last executing test programs:

3m47.420597928s ago: executing program 1 (id=2):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m45.810216213s ago: executing program 1 (id=10):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@mblk_io_submit}, {@nomblk_io_submit}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nolazytime}]}, 0xfc, 0x46c, &(0x7f0000001380)="$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")
r0 = creat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_clone(0x2001000, &(0x7f0000000180), 0x0, &(0x7f0000000240), 0x0, 0x0)
write$bt_hci(r0, &(0x7f00000002c0)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc8}}}, 0x6)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

3m43.570180805s ago: executing program 1 (id=17):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000014, &(0x7f0000000440)={[], [{@fowner_eq}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '\x00\x00\x00\x00\x00'}}]}, 0xfe, 0x25f, &(0x7f0000000640)="$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")
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r5 = msgget$private(0x0, 0x0)
msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0001000000e60000"], 0x8, 0x800)
msgsnd(r5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x8, 0x0)
msgsnd(r5, &(0x7f0000000240)=ANY=[@ANYRES32], 0x8, 0x800)
msgrcv(r5, 0x0, 0x0, 0xffffff7f00000000, 0x800)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
select(0x20, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2})
keyctl$clear(0x7, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
close(r0)
pipe(&(0x7f0000000040))

3m40.09828131s ago: executing program 1 (id=19):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000001700)='./file1\x00', 0x3000050, &(0x7f0000000440)=ANY=[], 0x83, 0x1502, &(0x7f0000003680)="$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")
syz_open_procfs(0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
setxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f73782e26d78a601b41f0a2a4"], 0x0, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000080), 0x10010)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

3m33.879267612s ago: executing program 32 (id=19):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000001700)='./file1\x00', 0x3000050, &(0x7f0000000440)=ANY=[], 0x83, 0x1502, &(0x7f0000003680)="$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")
syz_open_procfs(0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
setxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6f73782e26d78a601b41f0a2a4"], 0x0, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000080), 0x10010)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

3m23.80046353s ago: executing program 4 (id=39):
lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x4, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet6(0x10, 0x3, 0x0)
read(r3, &(0x7f00000007c0)=""/214, 0xd6)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0)

3m21.951226313s ago: executing program 4 (id=40):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4b1, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x5, 0x5, 0xf3fb, 0x1, 0xffffffb0, 0x9})

3m20.118599018s ago: executing program 4 (id=42):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}}, 0x24}}, 0x0)

3m18.316640732s ago: executing program 4 (id=45):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@usrquota}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@auto_da_alloc}]}, 0xfc, 0x56f, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x4, {0x0, 0x0, 0x0, r3, 0x0, 0x12100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0)

3m13.134522071s ago: executing program 4 (id=49):
creat(0x0, 0x0)
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f', 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x4e20, @multicast1=0xe000cc02}})

3m11.106742921s ago: executing program 4 (id=52):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x900)
read(r1, &(0x7f0000000000)=""/104, 0x68)

3m8.34802603s ago: executing program 33 (id=52):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x900)
read(r1, &(0x7f0000000000)=""/104, 0x68)

1m31.19485814s ago: executing program 5 (id=249):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002380)="d3c2eb2e69bca163eb1a7416569f009b078a2d52cb07b5", 0x17}], 0x1}}], 0x1, 0x8881)
r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7e)

1m30.50675856s ago: executing program 5 (id=253):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000002c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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")
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'osx.', 'com.apple.FinderInfo\x00'}, 0x0, 0x30)

1m29.189714824s ago: executing program 5 (id=256):
socket$inet_tcp(0x2, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m27.860581082s ago: executing program 5 (id=260):
creat(0x0, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000240)={[{@noblock_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x77f8)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
r2 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x3}, {0xffffffff}]})

1m26.49238399s ago: executing program 5 (id=264):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0x14, 0x10, "fac88e6de9c091bb57be905d421c2649"}, 0x0, 0x0, 0x0, 0x0})

1m22.072221371s ago: executing program 5 (id=275):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000140)="26000000220047010500", 0xa)
faccessat2(0xffffffffffffffff, 0x0, 0xa4, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000950000000000000096cfcde7e3ff2622d795f9fb86cbb2176abfa5ebd0e87d22b3b39c"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x10b042, 0x0)
ftruncate(r2, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

1m5.21901572s ago: executing program 34 (id=275):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000140)="26000000220047010500", 0xa)
faccessat2(0xffffffffffffffff, 0x0, 0xa4, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000950000000000000096cfcde7e3ff2622d795f9fb86cbb2176abfa5ebd0e87d22b3b39c"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x10b042, 0x0)
ftruncate(r2, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

9.986159543s ago: executing program 3 (id=495):
unshare(0x62040200)

8.960753543s ago: executing program 3 (id=500):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'bridge0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)

8.529306781s ago: executing program 7 (id=501):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x43, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
close(r1)

8.006380234s ago: executing program 3 (id=504):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x108, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0xffe0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd8, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_csum={0x30, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0xa0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x80, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x400}, "30c6de722c01e58d4f92827def84a66c1c1d3834cb0b8ab2fd97bb40ac310cc204c9afece80a06c87ddb16e9540f9422d08a98c16f4a01ac0581cbe81630646413b3a3d3327fc0340a42a0685a0ff9b8a8658c0d76b86ef6edc6a1f16630bc3ad9a32b50d5cb27502d146e385f3ae115a9"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

7.868207051s ago: executing program 0 (id=505):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?'}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)

7.82062591s ago: executing program 7 (id=506):
socket$inet6(0xa, 0x3, 0x9)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x28}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

7.510830024s ago: executing program 6 (id=508):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}, 0x3}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

7.078837085s ago: executing program 3 (id=509):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fa, 0x0, 0x32, 0x2}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200000, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000e00)="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", 0x3b5}], 0x1}}], 0x1, 0x84004)

7.044488599s ago: executing program 0 (id=510):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x62040200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

6.958544698s ago: executing program 7 (id=511):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6.855020978s ago: executing program 2 (id=512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

6.719145084s ago: executing program 6 (id=513):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2)
sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0)

6.130134536s ago: executing program 6 (id=514):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delchain={0x30, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x40)

6.082530344s ago: executing program 7 (id=515):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x35, 0xd0, 0x9b, 0x20, 0x6f8, 0xb000, 0xb9a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0xee, 0xa0, 0x42, [{{0x9, 0x4, 0x62, 0xa, 0x1, 0xff, 0xd6, 0x53, 0x9, [], [{{0x9, 0x5, 0x2, 0x3, 0xdf28c65b43c22bfc, 0xf, 0x6, 0x1}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
signalfd(0xffffffffffffffff, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)

6.051466457s ago: executing program 2 (id=516):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x43, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
close(r1)

5.699195196s ago: executing program 0 (id=517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'})
unshare(0x400)
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b706, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

5.340332202s ago: executing program 6 (id=518):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016001700000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0)

5.301051781s ago: executing program 3 (id=519):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000040), 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@resgid}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000006c0))
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

5.254602644s ago: executing program 2 (id=520):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0x9, 0x55)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)

4.676943875s ago: executing program 0 (id=521):
socket$inet6(0xa, 0x3, 0x9)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x28}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

4.266632695s ago: executing program 6 (id=522):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x54}}, 0x0)

4.118731866s ago: executing program 2 (id=523):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}, 0x3}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

1.384918442s ago: executing program 7 (id=524):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2)
sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0)

1.308077311s ago: executing program 0 (id=525):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

790.738599ms ago: executing program 2 (id=526):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

648.303111ms ago: executing program 3 (id=527):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x62040200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

598.394409ms ago: executing program 6 (id=528):
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x7a, 0x5}, &(0x7f0000000300)=0x8)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}]}]}, 0x38}}, 0x0)

388.285012ms ago: executing program 0 (id=529):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fa, 0x0, 0x32, 0x2}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200000, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000e00)="befc5e1ecb6761b3f74a2a328f3ae5d1c707bfb0c082dbb4bac7028eab4259666126069dd61c0cb28410aa7d63cf203cb1fdda8c004ad34d09553f7222b84a8eec20904d7f8fa12df0570b95ba6ee4c698aa7e23c1784fb4211f7006ec3675a607fae9d5dee6470303ee0f92c00eeb644f2ef2660a44247cd50ba4fed0a4adfc5a9e48c9aa1cbcda7696a52ad701766cb564903a6b69cc8c59cffb2b00d23a7600b97d9d6db01e56594eea2ee44836558d411d0140b45b9812b57229c8ffefc9cd79ed5d3f594b574726ec04f965b763c6afab5b2aa10538c7700c29b36ab6ab491ad8861d3a2fdcc8772a1d87973ede849f95868b4313d4fa18a586ce9e9696cc2b03516664c092a9554f4d6a9caeacb43ed75ea6e5c071b5618ffbadc36400366ff50b21795584455b633a752671208cdf29e676e1fec5eb1b9e2877dbb783b18ddffdce5cf23d2e70dbed3b888d4c0131cbf04bd506bbd2d83bef7fddaa7a16541ac468f062249b53adb100d1b71656c67ccff20134e391d2456ebe9efcdeeaed5ebec149cba5fd2a0acf704f55c515130507170a1d9b73e54149e6da982e9f5367edab3dd309e5002dfe2817e3cb168603fdaff3909e9129db4cf6a0e6e14b8514549c8dad3e81bed32789f7c7aa8f33c0305ab671f3b463694dd94699e0a29f2be31e6d5d52b9bb7180e13d7abfa590bcedfba727672b266884445880bb5f597abcb178757321586077c6fbbe3e5c0e0531d18f2a166497d355e58c38f457d8d09f99e76fd852227daf209c98e4b1613527a7bb43c9f73b73ba5f8b5ff1f1d7503eae969106bab97f31bee84239603f0c6ebe8b213219f5f1c3f0c2b54c485f509657ad88fe06fd0acb2a64af7281d605db4744a51cec9de158f35a37193c5c6453ecfeb4b9f33c50a83ededbaedcc5795f099596d5fb3c9c2c88bbdd42e5a6618497b8370ef27f7bfcb8cba130d91d772965faf2f529550719349dbdebc5ff5ce2e4f6f7948da1bb9b5ae204350f3eeb1f99c00a824926bca3cb37f42249d8fc6a4c1691e7895a8e404e4fb34f4433d9974debf9b721b4e772531bb37a78232d299e19fd81b615544dcd7aad0dfd7d5abb700d11882994822876b6c58bb8496c448b1de7723d519bccbb9deffea30234fb409f1f36495f4c311ad748e2ff8ae75362d6980c402158fa519d6ae491865edc82c26a8c1e5f3f4ed0547f0f64639073d27e1ecb8769435c5f9e6e698b20bdf67c181e3d5f95f8b88e8e65e6e176e226549cc8eb7750d8567f647ac4f86643da35eac39fd49264c784f6628c3bbcc248bbfcd2c445d729d8b51507de74b196ad59", 0x3b5}], 0x1}}], 0x1, 0x84004)

