last executing test programs:

1m50.561290596s ago: executing program 5 (id=3361):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x29, 0x60400, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
statx(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
sync()
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r7=>0x0})
bind$packet(r3, &(0x7f0000000900)={0x11, 0x9, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmmsg$sock(r3, &(0x7f0000001080)=[{{&(0x7f0000000200)=@xdp={0x2c, 0xe, r7, 0x24}, 0x80, 0x0}}], 0x1, 0x4)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

1m49.749880201s ago: executing program 5 (id=3371):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$nci(r1, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0)

1m48.699526312s ago: executing program 5 (id=3380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000400000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d40)={{r0}, &(0x7f0000001cc0), &(0x7f0000001d00)='%-5lx  \x00'}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc)

1m48.478247986s ago: executing program 5 (id=3383):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4c4, &(0x7f0000003700)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount(0x0, &(0x7f0000000500)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

1m48.23102102s ago: executing program 5 (id=3386):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r0, &(0x7f00000001c0)=[{0x0}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

1m48.001707601s ago: executing program 5 (id=3387):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000014001f000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r6, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)

1m47.577026769s ago: executing program 32 (id=3387):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000014001f000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r6, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)

56.642232562s ago: executing program 0 (id=3724):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058"], 0xf8}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[], 0x40}}, 0x0)

56.441864802s ago: executing program 0 (id=3727):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r0, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

56.243361762s ago: executing program 0 (id=3728):
r0 = getuid()
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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")
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x47)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_setup(0x5ff, &(0x7f0000000040)=<r3=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x3)
unlink(&(0x7f0000000000)='./file1\x00')
set_robust_list(&(0x7f0000000440)={0x0, 0x8000000000000000}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r5}, 0x10)
mq_unlink(0x0)
io_submit(r3, 0x1a, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r2, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}])

55.231737353s ago: executing program 0 (id=3736):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

46.964655627s ago: executing program 6 (id=3792):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x29, 0x60400, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4, 0x0, 0x3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
statx(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
sync()
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r7=>0x0})
bind$packet(r3, &(0x7f0000000900)={0x11, 0x9, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmmsg$sock(r3, &(0x7f0000001080)=[{{&(0x7f0000000200)=@xdp={0x2c, 0xe, r7, 0x24}, 0x80, 0x0}}], 0x1, 0x4)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

46.35356575s ago: executing program 6 (id=3798):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x2020084c, &(0x7f0000000500)=ANY=[], 0x1, 0x1525, &(0x7f0000004380)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TIOCGDEV(r0, 0x80045432, 0x0)
syz_clone(0x4100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

45.683261545s ago: executing program 6 (id=3808):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, @loopback, 0x1, 0x0, 0x0, 0x100, 0x4, 0x84e0009a})

45.363701943s ago: executing program 6 (id=3809):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x14812, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=iso8859-%,utf8=1,shortname=lower,uni_xlate=1,shortname=win95,iocharset=cp775,uni_xlate=1,rodir,utf8=1,uni_xlate=0,tz=UTC,rodir,uni_xlate=0,utf8=0,codepage=1255,nonumtail=0,\x00'], 0x25, 0x2a1, &(0x7f0000002300)="$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")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000800)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140))
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x7, 0x1)

44.941725004s ago: executing program 6 (id=3813):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./control\x00', 0x10, &(0x7f0000000240)={[{@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noinit_itable}, {@quota}, {@usrquota}, {@orlov}, {@noauto_da_alloc}, {@norecovery}, {@dioread_nolock}]}, 0xfe, 0x256, &(0x7f00000008c0)="$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")
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500030001000000968a04f3a2afc81289f6ad4b14f9af4293d60c7fc8a2d670d85024e483545f98e8e4f0e542c08fdf022b597faf3abbeef15053fc2447a990fcfd613c478a9d271ec2dd5b4863df546be2fe7b772a28c1cacd60ee9221d7d91fbd56f13780a334884156e31a8ea3311c"], 0x28}}, 0x80)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

43.413408807s ago: executing program 6 (id=3826):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sched_getaffinity(0x0, 0x8, &(0x7f0000000080))
openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00')
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])

42.321237813s ago: executing program 33 (id=3826):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sched_getaffinity(0x0, 0x8, &(0x7f0000000080))
openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00')
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])

31.843636683s ago: executing program 0 (id=3736):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

17.457375951s ago: executing program 4 (id=4010):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="0c0000000000000000000000000000009500150000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000000007ff}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x17, 0x89, 0x4000069}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffbfffd}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)

17.296077176s ago: executing program 4 (id=4011):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
close(r0)

16.574583619s ago: executing program 4 (id=4014):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0)

16.318424303s ago: executing program 4 (id=4016):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0\x00', 0x14812, &(0x7f00000000c0)=ANY=[@ANYBLOB='iocharset=iso8859-%,utf8=1,shortname=lower,uni_xlate=1,shortname=win95,iocharset=cp775,uni_xlate=1,rodir,utf8=1,uni_xlate=0,tz=UTC,rodir,uni_xlate=0,utf8=0,codepage=1255,nonumtail=0,\x00'], 0x25, 0x2a1, &(0x7f0000002300)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140))
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

15.971658601s ago: executing program 4 (id=4020):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O")
chown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)

15.740877168s ago: executing program 4 (id=4023):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="e14713dc0300831d0000000000804f24eea143b69b9a52fd724f3dd7ae430e618246e6096a4f452006ef37e14d85cfc25d066454a30433536bacdc1e926253fdcdeffcbb7a29870cb028b796760dcdbe5ac26ae861e8145a8106a414270b9470999c68dd73ac4d23fffcc8ad8e10b8766dff481689c602d4c6b019d7c4fad7d3141689986421fcc5cf51e6c00a7995bc53c8e8ca5445290dfcc02c34", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001865000001000000000000003db30b040b64feff1000000018280000", @ANYRES32, @ANYBLOB="000000000400000085100000f9ffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xb, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socket$inet_icmp(0x2, 0x2, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.40422913s ago: executing program 0 (id=3736):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

2.370242768s ago: executing program 7 (id=4101):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)

2.112974276s ago: executing program 1 (id=4103):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000980)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c64697363176172642c004f540eb0db715a531bba6d0525efa2952da3b1744db87dad0426609f7d2b2af42f976c350d05fbb8913c55d9ce5c01c87f91fc4757458b00741ef94c7e16a05b862460d496f02de949ddf0a7d5d705c6e4b7636675c43965ef11b675f81424372edad7e9919fe1d55f8125afc33dc04de294130a96a84061cb10e993e2055a3e01c4a2cd4e5f9aaa5b670ea3da68afe40ae97e6964c5e0b05a8511de116b0b31b5017f20841e06934db9fc94bbc39ec72282991df5ff578f6203d7aaeda1726c655170ed7af77ab00f16d7a6c8619bee97db468606de5d6e32fafa7c3b7461c76d102442d733c18d5346e3bf", @ANYBLOB="ed1b0a155a4ec841b6f9d2c9c857e7e66027c753271f1f05b76921ee96a20520162e4340380e2552c13060411b8bb682500020e334059d54d985b3b8cdd9a525df41d3c0e68ff4ca9e6407562545fae36cd83d85d60f39", @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="0002010000000000000030303030303030303030303030303030303135322c796f236884c178f94be4ee34617273657439697300926f38", @ANYBLOB="65060c4f1adb6e795b70e7edcdc5cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0effc0f0000ef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd31bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRES64, @ANYRESDEC], 0x81, 0x152d, &(0x7f00000041c0)="$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")
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000))

2.036004952s ago: executing program 7 (id=4104):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0)

1.849864782s ago: executing program 1 (id=4106):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x10000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

1.803407199s ago: executing program 7 (id=4107):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x200000000000003, {0x0, 0xf0, 0x1}, {0x2, 0x1}, 0x1, 0x1}, {0x6, 0x3, {0x2, 0xf0, 0x2}, {0x1, 0x1, 0x1}, 0x2, 0x1}, {0x0, 0x1, {0x1, 0xf0}, {0x0, 0x1, 0x2}, 0x1, 0x2}], 0x60)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b66e92c9626ce7", 0xf}], 0x1}, 0x48005)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2, 0x4}, {0x0, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840)

1.632654289s ago: executing program 1 (id=4108):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

1.559116379s ago: executing program 2 (id=4110):
r0 = semget$private(0x0, 0x4000000009, 0x208)
semop(r0, &(0x7f00000000c0)=[{0x1, 0x8698, 0x1800}], 0x1)

1.34746233s ago: executing program 2 (id=4111):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x86f04a359639778f}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6000, 0x8, 0x9}, {0x1, 0x2, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x54}}, 0x20040054)

1.136299721s ago: executing program 3 (id=4113):
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x6, 0x80, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20)

1.135592048s ago: executing program 2 (id=4114):
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet_udp(0x2, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=r1, @ANYRES32], 0x20)

1.023677671s ago: executing program 3 (id=4115):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
chown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)

938.731098ms ago: executing program 2 (id=4116):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x2, &(0x7f0000002400))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth1_to_batadv\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_open_dev$sg(0x0, 0x0, 0x8002)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001400020525bd7000fbdbdf25020151fd", @ANYRES32=r1, @ANYBLOB="08000800020000000008008100000029000100ac1e00011400060000000000470a000300000008000a000300000014000600f00000000500000003000000ee00000008000400ffffffff00"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x48800)

751.806994ms ago: executing program 3 (id=4117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc)

