus: 13434, signal 413238/496890 (executing program)
2022/10/06 21:43:16 fetching corpus: 13484, signal 413697/496890 (executing program)
2022/10/06 21:43:16 fetching corpus: 13534, signal 414084/496890 (executing program)
2022/10/06 21:43:17 fetching corpus: 13584, signal 414507/496890 (executing program)
2022/10/06 21:43:17 fetching corpus: 13634, signal 414871/496890 (executing program)
2022/10/06 21:43:17 fetching corpus: 13684, signal 415322/496890 (executing program)
2022/10/06 21:43:17 fetching corpus: 13734, signal 415734/496898 (executing program)
2022/10/06 21:43:18 fetching corpus: 13784, signal 416304/496898 (executing program)
2022/10/06 21:43:18 fetching corpus: 13834, signal 416654/496898 (executing program)
2022/10/06 21:43:18 fetching corpus: 13884, signal 417326/496898 (executing program)
2022/10/06 21:43:18 fetching corpus: 13934, signal 417724/496898 (executing program)
2022/10/06 21:43:19 fetching corpus: 13984, signal 418312/496898 (executing program)
2022/10/06 21:43:19 fetching corpus: 14034, signal 419034/496898 (executing program)
2022/10/06 21:43:19 fetching corpus: 14084, signal 419648/496898 (executing program)
2022/10/06 21:43:19 fetching corpus: 14134, signal 420300/496898 (executing program)
2022/10/06 21:43:20 fetching corpus: 14184, signal 420653/496898 (executing program)
2022/10/06 21:43:20 fetching corpus: 14234, signal 421172/496898 (executing program)
2022/10/06 21:43:20 fetching corpus: 14284, signal 421594/496898 (executing program)
2022/10/06 21:43:20 fetching corpus: 14334, signal 421978/496898 (executing program)
2022/10/06 21:43:20 fetching corpus: 14384, signal 422493/496898 (executing program)
2022/10/06 21:43:20 fetching corpus: 14434, signal 423122/496898 (executing program)
2022/10/06 21:43:21 fetching corpus: 14484, signal 423465/496898 (executing program)
2022/10/06 21:43:21 fetching corpus: 14534, signal 423810/496899 (executing program)
2022/10/06 21:43:21 fetching corpus: 14584, signal 424267/496899 (executing program)
2022/10/06 21:43:21 fetching corpus: 14634, signal 424782/496899 (executing program)
2022/10/06 21:43:21 fetching corpus: 14684, signal 425161/496899 (executing program)
2022/10/06 21:43:22 fetching corpus: 14734, signal 426061/496899 (executing program)
2022/10/06 21:43:22 fetching corpus: 14784, signal 426322/496899 (executing program)
2022/10/06 21:43:22 fetching corpus: 14834, signal 426780/496899 (executing program)
2022/10/06 21:43:22 fetching corpus: 14884, signal 427192/496899 (executing program)
2022/10/06 21:43:22 fetching corpus: 14934, signal 427846/496899 (executing program)
2022/10/06 21:43:23 fetching corpus: 14984, signal 428166/496899 (executing program)
2022/10/06 21:43:23 fetching corpus: 15034, signal 428561/496899 (executing program)
2022/10/06 21:43:24 fetching corpus: 15084, signal 429065/496899 (executing program)
2022/10/06 21:43:24 fetching corpus: 15134, signal 429356/496899 (executing program)
2022/10/06 21:43:25 fetching corpus: 15184, signal 429879/496899 (executing program)
2022/10/06 21:43:25 fetching corpus: 15234, signal 430379/496899 (executing program)
2022/10/06 21:43:26 fetching corpus: 15284, signal 430907/496899 (executing program)
2022/10/06 21:43:27 fetching corpus: 15334, signal 431297/496904 (executing program)
2022/10/06 21:43:29 fetching corpus: 15384, signal 432065/496904 (executing program)
2022/10/06 21:43:29 fetching corpus: 15434, signal 432525/496904 (executing program)
2022/10/06 21:43:29 fetching corpus: 15484, signal 432811/496904 (executing program)
2022/10/06 21:43:29 fetching corpus: 15534, signal 433461/496904 (executing program)
2022/10/06 21:43:30 fetching corpus: 15584, signal 434207/496904 (executing program)
2022/10/06 21:43:30 fetching corpus: 15634, signal 434624/496906 (executing program)
2022/10/06 21:43:30 fetching corpus: 15684, signal 434878/496907 (executing program)
2022/10/06 21:43:30 fetching corpus: 15734, signal 435498/496907 (executing program)
2022/10/06 21:43:31 fetching corpus: 15784, signal 435984/496907 (executing program)
2022/10/06 21:43:31 fetching corpus: 15834, signal 436523/496908 (executing program)
2022/10/06 21:43:31 fetching corpus: 15884, signal 436846/496908 (executing program)
2022/10/06 21:43:31 fetching corpus: 15934, signal 437347/496908 (executing program)
2022/10/06 21:43:31 fetching corpus: 15984, signal 437763/496908 (executing program)
2022/10/06 21:43:32 fetching corpus: 16034, signal 438123/496908 (executing program)
2022/10/06 21:43:32 fetching corpus: 16084, signal 438593/496908 (executing program)
2022/10/06 21:43:32 fetching corpus: 16134, signal 439002/496908 (executing program)
2022/10/06 21:43:32 fetching corpus: 16184, signal 439297/496914 (executing program)
2022/10/06 21:43:32 fetching corpus: 16234, signal 439794/496925 (executing program)
2022/10/06 21:43:33 fetching corpus: 16284, signal 440212/496925 (executing program)
2022/10/06 21:43:33 fetching corpus: 16334, signal 440432/496925 (executing program)
2022/10/06 21:43:33 fetching corpus: 16384, signal 440715/496925 (executing program)
2022/10/06 21:43:33 fetching corpus: 16434, signal 441081/496925 (executing program)
2022/10/06 21:43:33 fetching corpus: 16484, signal 441411/496925 (executing program)
2022/10/06 21:43:34 fetching corpus: 16534, signal 441845/496925 (executing program)
2022/10/06 21:43:34 fetching corpus: 16584, signal 442245/496925 (executing program)
2022/10/06 21:43:34 fetching corpus: 16634, signal 442613/496925 (executing program)
2022/10/06 21:43:34 fetching corpus: 16684, signal 442992/496925 (executing program)
2022/10/06 21:43:34 fetching corpus: 16734, signal 443343/496925 (executing program)
2022/10/06 21:43:34 fetching corpus: 16784, signal 443722/496925 (executing program)
2022/10/06 21:43:35 fetching corpus: 16834, signal 444070/496925 (executing program)
2022/10/06 21:43:35 fetching corpus: 16884, signal 444584/496925 (executing program)
2022/10/06 21:43:35 fetching corpus: 16934, signal 444916/496925 (executing program)
2022/10/06 21:43:35 fetching corpus: 16984, signal 445216/496925 (executing program)
2022/10/06 21:43:35 fetching corpus: 17034, signal 445591/496925 (executing program)
2022/10/06 21:43:36 fetching corpus: 17084, signal 445890/496925 (executing program)
2022/10/06 21:43:36 fetching corpus: 17134, signal 446209/496925 (executing program)
2022/10/06 21:43:36 fetching corpus: 17184, signal 446702/496925 (executing program)
2022/10/06 21:43:36 fetching corpus: 17234, signal 447067/496925 (executing program)
2022/10/06 21:43:36 fetching corpus: 17284, signal 447540/496925 (executing program)
[  138.910290][ T1352] ieee802154 phy0 wpan0: encryption failed: -22
[  138.915563][ T1352] ieee802154 phy1 wpan1: encryption failed: -22
2022/10/06 21:43:36 fetching corpus: 17334, signal 447975/496925 (executing program)
2022/10/06 21:43:37 fetching corpus: 17384, signal 448319/496925 (executing program)
2022/10/06 21:43:37 fetching corpus: 17434, signal 448757/496925 (executing program)
2022/10/06 21:43:37 fetching corpus: 17484, signal 449128/496925 (executing program)
2022/10/06 21:43:37 fetching corpus: 17534, signal 449523/496925 (executing program)
2022/10/06 21:43:38 fetching corpus: 17584, signal 449945/496925 (executing program)
2022/10/06 21:43:38 fetching corpus: 17634, signal 450414/496925 (executing program)
2022/10/06 21:43:38 fetching corpus: 17684, signal 450627/496925 (executing program)
2022/10/06 21:43:38 fetching corpus: 17734, signal 451155/496925 (executing program)
2022/10/06 21:43:38 fetching corpus: 17784, signal 451467/496927 (executing program)
2022/10/06 21:43:39 fetching corpus: 17834, signal 452639/496927 (executing program)
2022/10/06 21:43:39 fetching corpus: 17884, signal 453248/496927 (executing program)
2022/10/06 21:43:39 fetching corpus: 17934, signal 453594/496927 (executing program)
2022/10/06 21:43:40 fetching corpus: 17984, signal 454024/496927 (executing program)
2022/10/06 21:43:40 fetching corpus: 18034, signal 454379/496927 (executing program)
2022/10/06 21:43:40 fetching corpus: 18084, signal 454638/496927 (executing program)
2022/10/06 21:43:40 fetching corpus: 18134, signal 455151/496927 (executing program)