205.052816ms ago: executing program 7 (id=530):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x43, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
close(r1)

0s ago: executing program 2 (id=531):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'})
unshare(0x400)
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b706, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts.
[  192.278365][ T5762] cgroup: Unknown subsys name 'net'
[  192.415393][ T5762] cgroup: Unknown subsys name 'cpuset'
[  192.433593][ T5762] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  229.506244][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  229.513177][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  246.338978][ T5762] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  250.479089][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.487855][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  250.496829][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  250.504649][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  250.512912][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  250.518740][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.530146][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  250.532013][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.538792][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  250.551072][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  250.555189][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  250.565091][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  250.567976][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  250.582278][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.594174][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  250.604668][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  250.608547][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  250.623449][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  250.653587][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  250.665994][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  250.674902][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  250.685131][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  250.699411][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  250.738760][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  250.751086][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.440191][ T5792] chnl_net:caif_netlink_parms(): no params data found
[  252.677008][ T5779] chnl_net:caif_netlink_parms(): no params data found
[  252.686970][ T5793] Bluetooth: hci2: command tx timeout
[  252.692900][ T5790] Bluetooth: hci0: command tx timeout
[  252.701049][ T5784] chnl_net:caif_netlink_parms(): no params data found
[  252.763595][ T5793] Bluetooth: hci1: command tx timeout
[  252.769301][ T5793] Bluetooth: hci3: command tx timeout
[  252.792670][ T5778] chnl_net:caif_netlink_parms(): no params data found
[  252.856401][ T5793] Bluetooth: hci4: command tx timeout
[  253.124196][ T5780] chnl_net:caif_netlink_parms(): no params data found
[  253.577595][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.587177][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.595190][ T5792] bridge_slave_0: entered allmulticast mode
[  253.605281][ T5792] bridge_slave_0: entered promiscuous mode
[  253.632255][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.640385][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.648684][ T5792] bridge_slave_1: entered allmulticast mode
[  253.658403][ T5792] bridge_slave_1: entered promiscuous mode
[  253.942917][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.032362][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.040876][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.048925][ T5778] bridge_slave_0: entered allmulticast mode
[  254.058635][ T5778] bridge_slave_0: entered promiscuous mode
[  254.078880][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.088833][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.098883][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.106903][ T5778] bridge_slave_1: entered allmulticast mode
[  254.116627][ T5778] bridge_slave_1: entered promiscuous mode
[  254.403894][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.411667][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.419790][ T5779] bridge_slave_0: entered allmulticast mode
[  254.429380][ T5779] bridge_slave_0: entered promiscuous mode
[  254.520657][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.529059][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.537004][ T5784] bridge_slave_0: entered allmulticast mode
[  254.546625][ T5784] bridge_slave_0: entered promiscuous mode
[  254.593063][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.600842][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.608836][ T5779] bridge_slave_1: entered allmulticast mode
[  254.618323][ T5779] bridge_slave_1: entered promiscuous mode
[  254.634234][ T5792] team0: Port device team_slave_0 added
[  254.651995][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.661935][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.669952][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.677943][ T5780] bridge_slave_0: entered allmulticast mode
[  254.687787][ T5780] bridge_slave_0: entered promiscuous mode
[  254.699401][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.707438][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.715529][ T5784] bridge_slave_1: entered allmulticast mode
[  254.725191][ T5784] bridge_slave_1: entered promiscuous mode
[  254.734690][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.742462][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.750505][ T5780] bridge_slave_1: entered allmulticast mode
[  254.760330][ T5780] bridge_slave_1: entered promiscuous mode
[  254.767225][ T5793] Bluetooth: hci2: command tx timeout
[  254.773960][ T5790] Bluetooth: hci0: command tx timeout
[  254.819536][ T5792] team0: Port device team_slave_1 added
[  254.847649][ T5793] Bluetooth: hci3: command tx timeout
[  254.856474][ T5793] Bluetooth: hci1: command tx timeout
[  254.879738][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.901050][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.939317][ T5790] Bluetooth: hci4: command tx timeout
[  255.072345][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.192748][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.199941][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.226494][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.252413][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.342234][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.361294][ T5778] team0: Port device team_slave_0 added
[  255.370928][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.378388][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.405172][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.440302][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.533963][ T5778] team0: Port device team_slave_1 added
[  255.547930][ T5779] team0: Port device team_slave_0 added
[  255.567669][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.678896][ T5779] team0: Port device team_slave_1 added
[  255.820495][ T5780] team0: Port device team_slave_0 added
[  255.836088][ T5784] team0: Port device team_slave_0 added
[  255.881971][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.890096][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.917570][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.937275][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.944719][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.971429][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.995103][ T5780] team0: Port device team_slave_1 added
[  256.010277][ T5784] team0: Port device team_slave_1 added
[  256.216007][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.224744][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.252446][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.266975][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.274344][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.300884][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.394603][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.401826][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.429382][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.465276][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.472743][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.499377][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.526674][ T5792] hsr_slave_0: entered promiscuous mode
[  256.537373][ T5792] hsr_slave_1: entered promiscuous mode
[  256.593540][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.600753][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.627418][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.720593][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.728200][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.754803][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.843172][ T5790] Bluetooth: hci2: command tx timeout
[  256.848856][ T5790] Bluetooth: hci0: command tx timeout
[  256.852001][ T5778] hsr_slave_0: entered promiscuous mode
[  256.864777][ T5778] hsr_slave_1: entered promiscuous mode
[  256.872776][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.880550][ T5778] Cannot create hsr debugfs directory
[  256.923068][ T5793] Bluetooth: hci1: command tx timeout
[  256.928796][ T5790] Bluetooth: hci3: command tx timeout
[  256.980627][ T5779] hsr_slave_0: entered promiscuous mode
[  256.990917][ T5779] hsr_slave_1: entered promiscuous mode
[  256.999961][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.008005][ T5779] Cannot create hsr debugfs directory
[  257.008181][ T5790] Bluetooth: hci4: command tx timeout
[  257.255341][ T5780] hsr_slave_0: entered promiscuous mode
[  257.265764][ T5780] hsr_slave_1: entered promiscuous mode
[  257.276498][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.284479][ T5780] Cannot create hsr debugfs directory
[  257.323143][ T5784] hsr_slave_0: entered promiscuous mode
[  257.332069][ T5784] hsr_slave_1: entered promiscuous mode
[  257.340722][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.348731][ T5784] Cannot create hsr debugfs directory
[  258.852888][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  258.922959][ T5790] Bluetooth: hci0: command tx timeout
[  258.927835][ T5793] Bluetooth: hci2: command tx timeout
[  258.933492][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  258.957977][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  258.996735][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  259.005991][ T5793] Bluetooth: hci3: command tx timeout
[  259.006112][ T5790] Bluetooth: hci1: command tx timeout
[  259.092863][ T5790] Bluetooth: hci4: command tx timeout
[  259.168413][ T5778] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  259.201728][ T5778] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  259.289707][ T5778] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  259.324800][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  259.348931][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  259.388461][ T5778] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  259.413581][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  259.467273][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  259.608562][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  259.743933][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  259.829555][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  259.918364][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  260.015658][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  260.104583][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  260.174802][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  260.206264][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  260.597788][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.940462][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.971153][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[  260.998663][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.102189][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.110065][ T1896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.172790][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.180523][ T1896] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.249418][ T5779] 8021q: adding VLAN 0 to HW filter on device team0
[  261.334072][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[  261.429552][  T195] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.437569][  T195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.524887][  T195] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.532839][  T195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.580907][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.677231][  T195] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.685084][  T195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.772167][  T195] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.780165][  T195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.830946][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.909282][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[  262.064337][  T195] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.072064][  T195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.171528][ T5780] 8021q: adding VLAN 0 to HW filter on device team0
[  262.229725][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  262.242031][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.366464][  T195] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.374374][  T195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.450584][  T195] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.458316][  T195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.533370][  T195] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.541111][  T195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.666867][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.253740][ T5792] veth0_vlan: entered promiscuous mode