647.776046ms ago: executing program 7 (id=4118):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40085}, 0x0)

617.552755ms ago: executing program 2 (id=4119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2c, 0x0, {0x0, 0x0, 0x74, r2, {0x2, 0x4}, {0xa, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40804}, 0x0)

571.133357ms ago: executing program 1 (id=4120):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0xe8}}, 0x0)

417.509962ms ago: executing program 3 (id=4121):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

416.810156ms ago: executing program 7 (id=4122):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x11, 0x2, @broadcast}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)

331.509358ms ago: executing program 3 (id=4123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '+f'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)

180.424571ms ago: executing program 1 (id=4124):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x80, 0x0}, 0x8054)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x68, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

166.071574ms ago: executing program 3 (id=4125):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

78.993162ms ago: executing program 2 (id=4126):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x86f04a359639778f}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6000, 0x8, 0x9}, {0x1, 0x2, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x54}}, 0x20040054)

23.629663ms ago: executing program 1 (id=4127):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x29, 0x60400, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
statx(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
sync()
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r7=>0x0})
bind$packet(r3, &(0x7f0000000900)={0x11, 0x9, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmmsg$sock(r3, &(0x7f0000001080)=[{{&(0x7f0000000200)=@xdp={0x2c, 0xe, r7, 0x24}, 0x80, 0x0}}], 0x1, 0x4)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

0s ago: executing program 7 (id=4128):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESHEX], 0x1, 0x677, &(0x7f0000000640)="$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")
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[])
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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")
creat(0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
prctl$PR_SET_TSC(0x1a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)

kernel console output (not intermixed with test programs):