2022/10/06 21:43:40 fetching corpus: 18184, signal 455689/496927 (executing program)
2022/10/06 21:43:40 fetching corpus: 18234, signal 456589/496927 (executing program)
2022/10/06 21:43:41 fetching corpus: 18284, signal 456914/496927 (executing program)
2022/10/06 21:43:41 fetching corpus: 18334, signal 457270/496927 (executing program)
2022/10/06 21:43:41 fetching corpus: 18384, signal 457557/496927 (executing program)
2022/10/06 21:43:41 fetching corpus: 18434, signal 457867/496927 (executing program)
2022/10/06 21:43:41 fetching corpus: 18484, signal 458132/496927 (executing program)
2022/10/06 21:43:42 fetching corpus: 18534, signal 458424/496927 (executing program)
2022/10/06 21:43:42 fetching corpus: 18584, signal 458890/496927 (executing program)
2022/10/06 21:43:42 fetching corpus: 18634, signal 459120/496927 (executing program)
2022/10/06 21:43:42 fetching corpus: 18684, signal 459455/496927 (executing program)
2022/10/06 21:43:42 fetching corpus: 18734, signal 459867/496927 (executing program)
2022/10/06 21:43:43 fetching corpus: 18783, signal 460368/496927 (executing program)
2022/10/06 21:43:43 fetching corpus: 18833, signal 460722/496927 (executing program)
2022/10/06 21:43:43 fetching corpus: 18883, signal 461337/496927 (executing program)
2022/10/06 21:43:43 fetching corpus: 18933, signal 461672/496927 (executing program)
2022/10/06 21:43:44 fetching corpus: 18983, signal 462010/496927 (executing program)
2022/10/06 21:43:44 fetching corpus: 19033, signal 462403/496927 (executing program)
2022/10/06 21:43:44 fetching corpus: 19083, signal 462725/496927 (executing program)
2022/10/06 21:43:44 fetching corpus: 19133, signal 463130/496927 (executing program)
2022/10/06 21:43:44 fetching corpus: 19183, signal 463453/496927 (executing program)
2022/10/06 21:43:44 fetching corpus: 19233, signal 463790/496939 (executing program)
2022/10/06 21:43:45 fetching corpus: 19283, signal 464119/496939 (executing program)
2022/10/06 21:43:45 fetching corpus: 19333, signal 465024/496939 (executing program)
2022/10/06 21:43:45 fetching corpus: 19383, signal 465375/496939 (executing program)
2022/10/06 21:43:45 fetching corpus: 19433, signal 465665/496939 (executing program)
2022/10/06 21:43:45 fetching corpus: 19483, signal 466249/496939 (executing program)
2022/10/06 21:43:46 fetching corpus: 19533, signal 466730/496939 (executing program)
2022/10/06 21:43:46 fetching corpus: 19583, signal 467179/496939 (executing program)
2022/10/06 21:43:46 fetching corpus: 19633, signal 467712/496939 (executing program)
2022/10/06 21:43:46 fetching corpus: 19683, signal 467966/496939 (executing program)
2022/10/06 21:43:46 fetching corpus: 19733, signal 468193/496939 (executing program)
2022/10/06 21:43:46 fetching corpus: 19783, signal 468411/496939 (executing program)
2022/10/06 21:43:47 fetching corpus: 19833, signal 468692/496939 (executing program)
2022/10/06 21:43:47 fetching corpus: 19883, signal 468912/496939 (executing program)
2022/10/06 21:43:47 fetching corpus: 19933, signal 469264/496939 (executing program)
2022/10/06 21:43:47 fetching corpus: 19983, signal 469537/496939 (executing program)
2022/10/06 21:43:47 fetching corpus: 20033, signal 469794/496939 (executing program)
2022/10/06 21:43:48 fetching corpus: 20083, signal 470227/496939 (executing program)
2022/10/06 21:43:48 fetching corpus: 20133, signal 470471/496939 (executing program)
2022/10/06 21:43:48 fetching corpus: 20183, signal 470817/496939 (executing program)
2022/10/06 21:43:48 fetching corpus: 20233, signal 471170/496939 (executing program)
2022/10/06 21:43:48 fetching corpus: 20283, signal 471638/496939 (executing program)
2022/10/06 21:43:49 fetching corpus: 20332, signal 472167/496939 (executing program)
2022/10/06 21:43:49 fetching corpus: 20382, signal 472491/496939 (executing program)
2022/10/06 21:43:49 fetching corpus: 20432, signal 472917/496939 (executing program)
2022/10/06 21:43:49 fetching corpus: 20482, signal 473158/496939 (executing program)
2022/10/06 21:43:49 fetching corpus: 20532, signal 473443/496939 (executing program)
2022/10/06 21:43:50 fetching corpus: 20582, signal 473817/496939 (executing program)
2022/10/06 21:43:50 fetching corpus: 20632, signal 474168/496939 (executing program)
2022/10/06 21:43:50 fetching corpus: 20682, signal 474614/496939 (executing program)
2022/10/06 21:43:50 fetching corpus: 20732, signal 474860/496970 (executing program)
2022/10/06 21:43:50 fetching corpus: 20782, signal 475211/496970 (executing program)
2022/10/06 21:43:50 fetching corpus: 20832, signal 475525/496970 (executing program)
2022/10/06 21:43:51 fetching corpus: 20882, signal 475844/496970 (executing program)
2022/10/06 21:43:51 fetching corpus: 20932, signal 476215/496975 (executing program)
2022/10/06 21:43:51 fetching corpus: 20982, signal 476527/496975 (executing program)
2022/10/06 21:43:51 fetching corpus: 21032, signal 476817/496975 (executing program)
2022/10/06 21:43:51 fetching corpus: 21082, signal 477002/496975 (executing program)
2022/10/06 21:43:51 fetching corpus: 21132, signal 477223/496975 (executing program)
2022/10/06 21:43:52 fetching corpus: 21182, signal 477559/496975 (executing program)
2022/10/06 21:43:52 fetching corpus: 21232, signal 477823/496975 (executing program)
2022/10/06 21:43:52 fetching corpus: 21282, signal 478099/496975 (executing program)
2022/10/06 21:43:52 fetching corpus: 21332, signal 478389/496975 (executing program)
2022/10/06 21:43:52 fetching corpus: 21382, signal 478767/496975 (executing program)
2022/10/06 21:43:53 fetching corpus: 21432, signal 479084/496975 (executing program)
2022/10/06 21:43:53 fetching corpus: 21482, signal 479322/496975 (executing program)
2022/10/06 21:43:53 fetching corpus: 21532, signal 480695/496975 (executing program)
2022/10/06 21:43:53 fetching corpus: 21582, signal 481008/496975 (executing program)
2022/10/06 21:43:53 fetching corpus: 21632, signal 481337/496975 (executing program)
2022/10/06 21:43:54 fetching corpus: 21682, signal 481635/496982 (executing program)
2022/10/06 21:43:54 fetching corpus: 21732, signal 481960/496982 (executing program)
2022/10/06 21:43:54 fetching corpus: 21782, signal 482196/496982 (executing program)
2022/10/06 21:43:54 fetching corpus: 21832, signal 482497/496982 (executing program)
2022/10/06 21:43:54 fetching corpus: 21882, signal 482736/496982 (executing program)
2022/10/06 21:43:54 fetching corpus: 21932, signal 483012/496982 (executing program)
2022/10/06 21:43:55 fetching corpus: 21982, signal 483326/496982 (executing program)
2022/10/06 21:43:55 fetching corpus: 22031, signal 483725/496982 (executing program)
2022/10/06 21:43:55 fetching corpus: 22081, signal 484041/496982 (executing program)
2022/10/06 21:43:55 fetching corpus: 22131, signal 484311/496982 (executing program)
2022/10/06 21:43:55 fetching corpus: 22181, signal 484586/496982 (executing program)
2022/10/06 21:43:56 fetching corpus: 22231, signal 484777/496982 (executing program)
2022/10/06 21:43:56 fetching corpus: 22281, signal 485094/496982 (executing program)
2022/10/06 21:43:56 fetching corpus: 22331, signal 485388/496982 (executing program)
2022/10/06 21:43:56 fetching corpus: 22381, signal 485609/496982 (executing program)
2022/10/06 21:43:56 fetching corpus: 22431, signal 485879/496987 (executing program)
2022/10/06 21:43:57 fetching corpus: 22481, signal 486253/496987 (executing program)
2022/10/06 21:43:57 fetching corpus: 22531, signal 486514/496987 (executing program)
2022/10/06 21:43:57 fetching corpus: 22581, signal 487125/496987 (executing program)
2022/10/06 21:43:57 fetching corpus: 22631, signal 487361/496987 (executing program)
2022/10/06 21:43:58 fetching corpus: 22681, signal 487625/496987 (executing program)
2022/10/06 21:43:58 fetching corpus: 22731, signal 487799/496987 (executing program)
2022/10/06 21:43:58 fetching corpus: 22733, signal 487803/496987 (executing program)
2022/10/06 21:43:58 fetching corpus: 22733, signal 487803/496987 (executing program)
2022/10/06 21:44:01 starting 4 fuzzer processes
21:44:02 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x545d, 0x20000008)