[  264.357721][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.387653][ T5792] veth1_vlan: entered promiscuous mode
[  264.435236][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.791599][ T5792] veth0_macvtap: entered promiscuous mode
[  264.866613][ T5792] veth1_macvtap: entered promiscuous mode
[  264.910436][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.971929][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.019884][ T5779] veth0_vlan: entered promiscuous mode
[  265.101286][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.131042][ T5779] veth1_vlan: entered promiscuous mode
[  265.167892][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.250063][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.259517][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.269410][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.278576][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.729543][ T5780] veth0_vlan: entered promiscuous mode
[  265.757956][ T5779] veth0_macvtap: entered promiscuous mode
[  265.798750][ T5784] veth0_vlan: entered promiscuous mode
[  265.837768][ T5779] veth1_macvtap: entered promiscuous mode
[  265.903380][ T5780] veth1_vlan: entered promiscuous mode
[  265.943012][ T5784] veth1_vlan: entered promiscuous mode
[  266.100320][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.111451][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.128412][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.251695][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.263278][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.278528][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.391314][ T5784] veth0_macvtap: entered promiscuous mode
[  266.463840][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.473194][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.482241][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.491565][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.525275][ T5780] veth0_macvtap: entered promiscuous mode
[  266.552284][ T5784] veth1_macvtap: entered promiscuous mode
[  266.634101][ T5780] veth1_macvtap: entered promiscuous mode
[  266.834312][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.848166][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.858553][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.869483][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.884886][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.898038][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.908944][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.920573][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.934728][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.946869][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.957820][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.045386][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.147925][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.158930][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.170652][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.182559][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.197633][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.213416][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.224861][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.235033][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.245948][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.256264][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.267043][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.282081][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.461110][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.470656][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.480710][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.489996][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.543450][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.552727][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.561804][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.571983][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.750897][ T5778] veth0_vlan: entered promiscuous mode
[  267.853132][ T5778] veth1_vlan: entered promiscuous mode
[  268.266394][ T5778] veth0_macvtap: entered promiscuous mode
[  268.322034][ T5778] veth1_macvtap: entered promiscuous mode
[  268.501356][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.513478][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.525101][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.535923][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.546167][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.556995][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.567228][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.579072][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.594985][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.787074][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.798116][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.808835][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.819638][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.829863][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.840703][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.851115][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.862063][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.877341][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.131119][ T5778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.140475][ T5778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.149880][ T5778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.160354][ T5778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.328093][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.336474][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.689677][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.698091][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.419494][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.428367][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.561505][ T5792] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  273.605871][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.614346][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.231800][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.240390][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.307995][ T5960] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'.
[  274.517794][ T1896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.526903][ T1896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.686755][ T1896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.697389][ T1896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.964230][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  275.024181][ T1896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.032312][ T1896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.861769][ T5976] loop3: detected capacity change from 0 to 512
[  276.040083][ T5976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.053503][ T5976] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.298744][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.310475][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.328003][ T5987] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  276.387620][   T30] audit: type=1800 audit(1745390232.418:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="file2" dev="loop3" ino=16 res=0 errno=0
[  276.412387][   T30] audit: type=1800 audit(1745390232.448:3): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="file1" dev="loop3" ino=15 res=0 errno=0
[  276.476443][ T5985] loop2: detected capacity change from 0 to 1024
[  276.735747][ T5987] all: renamed from lo (while UP)
[  276.757829][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.003119][ T1896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.011243][ T1896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.693028][ T5995] loop1: detected capacity change from 0 to 512
[  277.716578][ T5995] EXT4-fs: Ignoring removed mblk_io_submit option
[  277.725630][ T5995] EXT4-fs: Ignoring removed nomblk_io_submit option
[  277.855976][ T5995] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  277.937449][ T5995] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.10: corrupted in-inode xattr: e_value size too large
[  278.044221][ T5995] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.10: couldn't read orphan inode 15 (err -117)
[  278.206235][ T5995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.053170][ T6009] loop0: detected capacity change from 0 to 256
[  279.272872][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  279.317961][ T6009] loop0: detected capacity change from 0 to 512
[  279.390844][ T5780] EXT4-fs error (device loop1): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39
[  279.416863][ T6012] loop2: detected capacity change from 0 to 2048
[  279.498017][ T6014] loop4: detected capacity change from 0 to 512
[  279.509882][ T5780] EXT4-fs error (device loop1): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39
[  279.534988][ T5876] usb 4-1: config 0 interface 0 has no altsetting 0
[  279.542114][ T5876] usb 4-1: New USB device found, idVendor=056a, idProduct=0034, bcdDevice= 0.00
[  279.551926][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.624819][ T6012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.745900][ T5876] usb 4-1: config 0 descriptor??
[  279.770191][ T6014] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  279.781973][ T6014] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  279.799842][ T6014] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.16: Failed to acquire dquot type 1
[  280.031450][ T6014] EXT4-fs (loop4): 1 truncate cleaned up
[  280.042082][ T6014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.063673][ T6014] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.175573][  T195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.393105][ T6023] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  281.700161][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'.
[  282.000541][  T195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.082948][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.288590][  T195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.629029][ T5980] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  282.651268][ T5876] wacom 0003:056A:0034.0001: probe with driver wacom failed with error -22
[  282.678572][ T5876] usb 4-1: USB disconnect, device number 2
[  283.027221][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.052419][  T195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.565243][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.841752][  T195] bridge_slave_1: left allmulticast mode
[  283.848192][  T195] bridge_slave_1: left promiscuous mode
[  283.855360][  T195] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.959285][  T195] bridge_slave_0: left allmulticast mode
[  283.972039][  T195] bridge_slave_0: left promiscuous mode
[  283.979113][  T195] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.745673][  T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.797844][ T6037] loop2: detected capacity change from 0 to 256
[  285.905206][  T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.984647][  T195] bond0 (unregistering): Released all slaves
[  286.210761][ T6034] warning: `syz.3.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  287.312927][  T195] hsr_slave_0: left promiscuous mode
[  287.352799][  T195] hsr_slave_1: left promiscuous mode
[  287.360974][  T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.373306][  T195] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.441818][  T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.449849][  T195] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.503721][  T195] veth1_macvtap: left promiscuous mode
[  287.509591][  T195] veth0_macvtap: left promiscuous mode
[  287.516210][  T195] veth1_vlan: left promiscuous mode
[  287.521857][  T195] veth0_vlan: left promiscuous mode
[  288.379092][  T195] team0 (unregistering): Port device team_slave_1 removed
[  288.433018][  T195] team0 (unregistering): Port device team_slave_0 removed
[  291.076169][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  291.083002][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  295.163020][ T5876] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  295.270461][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  295.282965][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  295.296321][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  295.368620][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  295.382763][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  295.382978][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  295.493541][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.505376][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.515688][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  295.529109][ T5876] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  295.538613][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.549653][ T6079] loop3: detected capacity change from 0 to 512
[  295.755343][ T6079] EXT4-fs (loop3): orphan cleanup on readonly fs
[  295.817698][ T5876] usb 5-1: config 0 descriptor??
[  295.943908][ T6079] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  296.030261][ T6079] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  296.093563][    T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  296.161713][ T6079] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.31: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  296.288304][    T9] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  296.299501][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  296.309426][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  296.332937][ T6079] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.31: couldn't read orphan inode 13 (err -117)