[  442.448364][T15062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3560'.
[  442.458256][T14934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.491681][T15058] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  442.553281][T15058] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  442.677586][T14934] hsr_slave_0: entered promiscuous mode
[  442.702648][T14934] hsr_slave_1: entered promiscuous mode
[  442.748092][T14934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  442.778885][T14934] Cannot create hsr debugfs directory
[  442.964515][T15077] loop0: detected capacity change from 0 to 512
[  442.999542][T15077] EXT4-fs: Ignoring removed mblk_io_submit option
[  443.151109][T15077] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3566: corrupted in-inode xattr: invalid ea_ino
[  443.168694][T14573] Bluetooth: hci1: command tx timeout
[  443.214092][T15077] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3566: couldn't read orphan inode 15 (err -117)
[  443.270471][T15077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.372495][T14934] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.406074][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.455273][T14934] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.539242][T14934] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.611611][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3575'.
[  443.650462][T15104] bridge0: port 3(batadv4) entered blocking state
[  443.657379][T15104] bridge0: port 3(batadv4) entered disabled state
[  443.674694][T15104] batadv4: entered allmulticast mode
[  443.682723][T15104] batadv4: entered promiscuous mode
[  443.695515][T14934] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.775216][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3577'.
[  444.098008][T14934] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  444.134631][T14934] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  444.219706][T14934] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  444.238707][   T35] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled
[  444.248788][   T35] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled
[  444.259591][   T29] kauditd_printk_skb: 54 callbacks suppressed
[  444.259640][   T29] audit: type=1326 audit(1738761401.809:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.300899][T14934] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  444.319974][   T29] audit: type=1326 audit(1738761401.847:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.396754][   T29] audit: type=1326 audit(1738761401.847:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.480643][   T29] audit: type=1326 audit(1738761401.847:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.555801][   T29] audit: type=1326 audit(1738761401.856:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.583264][T14934] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.649332][T14934] 8021q: adding VLAN 0 to HW filter on device team0
[  444.656098][   T29] audit: type=1326 audit(1738761401.856:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.687943][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.695155][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.728222][   T29] audit: type=1326 audit(1738761401.856:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.734430][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.757070][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.777368][   T29] audit: type=1326 audit(1738761401.856:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.804493][T15138] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  444.807751][   T29] audit: type=1326 audit(1738761401.856:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.813416][T15141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3590'.
[  444.921286][   T29] audit: type=1326 audit(1738761401.856:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.1.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43af38cde9 code=0x7ffc0000
[  444.929200][T14934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  445.372465][T14573] Bluetooth: hci1: command tx timeout
[  447.650264][T14934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.775289][T15177] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3601'.
[  447.971423][T14934] veth0_vlan: entered promiscuous mode
[  448.003270][T14934] veth1_vlan: entered promiscuous mode
[  448.078146][T14934] veth0_macvtap: entered promiscuous mode
[  448.133051][T14934] veth1_macvtap: entered promiscuous mode
[  448.198143][T15187] netlink: '+}[p³': attribute type 1 has an invalid length.
[  448.214965][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.241696][T15194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3608'.
[  448.262404][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.284463][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.311651][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.336833][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.365501][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.389877][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.421068][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.458213][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.470233][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.483587][T14934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  448.539087][T15187] 8021q: adding VLAN 0 to HW filter on device bond3
[  448.571606][T15195] 8021q: adding VLAN 0 to HW filter on device batadv1
[  448.590231][T15195] bond3: (slave batadv1): making interface the new active one
[  448.624905][T15195] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  448.665152][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.679959][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.690088][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.703487][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.714128][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.728714][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.738855][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.749704][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.760268][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.806047][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.832794][T14934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  448.858067][T15205] IPv6: Can't replace route, no match found
[  448.932889][T14934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.998690][T14934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.030117][T14934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.071312][T14934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.225155][T15225] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  449.345872][T15229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3622'.
[  449.639869][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.676000][   T29] kauditd_printk_skb: 104 callbacks suppressed
[  449.676022][   T29] audit: type=1326 audit(1738761406.879:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  449.759373][   T29] audit: type=1326 audit(1738761406.898:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  449.800705][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.854852][   T29] audit: type=1326 audit(1738761406.898:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  449.913386][T15240] netlink: '+}[p³': attribute type 1 has an invalid length.
[  449.927671][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.930564][   T29] audit: type=1326 audit(1738761406.907:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  449.946219][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.047437][T15240] 8021q: adding VLAN 0 to HW filter on device bond2
[  450.054830][   T29] audit: type=1326 audit(1738761406.907:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  450.078768][   T29] audit: type=1326 audit(1738761406.907:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  450.110184][T15245] 8021q: adding VLAN 0 to HW filter on device batadv1
[  450.122577][   T29] audit: type=1326 audit(1738761406.907:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  450.174332][T15245] bond2: (slave batadv1): making interface the new active one
[  450.176269][   T29] audit: type=1326 audit(1738761406.907:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  450.205665][   T29] audit: type=1326 audit(1738761406.907:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  450.229912][T15245] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  450.230083][   T29] audit: type=1326 audit(1738761406.907:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  450.269496][T15254] lo speed is unknown, defaulting to 1000
[  450.278975][T15254] lo speed is unknown, defaulting to 1000
[  450.304638][T15254] lo speed is unknown, defaulting to 1000
[  450.962629][T15254] infiniband s
z1: set active
[  450.967749][ T7797] lo speed is unknown, defaulting to 1000
[  450.988900][T15254] infiniband s
z1: added lo
[  451.179978][    T9] IPVS: starting estimator thread 0...
[  451.280562][T15268] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  452.222414][T15254] RDS/IB: s
z1: added
[  452.421538][T15254] smc: adding ib device s
z1 with port count 1
[  452.427838][T15254] smc:    ib device s
z1 port 1 has pnetid 
[  452.444909][T15273] IPVS: using max 20 ests per chain, 48000 per kthread
[  452.513602][T15254] lo speed is unknown, defaulting to 1000
[  452.603072][ T5899] lo speed is unknown, defaulting to 1000
[  452.877438][T14502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  452.893702][T14502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  452.901448][T14502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  452.914254][T14502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  452.927198][T14502] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  452.939276][T14502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  453.469157][T15254] lo speed is unknown, defaulting to 1000
[  453.705487][T15291] lo speed is unknown, defaulting to 1000
[  455.292038][T14502] Bluetooth: hci5: command tx timeout
[  455.309942][T15254] lo speed is unknown, defaulting to 1000
[  455.756538][   T62] bridge_slave_1: left allmulticast mode
[  455.791822][   T62] bridge_slave_1: left promiscuous mode
[  455.798567][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.843520][   T29] kauditd_printk_skb: 219 callbacks suppressed
[  455.843542][   T29] audit: type=1326 audit(1738761412.651:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  455.928363][   T62] bridge_slave_0: left allmulticast mode
[  455.936050][   T62] bridge_slave_0: left promiscuous mode
[  455.943203][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.951040][   T29] audit: type=1326 audit(1738761412.679:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  455.983937][   T29] audit: type=1326 audit(1738761412.679:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  456.020374][   T29] audit: type=1326 audit(1738761412.679:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  456.115668][   T29] audit: type=1326 audit(1738761412.679:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  456.169764][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3657'.
[  456.181607][   T29] audit: type=1326 audit(1738761412.679:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  456.211414][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3657'.
[  456.220207][   T29] audit: type=1326 audit(1738761412.688:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  456.280816][   T29] audit: type=1326 audit(1738761412.688:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  456.306880][   T29] audit: type=1326 audit(1738761412.688:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  456.330879][   T29] audit: type=1326 audit(1738761412.688:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  456.918546][   T62] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.930300][   T62] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.940772][   T62] 
 (unregistering): Released all slaves
[  457.145903][   T62] bond1 (unregistering): Released all slaves
[  457.254157][   T62] bond2 (unregistering): Released all slaves
[  457.366881][   T62] bond0 (unregistering): (slave batadv1): Releasing active interface
[  457.377944][   T62] bond0 (unregistering): Released all slaves
[  457.488166][   T62] bond3 (unregistering): Released all slaves
[  457.499718][T14502] Bluetooth: hci5: command tx timeout
[  457.610853][   T62] bond4 (unregistering): Released all slaves
[  457.734171][   T62] bond5 (unregistering): Released all slaves
[  457.867398][   T62] bond6 (unregistering): Released all slaves
[  457.880643][T15291] lo speed is unknown, defaulting to 1000
[  458.122834][T15254] lo speed is unknown, defaulting to 1000
[  459.110404][T15346] wireguard0: entered promiscuous mode
[  459.116070][T15346] wireguard0: entered allmulticast mode
[  459.400021][T15254] lo speed is unknown, defaulting to 1000
[  459.442585][T15291] chnl_net:caif_netlink_parms(): no params data found
[  459.619725][T15356] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  459.725218][T14502] Bluetooth: hci5: command tx timeout
[  459.737013][T15291] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.748776][T15291] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.768929][T15291] bridge_slave_0: entered allmulticast mode
[  459.784297][T15291] bridge_slave_0: entered promiscuous mode
[  459.800202][T15254] lo speed is unknown, defaulting to 1000
[  459.802248][T15291] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.823268][T15291] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.838192][T15291] bridge_slave_1: entered allmulticast mode
[  459.855338][T15291] bridge_slave_1: entered promiscuous mode
[  459.958738][T15291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.986145][T15291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.130645][T15254] lo speed is unknown, defaulting to 1000
[  460.134652][T15291] team0: Port device team_slave_0 added
[  460.154407][T15291] team0: Port device team_slave_1 added
[  460.175057][T15365] loop3: detected capacity change from 0 to 512
[  460.191862][T15365] EXT4-fs: Ignoring removed mblk_io_submit option
[  460.221978][T15365] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3669: corrupted in-inode xattr: invalid ea_ino
[  460.250508][T15365] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3669: couldn't read orphan inode 15 (err -117)
[  460.273325][T15291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.280813][T15365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.300922][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.420628][T15291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.432282][T15254] lo speed is unknown, defaulting to 1000
[  460.440530][T15291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.449885][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.508548][T14498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.509111][T15291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.564408][T15369] tipc: Started in network mode
[  460.588938][T15369] tipc: Node identity 7, cluster identity 4711
[  460.595336][T15369] tipc: Node number set to 7
[  460.742684][T15324] siw: device registration error -23
[  460.803376][T15291] hsr_slave_0: entered promiscuous mode
[  460.831430][T15291] hsr_slave_1: entered promiscuous mode
[  460.846571][T15291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  460.884339][T15291] Cannot create hsr debugfs directory
[  460.900974][T15378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3674'.
[  460.920927][T15378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3674'.
[  461.484845][T15389] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.508604][   T29] kauditd_printk_skb: 35 callbacks suppressed