21:44:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)

21:44:02 executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

21:44:02 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x80004506, 0x0)

[  165.596903][ T3712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.596908][ T3714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  165.601291][ T3715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  165.602836][ T3715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  165.606413][ T3712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.606640][ T3717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  165.607481][ T3712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  165.607950][ T3712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.608117][ T3712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  165.609651][ T3712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.610329][ T3714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  165.611333][ T3714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  165.612804][ T3719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  165.614290][ T3719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  165.615385][ T3719] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  165.621321][ T3715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  165.622076][ T3712] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  165.622277][ T3712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.624309][ T3703] Bluetooth: hci2: HCI_REQ-0x0c1a
[  165.626112][ T3719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  165.638612][ T3717] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  165.644963][ T3702] Bluetooth: hci1: HCI_REQ-0x0c1a
[  165.647208][ T3705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  165.651416][ T3712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  165.660790][ T3701] Bluetooth: hci3: HCI_REQ-0x0c1a
[  165.667966][ T3712] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  165.743167][ T3712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  165.751109][ T3704] Bluetooth: hci0: HCI_REQ-0x0c1a
[  166.034634][ T3702] chnl_net:caif_netlink_parms(): no params data found
[  166.058255][ T3701] chnl_net:caif_netlink_parms(): no params data found
[  166.149073][ T3704] chnl_net:caif_netlink_parms(): no params data found
[  166.173516][ T3703] chnl_net:caif_netlink_parms(): no params data found
[  166.349589][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.354566][ T3701] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.362946][ T3701] device bridge_slave_0 entered promiscuous mode
[  166.420070][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.427030][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.433932][ T3702] device bridge_slave_0 entered promiscuous mode
[  166.440425][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.445721][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.454082][ T3702] device bridge_slave_1 entered promiscuous mode
[  166.461971][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.467001][ T3701] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.473742][ T3701] device bridge_slave_1 entered promiscuous mode
[  166.636168][ T3701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.642963][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.648541][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.655228][ T3704] device bridge_slave_0 entered promiscuous mode
[  166.665142][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.670415][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.677634][ T3703] device bridge_slave_0 entered promiscuous mode
[  166.687329][ T3702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.699845][ T3701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.733779][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.739849][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.747362][ T3704] device bridge_slave_1 entered promiscuous mode
[  166.754874][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.759877][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.765598][ T3703] device bridge_slave_1 entered promiscuous mode
[  166.772305][ T3702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.932470][ T3701] team0: Port device team_slave_0 added
[  166.939713][ T3701] team0: Port device team_slave_1 added
[  166.966737][ T3703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.979782][ T3702] team0: Port device team_slave_0 added
[  167.004030][ T3704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.014166][ T3703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.041632][ T3702] team0: Port device team_slave_1 added
[  167.070784][ T3704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.113848][ T3701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.119673][ T3701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.136548][ T3701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.167575][ T3703] team0: Port device team_slave_0 added
[  167.190032][ T3701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.197615][ T3701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.220638][ T3701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.249558][ T3703] team0: Port device team_slave_1 added
[  167.274677][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.280482][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.299565][ T3702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.319339][ T3704] team0: Port device team_slave_0 added
[  167.343474][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.350156][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.371666][ T3702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.408138][ T3704] team0: Port device team_slave_1 added
[  167.415291][ T3703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.421089][ T3703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.441043][ T3703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.526870][ T3703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.532043][ T3703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.549716][ T3703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.586336][ T3701] device hsr_slave_0 entered promiscuous mode
[  167.593348][ T3701] device hsr_slave_1 entered promiscuous mode
[  167.601103][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.605295][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.620729][ T3704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.634711][ T3702] device hsr_slave_0 entered promiscuous mode
[  167.640502][ T3702] device hsr_slave_1 entered promiscuous mode
[  167.645145][ T3702] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.650972][ T3702] Cannot create hsr debugfs directory
[  167.656881][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.661307][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.679176][ T3704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.717484][ T3712] Bluetooth: hci1: command 0x0409 tx timeout
[  167.721614][ T3712] Bluetooth: hci3: command 0x0409 tx timeout
[  167.722825][ T3707] Bluetooth: hci2: command 0x0409 tx timeout
[  167.797728][ T3712] Bluetooth: hci0: command 0x0409 tx timeout
[  167.812440][ T3703] device hsr_slave_0 entered promiscuous mode
[  167.819732][ T3703] device hsr_slave_1 entered promiscuous mode
[  167.825864][ T3703] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.832577][ T3703] Cannot create hsr debugfs directory
[  167.906148][ T3704] device hsr_slave_0 entered promiscuous mode
[  167.912386][ T3704] device hsr_slave_1 entered promiscuous mode
[  167.917714][ T3704] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.923284][ T3704] Cannot create hsr debugfs directory
[  168.250619][ T3702] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  168.264354][ T3702] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  168.277415][ T3702] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  168.286115][ T3702] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  168.345449][ T3701] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  168.354876][ T3701] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  168.363662][ T3701] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  168.372258][ T3701] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  168.449046][ T3703] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  168.459358][ T3703] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  168.472581][ T3703] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  168.501895][ T3703] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  168.537705][ T3704] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  168.551866][ T3702] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.556687][ T3704] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  168.568393][ T3704] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  168.578000][ T3704] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  168.621222][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  168.630509][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  168.642840][ T3702] 8021q: adding VLAN 0 to HW filter on device team0
[  168.673527][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  168.680658][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  168.688296][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.694192][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.702617][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  168.719133][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  168.729446][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  168.735770][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.743542][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.768367][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  168.800812][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  168.831213][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  168.840536][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  168.849474][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  168.864561][ T3701] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.886234][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  168.893193][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  168.929444][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  168.937028][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  168.944727][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  168.953253][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  168.963804][ T3703] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.974592][ T3701] 8021q: adding VLAN 0 to HW filter on device team0
[  168.997015][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.003828][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.028089][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.034615][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.043127][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.049121][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.061261][ T3704] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.068967][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  169.080236][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.087248][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.096028][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.102434][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.108424][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.116260][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.124322][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.132797][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.154764][ T3703] 8021q: adding VLAN 0 to HW filter on device team0
[  169.164716][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.171222][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.178065][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.188839][ T3704] 8021q: adding VLAN 0 to HW filter on device team0
[  169.204827][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.211325][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.217783][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.223148][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.228480][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.234640][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.241031][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.247744][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.254710][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.259403][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.264721][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.270800][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.276663][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.281276][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.286569][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.292202][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  169.297814][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.322042][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  169.328079][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  169.334250][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.339544][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.344918][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.350633][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.356420][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.362805][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.367719][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.371597][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.386748][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.394804][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.405134][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  169.434855][ T3703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  169.442029][ T3703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  169.452883][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.460433][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.466914][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.474235][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  169.481869][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  169.489094][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.495827][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.503461][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.511004][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.517071][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  169.523386][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  169.548101][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.556343][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.566016][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.574163][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  169.581227][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  169.587422][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.593085][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.601134][ T1382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  169.617068][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.622612][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.628052][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.634397][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.649807][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  169.659587][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.666304][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.680174][ T3702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.693236][ T3701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.721517][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.729517][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.751621][ T3703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.769497][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  169.777633][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  169.786722][ T3712] Bluetooth: hci3: command 0x041b tx timeout
[  169.791243][ T3712] Bluetooth: hci2: command 0x041b tx timeout
[  169.792584][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  169.797102][ T3707] Bluetooth: hci1: command 0x041b tx timeout
[  169.804343][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  169.814346][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  169.821131][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  169.859033][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  169.865141][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  169.866777][ T3712] Bluetooth: hci0: command 0x041b tx timeout
[  169.876254][ T3702] device veth0_vlan entered promiscuous mode
[  169.890840][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  169.899029][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  169.905094][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  169.911366][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  169.918695][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.925542][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.936646][ T3701] device veth0_vlan entered promiscuous mode
[  169.950965][ T3702] device veth1_vlan entered promiscuous mode
[  169.959472][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  169.966799][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  169.973700][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  169.980571][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  169.985940][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  169.994692][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.000397][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.013646][ T3701] device veth1_vlan entered promiscuous mode
[  170.023573][ T3704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.044375][ T3703] device veth0_vlan entered promiscuous mode
[  170.052149][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  170.061043][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  170.069054][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  170.075815][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.085781][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.107868][ T3702] device veth0_macvtap entered promiscuous mode
[  170.120554][ T3703] device veth1_vlan entered promiscuous mode
[  170.137754][ T3702] device veth1_macvtap entered promiscuous mode
[  170.154026][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  170.160423][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.182106][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.189853][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.201103][ T3701] device veth0_macvtap entered promiscuous mode
[  170.214745][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.232292][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  170.238688][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.247020][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.254572][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  170.262856][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.273598][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.282726][ T3701] device veth1_macvtap entered promiscuous mode
[  170.292228][ T3704] device veth0_vlan entered promiscuous mode
[  170.297188][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  170.304002][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.311107][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.318398][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.325381][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.335753][ T3702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.347356][ T3702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.355106][ T3702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.363561][ T3702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.402098][ T3701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.409576][ T3701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.417707][ T3701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.423671][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.431821][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.440290][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.447262][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.456010][ T3703] device veth0_macvtap entered promiscuous mode
[  170.474292][ T3704] device veth1_vlan entered promiscuous mode
[  170.484044][ T3701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.495006][ T3701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.507152][ T3701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.528579][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  170.534185][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  170.540213][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.546246][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.557565][ T3701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.564886][ T3701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.572549][ T3701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.579042][ T3701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.588807][ T3703] device veth1_macvtap entered promiscuous mode
[  170.685831][ T3704] device veth0_macvtap entered promiscuous mode
[  170.695545][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.704836][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.713416][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.722478][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.734140][ T3703] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.745777][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.755006][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.763922][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
21:44:08 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x545d, 0x20000008)

[  170.776176][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.789113][ T3703] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.797276][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  170.804814][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  170.812670][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.821755][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
21:44:08 executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

[  170.832892][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
21:44:08 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x545d, 0x20000008)

[  170.842841][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.850871][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.858817][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.870742][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
21:44:08 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x545d, 0x20000008)

[  170.887269][ T3703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.897430][ T3703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.905283][ T3703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.914319][ T3703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.928574][ T3704] device veth1_macvtap entered promiscuous mode
21:44:08 executing program 0:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

[  171.006090][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.014381][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.028461][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.037535][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.044841][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.052249][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.060425][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.089439][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  171.095665][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.104064][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.117223][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.126016][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.134640][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.142932][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
21:44:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)

21:44:09 executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

[  171.150927][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.163715][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.173610][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.185670][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  171.192660][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  171.203597][ T3704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.212245][ T3704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.220006][ T3704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.227801][ T3704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
21:44:09 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x80004506, 0x0)

21:44:09 executing program 0:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

21:44:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)

21:44:09 executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

21:44:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0)

21:44:09 executing program 2:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

21:44:09 executing program 0:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

21:44:09 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x80004506, 0x0)

21:44:09 executing program 1:
r0 = syz_io_uring_setup(0x2973, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
eventfd(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x87, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

21:44:09 executing program 0:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

21:44:09 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x80004506, 0x0)

[  171.448331][ T3810] device bridge_slave_1 left promiscuous mode
[  171.454758][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state
21:44:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  171.506107][ T3817] FAT-fs (loop3): bogus number of reserved sectors
21:44:09 executing program 1:
r0 = syz_io_uring_setup(0x2973, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
eventfd(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x87, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[  171.533805][ T3817] FAT-fs (loop3): Can't find a valid FAT filesystem
21:44:09 executing program 1:
r0 = syz_io_uring_setup(0x2973, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
eventfd(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x87, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

21:44:09 executing program 2:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

21:44:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  171.738734][ T3834] FAT-fs (loop3): bogus number of reserved sectors
[  171.744716][ T3834] FAT-fs (loop3): Can't find a valid FAT filesystem
21:44:09 executing program 1:
r0 = syz_io_uring_setup(0x2973, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
eventfd(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x87, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[  171.867253][ T3707] Bluetooth: hci2: command 0x040f tx timeout
[  171.867489][ T3712] Bluetooth: hci3: command 0x040f tx timeout
[  171.877334][ T3707] Bluetooth: hci1: command 0x040f tx timeout
[  171.948259][ T3712] Bluetooth: hci0: command 0x040f tx timeout
21:44:10 executing program 2:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

21:44:10 executing program 0:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

21:44:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

21:44:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  172.151074][ T3848] FAT-fs (loop1): bogus number of reserved sectors
[  172.151394][ T3851] FAT-fs (loop3): bogus number of reserved sectors
[  172.157415][ T3848] FAT-fs (loop1): Can't find a valid FAT filesystem
[  172.162086][ T3851] FAT-fs (loop3): Can't find a valid FAT filesystem
21:44:10 executing program 2:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

21:44:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

21:44:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  172.409369][ T3870] FAT-fs (loop1): bogus number of reserved sectors
[  172.422081][ T3870] FAT-fs (loop1): Can't find a valid FAT filesystem
[  172.428377][ T3871] FAT-fs (loop3): bogus number of reserved sectors
[  172.434224][ T3871] FAT-fs (loop3): Can't find a valid FAT filesystem
21:44:10 executing program 2:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

21:44:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  172.629859][ T3877] FAT-fs (loop1): bogus number of reserved sectors
[  172.635469][ T3877] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:10 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

21:44:10 executing program 0:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

21:44:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  172.851206][ T3887] FAT-fs (loop1): bogus number of reserved sectors
[  172.856288][ T3887] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  173.210585][ T3891] FAT-fs (loop1): bogus number of reserved sectors
[  173.226123][ T3891] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

21:44:11 executing program 2:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

[  173.486042][ T3896] FAT-fs (loop1): bogus number of reserved sectors
[  173.491526][ T3896] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:11 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

21:44:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  173.741960][ T3902] FAT-fs (loop1): bogus number of reserved sectors
[  173.753482][ T3902] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:11 executing program 0:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