[  296.423867][ T6079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  296.438932][ T5876] microsoft 0003:045E:07DA.0002: collection stack underflow
[  296.449232][ T5876] microsoft 0003:045E:07DA.0002: item 0 2 0 12 parsing failed
[  296.503353][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  296.513776][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.522060][    T9] usb 3-1: Product: syz
[  296.526694][    T9] usb 3-1: Manufacturer: syz
[  296.531583][    T9] usb 3-1: SerialNumber: syz
[  296.575747][ T6079] EXT4-fs error (device loop3): ext4_lookup:1789: comm syz.3.31: inode #15: comm syz.3.31: iget: illegal inode #
[  296.618923][ T5876] microsoft 0003:045E:07DA.0002: parse failed
[  296.626032][ T5876] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22
[  296.783429][    T9] usb 3-1: selecting invalid altsetting 1
[  296.796134][ T5876] usb 5-1: USB disconnect, device number 2
[  297.178837][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.461433][    T9] cdc_ncm 3-1:1.0: SET_CRC_MODE failed
[  297.499299][ T5790] Bluetooth: hci2: command tx timeout
[  297.506693][ T6075] chnl_net:caif_netlink_parms(): no params data found
[  297.548348][    T9] usb 3-1: selecting invalid altsetting 1
[  297.554645][    T9] cdc_ncm 3-1:1.0: bind() failure
[  297.733317][    T9] usb 3-1: USB disconnect, device number 2
[  298.230153][ T6104] loop3: detected capacity change from 0 to 2048
[  298.356458][ T6104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.408856][ T6109] loop4: detected capacity change from 0 to 256
[  298.669541][ T6109] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  298.763232][ T6104] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 36864 lbcount: 40960 extent 129+5120
[  298.837809][ T6109] exFAT-fs (loop4): valid_size(10) is greater than size(0)
[  298.862387][   T30] audit: type=1800 audit(1745390254.908:4): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.35" name="file1" dev="loop4" ino=4 res=0 errno=0
[  299.004146][ T1572] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  299.065115][ T5792] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 36864 different from extent length 40960. Filesystem need not be standards compliant.
[  299.205548][ T1572] usb 1-1: unable to get BOS descriptor or descriptor too short
[  299.260208][ T1572] usb 1-1: not running at top speed; connect to a high speed hub
[  299.319941][ T1572] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.330999][ T1572] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  299.340585][ T1572] usb 1-1: config 1 has no interface number 1
[  299.350165][ T1572] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  299.364409][ T1572] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  299.503177][ T1572] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  299.512882][ T1572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.521346][ T1572] usb 1-1: Product: syz
[  299.526023][ T1572] usb 1-1: Manufacturer: syz
[  299.530887][ T1572] usb 1-1: SerialNumber: syz
[  299.569876][ T5790] Bluetooth: hci2: command tx timeout
[  299.650325][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.664506][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.673308][ T6075] bridge_slave_0: entered allmulticast mode
[  299.686505][ T6075] bridge_slave_0: entered promiscuous mode
[  299.807652][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.816240][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.825071][ T6075] bridge_slave_1: entered allmulticast mode
[  299.838015][ T6075] bridge_slave_1: entered promiscuous mode
[  299.933835][ T6112] loop0: detected capacity change from 0 to 256
[  299.957850][ T6126] netlink: 1272 bytes leftover after parsing attributes in process `syz.4.39'.
[  299.987758][ T6112] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  299.999072][ T6112] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  300.047305][ T6124] loop3: detected capacity change from 0 to 2048
[  300.210557][ T6112] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  300.246011][ T6124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.259361][ T6124] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.436739][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.534380][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.388129][ T6133] capability: warning: `syz.4.40' uses deprecated v2 capabilities in a way that may be insecure
[  301.625217][ T6133] loop4: detected capacity change from 0 to 512
[  301.668570][ T5790] Bluetooth: hci2: command tx timeout
[  302.099545][ T6133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.115944][ T6133] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.792111][ T6075] team0: Port device team_slave_0 added
[  302.847702][ T6075] team0: Port device team_slave_1 added
[  302.853935][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.756540][ T5790] Bluetooth: hci2: command tx timeout
[  303.771087][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.778452][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.804927][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.128772][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.136739][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.166277][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.928037][ T1572] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc
[  305.041719][ T1572] usb 1-1: USB disconnect, device number 2
[  305.089435][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.136533][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  305.344354][ T6149] kernel profiling enabled (shift: 7)
[  305.928814][ T6075] hsr_slave_0: entered promiscuous mode
[  305.940685][ T6075] hsr_slave_1: entered promiscuous mode
[  305.951084][ T6075] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  305.959597][ T6075] Cannot create hsr debugfs directory
[  306.117973][ T6154] loop4: detected capacity change from 0 to 1024
[  306.172437][ T6154] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  306.544310][ T6154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.231866][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  307.247428][ T6164] EXT4-fs (loop4): shut down requested (1)
[  307.468356][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.357823][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  308.767072][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  309.074177][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  309.279509][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  309.790953][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  309.996488][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  310.200607][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  310.734780][ T6175] loop3: detected capacity change from 0 to 512
[  310.826286][ T6175] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  310.839945][ T6175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  311.114461][ T6175] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  311.361792][ T6175] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.48: invalid indirect mapped block 4294967295 (level 0)
[  311.404824][ T6175] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.48: invalid indirect mapped block 4294967295 (level 1)
[  311.467546][ T6075] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  311.504619][ T6075] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  311.528273][ T6075] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  311.554850][ T6175] EXT4-fs (loop3): 1 orphan inode deleted
[  311.561011][ T6175] EXT4-fs (loop3): 1 truncate cleaned up
[  311.564812][ T6075] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  311.570747][ T6175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.621347][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.701260][ T4175] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.908403][ T4175] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.977236][ T6178] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  312.170698][ T4175] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.340359][ T6188] loop0: detected capacity change from 0 to 256
[  312.378295][ T4175] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.471438][ T6188] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  312.479934][ T6188] FAT-fs (loop0): Filesystem has been set read-only
[  312.521895][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.236263][ T4175] bridge_slave_1: left allmulticast mode
[  313.242193][ T4175] bridge_slave_1: left promiscuous mode
[  313.249175][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.316900][ T4175] bridge_slave_0: left allmulticast mode
[  313.323293][ T4175] bridge_slave_0: left promiscuous mode
[  313.329963][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.643635][ T5790] Bluetooth: hci3: command tx timeout
[  313.975046][ T4175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.000565][ T4175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.028075][ T4175] bond0 (unregistering): Released all slaves
[  314.380934][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.670956][ T4175] hsr_slave_0: left promiscuous mode
[  314.692831][ T4175] hsr_slave_1: left promiscuous mode
[  314.700911][ T4175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.711998][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.787181][ T4175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.796547][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.904809][ T4175] veth1_macvtap: left promiscuous mode
[  314.913666][ T4175] veth0_macvtap: left promiscuous mode
[  314.919656][ T4175] veth1_vlan: left promiscuous mode
[  314.925612][ T4175] veth0_vlan: left promiscuous mode
[  318.218540][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  318.276011][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  318.353909][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  318.451821][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  318.508111][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.684618][ T6228] loop3: detected capacity change from 0 to 512
[  318.736866][ T4175] team0 (unregistering): Port device team_slave_1 removed
[  318.833460][ T6228] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  319.655405][ T6228] EXT4-fs (loop3): orphan cleanup on readonly fs
[  319.924688][ T4175] team0 (unregistering): Port device team_slave_0 removed
[  321.069990][ T5793] Bluetooth: hci0: command tx timeout
[  321.156413][ T6228] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.62: Block bitmap for bg 0 marked uninitialized
[  322.169058][ T6228] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  323.693964][ T6228] EXT4-fs (loop3): 1 orphan inode deleted
[  323.702196][ T6228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  324.166745][ T6075] 8021q: adding VLAN 0 to HW filter on device team0
[  324.244665][ T5793] Bluetooth: hci0: command tx timeout
[  324.302123][  T195] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.310065][  T195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.792182][  T195] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.800109][  T195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.064206][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.189617][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.64'.
[  325.404770][ T6075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  326.299856][ T5793] Bluetooth: hci0: command tx timeout
[  327.047177][ T6250] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  327.899569][ T1572] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  328.117167][ T6222] chnl_net:caif_netlink_parms(): no params data found
[  328.166995][ T1572] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  328.167139][ T1572] usb 1-1: config 0 has no interface number 0
[  328.167267][ T1572] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  328.167455][ T1572] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  328.167629][ T1572] usb 1-1: config 0 interface 255 has no altsetting 0
[  328.167816][ T1572] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  328.167968][ T1572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.175260][ T1572] usb 1-1: config 0 descriptor??
[  328.203082][ T1572] ums-realtek 1-1:0.255: USB Mass Storage device detected
[  328.272879][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  328.383630][ T5793] Bluetooth: hci0: command tx timeout
[  328.440579][ T1572] usb 1-1: USB disconnect, device number 3
[  328.448644][    T9] usb 4-1: Using ep0 maxpacket: 16
[  328.506003][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.506180][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.506330][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  328.589052][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00
[  328.589218][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.652908][    T9] usb 4-1: config 0 descriptor??
[  328.731531][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.199508][    T9] logitech-djreceiver 0003:046D:C53F.0003: hidraw0: USB HID v0.00 Device [HID 046d:c53f] on usb-dummy_hcd.3-1/input0
[  329.364167][    T9] usb 4-1: USB disconnect, device number 3
[  330.267782][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.278909][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.287213][ T6222] bridge_slave_0: entered allmulticast mode
[  330.297286][ T6222] bridge_slave_0: entered promiscuous mode
[  330.435544][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.443934][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.451797][ T6222] bridge_slave_1: entered allmulticast mode
[  330.461720][ T6222] bridge_slave_1: entered promiscuous mode
[  330.828048][ T6279] loop0: detected capacity change from 0 to 256