[  461.508626][   T29] audit: type=1326 audit(1738761417.936:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15355 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  461.648759][   T29] audit: type=1326 audit(1738761417.945:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15355 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  461.708057][T15394] loop3: detected capacity change from 0 to 32768
[  461.744729][T15394] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  461.759877][T15390] loop2: detected capacity change from 0 to 764
[  461.783909][T15394] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  461.906323][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3680'.
[  461.950366][T14502] Bluetooth: hci5: command tx timeout
[  462.095792][T14498] ocfs2: Unmounting device (7,3) on (node local)
[  462.209007][T15389] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.534979][ T5900] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  462.575320][T15389] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.610125][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3681'.
[  462.705005][T15414] netlink: '+}[p³': attribute type 1 has an invalid length.
[  462.754917][ T5900] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  462.769768][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.830941][ T5900] usb 1-1: config 0 descriptor??
[  462.838848][T15412] bond0: (slave bond_slave_1): Releasing backup interface
[  463.014645][T15389] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.197693][   T62] hsr_slave_0: left promiscuous mode
[  463.220559][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  463.228201][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  463.241848][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  463.249974][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  463.290186][   T62] veth1_macvtap: left promiscuous mode
[  463.299994][ T5900] ath6kl: Failed to read usb control message: -71
[  463.307903][ T5900] ath6kl: Unable to read the bmi data from the device: -71
[  463.315582][   T62] veth0_macvtap: left promiscuous mode
[  463.321518][ T5900] ath6kl: Unable to recv target info: -71
[  463.327621][   T62] veth1_vlan: left promiscuous mode
[  463.335919][   T62] veth0_vlan: left promiscuous mode
[  463.358708][ T5900] ath6kl: Failed to init ath6kl core: -71
[  463.367401][ T5900] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  463.386274][ T5900] usb 1-1: USB disconnect, device number 2
[  463.591587][   T62] pim6reg (unregistering): left allmulticast mode
[  464.212070][T15435] loop0: detected capacity change from 0 to 1024
[  464.222951][T15435] EXT4-fs: Ignoring removed nobh option
[  464.232252][   T62] team0 (unregistering): Port device team_slave_1 removed
[  464.281692][T15435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  464.297149][   T62] team0 (unregistering): Port device team_slave_0 removed
[  464.369135][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.035033][T15423] bond0: entered promiscuous mode
[  465.043059][T15423] bond_slave_0: entered promiscuous mode
[  465.103474][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'.
[  465.191908][T15389] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.227873][T15389] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.284406][T15389] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.377216][T15454] netlink: '+}[p³': attribute type 1 has an invalid length.
[  465.384474][T15389] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.549602][T15454] 8021q: adding VLAN 0 to HW filter on device bond5
[  465.599628][T15291] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  465.656039][T15460] 8021q: adding VLAN 0 to HW filter on device batadv5
[  465.664901][T15469] 9pnet_fd: Insufficient options for proto=fd
[  465.674982][ T5900] IPVS: starting estimator thread 0...
[  465.681994][T15463] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  465.702954][T15460] bond5: (slave batadv5): making interface the new active one
[  465.723918][T15460] bond5: (slave batadv5): Enslaving as an active interface with an up link
[  465.733452][T15291] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  465.789385][T15291] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  465.796527][T15471] IPVS: using max 20 ests per chain, 48000 per kthread
[  465.871413][T15291] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  466.329180][T15291] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.433457][   T62] IPVS: stop unused estimator thread 0...
[  466.446797][T15291] 8021q: adding VLAN 0 to HW filter on device team0
[  466.480843][   T29] audit: type=1326 audit(1738761422.594:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  466.497546][T15491] netlink: 'syz.6.3713': attribute type 3 has an invalid length.
[  466.541328][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.542239][   T29] audit: type=1326 audit(1738761422.594:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  466.548571][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.583489][T15494] siw: device registration error -23
[  466.599905][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.607142][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  466.654067][ T3489] bridge_slave_1: left allmulticast mode
[  466.660088][ T3489] bridge_slave_1: left promiscuous mode
[  466.660162][   T29] audit: type=1326 audit(1738761422.594:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  466.681019][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.727365][ T3489] bridge_slave_0: left allmulticast mode
[  466.734293][ T3489] bridge_slave_0: left promiscuous mode
[  466.745950][   T29] audit: type=1326 audit(1738761422.594:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  466.747486][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.791018][T15498] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3716'.
[  466.838610][   T29] audit: type=1326 audit(1738761422.594:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  466.950385][   T29] audit: type=1326 audit(1738761422.594:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.025439][   T29] audit: type=1326 audit(1738761422.594:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.089488][   T29] audit: type=1326 audit(1738761422.594:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.132243][   T29] audit: type=1326 audit(1738761422.594:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.155763][   T29] audit: type=1326 audit(1738761422.594:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.204180][T15510] 9pnet_fd: Insufficient options for proto=fd
[  467.249666][   T29] audit: type=1326 audit(1738761422.594:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.327874][   T29] audit: type=1326 audit(1738761422.594:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.448509][   T29] audit: type=1326 audit(1738761422.594:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.545716][T15520] loop3: detected capacity change from 0 to 512
[  467.552572][   T29] audit: type=1326 audit(1738761422.594:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.582635][T15520] EXT4-fs: Ignoring removed mblk_io_submit option
[  467.611984][   T29] audit: type=1326 audit(1738761422.837:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15489 comm="syz.4.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  467.648819][T15520] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3725: corrupted in-inode xattr: invalid ea_ino
[  467.735061][T15520] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3725: couldn't read orphan inode 15 (err -117)
[  467.771315][T15520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.897452][T14498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.185595][ T3489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.197530][ T3489] bond0 (unregistering): Released all slaves
[  468.385829][ T3489] bond1 (unregistering): Released all slaves
[  468.632887][ T3489] bond2 (unregistering): (slave batadv1): Releasing active interface
[  468.643304][ T3489] bond2 (unregistering): Released all slaves
[  468.643958][T15544] loop3: detected capacity change from 0 to 512
[  468.680096][T15544] EXT4-fs: Ignoring removed nomblk_io_submit option
[  468.701798][T15544] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3735: corrupted in-inode xattr: invalid ea_ino
[  468.742113][T15544] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3735: couldn't read orphan inode 15 (err -117)
[  468.790987][T15544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.814669][T15291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  468.860069][T15291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  468.904150][ T3489] tipc: Left network mode
[  469.164583][T14498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.183602][T15291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.344031][T15557] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  469.381436][T15561] loop3: detected capacity change from 0 to 256
[  469.399657][T15291] veth0_vlan: entered promiscuous mode
[  469.450834][T15561] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  469.477216][T15291] veth1_vlan: entered promiscuous mode
[  469.615210][T15564] netlink: '+}[p³': attribute type 1 has an invalid length.
[  469.627640][T15291] veth0_macvtap: entered promiscuous mode
[  469.679041][T15291] veth1_macvtap: entered promiscuous mode
[  469.836606][T15564] 8021q: adding VLAN 0 to HW filter on device bond1
[  469.904824][T15567] 8021q: adding VLAN 0 to HW filter on device batadv1
[  469.978277][T15567] bond1: (slave batadv1): making interface the new active one
[  470.013105][T15567] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  470.065249][T15580] siw: device registration error -23
[  470.210743][ T3489] hsr_slave_0: left promiscuous mode
[  470.289095][T14573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  470.316502][T14573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  470.339529][T14573] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  470.380504][T14573] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  470.395553][T14573] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  470.403025][T14573] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  471.169200][T15617] netlink: '+}[p³': attribute type 1 has an invalid length.
[  471.254393][T15619] siw: device registration error -23
[  471.288231][T15623] netlink: 'syz.4.3764': attribute type 1 has an invalid length.
[  471.311887][T15623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3764'.
[  471.372827][T15625] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3765'.
[  471.900196][ T3489] team0 (unregistering): Port device team_slave_1 removed
[  471.975531][ T3489] team0 (unregistering): Port device team_slave_0 removed
[  472.552265][T14502] Bluetooth: hci2: command tx timeout
[  473.238352][T15617] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  473.348267][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.455473][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.487757][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.522467][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.558249][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.596203][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.631561][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.652072][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.662252][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.678321][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.705699][T15291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.736629][T15586] lo speed is unknown, defaulting to 1000
[  473.761279][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  473.802535][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.831174][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  473.865635][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.887285][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  473.910672][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.949441][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  473.971150][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.992853][T15291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.025330][T15291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.048224][T15291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  474.181915][T15291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.202047][T15291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  474.240855][T15291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.249614][T15291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.289638][T15586] lo speed is unknown, defaulting to 1000
[  474.351975][T15656] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3778'.
[  474.777179][T14502] Bluetooth: hci2: command tx timeout
[  476.358027][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.376954][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.506261][ T3489] IPVS: stop unused estimator thread 0...
[  476.507904][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.550246][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.553190][T15586] chnl_net:caif_netlink_parms(): no params data found
[  476.607522][T15682] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3786'.
[  476.633326][T14502] Bluetooth: hci1: Malformed HCI Event
[  476.847221][T15691] netlink: '+}[p³': attribute type 1 has an invalid length.
[  476.970065][T15691] 8021q: adding VLAN 0 to HW filter on device bond4
[  476.987029][T15694] 8021q: adding VLAN 0 to HW filter on device batadv2
[  476.999168][T14502] Bluetooth: hci2: command tx timeout
[  477.012725][T15694] bond4: (slave batadv2): making interface the new active one
[  477.048022][T15694] bond4: (slave batadv2): Enslaving as an active interface with an up link
[  477.094022][T15586] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.134900][T15586] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.140546][T15673] syz.3.3784 (15673): drop_caches: 2
[  477.160747][T15586] bridge_slave_0: entered allmulticast mode
[  477.200963][T15586] bridge_slave_0: entered promiscuous mode
[  477.212153][T15586] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.222541][T15586] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.225271][   T29] kauditd_printk_skb: 54 callbacks suppressed
[  477.225291][   T29] audit: type=1326 audit(1738761432.640:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.234755][T15586] bridge_slave_1: entered allmulticast mode
[  477.266799][   T29] audit: type=1326 audit(1738761432.640:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.323827][T15586] bridge_slave_1: entered promiscuous mode
[  477.331069][T15702] siw: device registration error -23
[  477.352765][   T29] audit: type=1326 audit(1738761432.640:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.379308][   T29] audit: type=1326 audit(1738761432.659:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.410107][   T29] audit: type=1326 audit(1738761432.659:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.435404][   T29] audit: type=1326 audit(1738761432.659:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.498697][   T29] audit: type=1326 audit(1738761432.659:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.545210][   T29] audit: type=1326 audit(1738761432.659:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.623964][T15586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.648935][   T29] audit: type=1326 audit(1738761432.659:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.680536][T15586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.736015][T15715] loop6: detected capacity change from 0 to 256
[  477.744927][   T29] audit: type=1326 audit(1738761432.659:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de058cde9 code=0x7ffc0000
[  477.776638][T15718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3800'.
[  477.809653][T15715] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d)
[  477.833202][T15717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3797'.
[  477.856039][T15586] team0: Port device team_slave_0 added
[  477.877738][T15586] team0: Port device team_slave_1 added