21:44:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  173.946811][ T3712] Bluetooth: hci3: command 0x0419 tx timeout
[  173.947686][ T3705] Bluetooth: hci1: command 0x0419 tx timeout
[  173.952288][ T3712] Bluetooth: hci2: command 0x0419 tx timeout
[  173.986802][ T3909] FAT-fs (loop1): bogus number of reserved sectors
[  174.027129][ T3705] Bluetooth: hci0: command 0x0419 tx timeout
[  174.067397][ T3909] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  174.325969][ T3912] FAT-fs (loop1): bogus number of reserved sectors
[  174.344315][ T3912] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:12 executing program 2:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

21:44:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  174.661081][ T3918] FAT-fs (loop1): bogus number of reserved sectors
[  174.690326][ T3918] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:12 executing program 3:
r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
io_uring_enter(r0, 0xcc2, 0x0, 0x0, 0x0, 0x0)

21:44:12 executing program 0:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

[  174.930352][ T3925] device bridge_slave_1 left promiscuous mode
[  174.945677][ T3925] bridge0: port 2(bridge_slave_1) entered disabled state
21:44:13 executing program 0:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

21:44:13 executing program 0:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

21:44:13 executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

21:44:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

[  175.529265][ T3943] device bridge_slave_1 left promiscuous mode
[  175.537982][ T3944] FAT-fs (loop1): bogus number of reserved sectors
[  175.543539][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.544546][ T3944] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:13 executing program 2:
r0 = syz_io_uring_setup(0x2973, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
eventfd(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x87, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

21:44:13 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x2182, 0x10)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x6c00)
vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="1b953796f13945b05256", 0x1}], 0x100000000000017d, 0x5)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8)
gettid()
r2 = socket(0x10, 0x400000000080803, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x45cb]}, &(0x7f0000000180), &(0x7f0000000340), 0x8)
io_setup(0x5, &(0x7f0000000100))
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]})
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0xd6ba, 0xfffffffe, 0x0, 0x4c51000, 0x14, "25eb556d8c26e9032d622509db5b6f62e21193"})
rt_sigtimedwait(&(0x7f00000000c0)={[0x80400003]}, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x8)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x9)

21:44:13 executing program 2:
r0 = syz_io_uring_setup(0x2973, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
eventfd(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x87, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

21:44:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008088f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x100829}}, 0x50)
utime(&(0x7f0000000180)='./file0\x00', 0x0)
read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78)

21:44:13 executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

[  175.730259][ T3963] FAT-fs (loop1): bogus number of reserved sectors
[  175.737847][ T3963] FAT-fs (loop1): Can't find a valid FAT filesystem
21:44:13 executing program 2:
r0 = syz_io_uring_setup(0x2973, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
eventfd(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x87, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)

21:44:13 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f0000001780)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f055da", 0x44, 0x2f, 0x0, @remote, @ipv4, {[], {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}}, 0x0)

21:44:13 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

21:44:13 executing program 3:
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$nfc_llcp(r0, 0x6, 0x0, 0x0, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="040028530f00fbdbdf2555000000080001005000670ba28478c601041a10d00359795937286b2b0cd5a6d621e21c63810000000000000040004f0000009fb1058f45693499f96b65747bba6b29e8307e5b1bbfe883b52afbf5573855d9f1eb451c6bb0af9eab99c1526346f9116f06f43cff846f28a7608802e9cdebe47e3f92435d91913644320d1ad3a1f71b7419d6a7fca112e207f6f1d9abb183e6c433f80a801b"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0xc854)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000006ef81e61000800020000000000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40090)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x10000070)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002ba932a09437840cbd7000fedbdf2520000c801d404983", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044080)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="7949194b9d718c2b5f7c57590800450000300000000000019078ac141400e00000012a009078000000004500000000000000000000007f000001ffffffff335547231e867d2113960efca3a3d16ef2b476675d5d11f15fec61d7f1b8d94d53a30cf85dd91de529b4f2471d917cd42f4a766edcbb66f79f734d4b68959c72f3d075be8803868056fd95b1026a31a6575fb72e0f05414ea52a2b16f1552107796062a1c4d0c2fa1895d5bc449f8d3b32115cdbfc119932257f6aa3b6a789ae386783974d4bed6ba61531ee55823a52556e07b5e057d064080b500253c53a22a75a6fd11d70fd3af01ea3f437"], 0x0)

21:44:14 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f0000001780)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f055da", 0x44, 0x2f, 0x0, @remote, @ipv4, {[], {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}}, 0x0)

21:44:14 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x2182, 0x10)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x6c00)
vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="1b953796f13945b05256", 0x1}], 0x100000000000017d, 0x5)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8)
gettid()
r2 = socket(0x10, 0x400000000080803, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x45cb]}, &(0x7f0000000180), &(0x7f0000000340), 0x8)
io_setup(0x5, &(0x7f0000000100))
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]})
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0xd6ba, 0xfffffffe, 0x0, 0x4c51000, 0x14, "25eb556d8c26e9032d622509db5b6f62e21193"})
rt_sigtimedwait(&(0x7f00000000c0)={[0x80400003]}, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x8)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x9)

21:44:14 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f0000001780)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f055da", 0x44, 0x2f, 0x0, @remote, @ipv4, {[], {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}}, 0x0)

21:44:14 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x2182, 0x10)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x6c00)
vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="1b953796f13945b05256", 0x1}], 0x100000000000017d, 0x5)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8)
gettid()
r2 = socket(0x10, 0x400000000080803, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x45cb]}, &(0x7f0000000180), &(0x7f0000000340), 0x8)
io_setup(0x5, &(0x7f0000000100))
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]})
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0xd6ba, 0xfffffffe, 0x0, 0x4c51000, 0x14, "25eb556d8c26e9032d622509db5b6f62e21193"})
rt_sigtimedwait(&(0x7f00000000c0)={[0x80400003]}, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x8)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x9)

21:44:14 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f0000001780)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f055da", 0x44, 0x2f, 0x0, @remote, @ipv4, {[], {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}}, 0x0)

21:44:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$sock(r0, &(0x7f0000003000)=[{{&(0x7f0000000300)=@in, 0x80, 0x0, 0x0, &(0x7f0000002740)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}}], 0x1, 0x0)

21:44:14 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

21:44:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$sock(r0, &(0x7f0000003000)=[{{&(0x7f0000000300)=@in, 0x80, 0x0, 0x0, &(0x7f0000002740)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}}], 0x1, 0x0)

21:44:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$sock(r0, &(0x7f0000003000)=[{{&(0x7f0000000300)=@in, 0x80, 0x0, 0x0, &(0x7f0000002740)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}}], 0x1, 0x0)

21:44:14 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x2182, 0x10)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x6c00)
vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="1b953796f13945b05256", 0x1}], 0x100000000000017d, 0x5)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8)
gettid()
r2 = socket(0x10, 0x400000000080803, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x45cb]}, &(0x7f0000000180), &(0x7f0000000340), 0x8)
io_setup(0x5, &(0x7f0000000100))
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]})
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0xd6ba, 0xfffffffe, 0x0, 0x4c51000, 0x14, "25eb556d8c26e9032d622509db5b6f62e21193"})
rt_sigtimedwait(&(0x7f00000000c0)={[0x80400003]}, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x8)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x9)

21:44:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$sock(r0, &(0x7f0000003000)=[{{&(0x7f0000000300)=@in, 0x80, 0x0, 0x0, &(0x7f0000002740)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}}], 0x1, 0x0)

21:44:14 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x2182, 0x10)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x6c00)
vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="1b953796f13945b05256", 0x1}], 0x100000000000017d, 0x5)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8)
gettid()
r2 = socket(0x10, 0x400000000080803, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x45cb]}, &(0x7f0000000180), &(0x7f0000000340), 0x8)
io_setup(0x5, &(0x7f0000000100))
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]})
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0xd6ba, 0xfffffffe, 0x0, 0x4c51000, 0x14, "25eb556d8c26e9032d622509db5b6f62e21193"})
rt_sigtimedwait(&(0x7f00000000c0)={[0x80400003]}, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x8)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x9)

21:44:14 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

21:44:14 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

21:44:15 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

21:44:15 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

21:44:15 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x2182, 0x10)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x6c00)
vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="1b953796f13945b05256", 0x1}], 0x100000000000017d, 0x5)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8)
gettid()
r2 = socket(0x10, 0x400000000080803, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x45cb]}, &(0x7f0000000180), &(0x7f0000000340), 0x8)
io_setup(0x5, &(0x7f0000000100))
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]})
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0xd6ba, 0xfffffffe, 0x0, 0x4c51000, 0x14, "25eb556d8c26e9032d622509db5b6f62e21193"})
rt_sigtimedwait(&(0x7f00000000c0)={[0x80400003]}, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x8)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x9)

21:44:15 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x2182, 0x10)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x4, 0x6c00)
vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="1b953796f13945b05256", 0x1}], 0x100000000000017d, 0x5)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xff7ffffffffe]}, 0x0, 0x8)
gettid()
r2 = socket(0x10, 0x400000000080803, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x45cb]}, &(0x7f0000000180), &(0x7f0000000340), 0x8)
io_setup(0x5, &(0x7f0000000100))
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]})
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0xd6ba, 0xfffffffe, 0x0, 0x4c51000, 0x14, "25eb556d8c26e9032d622509db5b6f62e21193"})
rt_sigtimedwait(&(0x7f00000000c0)={[0x80400003]}, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x8)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x9)

21:44:15 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

21:44:15 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

21:44:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

21:44:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

21:44:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

21:44:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

21:44:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

21:44:15 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

21:44:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"06000000dd245c84f4000040c9c8dc1964325fa96fa42b76100000002bec0ba41f07000000000000030100c03b00041f01ffff84083c5ca2d2672b01ee377abaece6b88378e3d632580001c0361d264ffa8b46485f02baee010100c04252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1d0500000000000000174a3ac8694525a7e8c499a573577736800000000000008f37f06e4ea995e5f0c6c379f9cc58bfcf8f10e28ead480900000000000000cd9bbb5a6baa41d614f6c824b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daecc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d07ce38dabb7cd103fe4d0c9c963cd717a77f8df8df2239b1f58e068af6afbbc19db161c6df1e7c9c7d7c08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c5693102009a64fc7d9684364673dcfa9235dc5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d185a0228b737c171f9c909374286070000006f53c419ce31054182fd898af706f1b1152c691611f897558d4b755cb78397979859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17ff030c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b8da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfab34b2541d3c114b7bba1c21a845c9cf4aba16f70f558b2246ad95ccf7d3f80cc0ab26f09736ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f98d5703dc78b1ca9d74ea6a9ae12ab367c0ada119b5132145fa45250300c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e9557222ff47c5b6f010072975af74e97a5a811018000006f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8fdcda85ce975ec1381b1cec6ddaa76e186719d81916430000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000fe1997742a00fb4500"})

21:44:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

21:44:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x32c, 0x154, 0x5900f603, 0x294, 0x8101, 0x294, 0x264, 0x378, 0x378, 0x264, 0x378, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @local, [], [], 'veth1_macvtap\x00', 'team0\x00', {}, {}, 0x87}, 0x0, 0xec, 0x154, 0x52020000, {}, [@common=@mh={{0x24}, {'\t]'}}, @inet=@rpfilter={{0x24}, {0x1c}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@private2, @remote, [], [], 'bond0\x00', 'batadv0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x292)