[  330.925847][ T6279] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  330.981283][ T6222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.050474][ T6282] loop3: detected capacity change from 0 to 512
[  331.131764][ T6222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.173056][ T6282] EXT4-fs: Ignoring removed mblk_io_submit option
[  331.213039][ T1572] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  331.259545][ T6282] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  331.306922][ T6282] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  331.434567][ T1572] usb 3-1: Using ep0 maxpacket: 16
[  331.504828][ T1572] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.517811][ T1572] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.528145][ T1572] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  331.541456][ T1572] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  331.551127][ T1572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.646548][ T6222] team0: Port device team_slave_0 added
[  331.698517][ T6222] team0: Port device team_slave_1 added
[  331.740102][ T1572] usb 3-1: config 0 descriptor??
[  331.893648][ T5833] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  332.176106][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.187576][ T5833] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  332.197235][ T5833] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  332.207497][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.243654][ T1572] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  332.304132][ T1572] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input5
[  332.332403][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.341551][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.359660][ T5833] usb 4-1: config 0 descriptor??
[  332.367954][ T6222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.475707][ T6075] veth0_vlan: entered promiscuous mode
[  332.556787][ T1572] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  332.599327][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.607413][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.636077][ T6222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.652684][ T1572] usb 3-1: USB disconnect, device number 3
[  332.702601][ T6075] veth1_vlan: entered promiscuous mode
[  333.021481][ T5833] Bluetooth: Can't get version to change to load ram patch err
[  333.029782][ T5833] Bluetooth: Loading sysconfig file failed
[  333.039473][ T5833] ath3k 4-1:0.0: probe with driver ath3k failed with error -71
[  333.144353][ T5833] usb 4-1: USB disconnect, device number 4
[  333.480228][ T6222] hsr_slave_0: entered promiscuous mode
[  333.496351][ T6222] hsr_slave_1: entered promiscuous mode
[  333.505978][ T6222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.513986][ T6222] Cannot create hsr debugfs directory
[  333.598505][ T6075] veth0_macvtap: entered promiscuous mode
[  333.675620][ T6075] veth1_macvtap: entered promiscuous mode
[  334.142012][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.153293][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.166394][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.177903][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.189375][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.200313][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.216106][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.422132][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.433297][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.444522][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.456303][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.470055][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.481712][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.497733][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.768507][ T6075] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.781510][ T6075] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.791567][ T6075] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.807719][ T6075] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.876275][ T6222] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  337.107639][ T6222] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  337.358301][ T6222] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  337.504418][ T6222] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  338.080704][ T6328] loop2: detected capacity change from 0 to 8
[  338.180087][ T6328] unable to read inode lookup table
[  338.990951][ T6336] loop3: detected capacity change from 0 to 256
[  339.376339][ T6339] loop0: detected capacity change from 0 to 8
[  339.447479][ T6339] SQUASHFS error: Failed to read block 0x4e8: -5
[  339.454750][ T6339] SQUASHFS error: Failed to read block 0x4de: -5
[  339.461875][ T6339] SQUASHFS error: Failed to read block 0x4de: -5
[  339.469119][ T6339] SQUASHFS error: Failed to read block 0x4de: -5
[  339.548182][   T30] audit: type=1800 audit(1745390295.538:5): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.83" name="file1" dev="loop0" ino=5 res=0 errno=0
[  339.794626][ T6336] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  341.396986][ T6222] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.857858][ T6222] 8021q: adding VLAN 0 to HW filter on device team0
[  342.120381][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.128209][ T4175] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.328776][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.336659][ T4175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.553979][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  343.754110][    T9] usb 3-1: Using ep0 maxpacket: 8
[  343.792242][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  343.828909][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  343.839720][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  343.849085][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  343.896851][ T3069] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  344.025351][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  344.036896][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.046365][    T9] usb 3-1: Product: syz
[  344.050806][    T9] usb 3-1: Manufacturer: syz
[  344.055853][    T9] usb 3-1: SerialNumber: syz
[  344.095815][ T3069] usb 4-1: Using ep0 maxpacket: 32
[  344.127490][ T3069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  344.139407][ T3069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  344.151174][ T3069] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  344.160637][ T3069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.219921][ T3069] usb 4-1: config 0 descriptor??
[  344.231068][ T6368] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  344.309874][ T3069] hub 4-1:0.0: USB hub found
[  344.459914][    T9] cdc_ncm 3-1:1.0: skipping garbage
[  344.465875][    T9] cdc_ncm 3-1:1.0: skipping garbage
[  344.471586][    T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  344.479283][    T9] cdc_ncm 3-1:1.0: bind() failure
[  344.618882][ T3069] hub 4-1:0.0: 1 port detected
[  344.666973][    T9] usb 3-1: USB disconnect, device number 4
[  345.067422][ T6222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.718004][ T5876] usb 4-1: USB disconnect, device number 5
[  346.115368][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  346.374913][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.386552][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.396881][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  346.410262][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  346.419788][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.591371][ T6394] loop2: detected capacity change from 0 to 16
[  346.611014][ T6394] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 125300)
[  346.646725][    T9] usb 1-1: config 0 descriptor??
[  346.685633][ T6394] loop2: detected capacity change from 0 to 256
[  346.798989][ T6394] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  347.211845][    T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  347.448185][    T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  347.687772][    T9] usb 1-1: USB disconnect, device number 4
[  348.555754][ T4052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.564367][ T4052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.052228][ T1896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.060756][ T1896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.690539][ T6222] veth0_vlan: entered promiscuous mode
[  349.865091][ T6222] veth1_vlan: entered promiscuous mode
[  350.282853][ T6411] loop3: detected capacity change from 0 to 512
[  350.400008][ T6411] EXT4-fs: Ignoring removed bh option
[  350.406343][ T6411] ext4: Unknown parameter '"'
[  350.422153][ T6222] veth0_macvtap: entered promiscuous mode
[  350.620892][ T6222] veth1_macvtap: entered promiscuous mode
[  351.008865][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.020001][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.030517][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.041857][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.052171][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.068177][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.078932][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.093210][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.110035][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  351.986250][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  351.997094][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.007392][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.018833][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.029031][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.039996][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.050577][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.061418][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.077996][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  352.136730][ T6417] loop0: detected capacity change from 0 to 128
[  352.311512][ T6222] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.322118][ T6222] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.332267][ T6222] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.343557][ T6222] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.422353][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  352.429224][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  352.471350][ T6417] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  352.514479][ T6417] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.053293][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  353.084876][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  353.118920][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  353.157033][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  353.171423][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  353.303941][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  354.967992][ T6452] loop3: detected capacity change from 0 to 128
[  354.978557][ T6452] =======================================================
[  354.978557][ T6452] WARNING: The mand mount option has been deprecated and
[  354.978557][ T6452]          and is ignored by this kernel. Remove the mand
[  354.978557][ T6452]          option from the mount to silence this warning.
[  354.978557][ T6452] =======================================================
[  355.031159][ T6452] EXT4-fs (loop3): Test dummy encryption mode enabled
[  355.265030][ T5790] Bluetooth: hci5: command tx timeout
[  355.359596][ T6452] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.393545][ T6452] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  355.891487][ T6452] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  355.906019][ T6456] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  355.932987][ T6457] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.323282][ T5790] Bluetooth: hci5: command tx timeout
[  357.470595][ T6428] chnl_net:caif_netlink_parms(): no params data found
[  359.114366][ T6487] loop0: detected capacity change from 0 to 2048
[  359.193008][ T6487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  359.407258][ T5790] Bluetooth: hci5: command tx timeout
[  360.259949][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.268543][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.279250][ T6428] bridge_slave_0: entered allmulticast mode
[  360.289370][ T6428] bridge_slave_0: entered promiscuous mode
[  360.346874][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.356052][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.364374][ T6428] bridge_slave_1: entered allmulticast mode
[  360.376672][ T6428] bridge_slave_1: entered promiscuous mode
[  360.446789][ T6501] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 81920 lbcount: 86016 extent 129+84992
[  360.529364][ T4052] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.707793][ T5784] UDF-fs: warning (device loop0): udf_evict_inode: Inode 1436 (mode 100000) has inode size 81920 different from extent length 86016. Filesystem need not be standards compliant.
[  361.048680][ T4052] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.348286][ T4052] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.458908][ T6428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.484380][ T5790] Bluetooth: hci5: command tx timeout
[  361.617767][ T4052] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.747004][ T6428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.062872][ T6523] syz.0.117 uses obsolete (PF_INET,SOCK_PACKET)
[  362.259532][ T6428] team0: Port device team_slave_0 added
[  362.374564][ T6428] team0: Port device team_slave_1 added
[  362.776664][ T4052] bridge_slave_1: left allmulticast mode
[  362.784695][ T4052] bridge_slave_1: left promiscuous mode
[  362.791426][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.904320][ T4052] bridge_slave_0: left allmulticast mode