[  477.984571][T15722] Bluetooth: MGMT ver 1.23
[  478.039151][T15586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.071236][T15586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.132258][T15586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.166618][T15586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.173611][T15586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.223933][T15586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.424986][T15586] hsr_slave_0: entered promiscuous mode
[  478.475588][T15586] hsr_slave_1: entered promiscuous mode
[  478.505472][T15586] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  478.546439][T15586] Cannot create hsr debugfs directory
[  478.585398][T15746] loop6: detected capacity change from 0 to 512
[  478.700392][T15746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  478.713270][T15746] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.806460][T15746] loop6: detected capacity change from 512 to 0
[  478.842632][T15746] syz.6.3809: attempt to access beyond end of device
[  478.842632][T15746] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0
[  478.885108][T15725] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  478.891345][T15746] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[  478.901158][T15725] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  478.911016][T15746] EXT4-fs (loop6): I/O error while writing superblock
[  479.004131][T15725] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  479.010592][T15725] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  479.014692][T14571] syz-executor: attempt to access beyond end of device
[  479.014692][T14571] loop6: rw=12288, sector=12, nr_sectors = 4 limit=0
[  479.029208][T15586] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.064345][T15725] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  479.074991][T15725] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  479.090632][T14571] syz-executor: attempt to access beyond end of device
[  479.090632][T14571] loop6: rw=524288, sector=140, nr_sectors = 4 limit=0
[  479.110567][T15758] siw: device registration error -23
[  479.118740][T15725] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  479.125479][T15725] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  479.131320][T14571] syz-executor: attempt to access beyond end of device
[  479.131320][T14571] loop6: rw=524288, sector=144, nr_sectors = 4 limit=0
[  479.152388][T15586] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.168024][T15725] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  479.195333][T14571] syz-executor: attempt to access beyond end of device
[  479.195333][T14571] loop6: rw=12288, sector=136, nr_sectors = 4 limit=0
[  479.210232][T15725] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  479.223803][T14502] Bluetooth: hci2: command tx timeout
[  479.239745][T14571] EXT4-fs error (device loop6): ext4_get_inode_loc:4573: inode #2: block 34: comm syz-executor: unable to read itable block
[  479.298478][T14571] syz-executor: attempt to access beyond end of device
[  479.298478][T14571] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0
[  479.312759][T14571] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[  479.322727][T14571] EXT4-fs (loop6): I/O error while writing superblock
[  479.329882][T14571] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: IO failure
[  479.340503][T15749] ext4lazyinit: attempt to access beyond end of device
[  479.340503][T15749] loop6: rw=536576, sector=8, nr_sectors = 4 limit=0
[  479.341317][T14571] syz-executor: attempt to access beyond end of device
[  479.341317][T14571] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0
[  479.368296][T14571] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[  479.376727][T14571] EXT4-fs (loop6): I/O error while writing superblock
[  479.383684][T14571] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz-executor: mark_inode_dirty error
[  479.387261][T15586] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.395319][T14571] syz-executor: attempt to access beyond end of device
[  479.395319][T14571] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0
[  479.395354][T14571] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[  479.395410][T14571] EXT4-fs (loop6): I/O error while writing superblock
[  479.422228][T15749] ext4lazyinit: attempt to access beyond end of device
[  479.422228][T15749] loop6: rw=12288, sector=8, nr_sectors = 4 limit=0
[  479.554092][T15749] EXT4-fs error (device loop6): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2
[  479.607597][T15749] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[  479.635429][T15749] EXT4-fs (loop6): I/O error while writing superblock
[  479.652938][ T3489] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4558: inode #2: block 34: comm kworker/u8:8: unable to read itable block
[  479.681167][T15770] loop2: detected capacity change from 0 to 512
[  479.687889][ T3489] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[  479.699473][T15770] EXT4-fs: Ignoring removed mblk_io_submit option
[  479.711104][ T3489] EXT4-fs (loop6): I/O error while writing superblock
[  479.712137][T15768] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.723192][T14571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  479.754747][T15770] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3817: corrupted in-inode xattr: invalid ea_ino
[  479.770650][T15770] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3817: couldn't read orphan inode 15 (err -117)
[  479.786883][T15770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.787382][T14571] Buffer I/O error on dev loop6, logical block 0, lost sync page write
[  479.839211][T14571] EXT4-fs (loop6): I/O error while writing superblock
[  479.854733][T14934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.867132][T15586] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.887636][T15747] Buffer I/O error on dev loop6, logical block 12, lost sync page write
[  480.011671][T15768] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.202550][T15777] loop3: detected capacity change from 0 to 32768
[  480.292587][T15768] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.326730][T15777] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  480.496462][T15777] XFS (loop3): Ending clean mount
[  480.525914][T15768] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.552563][T15777] XFS (loop3): Quotacheck needed: Please wait.
[  480.640274][T15777] XFS (loop3): Quotacheck: Done.
[  480.841330][T14498] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  481.656667][T15586] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  481.715185][ T3560] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.863289][T15586] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  481.919575][T15586] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  482.019355][ T3560] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.048937][T15586] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  482.060856][T15809] siw: device registration error -23
[  482.104216][T15808] trusted_key: encrypted_key: insufficient parameters specified
[  482.105913][ T3560] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.179099][T15808] trusted_key: encrypted_key: insufficient parameters specified
[  482.253116][T15768] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.289564][T14573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  482.308347][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  482.324790][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  482.335023][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  482.345843][   T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  482.354813][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  482.375031][T15768] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.400812][T14502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  482.409770][T14502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  482.419579][T14502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  482.454026][T14502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  482.464664][ T3560] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.475094][T14502] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  482.485128][T14502] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  482.498958][T15768] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.517086][T15768] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.557059][T15814] loop3: detected capacity change from 0 to 512
[  482.572944][T15814] EXT4-fs: Ignoring removed mblk_io_submit option
[  482.745591][T15814] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3833: corrupted in-inode xattr: invalid ea_ino
[  482.958151][T15814] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3833: couldn't read orphan inode 15 (err -117)
[  483.313834][T15814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.417574][T15586] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.618522][T15586] 8021q: adding VLAN 0 to HW filter on device team0
[  483.698537][T14498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.717432][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.724583][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.774028][T15811] lo speed is unknown, defaulting to 1000
[  483.806140][ T3560] bridge_slave_1: left allmulticast mode
[  483.822998][ T3560] bridge_slave_1: left promiscuous mode
[  483.852073][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.892618][ T3560] bridge_slave_0: left allmulticast mode
[  483.916976][ T3560] bridge_slave_0: left promiscuous mode
[  483.929698][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.432923][T15845] ref_ctr_offset mismatch. inode: 0xd8f offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  484.590160][   T29] kauditd_printk_skb: 83 callbacks suppressed
[  484.590183][   T29] audit: type=1326 audit(1738761439.534:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.625274][   T29] audit: type=1326 audit(1738761439.562:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.649101][   T29] audit: type=1326 audit(1738761439.562:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.677219][   T29] audit: type=1326 audit(1738761439.562:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.763198][   T29] audit: type=1326 audit(1738761439.562:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.801015][T14502] Bluetooth: hci0: command tx timeout
[  484.811815][   T29] audit: type=1326 audit(1738761439.572:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.852163][   T29] audit: type=1326 audit(1738761439.572:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.875437][   T29] audit: type=1326 audit(1738761439.572:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.902749][   T29] audit: type=1326 audit(1738761439.590:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.926525][   T29] audit: type=1326 audit(1738761439.590:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.1.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  484.958379][T15818] loop2: detected capacity change from 0 to 65536
[  485.050968][T15818] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  485.082625][T15818] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  485.209523][T15818] XFS (loop2): Ending clean mount
[  485.285285][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  485.305791][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.328760][ T3560] bond0 (unregistering): Released all slaves
[  485.350380][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.357613][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.420862][T14934] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  485.794409][T15811] lo speed is unknown, defaulting to 1000
[  485.988020][T15586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.065822][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  486.120458][T15586] veth0_vlan: entered promiscuous mode
[  486.152517][T15586] veth1_vlan: entered promiscuous mode
[  486.167910][T15850] siw: device registration error -23
[  486.216410][T15885] bond_slave_1: entered promiscuous mode
[  486.234530][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3853'.
[  486.268872][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  486.291888][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  486.320761][T15891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3858'.
[  486.325143][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  486.344734][T15891] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3858'.
[  486.381300][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  486.411282][T15885] bond0: (slave bond_slave_1): Releasing backup interface
[  486.417931][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.428399][    T9] usb 4-1: Product: syz
[  486.432882][    T9] usb 4-1: Manufacturer: syz
[  486.437760][    T9] usb 4-1: SerialNumber: syz
[  486.448184][T15885] bond_slave_1 (unregistering): left promiscuous mode
[  486.450578][    T9] usb 4-1: config 0 descriptor??
[  486.577976][ T5897] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  486.704586][T15586] veth0_macvtap: entered promiscuous mode
[  486.712876][    T9] usb 4-1: USB disconnect, device number 2
[  486.753525][ T5897] usb 2-1: Using ep0 maxpacket: 16
[  486.790258][T15898] siw: device registration error -23
[  486.790938][ T5897] usb 2-1: config index 0 descriptor too short (expected 46684, got 27)
[  486.829386][ T5897] usb 2-1: config 119 has too many interfaces: 63, using maximum allowed: 32
[  486.845199][ T5897] usb 2-1: config 119 has an invalid interface number: 214 but max is 62
[  486.864656][ T5897] usb 2-1: config 119 has 1 interface, different from the descriptor's value: 63
[  486.925189][T15586] veth1_macvtap: entered promiscuous mode
[  486.954013][ T5897] usb 2-1: config 119 has no interface number 0
[  486.960343][ T5897] usb 2-1: config 119 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 100, changing to 10
[  487.007229][ T5897] usb 2-1: config 119 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 24864, setting to 1024
[  487.008729][T14502] Bluetooth: hci0: command tx timeout
[  487.063229][ T5897] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=85.f5
[  487.093776][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.117320][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  487.136834][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.156555][ T5897] usb 2-1: Manufacturer: syz
[  487.162214][ T5897] usb 2-1: SerialNumber: syz
[  487.172075][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.197874][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.229514][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.251708][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.305321][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.326194][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.340121][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.353280][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.374623][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.401306][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.429058][T15586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  487.469852][ T5897] usbtouchscreen 2-1:119.214: Failed to read FW rev: -71
[  487.499254][ T5897] usbtouchscreen 2-1:119.214: probe with driver usbtouchscreen failed with error -71
[  487.579387][ T5897] usb 2-1: USB disconnect, device number 6
[  487.608746][T15913] loop2: detected capacity change from 0 to 512
[  487.620411][T15913] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3867: corrupted in-inode xattr: invalid ea_ino
[  487.634513][T15913] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3867: couldn't read orphan inode 15 (err -117)