[  177.921043][ T4064] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
21:44:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

[  177.970721][ T4069] ip6t_rpfilter: unknown options
21:44:15 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x32c, 0x154, 0x5900f603, 0x294, 0x8101, 0x294, 0x264, 0x378, 0x378, 0x264, 0x378, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @local, [], [], 'veth1_macvtap\x00', 'team0\x00', {}, {}, 0x87}, 0x0, 0xec, 0x154, 0x52020000, {}, [@common=@mh={{0x24}, {'\t]'}}, @inet=@rpfilter={{0x24}, {0x1c}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@private2, @remote, [], [], 'bond0\x00', 'batadv0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x292)

21:44:16 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

[  178.063839][ T4075] ip6t_rpfilter: unknown options
21:44:16 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x32c, 0x154, 0x5900f603, 0x294, 0x8101, 0x294, 0x264, 0x378, 0x378, 0x264, 0x378, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @local, [], [], 'veth1_macvtap\x00', 'team0\x00', {}, {}, 0x87}, 0x0, 0xec, 0x154, 0x52020000, {}, [@common=@mh={{0x24}, {'\t]'}}, @inet=@rpfilter={{0x24}, {0x1c}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@private2, @remote, [], [], 'bond0\x00', 'batadv0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x292)

21:44:16 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffe58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0x0, 0x0, 0xa}, {0x0, 0x793a, 0x0, 0x200000, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4)
r3 = socket(0x18, 0x0, 0x2)
close(r3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x3, 0x7)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xfa8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x1b0, 0x1f4)

[  178.115164][ T4078] ip6t_rpfilter: unknown options
21:44:16 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSCTTY(r0, 0x5607, 0x2)

21:44:16 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x32c, 0x154, 0x5900f603, 0x294, 0x8101, 0x294, 0x264, 0x378, 0x378, 0x264, 0x378, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @local, [], [], 'veth1_macvtap\x00', 'team0\x00', {}, {}, 0x87}, 0x0, 0xec, 0x154, 0x52020000, {}, [@common=@mh={{0x24}, {'\t]'}}, @inet=@rpfilter={{0x24}, {0x1c}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@private2, @remote, [], [], 'bond0\x00', 'batadv0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x292)

[  178.148794][ T4083] ip6t_rpfilter: unknown options
21:44:16 executing program 1:
syz_clone(0x50007000, 0x0, 0x5, 0x0, 0x0, 0x0)

21:44:16 executing program 1:
syz_clone(0x50007000, 0x0, 0x5, 0x0, 0x0, 0x0)

[  178.326939][  T176] usb 5-1: new high-speed USB device number 2 using dummy_hcd
21:44:16 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

[  178.596954][  T176] usb 5-1: Using ep0 maxpacket: 32
[  178.737019][  T176] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  178.742641][  T176] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  178.748294][  T176] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  178.754733][  T176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  178.762181][  T176] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  178.769013][  T176] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  178.780539][  T176] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  178.786991][  T176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.798824][  T176] usb 5-1: config 0 descriptor??
[  179.083187][  T176] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  179.096322][  T176] usb 5-1: USB disconnect, device number 2
[  179.114747][  T176] usblp0: removed
[  179.646840][  T176] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  179.888059][  T176] usb 5-1: Using ep0 maxpacket: 32
[  180.016884][  T176] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  180.023031][  T176] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  180.028547][  T176] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  180.034791][  T176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  180.041299][  T176] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  180.047740][  T176] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  180.056140][  T176] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  180.062318][  T176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.069231][  T176] usb 5-1: config 0 descriptor??
[  180.330807][  T176] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  182.091226][  T176] usb 5-1: USB disconnect, device number 3
[  182.101356][  T176] usblp0: removed
21:44:20 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSCTTY(r0, 0x5607, 0x2)

21:44:20 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

21:44:20 executing program 1:
syz_clone(0x50007000, 0x0, 0x5, 0x0, 0x0, 0x0)

21:44:20 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

21:44:20 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

21:44:20 executing program 1:
syz_clone(0x50007000, 0x0, 0x5, 0x0, 0x0, 0x0)

21:44:20 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

21:44:20 executing program 2:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

[  182.576561][  T176] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  182.656925][ T3748] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  182.833095][  T176] usb 5-1: Using ep0 maxpacket: 32
[  182.906847][ T3748] usb 7-1: Using ep0 maxpacket: 32
21:44:20 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSCTTY(r0, 0x5607, 0x2)

21:44:20 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

[  182.966748][  T176] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  182.972162][  T176] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  182.980843][  T176] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  182.990333][  T176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  182.997104][  T176] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  183.004890][  T176] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  183.015174][  T176] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  183.021843][  T176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.037234][  T176] usb 5-1: config 0 descriptor??
[  183.046901][ T3748] usb 7-1: config index 0 descriptor too short (expected 63524, got 36)
[  183.055515][ T3748] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  183.062532][ T3748] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  183.071847][ T3748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  183.081396][ T3748] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  183.090144][ T3748] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  183.100552][ T3748] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  183.107146][ T3748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.115019][ T3748] usb 7-1: config 0 descriptor??
[  183.254508][   T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  183.303005][  T176] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  183.314921][  T176] usb 5-1: USB disconnect, device number 4
[  183.322934][  T176] usblp0: removed
[  183.373054][ T3748] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  183.388163][ T3748] usb 7-1: USB disconnect, device number 2
[  183.399680][ T3748] usblp0: removed
[  183.506922][   T35] usb 6-1: Using ep0 maxpacket: 32
[  183.666863][   T35] usb 6-1: config index 0 descriptor too short (expected 63524, got 36)
[  183.673990][   T35] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  183.681334][   T35] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  183.689045][   T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  183.697635][   T35] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  183.705915][   T35] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  183.721525][   T35] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  183.728960][   T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.737971][   T35] usb 6-1: config 0 descriptor??
21:44:21 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSCTTY(r0, 0x5607, 0x2)

[  183.896898][  T176] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  183.957888][ T3748] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  184.007904][   T35] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  184.026036][   T35] usb 6-1: USB disconnect, device number 2
[  184.034208][   T35] usblp0: removed
[  184.156779][  T176] usb 5-1: Using ep0 maxpacket: 32
[  184.218216][ T3748] usb 7-1: Using ep0 maxpacket: 32
[  184.276935][  T176] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  184.283082][  T176] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  184.306583][  T176] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  184.319097][  T176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  184.326139][  T176] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  184.332504][  T176] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  184.340650][  T176] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  184.345865][  T176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.360117][  T176] usb 5-1: config 0 descriptor??
[  184.386736][ T3748] usb 7-1: config index 0 descriptor too short (expected 63524, got 36)
[  184.392165][ T3748] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  184.399805][ T3748] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  184.406041][ T3748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  184.413833][ T3748] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  184.420592][ T3748] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  184.429386][ T3748] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  184.435474][ T3748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.442417][ T3748] usb 7-1: config 0 descriptor??
[  184.608573][  T176] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  184.626658][   T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  184.713294][ T3748] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  184.866681][   T35] usb 6-1: Using ep0 maxpacket: 32
[  184.987111][   T35] usb 6-1: config index 0 descriptor too short (expected 63524, got 36)
[  184.994099][   T35] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  185.001572][   T35] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  185.008048][   T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  185.014573][   T35] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  185.025419][   T35] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  185.035291][   T35] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  185.042244][   T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.052800][   T35] usb 6-1: config 0 descriptor??
[  185.318525][   T35] usblp 6-1:0.0: usblp2: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  186.382875][ T3748] usb 5-1: USB disconnect, device number 5
21:44:24 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

21:44:24 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

[  186.390634][ T3748] usblp0: removed
21:44:24 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

[  186.485639][   T35] usb 7-1: USB disconnect, device number 3
21:44:24 executing program 2:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

[  186.510361][   T35] usblp1: removed
21:44:24 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

21:44:24 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

[  186.796765][ T3748] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  186.907083][   T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  187.046856][ T3748] usb 5-1: Using ep0 maxpacket: 32
[  187.090366][   T16] usb 6-1: USB disconnect, device number 3
21:44:25 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

21:44:25 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

[  187.107038][   T16] usblp2: removed
[  187.166744][   T35] usb 7-1: Using ep0 maxpacket: 32
[  187.166949][ T3748] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  187.178486][ T3748] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  187.185010][ T3748] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  187.192328][ T3748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  187.199842][ T3748] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  187.206326][ T3748] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  187.216844][ T3748] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  187.223355][ T3748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.229883][ T3748] usb 5-1: config 0 descriptor??
[  187.326860][   T35] usb 7-1: config index 0 descriptor too short (expected 63524, got 36)
[  187.334875][   T35] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  187.342508][   T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  187.350106][   T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  187.357636][   T35] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  187.365148][   T35] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  187.375877][   T35] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  187.383945][   T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.393751][   T35] usb 7-1: config 0 descriptor??
[  187.490490][ T3748] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  187.499520][ T3748] usb 5-1: USB disconnect, device number 6
[  187.506233][ T3748] usblp0: removed
[  187.566996][   T16] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  187.670041][   T35] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  187.690553][   T35] usb 7-1: USB disconnect, device number 4
[  187.698814][   T35] usblp0: removed
[  187.816880][   T16] usb 6-1: Using ep0 maxpacket: 32
[  187.937715][   T16] usb 6-1: config index 0 descriptor too short (expected 63524, got 36)
[  187.946898][   T16] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  187.952705][   T16] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  187.959573][   T16] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  187.966416][   T16] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  187.973029][   T16] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  187.980795][   T16] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  187.986799][   T16] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.995396][   T16] usb 6-1: config 0 descriptor??
[  188.076719][ T3748] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  188.206996][   T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  188.258603][   T16] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  188.269560][   T16] usb 6-1: USB disconnect, device number 4
[  188.280977][   T16] usblp0: removed
[  188.336614][ T3748] usb 5-1: Using ep0 maxpacket: 32
[  188.446642][   T35] usb 7-1: Using ep0 maxpacket: 32
[  188.467723][ T3748] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  188.474586][ T3748] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  188.484894][ T3748] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  188.492465][ T3748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  188.499780][ T3748] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  188.506720][ T3748] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  188.515705][ T3748] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  188.522577][ T3748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.531604][ T3748] usb 5-1: config 0 descriptor??
[  188.566928][   T35] usb 7-1: config index 0 descriptor too short (expected 63524, got 36)
[  188.574935][   T35] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  188.583283][   T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  188.592367][   T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  188.600182][   T35] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  188.606027][   T35] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  188.615907][   T35] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  188.623060][   T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.631058][   T35] usb 7-1: config 0 descriptor??
[  188.796974][   T16] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  188.808475][ T3748] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  188.898867][   T35] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  189.046698][   T16] usb 6-1: Using ep0 maxpacket: 32
[  189.186769][   T16] usb 6-1: config index 0 descriptor too short (expected 63524, got 36)
[  189.193942][   T16] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  189.200956][   T16] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  189.206914][   T16] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  189.213327][   T16] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  189.221378][   T16] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  189.231065][   T16] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  189.238890][   T16] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.249782][   T16] usb 6-1: config 0 descriptor??
[  189.498794][   T16] usblp 6-1:0.0: usblp2: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  190.563884][   T25] usb 5-1: USB disconnect, device number 7
21:44:28 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