[  362.910277][ T4052] bridge_slave_0: left promiscuous mode
[  362.918517][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.593778][ T4052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.638301][ T4052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.695433][ T4052] bond0 (unregistering): Released all slaves
[  364.157058][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.166299][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.193043][ T6428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.425806][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.433982][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.460535][ T6428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.864580][ T4052] hsr_slave_0: left promiscuous mode
[  364.889628][ T4052] hsr_slave_1: left promiscuous mode
[  364.900797][ T4052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.908931][ T4052] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.937616][ T4052] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.946364][ T4052] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.011757][ T4052] veth1_macvtap: left promiscuous mode
[  365.018290][ T4052] veth0_macvtap: left promiscuous mode
[  365.025159][ T4052] veth1_vlan: left promiscuous mode
[  365.030796][ T4052] veth0_vlan: left promiscuous mode
[  365.967405][ T4052] team0 (unregistering): Port device team_slave_1 removed
[  366.063205][ T4052] team0 (unregistering): Port device team_slave_0 removed
[  366.275544][ T6566] fuse: Bad value for 'fd'
[  367.025702][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.034980][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.080090][ T6428] hsr_slave_0: entered promiscuous mode
[  367.090563][ T6428] hsr_slave_1: entered promiscuous mode
[  367.099712][ T6428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  367.107625][ T6428] Cannot create hsr debugfs directory
[  367.153939][ T6575] Bluetooth: MGMT ver 1.23
[  367.200214][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.208864][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.056923][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'.
[  369.286326][ T5790] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  369.294399][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout
[  370.035807][ T6428] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  370.189153][ T6603] loop0: detected capacity change from 0 to 512
[  370.234084][ T6428] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  370.448282][ T6428] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  370.520393][ T6603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.533961][ T6603] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  370.564025][ T6428] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  371.227951][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.421214][ T6624] loop6: detected capacity change from 0 to 1024
[  373.298874][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.763222][ T6428] 8021q: adding VLAN 0 to HW filter on device team0
[  373.990234][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.998225][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.280615][ T6634] loop0: detected capacity change from 0 to 2048
[  374.293459][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.301265][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.356691][ T6624] EXT4-fs (loop6): Test dummy encryption mode enabled
[  374.393145][ T6624] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  374.459864][ T6634] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  374.561543][ T6624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.697389][ T6634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.863966][ T6640] fuse: Unknown parameter '01777777777777777777777ÿÿ18446744073709551615'
[  374.924578][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  374.931144][   T53] Bluetooth: hci4: command 0x0406 tx timeout
[  374.931763][ T5781] Bluetooth: hci1: command 0x0406 tx timeout
[  374.955979][ T6634] Illegal XDP return value 4294967274 on prog  (id 16) dev syz_tun, expect packet loss!
[  375.609255][ T6624] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  375.684699][ T6624] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.148: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  375.884810][ T6653] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.148: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  376.253192][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  376.912634][ T6428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.064988][ T5833] usb 7-1: device descriptor read/64, error -71
[  379.074185][ T5833] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  379.322347][ T6222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.250445][ T6697] loop6: detected capacity change from 0 to 128
[  381.556605][ T6697] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  383.910363][   T30] audit: type=1800 audit(1745390339.938:6): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.164" name="file2" dev="loop6" ino=95 res=0 errno=0
[  384.056774][ T6700] loop0: detected capacity change from 0 to 256
[  384.327539][ T6700] vfat: Unknown parameter 'short'
[  384.449441][ T6707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.166'.
[  384.458847][ T6707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.166'.
[  384.675256][ T6428] veth0_vlan: entered promiscuous mode
[  385.026940][ T6428] veth1_vlan: entered promiscuous mode
[  385.536123][ T6428] veth0_macvtap: entered promiscuous mode
[  385.596685][ T6428] veth1_macvtap: entered promiscuous mode
[  385.937190][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.948080][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.958286][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.969302][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.981605][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.993118][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.003440][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.014221][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.029984][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.306123][ T6716] loop6: detected capacity change from 0 to 8
[  386.524569][ T6716] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  386.573151][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.584108][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.596559][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.608006][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.618278][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.629110][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.639457][ T6428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.650310][ T6428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.665647][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.062853][ T6428] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.072123][ T6428] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.081923][ T6428] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.091668][ T6428] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.001989][ T6770] loop0: detected capacity change from 0 to 128
[  390.087600][ T6770] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  391.000821][ T6779] FAT-fs (loop0): FAT read failed (blocknr 234)
[  391.010295][ T6779] FAT-fs (loop0): FAT read failed (blocknr 234)
[  391.426168][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'.
[  393.556434][ T6793] loop6: detected capacity change from 0 to 256
[  393.642154][ T6793] exfat: Deprecated parameter 'utf8'
[  393.648154][ T6793] exfat: Deprecated parameter 'namecase'
[  393.656611][ T6793] exfat: Deprecated parameter 'utf8'
[  393.978115][ T6793] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  394.419754][ T6804] loop0: detected capacity change from 0 to 2048
[  394.573302][ T6799] netlink: 'syz.0.194': attribute type 4 has an invalid length.
[  394.583404][ T6799] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.194'.
[  394.696719][ T6804]  loop0: p1 < > p3
[  394.739909][ T6804] loop0: p3 size 134217728 extends beyond EOD, truncated
[  394.957171][ T6812] loop6: detected capacity change from 0 to 128
[  395.126819][ T6812] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  396.171108][ T6830] loop6: detected capacity change from 0 to 256
[  396.731205][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.740368][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.069775][ T5077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.078087][ T5077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.440297][ T6869] loop6: detected capacity change from 0 to 512
[  401.582987][ T6869] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent
[  402.187195][ T6877] loop0: detected capacity change from 0 to 1024
[  402.699714][ T6882] Zero length message leads to an empty skb
[  402.981491][ T6877] hfsplus: found bad thread record in catalog
[  403.834425][ T5077] hfsplus: b-tree write err: -5, ino 4
[  403.870922][ T6885] loop6: detected capacity change from 0 to 1024
[  404.339349][ T6885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  404.352777][ T6885] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.925356][ T6885] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  405.439295][ T6222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.385328][ T6914] fuse: Bad value for 'fd'
[  406.522848][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  406.748820][    T9] usb 7-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config
[  406.759701][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  406.771145][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  406.809105][    T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  406.819221][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.827740][    T9] usb 7-1: Product: syz
[  406.832212][    T9] usb 7-1: Manufacturer: syz
[  406.837272][    T9] usb 7-1: SerialNumber: syz
[  406.921370][    T9] usb 7-1: config 0 descriptor??
[  407.146555][    T9] usb 7-1: Found UVC 34.00 device syz (8086:0b5b)
[  407.153816][    T9] usb 7-1: No valid video chain found.
[  407.259919][    T9] usb 7-1: USB disconnect, device number 4
[  408.450616][ T6941] loop5: detected capacity change from 0 to 256
[  408.509062][ T6941] exfat: Bad value for 'uid'
[  408.514194][ T6941] exfat: Bad value for 'uid'
[  409.081106][ T6946] loop6: detected capacity change from 0 to 512
[  409.163430][ T6946] EXT4-fs (loop6): blocks per group (8192) and clusters per group (2304) inconsistent
[  409.971190][ T6954] loop5: detected capacity change from 0 to 128
[  410.075557][ T6954] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  410.210186][ T6954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.543826][ T6965] loop0: detected capacity change from 0 to 2048
[  411.763157][ T6965] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e01c, mo2=0082]
[  411.803566][ T6965] System zones: 0-7
[  411.857268][ T6965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.410937][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.042035][ T6990] loop5: detected capacity change from 0 to 1024
[  413.401466][ T6995] loop0: detected capacity change from 0 to 2048
[  413.446421][ T6999] netlink: 48 bytes leftover after parsing attributes in process `syz.2.255'.
[  413.583709][ T5833] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  413.680764][ T6995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.694467][ T6995] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.845440][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  413.852314][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  413.859974][ T5833] usb 7-1: Using ep0 maxpacket: 32
[  413.911433][ T5833] usb 7-1: unable to get BOS descriptor or descriptor too short
[  413.919529][   T30] audit: type=1800 audit(1745390369.968:7): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.252" name="file0" dev="loop0" ino=13 res=0 errno=0
[  413.969089][ T5833] usb 7-1: config 3 has an invalid interface number: 98 but max is 0
[  413.977841][ T5833] usb 7-1: config 3 has no interface number 0
[  413.986029][ T5833] usb 7-1: config 3 interface 98 altsetting 10 endpoint 0x2 has invalid maxpacket 9212, setting to 1024
[  413.999139][ T5833] usb 7-1: config 3 interface 98 has no altsetting 0
[  414.215128][ T5833] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8
[  414.225070][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.233604][ T5833] usb 7-1: Product: syz
[  414.241040][ T5833] usb 7-1: Manufacturer: syz
[  414.246963][ T5833] usb 7-1: SerialNumber: syz
[  414.395549][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.824807][ T5833] usb 7-1: USB disconnect, device number 5
[  415.548300][ T7016] loop0: detected capacity change from 0 to 2048
[  415.565417][ T7018] loop5: detected capacity change from 0 to 1024
[  415.639827][ T7018] EXT4-fs: Ignoring removed nomblk_io_submit option
[  415.647412][ T7018] EXT4-fs: Ignoring removed nomblk_io_submit option
[  415.720323][ T7016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.883561][ T7018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.125444][   T30] audit: type=1800 audit(1745390372.178:8): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.259" name="file2" dev="loop0" ino=16 res=0 errno=0
[  416.149807][ T7035] loop6: detected capacity change from 0 to 512
[  416.504529][ T7035] EXT4-fs (loop6): 1 orphan inode deleted
[  416.513128][ T7035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.543895][ T4414] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  416.554450][ T4414] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:21: Failed to release dquot type 1
[  416.613301][ T7035] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  416.689845][ T6428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.746830][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.553964][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  417.684390][ T6222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.878240][    T9] usb 6-1: Using ep0 maxpacket: 16