[  487.665744][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.682826][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.693524][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.707781][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.718325][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.731168][T15913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.744745][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.786124][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.796912][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.806738][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.817369][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.827973][T15586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.840076][T15586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.852595][T14934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.863775][T15586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  487.866595][T15908] loop3: detected capacity change from 0 to 764
[  487.895526][T15586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.905546][T15586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.922399][T15586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.943119][T15586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.020783][ T3560] hsr_slave_0: left promiscuous mode
[  488.027301][ T3560] hsr_slave_1: left promiscuous mode
[  488.037215][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.055482][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.077706][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  488.100802][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.233400][ T3560] veth1_macvtap: left promiscuous mode
[  488.240020][ T3560] veth0_macvtap: left promiscuous mode
[  488.245881][ T3560] veth1_vlan: left promiscuous mode
[  488.251392][ T3560] veth0_vlan: left promiscuous mode
[  488.374618][T15932] loop2: detected capacity change from 0 to 256
[  488.382770][T15933] siw: device registration error -23
[  488.400201][T15932] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  488.446492][T15932] exFAT-fs (loop2): valid_size(100667392) is greater than size(4096)
[  489.229749][T14502] Bluetooth: hci0: command tx timeout
[  489.382773][ T3560] team0 (unregistering): Port device team_slave_1 removed
[  489.457254][ T3560] team0 (unregistering): Port device team_slave_0 removed
[  490.193214][T15959] loop3: detected capacity change from 0 to 128
[  490.196552][T15937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.250350][T15959] bio_check_eod: 7 callbacks suppressed
[  490.250371][T15959] syz.3.3880: attempt to access beyond end of device
[  490.250371][T15959] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128
[  490.273944][T15955] pim6reg: entered allmulticast mode
[  490.292351][T15811] chnl_net:caif_netlink_parms(): no params data found
[  490.352785][T15958] syz.3.3880: attempt to access beyond end of device
[  490.352785][T15958] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128
[  490.402376][T15937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.623859][T15937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.639904][T15964] loop3: detected capacity change from 0 to 1024
[  490.671264][T15964] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (4000000)
[  490.791748][T15937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.966904][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.996734][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.050124][   T29] kauditd_printk_skb: 40 callbacks suppressed
[  491.050146][   T29] audit: type=1326 audit(1738761445.577:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.081073][   T29] audit: type=1326 audit(1738761445.577:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.118730][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.127959][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.137226][   T29] audit: type=1326 audit(1738761445.577:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.216415][   T29] audit: type=1326 audit(1738761445.577:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.242101][   T29] audit: type=1326 audit(1738761445.577:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.296318][T15980] siw: device registration error -23
[  491.305187][   T29] audit: type=1326 audit(1738761445.605:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.339998][   T29] audit: type=1326 audit(1738761445.605:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.365195][   T29] audit: type=1326 audit(1738761445.605:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.411830][T15811] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.419395][T15811] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.427860][   T29] audit: type=1326 audit(1738761445.605:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.451731][T15811] bridge_slave_0: entered allmulticast mode
[  491.463392][T14502] Bluetooth: hci0: command tx timeout
[  491.466004][T15811] bridge_slave_0: entered promiscuous mode
[  491.471962][   T29] audit: type=1326 audit(1738761445.605:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.4.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  491.514626][ T3560] IPVS: stop unused estimator thread 0...
[  491.522130][T15937] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.533192][T15811] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.543294][T15811] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.570108][T15811] bridge_slave_1: entered allmulticast mode
[  491.589315][T15811] bridge_slave_1: entered promiscuous mode
[  491.625143][T15937] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.666711][T15937] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.705454][T15937] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.785967][T15811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  491.857560][T15811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.085129][T15811] team0: Port device team_slave_0 added
[  492.105947][T15811] team0: Port device team_slave_1 added
[  492.353642][ T3560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.419340][T15811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.436238][T15811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.477392][T15811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.559210][ T3560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.618914][T15811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.650339][T15811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.735966][T15811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  492.862673][ T3560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.968921][T16016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.081487][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  493.087631][ T3560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.109429][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  493.118895][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  493.132583][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  493.140352][   T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  493.147837][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  493.236672][T16016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.347025][T16016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.369053][T15811] hsr_slave_0: entered promiscuous mode
[  493.375469][T15811] hsr_slave_1: entered promiscuous mode
[  493.508082][T16016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.962162][T16016] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.036746][T16016] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.076780][T16021] lo speed is unknown, defaulting to 1000
[  494.082929][ T3560] bridge_slave_1: left allmulticast mode
[  494.088589][ T3560] bridge_slave_1: left promiscuous mode
[  494.106290][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.135407][T16043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3914'.
[  494.165199][ T3560] bridge_slave_0: left allmulticast mode
[  494.171390][ T3560] bridge_slave_0: left promiscuous mode
[  494.183041][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.904624][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  494.926301][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  494.965591][ T3560] bond0 (unregistering): Released all slaves
[  495.002485][T16016] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.038717][T16016] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.409703][T14502] Bluetooth: hci2: command tx timeout
[  495.605878][T16068] syz.3.3924 (16068) used greatest stack depth: 17200 bytes left
[  495.625440][T16021] lo speed is unknown, defaulting to 1000
[  495.693468][T15811] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  495.730922][T15811] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  495.959269][T15811] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  495.984247][T16082] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3929'.
[  496.014344][T16080] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3929'.
[  496.162110][T15811] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  496.309362][T16087] loop2: detected capacity change from 0 to 32768
[  496.322638][T16087] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3932 (16087)
[  496.334042][T16093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3934'.
[  496.417101][T16087] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  496.428373][T16087] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  496.437997][T16087] BTRFS info (device loop2): using free-space-tree
[  497.446647][ T3560] hsr_slave_0: left promiscuous mode
[  497.463764][ T3560] hsr_slave_1: left promiscuous mode
[  497.473109][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  497.480574][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  497.507214][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  497.520195][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  497.610911][T14502] Bluetooth: hci2: command tx timeout
[  497.644325][ T3560] veth1_macvtap: left promiscuous mode
[  497.649914][ T3560] veth0_macvtap: left promiscuous mode
[  497.667634][ T3560] veth1_vlan: left promiscuous mode
[  497.674250][ T3560] veth0_vlan: left promiscuous mode
[  497.689382][T14934] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  498.890568][ T3560] team0 (unregistering): Port device team_slave_1 removed
[  498.952167][ T3560] team0 (unregistering): Port device team_slave_0 removed
[  499.494448][T16021] chnl_net:caif_netlink_parms(): no params data found
[  499.517789][T16155] bond0: entered promiscuous mode
[  499.522855][T16155] bond_slave_0: entered promiscuous mode
[  499.576403][T16159] bridge0: entered allmulticast mode
[  499.812134][T15811] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.839341][T14502] Bluetooth: hci2: command tx timeout
[  499.960842][T15811] 8021q: adding VLAN 0 to HW filter on device team0
[  499.975440][T16176] overlayfs: failed to clone upperpath
[  500.055495][T16179] pim6reg: entered allmulticast mode
[  500.091428][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.098601][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.121576][T16021] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.143082][T16021] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.158486][T16021] bridge_slave_0: entered allmulticast mode
[  500.165890][T16021] bridge_slave_0: entered promiscuous mode
[  500.173802][T16021] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.181824][T16021] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.189078][T16021] bridge_slave_1: entered allmulticast mode
[  500.196325][T16021] bridge_slave_1: entered promiscuous mode
[  500.209640][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.216761][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.397047][T16021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  500.431191][T16021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  500.587098][T16021] team0: Port device team_slave_0 added
[  500.649777][T16021] team0: Port device team_slave_1 added
[  500.808119][T16021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.815277][T16021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.892512][T16021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.927770][T16021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.934757][T16021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.968956][T16021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.997100][T16204] loop3: detected capacity change from 0 to 256
[  501.092392][T16204] FAT-fs (loop3): Directory bread(block 64) failed
[  501.107121][T16204] FAT-fs (loop3): Directory bread(block 65) failed
[  501.116145][T16204] FAT-fs (loop3): Directory bread(block 66) failed
[  501.149682][T16204] FAT-fs (loop3): Directory bread(block 67) failed
[  501.170570][T16204] FAT-fs (loop3): Directory bread(block 68) failed
[  501.179465][T16021] hsr_slave_0: entered promiscuous mode
[  501.191869][T16204] FAT-fs (loop3): Directory bread(block 69) failed
[  501.198503][T16204] FAT-fs (loop3): Directory bread(block 70) failed
[  501.206633][T16021] hsr_slave_1: entered promiscuous mode
[  501.212750][T16021] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  501.234662][T16204] FAT-fs (loop3): Directory bread(block 71) failed
[  501.241267][T16204] FAT-fs (loop3): Directory bread(block 72) failed
[  501.269649][T16021] Cannot create hsr debugfs directory
[  501.320361][T16204] FAT-fs (loop3): Directory bread(block 73) failed
[  501.479378][T16215] loop2: detected capacity change from 0 to 512
[  501.574033][T16215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  501.668654][T16215] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.844049][T16215] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. Quota mode: writeback.
[  501.927876][T15811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  502.059317][T14502] Bluetooth: hci2: command tx timeout
[  502.078052][T16198] syz.1.3970 (16198): drop_caches: 2
[  502.093149][   T29] kauditd_printk_skb: 42 callbacks suppressed
[  502.093171][   T29] audit: type=1326 audit(1738761455.904:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f118cde9 code=0x7ffc0000
[  502.097924][T14934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  502.113472][   T29] audit: type=1326 audit(1738761455.932:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f61f118cde9 code=0x7ffc0000
[  502.403835][   T29] audit: type=1326 audit(1738761455.932:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f118cde9 code=0x7ffc0000
[  502.442861][   T29] audit: type=1326 audit(1738761455.932:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f118cde9 code=0x7ffc0000
[  502.749952][   T29] audit: type=1326 audit(1738761455.978:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f118cde9 code=0x7ffc0000
[  503.057002][   T29] audit: type=1326 audit(1738761455.978:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f118b750 code=0x7ffc0000
[  503.174270][T16021] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  503.180434][   T29] audit: type=1326 audit(1738761455.978:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f61f118e617 code=0x7ffc0000
[  503.276380][T16245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3985'.
[  503.308445][T16021] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  503.365062][T16021] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  503.367126][   T29] audit: type=1326 audit(1738761455.978:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61f118cde9 code=0x7ffc0000
[  503.394792][   T29] audit: type=1326 audit(1738761455.978:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f61f118e617 code=0x7ffc0000
[  503.419272][   T29] audit: type=1326 audit(1738761455.978:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16230 comm="syz.3.3982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f61f118ba4a code=0x7ffc0000
[  503.469351][T16021] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  503.863671][T16021] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.870538][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  503.958951][T16021] 8021q: adding VLAN 0 to HW filter on device team0