21:44:28 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

[  190.574380][   T25] usblp0: removed
[  190.654549][ T4076] usb 7-1: USB disconnect, device number 5
21:44:28 executing program 2:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

21:44:28 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

[  190.662467][ T4076] usblp1: removed
21:44:28 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

21:44:28 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x0, 0x23080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000380)='.\x00', 0x0, 0x865410, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

[  190.996683][   T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  191.116902][ T4076] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  191.236668][   T25] usb 5-1: Using ep0 maxpacket: 32
21:44:29 executing program 3:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
mq_open(&(0x7f0000000000)='^-\\(R^},\'\x00', 0x841, 0x0, &(0x7f0000000040)={0x1, 0x2, 0x7fffffff})

21:44:29 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000180)=ANY=[])
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

[  191.276888][ T3749] usb 6-1: USB disconnect, device number 5
[  191.283821][ T3749] usblp2: removed
[  191.366700][ T4076] usb 7-1: Using ep0 maxpacket: 32
[  191.384602][   T25] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  191.392589][   T25] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  191.399486][   T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  191.405842][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  191.412355][   T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  191.419079][   T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  191.427984][   T25] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  191.434661][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.442177][   T25] usb 5-1: config 0 descriptor??
[  191.486859][ T4076] usb 7-1: config index 0 descriptor too short (expected 63524, got 36)
[  191.493869][ T4076] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  191.501115][ T4076] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  191.508028][ T4076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  191.515897][ T4076] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  191.523612][ T4076] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  191.533451][ T4076] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  191.541010][ T4076] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.549987][ T4076] usb 7-1: config 0 descriptor??
[  191.708219][   T25] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  191.718449][   T25] usb 5-1: USB disconnect, device number 8
[  191.725105][   T25] usblp0: removed
[  191.728084][ T3749] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  191.807562][ T4076] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  191.818098][ T4076] usb 7-1: USB disconnect, device number 6
[  191.828808][ T4076] usblp0: removed
[  191.976616][ T3749] usb 6-1: Using ep0 maxpacket: 32
[  192.127549][ T3749] usb 6-1: config index 0 descriptor too short (expected 63524, got 36)
[  192.134675][ T3749] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  192.141188][ T3749] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  192.148332][ T3749] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  192.155000][ T3749] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  192.162032][ T3749] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  192.171023][ T3749] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  192.176843][ T3749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.183879][ T3749] usb 6-1: config 0 descriptor??
[  192.296710][   T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  192.416673][ T4076] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  192.437815][ T3749] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  192.448381][ T3749] usb 6-1: USB disconnect, device number 6
[  192.455434][ T3749] usblp0: removed
[  192.546805][   T25] usb 5-1: Using ep0 maxpacket: 32
[  192.666770][ T4076] usb 7-1: Using ep0 maxpacket: 32
[  192.688322][   T25] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  192.695195][   T25] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  192.702065][   T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  192.708434][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  192.714464][   T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  192.722038][   T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  192.732466][   T25] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  192.739173][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.753607][   T25] usb 5-1: config 0 descriptor??
[  192.816810][ T4076] usb 7-1: config index 0 descriptor too short (expected 63524, got 36)
[  192.822694][ T4076] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  192.828488][ T4076] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  192.834043][ T4076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  192.841200][ T4076] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  192.848285][ T4076] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  192.857526][ T4076] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  192.863052][ T4076] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.872125][ T4076] usb 7-1: config 0 descriptor??
[  193.019841][   T25] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  193.027251][ T3749] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  193.140844][ T4076] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  193.276870][ T3749] usb 6-1: Using ep0 maxpacket: 32
[  193.416787][ T3749] usb 6-1: config index 0 descriptor too short (expected 63524, got 36)
[  193.422691][ T3749] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  193.429372][ T3749] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  193.434608][ T3749] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  193.441375][ T3749] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  193.448960][ T3749] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  193.456791][ T3749] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  193.463370][ T3749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.471151][ T3749] usb 6-1: config 0 descriptor??
[  193.748775][ T3749] usblp 6-1:0.0: usblp2: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  194.780413][ T3748] usb 5-1: USB disconnect, device number 9
21:44:32 executing program 3:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
mq_open(&(0x7f0000000000)='^-\\(R^},\'\x00', 0x841, 0x0, &(0x7f0000000040)={0x1, 0x2, 0x7fffffff})

[  194.792212][ T3748] usblp0: removed
21:44:32 executing program 0:
syz_clone(0x4880100, 0x0, 0x0, 0x0, 0x0, 0x0)

[  194.906987][ T4076] usb 7-1: USB disconnect, device number 7
21:44:32 executing program 3:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
mq_open(&(0x7f0000000000)='^-\\(R^},\'\x00', 0x841, 0x0, &(0x7f0000000040)={0x1, 0x2, 0x7fffffff})

21:44:32 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54)

21:44:32 executing program 2:
rseq(&(0x7f0000000200), 0x20, 0x0, 0x0)
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

[  194.927378][ T4076] usblp1: removed
21:44:32 executing program 3:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
mq_open(&(0x7f0000000000)='^-\\(R^},\'\x00', 0x841, 0x0, &(0x7f0000000040)={0x1, 0x2, 0x7fffffff})

21:44:32 executing program 3:
r0 = socket(0x2, 0x803, 0x101)
connect$inet(r0, &(0x7f00000002c0), 0x10)
connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc)

[  195.494229][ T4076] usb 6-1: USB disconnect, device number 7
21:44:33 executing program 3:
r0 = socket(0x2, 0x803, 0x101)
connect$inet(r0, &(0x7f00000002c0), 0x10)
connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc)

21:44:33 executing program 2:
rseq(&(0x7f0000000200), 0x20, 0x0, 0x0)
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

[  195.513995][ T4076] usblp2: removed
21:44:33 executing program 1:
unshare(0x6c060000)
r0 = socket(0x0, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x150, 0x150, 0x0, 0x0, 0x3a8, 0x238, 0x238, 0x3a8, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x4c4100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x18, r2, 0xb11, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0x14fbbab7519a8561, 0x0, 0x0, 0x0, 0x2, 0x3, 0x9}, [@NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20000014)

21:44:33 executing program 3:
r0 = socket(0x2, 0x803, 0x101)
connect$inet(r0, &(0x7f00000002c0), 0x10)
connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc)

21:44:33 executing program 3:
r0 = socket(0x2, 0x803, 0x101)
connect$inet(r0, &(0x7f00000002c0), 0x10)
connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc)

21:44:33 executing program 2:
rseq(&(0x7f0000000200), 0x20, 0x0, 0x0)
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

21:44:33 executing program 1:
unshare(0x6c060000)
r0 = socket(0x0, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x150, 0x150, 0x0, 0x0, 0x3a8, 0x238, 0x238, 0x3a8, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x4c4100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x18, r2, 0xb11, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0x14fbbab7519a8561, 0x0, 0x0, 0x0, 0x2, 0x3, 0x9}, [@NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20000014)

21:44:33 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54)

21:44:33 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54)

21:44:33 executing program 2:
rseq(&(0x7f0000000200), 0x20, 0x0, 0x0)
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

21:44:33 executing program 1:
unshare(0x6c060000)
r0 = socket(0x0, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x150, 0x150, 0x0, 0x0, 0x3a8, 0x238, 0x238, 0x3a8, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x4c4100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x18, r2, 0xb11, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0x14fbbab7519a8561, 0x0, 0x0, 0x0, 0x2, 0x3, 0x9}, [@NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20000014)

21:44:34 executing program 2:
unshare(0x6c060000)
r0 = socket(0x0, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x150, 0x150, 0x0, 0x0, 0x3a8, 0x238, 0x238, 0x3a8, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x4c4100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x18, r2, 0xb11, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0x14fbbab7519a8561, 0x0, 0x0, 0x0, 0x2, 0x3, 0x9}, [@NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20000014)

21:44:34 executing program 1:
unshare(0x6c060000)
r0 = socket(0x0, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x150, 0x150, 0x0, 0x0, 0x3a8, 0x238, 0x238, 0x3a8, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x4c4100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x18, r2, 0xb11, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0x14fbbab7519a8561, 0x0, 0x0, 0x0, 0x2, 0x3, 0x9}, [@NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20000014)

21:44:34 executing program 2:
unshare(0x6c060000)
r0 = socket(0x0, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x150, 0x150, 0x0, 0x0, 0x3a8, 0x238, 0x238, 0x3a8, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x4c4100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x18, r2, 0xb11, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0x14fbbab7519a8561, 0x0, 0x0, 0x0, 0x2, 0x3, 0x9}, [@NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20000014)

21:44:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000080c0)={0x0, 0x0, &(0x7f0000008080)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '#$\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0)

21:44:34 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54)

21:44:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000080c0)={0x0, 0x0, &(0x7f0000008080)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '#$\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0)

21:44:34 executing program 2:
unshare(0x6c060000)
r0 = socket(0x0, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x150, 0x150, 0x0, 0x0, 0x3a8, 0x238, 0x238, 0x3a8, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x4c4100, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x18, r2, 0xb11, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0x14fbbab7519a8561, 0x0, 0x0, 0x0, 0x2, 0x3, 0x9}, [@NDA_NH_ID={0x8, 0xd, 0x8}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20000014)

21:44:34 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54)

21:44:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000080c0)={0x0, 0x0, &(0x7f0000008080)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '#$\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0)

21:44:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000080c0)={0x0, 0x0, &(0x7f0000008080)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '#$\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0)

21:44:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xfffffffffffffca9, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}, @RTA_OIF]}, 0x38}}, 0x0)

[  196.820795][ T4245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
21:44:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xfffffffffffffca9, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}, @RTA_OIF]}, 0x38}}, 0x0)

[  196.877717][ T4247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
21:44:35 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54)

21:44:35 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x1800000000000060, 0xf, 0x0, &(0x7f00000009c0)="f8ad48cc03cb29fcc82aa116655856", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

21:44:35 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xfffffffffffffca9, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}, @RTA_OIF]}, 0x38}}, 0x0)

21:44:35 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x121582, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54)

[  197.569699][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
21:44:35 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xfffffffffffffca9, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}, @RTA_OIF]}, 0x38}}, 0x0)