[  418.858092][    T9] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  418.866855][    T9] usb 6-1: config 0 has no interface number 0
[  418.873482][    T9] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  418.905835][    T9] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  418.915462][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.920444][ T7057] loop6: detected capacity change from 0 to 512
[  418.925509][    T9] usb 6-1: Product: syz
[  418.936673][    T9] usb 6-1: Manufacturer: syz
[  418.941538][    T9] usb 6-1: SerialNumber: syz
[  419.434598][ T7057] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #15: comm syz.6.268: casefold flag without casefold feature
[  419.547141][ T7057] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.268: couldn't read orphan inode 15 (err -117)
[  419.661462][ T7057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.900919][    T9] usb 6-1: config 0 descriptor??
[  420.481800][ T6222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.791865][    T9] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71
[  420.800868][    T9] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71
[  420.935512][    T9] usb 6-1: USB disconnect, device number 2
[  422.465864][ T7087] loop6: detected capacity change from 0 to 1024
[  422.844076][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.851966][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.859988][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.867635][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.875660][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.883419][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.891296][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.899052][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.907065][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.914728][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.922591][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.930101][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.938111][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.947852][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.956154][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.964095][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.971827][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.979706][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.987566][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  422.995528][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.003423][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.010929][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.018887][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.026685][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.034531][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.042038][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.051737][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.059867][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.067723][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  423.075706][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  425.084579][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  425.094270][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  425.102012][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  425.110996][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  425.118915][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  425.126576][ T7087] hfsplus: request for non-existent node 16777216 in B*Tree
[  425.175906][   T30] audit: type=1800 audit(1745390381.198:9): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.277" name="file1" dev="loop6" ino=20 res=0 errno=0
[  426.044508][ T7087] syz.6.277 (7087) used greatest stack depth: 5208 bytes left
[  427.147863][ T7119] loop6: detected capacity change from 0 to 1024
[  427.266881][ T7119] EXT4-fs: Ignoring removed oldalloc option
[  427.274053][ T7119] EXT4-fs: Ignoring removed nomblk_io_submit option
[  427.281186][ T7119] ext2: Unknown parameter 'subj_role'
[  427.766969][ T7119] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns
[  429.180760][ T7127] loop0: detected capacity change from 0 to 512
[  429.393161][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  439.703549][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  439.725364][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  439.737130][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  439.764549][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  439.804144][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  439.980380][ T7150] loop6: detected capacity change from 0 to 1024
[  440.087182][ T7150] EXT4-fs: Ignoring removed nomblk_io_submit option
[  440.094312][ T7150] EXT4-fs: Ignoring removed nomblk_io_submit option
[  440.516928][ T7150] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.717578][ T7163] loop0: detected capacity change from 0 to 512
[  440.944009][ T7163] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.302: casefold flag without casefold feature
[  441.027322][ T7163] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.302: couldn't read orphan inode 15 (err -117)
[  441.049364][ T7163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.363950][ T6222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.485816][ T5785] Bluetooth: hci0: command 0x0c1a tx timeout
[  441.540110][ T7152] chnl_net:caif_netlink_parms(): no params data found
[  441.691523][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.884166][ T5781] Bluetooth: hci2: command tx timeout
[  442.729972][ T7187] batadv0: entered promiscuous mode
[  442.736011][ T7187] vlan2: entered promiscuous mode
[  443.963401][ T5781] Bluetooth: hci2: command tx timeout
[  444.253448][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.268047][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.276199][ T7152] bridge_slave_0: entered allmulticast mode
[  444.386089][ T7152] bridge_slave_0: entered promiscuous mode
[  444.480402][  T195] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.554551][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.562347][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.570547][ T7152] bridge_slave_1: entered allmulticast mode
[  444.580498][ T7152] bridge_slave_1: entered promiscuous mode
[  444.720666][  T195] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.228512][  T195] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.348040][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.480601][  T195] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.593941][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.048458][ T5781] Bluetooth: hci2: command tx timeout
[  446.075859][ T7152] team0: Port device team_slave_0 added
[  446.111293][ T7152] team0: Port device team_slave_1 added
[  446.748922][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.756611][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.783622][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.140227][  T195] bridge_slave_1: left allmulticast mode
[  447.146437][  T195] bridge_slave_1: left promiscuous mode
[  447.153317][  T195] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.251257][  T195] bridge_slave_0: left allmulticast mode
[  447.257488][  T195] bridge_slave_0: left promiscuous mode
[  447.264891][  T195] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.124938][ T5781] Bluetooth: hci2: command tx timeout
[  448.255870][  T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.333108][  T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.437598][  T195] bond0 (unregistering): Released all slaves
[  448.570990][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.578656][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.605324][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.324135][ T7268] xt_hashlimit: size too large, truncated to 1048576
[  449.648710][ T7275] xt_hashlimit: size too large, truncated to 1048576
[  449.673061][ T7152] hsr_slave_0: entered promiscuous mode
[  449.683627][ T7152] hsr_slave_1: entered promiscuous mode
[  449.818094][ T7152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  449.826191][ T7152] Cannot create hsr debugfs directory
[  449.867145][ T7279] 
: renamed from bond0 (while UP)
[  449.919182][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.929373][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.115452][  T195] hsr_slave_0: left promiscuous mode
[  450.149087][  T195] hsr_slave_1: left promiscuous mode
[  450.157768][  T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  450.165808][  T195] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.234023][  T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  450.241922][  T195] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.390561][  T195] veth1_macvtap: left promiscuous mode
[  450.398581][  T195] veth0_macvtap: left promiscuous mode
[  450.404911][  T195] veth1_vlan: left promiscuous mode
[  450.410534][  T195] veth0_vlan: left promiscuous mode
[  451.887164][  T195] team0 (unregistering): Port device team_slave_1 removed
[  452.014785][  T195] team0 (unregistering): Port device team_slave_0 removed
[  454.005119][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'.
[  454.071971][ T7312] vlan2: entered promiscuous mode
[  454.077501][ T7312] bridge0: entered promiscuous mode
[  454.143539][ T7152] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  454.211883][ T7152] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  454.314839][ T7152] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  454.385515][ T7152] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  454.848212][ T7318] loop0: detected capacity change from 0 to 512
[  455.010543][ T7318] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  455.230596][ T7318] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.355: invalid indirect mapped block 4294967295 (level 0)
[  455.292121][ T7318] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.355: invalid indirect mapped block 4294967295 (level 1)
[  455.427807][ T7318] EXT4-fs (loop0): 1 orphan inode deleted
[  455.435335][ T7318] EXT4-fs (loop0): 1 truncate cleaned up
[  455.444110][ T7318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.713770][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.892226][ T7152] 8021q: adding VLAN 0 to HW filter on device team0
[  456.000169][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.008076][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.142687][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.150585][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.268445][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.606679][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.359'.
[  458.407737][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.424921][ T7401] netlink: 244 bytes leftover after parsing attributes in process `syz.6.368'.
[  461.063579][ T7410] bridge0: port 3(erspan0) entered blocking state
[  461.070712][ T7410] bridge0: port 3(erspan0) entered disabled state
[  461.078174][ T7410] erspan0: entered allmulticast mode
[  461.087213][ T7410] erspan0: entered promiscuous mode
[  461.095248][ T7410] bridge0: port 3(erspan0) entered blocking state
[  461.102294][ T7410] bridge0: port 3(erspan0) entered forwarding state
[  461.210142][ T7410] erspan0: left allmulticast mode
[  461.216972][ T7410] erspan0: left promiscuous mode
[  461.223497][ T7410] bridge0: port 3(erspan0) entered disabled state
[  461.859004][ T7152] veth0_vlan: entered promiscuous mode
[  461.980174][ T7152] veth1_vlan: entered promiscuous mode
[  462.419916][ T7152] veth0_macvtap: entered promiscuous mode
[  462.526526][ T7152] veth1_macvtap: entered promiscuous mode
[  462.794196][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.805117][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.815454][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.826548][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.836783][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.848338][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.858779][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.869690][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.886703][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.470987][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.482004][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.494658][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.505671][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.516216][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.527198][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.537485][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.548900][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.565736][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.890464][ T7152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.900003][ T7152] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.910878][ T7152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.920177][ T7152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.800814][ T7460] loop6: detected capacity change from 0 to 256
[  465.024732][ T7460] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001)
[  465.034322][ T7460] FAT-fs (loop6): Filesystem has been set read-only
[  466.044439][ T7475] Unknown status report in ack skb
[  466.800055][ T7491] xt_hashlimit: size too large, truncated to 1048576
[  466.866744][ T7494] xt_hashlimit: size too large, truncated to 1048576
[  466.937721][ T7496] 
: renamed from bond0 (while UP)