[  504.009999][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.017212][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  504.049866][    T9] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  504.070114][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.090113][    T9] usb 4-1: Product: syz
[  504.144133][    T9] usb 4-1: Manufacturer: syz
[  504.148799][    T9] usb 4-1: SerialNumber: syz
[  504.175628][    T9] usb 4-1: config 0 descriptor??
[  504.187202][    T9] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 003
[  504.244993][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.252181][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.339693][T15811] veth0_vlan: entered promiscuous mode
[  504.462497][T15811] veth1_vlan: entered promiscuous mode
[  504.636370][T15811] veth0_macvtap: entered promiscuous mode
[  504.762352][T16270] syz.1.3994 (16270): drop_caches: 2
[  504.768784][T16270] syz.1.3994 (16270): drop_caches: 2
[  504.802698][T15811] veth1_macvtap: entered promiscuous mode
[  504.871472][    T9] i2c i2c-1: failure reading functionality
[  504.883960][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  504.903619][    T9] i2c i2c-1: connected i2c-tiny-usb device
[  504.931411][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  504.944283][    T9] usb 4-1: USB disconnect, device number 3
[  504.971132][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  504.997775][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.029977][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.057524][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.085758][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.105146][T16285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3999'.
[  505.126249][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.137595][T16285] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3999'.
[  505.158063][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.180359][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.200833][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.223126][T15811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  505.253489][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.295650][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.318493][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.345266][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.371691][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.386060][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4002'.
[  505.395740][T16297] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4002'.
[  505.425385][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.451508][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.483907][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.508638][T15811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.530096][T15811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.566331][T15811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  505.617185][T15811] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.639306][T15811] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.648157][T15811] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.692817][T15811] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.755490][T16021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.930217][T16021] veth0_vlan: entered promiscuous mode
[  505.961190][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.979755][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.020522][T16021] veth1_vlan: entered promiscuous mode
[  506.082844][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.104804][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.162817][T16021] veth0_macvtap: entered promiscuous mode
[  506.207270][T16021] veth1_macvtap: entered promiscuous mode
[  506.276152][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.315197][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.346180][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.368123][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.398664][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.420084][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.440799][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.468449][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.494523][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.508688][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.577419][T16316] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  506.622818][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  506.654749][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.678082][T16021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.713768][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.761917][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.771788][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.825895][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.835789][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.880124][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.900743][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.935371][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.964932][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.989087][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.021021][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.062323][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.127300][T16021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.140170][T16021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.178776][T16021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.187539][T16021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.221490][T16021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.550653][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.595537][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.660846][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.669754][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.902028][T16338] loop2: detected capacity change from 0 to 256
[  507.959933][T16338] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d)
[  508.296889][T16348] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  508.378123][   T29] kauditd_printk_skb: 48 callbacks suppressed
[  508.378145][   T29] audit: type=1326 audit(1738761461.787:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.435887][   T29] audit: type=1326 audit(1738761461.815:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.463152][   T29] audit: type=1326 audit(1738761461.825:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.487007][   T29] audit: type=1326 audit(1738761461.825:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.509869][   T29] audit: type=1326 audit(1738761461.825:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.537390][T16352] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.553085][   T29] audit: type=1326 audit(1738761461.825:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.643746][   T29] audit: type=1326 audit(1738761461.825:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.680122][   T29] audit: type=1326 audit(1738761461.825:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.705651][   T29] audit: type=1326 audit(1738761461.825:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.829082][ T3560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.846362][   T29] audit: type=1326 audit(1738761461.825:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16349 comm="syz.4.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1325b8cde9 code=0x7ffc0000
[  508.917893][T16352] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.959920][T16360] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.042609][ T3560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.087002][T16352] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.190556][T16360] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.213531][T16365] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  509.220299][T16365] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  509.302344][T16352] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.327693][T16365] vhci_hcd vhci_hcd.0: Device attached
[  509.347544][T16360] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.360127][T16366] usbip_core: unknown command
[  509.371151][T16366] vhci_hcd: unknown pdu 4294901760
[  509.389108][T16366] usbip_core: unknown command
[  509.451442][T16369] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5)
[  509.458001][T16369] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  509.479314][ T6032] vhci_hcd: stop threads
[  509.483672][ T6032] vhci_hcd: release socket
[  509.500528][ T6032] vhci_hcd: disconnect device
[  509.509410][ T5899] vhci_hcd: vhci_device speed not set
[  509.527680][ T3560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.538246][T16369] vhci_hcd vhci_hcd.0: Device attached
[  509.555993][T16370] vhci_hcd: connection closed
[  509.556338][   T35] vhci_hcd: stop threads
[  509.567490][   T35] vhci_hcd: release socket
[  509.574849][   T35] vhci_hcd: disconnect device
[  509.667796][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  509.678567][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  509.691215][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  509.699772][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  509.708484][   T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  509.715858][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  509.742598][T16377] loop7: detected capacity change from 0 to 512
[  509.756184][T16360] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.821855][T16377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  509.854742][ T3560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.891800][T16377] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  509.892978][T16352] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.917771][T16352] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.928416][T14502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  509.938747][T14502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  509.946469][T14502] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  509.965617][T16352] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.984395][T14502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  509.994999][T14502] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  510.005647][T16377] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. Quota mode: writeback.
[  510.022581][T14502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  510.071305][T16360] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.109439][T16360] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.167285][T16352] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.207144][T15811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  510.242002][T16360] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.308303][T16360] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.402891][T16374] lo speed is unknown, defaulting to 1000
[  510.440753][ T3560] bridge_slave_1: left allmulticast mode
[  510.446446][ T3560] bridge_slave_1: left promiscuous mode
[  510.471845][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.511817][T16390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4037'.
[  510.526330][ T3560] bridge_slave_0: left allmulticast mode
[  510.535099][ T3560] bridge_slave_0: left promiscuous mode
[  510.546676][T16390] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4037'.
[  510.568678][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.851623][T16402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4039'.
[  511.609792][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  511.636162][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.658730][ T3560] bond0 (unregistering): Released all slaves
[  511.799007][T16381] lo speed is unknown, defaulting to 1000
[  511.988182][T14502] Bluetooth: hci2: command tx timeout
[  512.235477][T14502] Bluetooth: hci3: command tx timeout
[  512.236594][T16374] lo speed is unknown, defaulting to 1000
[  512.256051][T16420] loop3: detected capacity change from 0 to 512
[  512.386871][T16420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  512.457249][T16420] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  512.477811][T16429] loop7: detected capacity change from 0 to 256
[  512.499563][T16429] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d)
[  512.534765][T16429] Bluetooth: MGMT ver 1.23
[  512.617438][T16420] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. Quota mode: writeback.
[  512.715212][T14498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  512.742881][T16381] lo speed is unknown, defaulting to 1000
[  512.761354][T15455] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  513.126848][T15455] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  513.137289][T15455] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  513.147415][T15455] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  513.157957][T15455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  513.167019][T15455] usb 3-1: SerialNumber: syz
[  514.122550][T16374] chnl_net:caif_netlink_parms(): no params data found
[  514.137783][T16450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4054'.
[  514.203482][T14502] Bluetooth: hci2: command tx timeout
[  514.302681][T15455] usb 3-1: 0:2 : does not exist
[  514.400856][T16453] syz.3.4055 (16453): drop_caches: 2
[  514.412792][T16453] syz.3.4055 (16453): drop_caches: 2
[  514.460532][T14502] Bluetooth: hci3: command tx timeout
[  514.916121][T15455] usb 3-1: USB disconnect, device number 2
[  514.994827][   T29] kauditd_printk_skb: 60 callbacks suppressed
[  514.994849][   T29] audit: type=1326 audit(1738761467.980:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.029748][T16460] tipc: Started in network mode
[  515.047030][T16460] tipc: Node identity 7, cluster identity 4711
[  515.056001][T16463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4059'.
[  515.057552][   T29] audit: type=1326 audit(1738761467.980:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.089837][T16460] tipc: Node number set to 7
[  515.154168][T16463] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4059'.
[  515.168685][T16465] loop2: detected capacity change from 0 to 256
[  515.174028][   T29] audit: type=1326 audit(1738761468.008:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.201705][   T29] audit: type=1326 audit(1738761468.008:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.224652][   T29] audit: type=1326 audit(1738761468.026:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.248193][   T29] audit: type=1326 audit(1738761468.026:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.270709][   T29] audit: type=1326 audit(1738761468.026:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.309263][   T29] audit: type=1326 audit(1738761468.026:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.332056][   T29] audit: type=1326 audit(1738761468.026:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.333893][T16465] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d)
[  515.356000][   T29] audit: type=1326 audit(1738761468.026:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94c18cde9 code=0x7ffc0000
[  515.439678][T16473] loop7: detected capacity change from 0 to 512
[  515.453450][ T3560] hsr_slave_0: left promiscuous mode
[  515.483211][T16475] loop3: detected capacity change from 0 to 512
[  515.496942][ T3560] hsr_slave_1: left promiscuous mode
[  515.503399][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  515.518409][T16475] EXT4-fs: Ignoring removed mblk_io_submit option
[  515.521568][T16473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  515.537405][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  515.550225][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  515.559921][T16475] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.4062: corrupted in-inode xattr: invalid ea_ino