[  197.614544][ T4264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
21:44:35 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:35 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:35 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:36 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:36 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b70200000e000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000404040000014d7d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73481c0e17a606f815c00000000000027e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf000092f2ffff010000008695eb721c44561948de56167315c6000000d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e23f15a10d9fe2238fff867ba8fd41b29caad2a986e0e244bd117474cac587c70cdea785300f64cc6ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93cfa09bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c371c6071a2ad8dcc8c2a6fe37df6030000009971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d0300c9cb43aa607b7283561dc683eaebd9d50b22bd2491337448f14f4a395483a0cc341094bc5f1818a10f2ac8c3249582a20d4e04fd1ab7883f656b847d5f7a6edba86a7b9a4c2f3a3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f65970600a85c9a74218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed173751732c3b05c988380daae811780a3eed10300000000cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aa03e090000c3630404edcc4a8cbd3246e962b773a75b28a51cd093bcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaaa839681651f98f0e716b256acf1831fe55580a678c664813354f14a453b09394ad49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b1405e7daef356602487886b6f0beb5ca9a9b31a57e25525fa0ff5c2223271db12959e59fac911ee035c82f1a81ef15b43d51ff1fa025bfb80674c9d0e00000000000000000000000000000000000000000000009cf6af41a53e8d789b699c2855bf42d68528e3f6b422f497d7d86469f76de4b41946e5f8867b66ffffffff0000000069f0e8c57ec33261cecb0a44008430d208cc665e8cdeccc3dd31a6f64a5f15cb20fc76fe3ff309006de19e247f37fbda03004893dc0d2bd12e84221073bf9aa65c74595bc1d16e9870b4957f44225df93e1d3fab2045b7231eb6adbbda4d18d487de6106b4a2f61d018a69c41047efb1fb55272debf7811cafc5486eeb757c7fd1000000000000ac2f57e453fe39a8c1f9ffffffffffffff6d4e272b409e885a33e80fffd644cef4ed21d32e50057a619b866b345a159d44fbdf94e61242bd18c01c3abe6ff9f2d1f1afa6721b73e8a3892b39daaa001bf986ad28535281df9c566ceb8b8b59e18f0ad23eccaf59bdaddc997c1af6e51b6410abd8968fb0897d24a6489819b6f34801ed8e2fcc28e3962d5cde03000000000000003f0000000000000000000000000000000000000000a3d7eab0d53058d317ec575ab1a10783d8bda4c708000000f9a4692733b66757eb90f0441ec1d3b6d5d4a438f284725c6469c0c0ec9b8cb333de33b10974e87a6d2fc36bcd50f2aa74eab3b88af6358c2649f6e8ada29e189bb30e67fce6b8420000000029c5af9f998a4f33fdb1b84f7c086d27622eb000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x1800000000000060, 0xf, 0x0, &(0x7f00000009c0)="f8ad48cc03cb29fcc82aa116655856", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

21:44:36 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x1800000000000060, 0xf, 0x0, &(0x7f00000009c0)="f8ad48cc03cb29fcc82aa116655856", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

21:44:36 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:36 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:36 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:36 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:36 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:36 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

[  198.803167][ T4292] ==================================================================
[  198.809205][ T4292] BUG: KASAN: use-after-free in __kernfs_remove+0xa09/0xb50
[  198.816333][ T4292] Read of size 2 at addr ffff88806f607438 by task syz-executor.3/4292
[  198.824107][ T4292] 
[  198.825760][ T4292] CPU: 2 PID: 4292 Comm: syz-executor.3 Not tainted 6.0.0-syzkaller-06162-g18fd049731e6 #0
21:44:36 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x1800000000000060, 0xf, 0x0, &(0x7f00000009c0)="f8ad48cc03cb29fcc82aa116655856", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

[  198.832769][ T4292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  198.839353][ T4292] Call Trace:
[  198.841754][ T4292]  <TASK>
[  198.843643][ T4292]  dump_stack_lvl+0xcd/0x134
[  198.846647][ T4292]  print_report.cold+0x2ba/0x719
[  198.850338][ T4292]  ? __kernfs_remove+0xa09/0xb50
[  198.854103][ T4292]  kasan_report+0xb1/0x1e0
[  198.857821][ T4292]  ? __kernfs_remove+0xa09/0xb50
[  198.861856][ T4292]  __kernfs_remove+0xa09/0xb50
[  198.864745][ T4292]  ? kernfs_next_descendant_post+0x2f0/0x2f0
[  198.868292][ T4292]  ? kernfs_name_hash+0xf1/0x120
[  198.871787][ T4292]  kernfs_remove_by_name_ns+0xa8/0x110
[  198.875799][ T4292]  sysfs_slab_add+0x14b/0x200
[  198.879281][ T4292]  __kmem_cache_create+0x514/0x690
[  198.882771][ T4292]  kmem_cache_create_usercopy+0x1f9/0x300
[  198.886611][ T4292]  p9_client_create+0xca5/0x1070
[  198.890405][ T4292]  ? p9_client_rpc+0xce0/0xce0
[  198.894338][ T4292]  ? lockdep_init_map_type+0x21a/0x7f0
[  198.898239][ T4292]  ? rcu_read_lock_sched_held+0x3a/0x70
[  198.901815][ T4292]  ? __raw_spin_lock_init+0x36/0x110
[  198.904822][ T4292]  v9fs_session_init+0x1e2/0x1810
[  198.908020][ T4292]  ? find_held_lock+0x2d/0x110
[  198.911895][ T4292]  ? v9fs_show_options+0x780/0x780
[  198.916128][ T4292]  ? rcu_read_lock_sched_held+0x3a/0x70
[  198.920098][ T4292]  ? trace_kmalloc+0x32/0x100
[  198.923119][ T4292]  v9fs_mount+0xba/0xc90
[  198.925814][ T4292]  ? v9fs_statfs+0x4d0/0x4d0
[  198.928833][ T4292]  ? apparmor_capable+0x1d8/0x460
[  198.933452][ T4292]  ? v9fs_statfs+0x4d0/0x4d0
[  198.937022][ T4292]  legacy_get_tree+0x105/0x220
[  198.940602][ T4292]  vfs_get_tree+0x89/0x2f0
[  198.943511][ T4292]  path_mount+0x1326/0x1e20
[  198.946595][ T4292]  ? kmem_cache_free+0xeb/0x5b0
[  198.950382][ T4292]  ? finish_automount+0x960/0x960
[  198.954374][ T4292]  ? putname+0xfe/0x140
[  198.957716][ T4292]  __ia32_sys_mount+0x27e/0x300
[  198.961553][ T4292]  ? __x64_sys_mount+0x300/0x300
[  198.964804][ T4292]  ? syscall_enter_from_user_mode_prepare+0x19/0x80
[  198.969585][ T4292]  ? syscall_enter_from_user_mode_prepare+0x19/0x80
[  198.974793][ T4292]  __do_fast_syscall_32+0x65/0xf0
[  198.978469][ T4292]  do_fast_syscall_32+0x2f/0x70
[  198.981943][ T4292]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  198.985835][ T4292] RIP: 0023:0xf7f97549
[  198.988504][ T4292] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  199.000847][ T4292] RSP: 002b:00000000f7f925cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  199.006129][ T4292] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000400
[  199.010751][ T4292] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000020000480
[  199.016367][ T4292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  199.021334][ T4292] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  199.026143][ T4292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  199.032350][ T4292]  </TASK>
[  199.034942][ T4292] 
[  199.036939][ T4292] Allocated by task 4289:
[  199.040309][ T4292]  kasan_save_stack+0x1e/0x40
[  199.043187][ T4292]  __kasan_slab_alloc+0x90/0xc0
[  199.045942][ T4292]  kmem_cache_alloc+0x267/0x3b0
[  199.049049][ T4292]  __kernfs_new_node+0xd4/0x8b0
[  199.052802][ T4292]  kernfs_create_dir_ns+0x9c/0x220
[  199.056835][ T4292]  sysfs_create_dir_ns+0x127/0x290
[  199.060088][ T4292]  kobject_add_internal+0x2c9/0x8f0
[  199.063321][ T4292]  kobject_init_and_add+0x101/0x160
[  199.066610][ T4292]  sysfs_slab_add+0x16e/0x200
[  199.069846][ T4292]  __kmem_cache_create+0x514/0x690
[  199.073111][ T4292]  kmem_cache_create_usercopy+0x1f9/0x300
[  199.076682][ T4292]  p9_client_create+0xca5/0x1070
[  199.079812][ T4292]  v9fs_session_init+0x1e2/0x1810
[  199.082864][ T4292]  v9fs_mount+0xba/0xc90
[  199.085443][ T4292]  legacy_get_tree+0x105/0x220
[  199.088322][ T4292]  vfs_get_tree+0x89/0x2f0
[  199.091242][ T4292]  path_mount+0x1326/0x1e20
[  199.094332][ T4292]  __ia32_sys_mount+0x27e/0x300
[  199.097403][ T4292]  __do_fast_syscall_32+0x65/0xf0
[  199.100411][ T4292]  do_fast_syscall_32+0x2f/0x70
[  199.103431][ T4292]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  199.107441][ T4292] 
[  199.108915][ T4292] Freed by task 4292:
[  199.111518][ T4292]  kasan_save_stack+0x1e/0x40
[  199.114191][ T4292]  kasan_set_track+0x21/0x30
[  199.117164][ T4292]  kasan_set_free_info+0x20/0x30
[  199.120233][ T4292]  ____kasan_slab_free+0x166/0x1c0
[  199.123427][ T4292]  slab_free_freelist_hook+0x8b/0x1c0
[  199.126542][ T4292]  kmem_cache_free+0xeb/0x5b0
[  199.129934][ T4292]  kernfs_put.part.0+0x2c4/0x540
[  199.133170][ T4292]  kernfs_put+0x42/0x50
[  199.135843][ T4292]  __kernfs_remove+0x7a6/0xb50
[  199.138894][ T4292]  kernfs_remove_by_name_ns+0xa8/0x110
[  199.142721][ T4292]  sysfs_slab_add+0x14b/0x200
[  199.145910][ T4292]  __kmem_cache_create+0x514/0x690
[  199.149207][ T4292]  kmem_cache_create_usercopy+0x1f9/0x300
[  199.152735][ T4292]  p9_client_create+0xca5/0x1070
[  199.155622][ T4292]  v9fs_session_init+0x1e2/0x1810
[  199.158826][ T4292]  v9fs_mount+0xba/0xc90
[  199.161619][ T4292]  legacy_get_tree+0x105/0x220
[  199.164823][ T4292]  vfs_get_tree+0x89/0x2f0
[  199.167651][ T4292]  path_mount+0x1326/0x1e20
[  199.170532][ T4292]  __ia32_sys_mount+0x27e/0x300
[  199.173746][ T4292]  __do_fast_syscall_32+0x65/0xf0
[  199.178209][ T4292]  do_fast_syscall_32+0x2f/0x70
[  199.182557][ T4292]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  199.187024][ T4292] 
[  199.188915][ T4292] The buggy address belongs to the object at ffff88806f6073a0
[  199.188915][ T4292]  which belongs to the cache kernfs_node_cache of size 168
[  199.198033][ T4292] The buggy address is located 152 bytes inside of
[  199.198033][ T4292]  168-byte region [ffff88806f6073a0, ffff88806f607448)
[  199.206749][ T4292] 
[  199.208322][ T4292] The buggy address belongs to the physical page:
[  199.212565][ T4292] page:ffffea0001bd81c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6f607
[  199.219341][ T4292] flags: 0x4fff00000000200(slab|node=1|zone=1|lastcpupid=0x7ff)
[  199.224692][ T4292] raw: 04fff00000000200 0000000000000000 dead000000000122 ffff8880119f9680
[  199.230550][ T4292] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000
[  199.237201][ T4292] page dumped because: kasan: bad access detected
[  199.241326][ T4292] page_owner tracks the page as allocated
[  199.245422][ T4292] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4279, tgid 4278 (syz-executor.0), ts 198676327769, free_ts 198596718247
[  199.257724][ T4292]  get_page_from_freelist+0x109b/0x2ce0
[  199.261942][ T4292]  __alloc_pages+0x1c7/0x510
[  199.265309][ T4292]  alloc_pages+0x1a6/0x270
[  199.268582][ T4292]  allocate_slab+0x27e/0x3d0
[  199.272474][ T4292]  ___slab_alloc+0x84f/0xe80
[  199.276089][ T4292]  __slab_alloc.constprop.0+0x4d/0xa0
[  199.280166][ T4292]  kmem_cache_alloc+0x38c/0x3b0
[  199.283329][ T4292]  __kernfs_new_node+0xd4/0x8b0
[  199.286679][ T4292]  kernfs_new_node+0x93/0x120
[  199.290239][ T4292]  __kernfs_create_file+0x51/0x350
[  199.293809][ T4292]  sysfs_add_file_mode_ns+0x20f/0x3f0
[  199.297160][ T4292]  internal_create_group+0x322/0xb10
[  199.300510][ T4292]  netdev_queue_update_kobjects+0x3aa/0x4e0
[  199.304547][ T4292]  netdev_register_kobject+0x330/0x400
[  199.308228][ T4292]  register_netdevice+0xd95/0x1670
[  199.311929][ T4292]  register_netdev+0x2d/0x50
[  199.315497][ T4292] page last free stack trace:
[  199.318924][ T4292]  free_pcp_prepare+0x5e4/0xd20
[  199.322297][ T4292]  free_unref_page+0x19/0x4d0
[  199.325467][ T4292]  __folio_put+0xc1/0x130
[  199.328295][ T4292]  free_page_and_swap_cache+0x253/0x2c0
[  199.331799][ T4292]  tlb_remove_table_rcu+0x85/0xe0
[  199.335340][ T4292]  rcu_core+0x7b5/0x1890
[  199.338240][ T4292]  __do_softirq+0x1d0/0x9c8
[  199.341593][ T4292] 
[  199.343200][ T4292] Memory state around the buggy address:
[  199.346793][ T4292]  ffff88806f607300: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  199.352842][ T4292]  ffff88806f607380: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[  199.358052][ T4292] >ffff88806f607400: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc
[  199.363500][ T4292]                                         ^
[  199.367414][ T4292]  ffff88806f607480: fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.372561][ T4292]  ffff88806f607500: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb
[  199.377493][ T4292] ==================================================================
21:44:37 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
pivot_root(&(0x7f00000004c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