[  467.202754][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.213092][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.025221][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.039070][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.443678][  T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.451938][  T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.826700][ T5876] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  472.967239][ T7580] loop0: detected capacity change from 0 to 8
[  473.053181][ T5876] usb 8-1: Using ep0 maxpacket: 8
[  473.086644][ T5876] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  473.095661][ T5876] usb 8-1: config 179 has no interface number 0
[  473.102238][ T5876] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  473.114288][ T5876] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  473.129172][ T5876] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  473.141541][ T5876] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  473.153441][ T5876] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  473.167583][ T5876] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  473.177165][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.207821][ T7580] unable to read inode lookup table
[  473.434781][ T7572] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  473.498544][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.6.414'.
[  474.098568][ T5876] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input7
[  474.276931][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.288176][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.763524][ T5833] usb 8-1: USB disconnect, device number 2
[  474.763556][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  474.763785][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  475.280157][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  475.287253][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  475.482251][ T7598] macvtap1: entered promiscuous mode
[  475.490922][ T7598] macvtap1: entered allmulticast mode
[  475.496907][ T7598] veth1_vlan: entered allmulticast mode
[  475.612755][ T7598] veth1_vlan: left allmulticast mode
[  477.865539][ T7636] xt_CT: You must specify a L4 protocol and not use inversions on it
[  479.215477][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'.
[  482.212754][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  482.222163][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  482.233597][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  482.243486][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  482.252946][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  482.262141][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  482.271504][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  482.280791][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  482.291228][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  483.904567][ T5876] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  484.105407][ T5876] usb 7-1: Using ep0 maxpacket: 32
[  484.441171][ T5876] usb 7-1: unable to get BOS descriptor or descriptor too short
[  484.564425][ T5876] usb 7-1: unable to read config index 0 descriptor/start: -71
[  484.572881][ T5876] usb 7-1: can't read configurations, error -71
[  484.885777][ T7746] loop0: detected capacity change from 0 to 128
[  484.906044][ T7742] SET target dimension over the limit!
[  484.982716][ T7746] EXT4-fs (loop0): Test dummy encryption mode enabled
[  485.037641][ T7746] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  485.053056][ T7746] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  485.626361][ T7746] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  485.639725][ T7750] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  485.746690][ T7751] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  488.777492][ T7778] __nla_validate_parse: 42 callbacks suppressed
[  488.777571][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  488.795672][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  488.805040][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  488.814485][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  488.823975][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  488.833289][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  488.843340][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  488.852837][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  488.862027][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  488.871438][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'.
[  489.989052][ T5876] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  490.193831][ T5876] usb 8-1: Using ep0 maxpacket: 32
[  490.256565][ T5876] usb 8-1: unable to get BOS descriptor or descriptor too short
[  490.305967][ T5876] usb 8-1: config 3 has an invalid interface number: 98 but max is 0
[  490.314694][ T5876] usb 8-1: config 3 has no interface number 0
[  490.329488][ T5876] usb 8-1: config 3 interface 98 altsetting 10 endpoint 0x2 has invalid maxpacket 9212, setting to 1024
[  490.341147][ T5876] usb 8-1: config 3 interface 98 has no altsetting 0
[  490.511160][ T5876] usb 8-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8
[  490.523467][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.533291][ T5876] usb 8-1: Product: syz
[  490.539974][ T5876] usb 8-1: Manufacturer: syz
[  490.545131][ T5876] usb 8-1: SerialNumber: syz
[  491.044745][ T5876] usb 8-1: USB disconnect, device number 3
[  492.307293][ T7832] xt_CT: You must specify a L4 protocol and not use inversions on it
[  497.403298][ T5833] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  497.593411][ T5833] usb 8-1: Using ep0 maxpacket: 32
[  497.639170][ T5833] usb 8-1: unable to get BOS descriptor or descriptor too short
[  497.782852][ T5833] usb 8-1: config 3 has an invalid interface number: 98 but max is 0
[  497.791279][ T5833] usb 8-1: config 3 has no interface number 0
[  497.799978][ T5833] usb 8-1: config 3 interface 98 altsetting 10 endpoint 0x2 has invalid maxpacket 9212, setting to 1024
[  497.812939][ T5833] usb 8-1: config 3 interface 98 has no altsetting 0
[  497.906384][ T5833] usb 8-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8
[  497.916110][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.924661][ T5833] usb 8-1: Product: syz
[  497.929119][ T5833] usb 8-1: Manufacturer: syz
[  497.934245][ T5833] usb 8-1: SerialNumber: syz
[  498.934408][ T5833] usb 8-1: USB disconnect, device number 4
[  503.003457][ T7937] =====================================================
[  503.010925][ T7937] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x38e/0xc50
[  503.021470][ T7937]  sctp_assoc_bh_rcv+0x38e/0xc50
[  503.027322][ T7937]  sctp_inq_push+0x2ef/0x380
[  503.032159][ T7937]  sctp_backlog_rcv+0x397/0xdb0
[  503.037489][ T7937]  sk_backlog_rcv+0x13b/0x420
[  503.042724][ T7937]  __release_sock+0x1da/0x330
[  503.047662][ T7937]  release_sock+0x6b/0x250
[  503.052347][ T7937]  sctp_wait_for_connect+0x487/0x820
[  503.058203][ T7937]  sctp_sendmsg_to_asoc+0x203a/0x2070
[  503.063995][ T7937]  sctp_sendmsg+0x32b9/0x4a90
[  503.068911][ T7937]  inet_sendmsg+0x25a/0x280
[  503.073896][ T7937]  __sock_sendmsg+0x267/0x380
[  503.078835][ T7937]  __sys_sendto+0x594/0x750
[  503.083791][ T7937]  __x64_sys_sendto+0x125/0x1d0
[  503.088863][ T7937]  x64_sys_call+0x37e7/0x3c80
[  503.094045][ T7937]  do_syscall_64+0xcd/0x1b0
[  503.098787][ T7937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.105133][ T7937] 
[  503.107598][ T7937] Uninit was created at:
[  503.112180][ T7937]  __kmalloc_node_track_caller_noprof+0x962/0x1260
[  503.119278][ T7937]  kmalloc_reserve+0x23e/0x4a0
[  503.126922][ T7937]  __alloc_skb+0x366/0x7b0
[  503.131625][ T7937]  sctp_packet_transmit+0x1811/0x4470
[  503.137798][ T7937]  sctp_outq_flush+0x1b2f/0x6590
[  503.143164][ T7937]  sctp_outq_uncork+0x9c/0xb0
[  503.148108][ T7937]  sctp_do_sm+0x8c5d/0x93e0
[  503.153077][ T7937]  sctp_assoc_bh_rcv+0x8fe/0xc50
[  503.158282][ T7937]  sctp_inq_push+0x2ef/0x380
[  503.163318][ T7937]  sctp_backlog_rcv+0x397/0xdb0
[  503.168419][ T7937]  sk_backlog_rcv+0x13b/0x420
[  503.174239][ T7937]  __release_sock+0x1da/0x330
[  503.179182][ T7937]  release_sock+0x6b/0x250
[  503.184128][ T7937]  sctp_wait_for_connect+0x487/0x820
[  503.189668][ T7937]  sctp_sendmsg_to_asoc+0x203a/0x2070
[  503.195481][ T7937]  sctp_sendmsg+0x32b9/0x4a90
[  503.200380][ T7937]  inet_sendmsg+0x25a/0x280
[  503.205435][ T7937]  __sock_sendmsg+0x267/0x380
[  503.210385][ T7937]  __sys_sendto+0x594/0x750
[  503.215342][ T7937]  __x64_sys_sendto+0x125/0x1d0
[  503.220430][ T7937]  x64_sys_call+0x37e7/0x3c80
[  503.227901][ T7937]  do_syscall_64+0xcd/0x1b0
[  503.233267][ T7937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.239412][ T7937] 
[  503.241908][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.0.529 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(undef) 
[  503.254510][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  503.265103][ T7937] =====================================================
[  503.272212][ T7937] Disabling lock debugging due to kernel taint
[  503.278835][ T7937] Kernel panic - not syncing: kmsan.panic set ...
[  503.285470][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.0.529 Tainted: G    B               6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(undef) 
[  503.299314][ T7937] Tainted: [B]=BAD_PAGE
[  503.303620][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  503.313994][ T7937] Call Trace:
[  503.317440][ T7937]  <TASK>
[  503.320524][ T7937]  dump_stack_lvl+0x216/0x2d0
[  503.325469][ T7937]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  503.331552][ T7937]  dump_stack+0x1e/0x24
[  503.335978][ T7937]  panic+0x4e5/0xcf0
[  503.340131][ T7937]  ? __pfx_kmsan_save_stack_with_flags+0x10/0x10
[  503.346781][ T7937]  kmsan_report+0x2ca/0x2d0
[  503.351531][ T7937]  ? sk_backlog_rcv+0x13b/0x420
[  503.356680][ T7937]  ? __sock_sendmsg+0x267/0x380
[  503.361829][ T7937]  ? do_one_initcall+0x486/0xbf0
[  503.367057][ T7937]  ? do_syscall_64+0xcd/0x1b0
[  503.371972][ T7937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.378312][ T7937]  ? __msan_warning+0x95/0x120
[  503.383368][ T7937]  ? sctp_assoc_bh_rcv+0x38e/0xc50
[  503.388773][ T7937]  ? sctp_inq_push+0x2ef/0x380
[  503.393794][ T7937]  ? sctp_backlog_rcv+0x397/0xdb0
[  503.399068][ T7937]  ? sk_backlog_rcv+0x13b/0x420
[  503.404204][ T7937]  ? __release_sock+0x1da/0x330
[  503.409310][ T7937]  ? release_sock+0x6b/0x250
[  503.414169][ T7937]  ? sctp_wait_for_connect+0x487/0x820
[  503.419893][ T7937]  ? sctp_sendmsg_to_asoc+0x203a/0x2070
[  503.425697][ T7937]  ? sctp_sendmsg+0x32b9/0x4a90
[  503.430794][ T7937]  ? inet_sendmsg+0x25a/0x280
[  503.435767][ T7937]  ? __sock_sendmsg+0x267/0x380
[  503.440919][ T7937]  ? __sys_sendto+0x594/0x750
[  503.445858][ T7937]  ? __x64_sys_sendto+0x125/0x1d0
[  503.451102][ T7937]  ? x64_sys_call+0x37e7/0x3c80
[  503.456235][ T7937]  ? do_syscall_64+0xcd/0x1b0
[  503.461155][ T7937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.467488][ T7937]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  503.473537][ T7937]  ? kmsan_get_metadata+0x13e/0x1c0
[  503.478973][ T7937]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  503.485047][ T7937]  ? kmsan_get_metadata+0x13e/0x1c0
[  503.490490][ T7937]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  503.496556][ T7937]  ? sctp_inq_pop+0x14b1/0x1930
[  503.501668][ T7937]  ? kmsan_get_metadata+0x13e/0x1c0
[  503.507107][ T7937]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  503.513173][ T7937]  __msan_warning+0x95/0x120
[  503.518054][ T7937]  sctp_assoc_bh_rcv+0x38e/0xc50
[  503.523306][ T7937]  ? __pfx_sctp_assoc_bh_rcv+0x10/0x10
[  503.529029][ T7937]  sctp_inq_push+0x2ef/0x380
[  503.533898][ T7937]  sctp_backlog_rcv+0x397/0xdb0
[  503.539017][ T7937]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[  503.544628][ T7937]  ? __pfx_tcp_v4_do_rcv+0x10/0x10
[  503.550005][ T7937]  sk_backlog_rcv+0x13b/0x420
[  503.554988][ T7937]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  503.561057][ T7937]  __release_sock+0x1da/0x330
[  503.566028][ T7937]  release_sock+0x6b/0x250
[  503.570745][ T7937]  sctp_wait_for_connect+0x487/0x820
[  503.576304][ T7937]  ? __pfx_autoremove_wake_function+0x10/0x10
[  503.582750][ T7937]  sctp_sendmsg_to_asoc+0x203a/0x2070
[  503.588372][ T7937]  ? kmsan_get_metadata+0x13e/0x1c0
[  503.593807][ T7937]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  503.599880][ T7937]  ? sctp_connect_new_asoc+0x72f/0xb30
[  503.605636][ T7937]  sctp_sendmsg+0x32b9/0x4a90
[  503.610566][ T7937]  ? kmsan_get_metadata+0x13e/0x1c0
[  503.616084][ T7937]  ? __pfx_udp_sendmsg+0x10/0x10
[  503.621276][ T7937]  ? __pfx_sctp_sendmsg+0x10/0x10
[  503.626546][ T7937]  inet_sendmsg+0x25a/0x280
[  503.631356][ T7937]  ? __pfx_inet_sendmsg+0x10/0x10
[  503.636710][ T7937]  __sock_sendmsg+0x267/0x380
[  503.641668][ T7937]  __sys_sendto+0x594/0x750
[  503.646390][ T7937]  ? do_futex+0x343/0x4a0
[  503.650979][ T7937]  ? kmsan_get_metadata+0x13e/0x1c0
[  503.656413][ T7937]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  503.662520][ T7937]  __x64_sys_sendto+0x125/0x1d0
[  503.667642][ T7937]  x64_sys_call+0x37e7/0x3c80
[  503.672615][ T7937]  do_syscall_64+0xcd/0x1b0
[  503.677370][ T7937]  ? clear_bhb_loop+0x25/0x80
[  503.682304][ T7937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.688466][ T7937] RIP: 0033:0x7ff57438e169
[  503.693062][ T7937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  503.712923][ T7937] RSP: 002b:00007ff575181038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  503.721581][ T7937] RAX: ffffffffffffffda RBX: 00007ff5745b5fa0 RCX: 00007ff57438e169
[  503.729745][ T7937] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000003
[  503.737896][ T7937] RBP: 00007ff574410a68 R08: 000020000005ffe4 R09: 000000000000001c
[  503.746036][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  503.754164][ T7937] R13: 0000000000000000 R14: 00007ff5745b5fa0 R15: 00007ffd98f75838
[  503.762336][ T7937]  </TASK>
[  503.765819][ T7937] Kernel Offset: disabled
[  503.770255][ T7937] Rebooting in 86400 seconds..