21:44:37 executing program 0:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x1800000000000060, 0xf, 0x0, &(0x7f00000009c0)="f8ad48cc03cb29fcc82aa116655856", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

[  199.396755][ T4292] Kernel panic - not syncing: panic_on_warn set ...
[  199.401874][ T4292] CPU: 2 PID: 4292 Comm: syz-executor.3 Not tainted 6.0.0-syzkaller-06162-g18fd049731e6 #0
[  199.408730][ T4292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  199.414361][ T4292] Call Trace:
[  199.416762][ T4292]  <TASK>
[  199.418998][ T4292]  dump_stack_lvl+0xcd/0x134
[  199.422915][ T4292]  panic+0x2c8/0x627
[  199.426055][ T4292]  ? panic_print_sys_info.part.0+0x10b/0x10b
[  199.430023][ T4292]  ? preempt_schedule_common+0x59/0xc0
[  199.433492][ T4292]  ? preempt_schedule_thunk+0x16/0x18
[  199.437640][ T4292]  ? __kernfs_remove+0xa09/0xb50
[  199.441717][ T4292]  end_report.part.0+0x3f/0x7c
[  199.445467][ T4292]  kasan_report.cold+0xa/0xf
[  199.448681][ T4292]  ? __kernfs_remove+0xa09/0xb50
[  199.451861][ T4292]  __kernfs_remove+0xa09/0xb50
[  199.454592][ T4292]  ? kernfs_next_descendant_post+0x2f0/0x2f0
[  199.459395][ T4292]  ? kernfs_name_hash+0xf1/0x120
[  199.463424][ T4292]  kernfs_remove_by_name_ns+0xa8/0x110
[  199.467758][ T4292]  sysfs_slab_add+0x14b/0x200
[  199.471096][ T4292]  __kmem_cache_create+0x514/0x690
[  199.474892][ T4292]  kmem_cache_create_usercopy+0x1f9/0x300
[  199.479441][ T4292]  p9_client_create+0xca5/0x1070
[  199.482440][ T4292]  ? p9_client_rpc+0xce0/0xce0
[  199.485717][ T4292]  ? lockdep_init_map_type+0x21a/0x7f0
[  199.489104][ T4292]  ? rcu_read_lock_sched_held+0x3a/0x70
[  199.492592][ T4292]  ? __raw_spin_lock_init+0x36/0x110
[  199.495907][ T4292]  v9fs_session_init+0x1e2/0x1810
[  199.499361][ T4292]  ? find_held_lock+0x2d/0x110
[  199.502696][ T4292]  ? v9fs_show_options+0x780/0x780
[  199.507262][ T4292]  ? rcu_read_lock_sched_held+0x3a/0x70
[  199.511464][ T4292]  ? trace_kmalloc+0x32/0x100
[  199.514593][ T4292]  v9fs_mount+0xba/0xc90
[  199.517370][ T4292]  ? v9fs_statfs+0x4d0/0x4d0
[  199.521039][ T4292]  ? apparmor_capable+0x1d8/0x460
[  199.524602][ T4292]  ? v9fs_statfs+0x4d0/0x4d0
[  199.527842][ T4292]  legacy_get_tree+0x105/0x220
[  199.531537][ T4292]  vfs_get_tree+0x89/0x2f0
[  199.534492][ T4292]  path_mount+0x1326/0x1e20
[  199.538240][ T4292]  ? kmem_cache_free+0xeb/0x5b0
[  199.542418][ T4292]  ? finish_automount+0x960/0x960
[  199.545852][ T4292]  ? putname+0xfe/0x140
[  199.548906][ T4292]  __ia32_sys_mount+0x27e/0x300
[  199.552242][ T4292]  ? __x64_sys_mount+0x300/0x300
[  199.555666][ T4292]  ? syscall_enter_from_user_mode_prepare+0x19/0x80
[  199.560271][ T4292]  ? syscall_enter_from_user_mode_prepare+0x19/0x80
[  199.565535][ T4292]  __do_fast_syscall_32+0x65/0xf0
[  199.568959][ T4292]  do_fast_syscall_32+0x2f/0x70
[  199.572252][ T4292]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  199.576228][ T4292] RIP: 0023:0xf7f97549
[  199.579195][ T4292] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  199.593134][ T4292] RSP: 002b:00000000f7f925cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  199.598430][ T4292] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000400
[  199.603541][ T4292] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000020000480
[  199.608340][ T4292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  199.613818][ T4292] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  199.619779][ T4292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  199.625313][ T4292]  </TASK>
[  199.628868][ T4292] Kernel Offset: disabled
[  199.632465][ T4292] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:44:37  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000073760
RSI=ffff88807ffd6700 RDI=ffff88807ffd68a0 RBP=dffffc0000000000 RSP=ffffc90028a3f550
R8 =ffffea0001cdd840 R9 =ffffea0001cdd877 R10=fffff9400039bb0e R11=0000000000000000
R12=ffffea0001cdd800 R13=0000000000073760 R14=ffff88807ffd6700 R15=0000000000000001
RIP=ffffffff81bca07d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000032f3f000 CR3=000000006afe5000 CR4=00150ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000000000000000000001a4 XMM01=b0d73ba55d9643ca602482c18e229f01
XMM02=081f66e63b4f9255e515fab354737ad3 XMM03=cb825c6d81e78c6f92c79f1d6f047527
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=04fff00000080004 RBX=ffff88806e034000 RCX=ffffffff81a85969 RDX=ffff88801223d880
RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea0001cbdb80 RSP=ffffc90028d578a0
R8 =0000000000000007 R9 =ffffffffffffffff R10=04fff00000080004 R11=0000000000000000
R12=000000000000000b R13=ffff88802c934f10 R14=dffffc0000000000 R15=ffff88807ffd6000
RIP=ffffffff817b15b0 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c900000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000032e40000 CR3=000000000bc8e000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000000000000000000001a4 XMM01=711813771d7a1d53e36e866aeabed2da
XMM02=f4a60d3f2ef77814def2afe93daf70fe XMM03=1c79b400a29f4bfebbafa2ad99a8f6b8
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 2
RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff846255e1 RDI=ffffffff914a4ca0 RBP=ffffffff914a4c60 RSP=ffffc90028b071e0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3036663630386552
R12=0000000000000000 R13=0000000000000062 R14=ffffffff84625580 R15=0000000000000000
RIP=ffffffff8462560b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802ca00000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000057d0808c CR3=000000006fae6000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000000000000000000001a4 XMM01=7a9a2a4d8ce0496e68feb2e84dca8da7
XMM02=341eed85e4ea34c055b59814d06bd623 XMM03=bf6c20c1263e5ec267620f13d4f34611
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 3
RAX=0000000000000001 RBX=1ffff920000bd165 RCX=ffffffff815df96e RDX=fffffbfff212112a
RSI=0000000000000008 RDI=ffffffff90908948 RBP=0000000000000200 RSP=ffffc900005e8af0
R8 =0000000000000000 R9 =ffffffff9090894f R10=fffffbfff2121129 R11=0000000000000000
R12=ffff8880121445a0 R13=0000000000000009 R14=0000000000000042 R15=ffff8880121445c0
RIP=ffffffff815df976 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802cb00000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f6f4a1b0 CR3=000000006b2ed000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=01855ee1b7920ec27f622e75d7c1a4ae XMM01=00000000000000000000000000000000
XMM02=0000000000000000414fffffe0000000 XMM03=32322035312e322e302e303120363937
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000