[  515.574282][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  515.582203][T16473] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  515.582236][T16475] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.4062: couldn't read orphan inode 15 (err -117)
[  515.610531][T16475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.635956][ T3560] veth1_macvtap: left promiscuous mode
[  515.641487][ T3560] veth0_macvtap: left promiscuous mode
[  515.656475][ T3560] veth1_vlan: left promiscuous mode
[  515.661903][ T3560] veth0_vlan: left promiscuous mode
[  515.723407][T16481] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4064'.
[  515.749500][T16482] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. Quota mode: writeback.
[  515.790277][T14498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.985354][T15811] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  516.426209][T14502] Bluetooth: hci2: command tx timeout
[  516.683541][T14502] Bluetooth: hci3: command tx timeout
[  516.830169][ T3560] team0 (unregistering): Port device team_slave_1 removed
[  516.906521][ T3560] team0 (unregistering): Port device team_slave_0 removed
[  517.506929][T16374] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.521360][T16374] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.539820][T16374] bridge_slave_0: entered allmulticast mode
[  517.560506][T16492] loop2: detected capacity change from 0 to 256
[  517.568834][T16374] bridge_slave_0: entered promiscuous mode
[  517.583592][T16374] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.601545][T16374] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.631401][T16374] bridge_slave_1: entered allmulticast mode
[  517.637848][T16492] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  517.650816][T16374] bridge_slave_1: entered promiscuous mode
[  517.670967][T16381] chnl_net:caif_netlink_parms(): no params data found
[  517.681602][T16492] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  517.729713][T16492] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  517.804011][T16492] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff)
[  517.844742][T16492] exFAT-fs (loop2): Filesystem has been set read-only
[  517.849027][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.889340][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.166970][T16374] team0: Port device team_slave_0 added
[  518.175269][T16374] team0: Port device team_slave_1 added
[  518.202113][T16381] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.209407][T16381] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.229250][T16381] bridge_slave_0: entered allmulticast mode
[  518.258866][T16381] bridge_slave_0: entered promiscuous mode
[  518.277238][T16381] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.284328][T16381] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.307925][T16381] bridge_slave_1: entered allmulticast mode
[  518.314948][T16381] bridge_slave_1: entered promiscuous mode
[  518.416975][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.423962][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.502778][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.561582][T16381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  518.635797][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.650378][T14502] Bluetooth: hci2: command tx timeout
[  518.661536][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.719152][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.744534][T16381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.906619][T14502] Bluetooth: hci3: command tx timeout
[  518.935499][T16515] loop2: detected capacity change from 0 to 256
[  518.975337][T16515] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d)
[  518.998143][T16374] hsr_slave_0: entered promiscuous mode
[  519.014788][T16374] hsr_slave_1: entered promiscuous mode
[  519.036135][T16374] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  519.060681][T16374] Cannot create hsr debugfs directory
[  519.084522][T16381] team0: Port device team_slave_0 added
[  519.097926][T16381] team0: Port device team_slave_1 added
[  519.148859][T16381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.156360][T16381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.185098][T16381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.210563][T16381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.218161][T16381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.280999][T16381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.344601][    T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  519.527686][T16381] hsr_slave_0: entered promiscuous mode
[  519.546121][    T9] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  519.548405][T16381] hsr_slave_1: entered promiscuous mode
[  519.554829][    T9] usb 4-1: config 0 has no interface number 0
[  519.575695][T16523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4078'.
[  519.582285][    T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  519.590920][T16381] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  519.604821][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.611824][T16381] Cannot create hsr debugfs directory
[  519.631045][    T9] usb 4-1: Product: syz
[  519.637260][    T9] usb 4-1: Manufacturer: syz
[  519.641875][    T9] usb 4-1: SerialNumber: syz
[  519.674285][    T9] usb 4-1: config 0 descriptor??
[  519.916474][    T9] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[  519.947154][    T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[  519.975777][    T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[  519.995267][    T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[  520.030783][    T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  520.043250][T16531] rdma_rxe: rxe_newlink: failed to add lo
[  520.096994][T16374] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.169364][    T9] usb 4-1: USB disconnect, device number 4
[  520.187994][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  520.211278][T16533] netlink: 'syz.2.4083': attribute type 39 has an invalid length.
[  520.219654][    T9] keyspan 4-1:0.133: device disconnected
[  520.396867][T16374] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.485274][T16374] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.555012][T16543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4087'.
[  520.596835][T16374] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.843029][T16374] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  520.887564][T16374] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  520.957927][T16374] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  520.982894][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  520.982911][   T29] audit: type=1326 audit(1738761473.583:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.032350][T16374] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  521.049873][T16558] siw: device registration error -23
[  521.055231][   T29] audit: type=1326 audit(1738761473.583:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.055281][   T29] audit: type=1326 audit(1738761473.583:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.055327][   T29] audit: type=1326 audit(1738761473.583:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.055373][   T29] audit: type=1326 audit(1738761473.592:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.055418][   T29] audit: type=1326 audit(1738761473.592:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.055463][   T29] audit: type=1326 audit(1738761473.592:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.055510][   T29] audit: type=1326 audit(1738761473.592:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.055554][   T29] audit: type=1326 audit(1738761473.592:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.055598][   T29] audit: type=1326 audit(1738761473.592:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.2.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e3058cde9 code=0x7ffc0000
[  521.509287][T16374] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.524738][T16570] loop7: detected capacity change from 0 to 256
[  521.596621][T16374] 8021q: adding VLAN 0 to HW filter on device team0
[  521.634900][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.642075][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.700231][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.707417][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.779077][T16381] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  521.809311][T16381] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  521.833617][T16381] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  521.901990][T16381] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  522.104912][T16585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4105'.
[  522.123581][T16381] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.144033][T16585] bridge0: entered promiscuous mode
[  522.152888][T16585] bridge0: left promiscuous mode
[  522.253814][T16381] 8021q: adding VLAN 0 to HW filter on device team0
[  522.277808][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4107'.
[  522.280436][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.293787][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.445605][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.452729][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.502932][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.977706][T16617] loop3: detected capacity change from 0 to 512
[  522.985787][T16381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.993803][T16617] EXT4-fs: Ignoring removed mblk_io_submit option
[  523.042087][T16617] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.4115: corrupted in-inode xattr: invalid ea_ino
[  523.108746][T16374] veth0_vlan: entered promiscuous mode
[  523.135355][T16381] veth0_vlan: entered promiscuous mode
[  523.141226][T16617] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.4115: couldn't read orphan inode 15 (err -117)
[  523.157803][T16617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.163082][T16374] veth1_vlan: entered promiscuous mode
[  523.199375][T16381] veth1_vlan: entered promiscuous mode
[  523.217740][T14498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.317665][T16381] veth0_macvtap: entered promiscuous mode
[  523.348434][T16381] veth1_macvtap: entered promiscuous mode
[  523.376386][T16374] veth0_macvtap: entered promiscuous mode
[  523.404282][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.463381][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.470634][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4119'.
[  523.490608][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.512394][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.533917][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.553958][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.559327][T16631] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  523.576133][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.598653][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.619887][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.643343][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.664815][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.693660][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.707964][T16381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  523.802713][T16633] bond_slave_1: entered promiscuous mode
[  523.809692][T16374] veth1_macvtap: entered promiscuous mode
[  523.822564][T16632] bond_slave_1: left promiscuous mode
[  523.883165][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.909396][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.941512][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  523.951970][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.005663][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.016133][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.050550][T16647] loop7: detected capacity change from 0 to 1024
[  524.072656][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.108798][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.148779][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.161447][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.173423][T16381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.184505][T16381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.196585][T16381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.237855][T16643] siw: device registration error -23
[  524.253065][T16647] ------------[ cut here ]------------
[  524.258755][T16647] kernel BUG at fs/hfsplus/bnode.c:618!
[  524.261172][T16381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.286760][T16381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.308576][T16647] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  524.309227][T16381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.315683][T16647] CPU: 1 UID: 0 PID: 16647 Comm: syz.7.4128 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0
[  524.315714][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  524.315731][T16647] RIP: 0010:hfsplus_bnode_put+0x510/0x520
[  524.315778][T16647] Code: ff e9 bf fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c f3 fe ff ff 4c 89 ef e8 2b 98 85 ff e9 e6 fe ff ff e8 e1 ff 1e ff 90 <0f> 0b e8 d9 ff 1e ff 90 0f 0b 66 0f 1f 44 00 00 90 90 90 90 90 90
[  524.315801][T16647] RSP: 0018:ffffc900047bf090 EFLAGS: 00010287
[  524.343349][T16381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.345188][T16647] 
[  524.345198][T16647] RAX: ffffffff82a05e3f RBX: ffff888025c1ac80 RCX: 0000000000080000
[  524.345220][T16647] RDX: ffffc9000c339000 RSI: 0000000000001ff4 RDI: 0000000000001ff5
[  524.403445][T16647] RBP: 0000000000000000 R08: ffffffff82a059b0 R09: 1ffff11004b83590
[  524.411422][T16647] R10: dffffc0000000000 R11: ffffed1004b83591 R12: ffff888025c1ac00
[  524.413472][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.419380][T16647] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8880301d2000
[  524.419407][T16647] FS:  00007f1b79b7d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  524.430153][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.437730][T16647] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  524.437753][T16647] CR2: 00007faca9b34440 CR3: 0000000045922000 CR4: 0000000000350ef0
[  524.437775][T16647] Call Trace:
[  524.437786][T16647]  <TASK>
[  524.437797][T16647]  ? __die_body+0x5f/0xb0
[  524.437837][T16647]  ? die+0x9e/0xc0
[  524.437871][T16647]  ? do_trap+0x15a/0x3a0
[  524.437903][T16647]  ? hfsplus_bnode_put+0x510/0x520
[  524.437945][T16647]  ? do_error_trap+0x1dc/0x2c0
[  524.437975][T16647]  ? hfsplus_bnode_put+0x510/0x520
[  524.438019][T16647]  ? __pfx_do_error_trap+0x10/0x10
[  524.438056][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.438099][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.520957][T16647]  ? handle_invalid_op+0x34/0x40
[  524.525901][T16647]  ? hfsplus_bnode_put+0x510/0x520
[  524.531027][T16647]  ? exc_invalid_op+0x38/0x50
[  524.535711][T16647]  ? asm_exc_invalid_op+0x1a/0x20
[  524.540746][T16647]  ? hfsplus_bnode_put+0x80/0x520
[  524.545779][T16647]  ? hfsplus_bnode_put+0x50f/0x520
[  524.550905][T16647]  ? hfsplus_bnode_put+0x510/0x520
[  524.556032][T16647]  hfsplus_bmap_alloc+0x590/0x640
[  524.561068][T16647]  ? __pfx_hfsplus_bmap_alloc+0x10/0x10
[  524.566622][T16647]  ? hfsplus_btree_write+0x428/0x4c0
[  524.571914][T16647]  ? hfsplus_bnode_read_u16+0x146/0x2c0
[  524.577470][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.583115][T16647]  hfs_bnode_split+0xde/0x1110
[  524.587876][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.593519][T16647]  ? hfsplus_bnode_dump+0xa36/0xbb0
[  524.598733][T16647]  ? hfsplus_bnode_read+0xe9/0x1e0
[  524.603852][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.609493][T16647]  ? __asan_memcpy+0x40/0x70
[  524.614088][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.619727][T16647]  ? hfsplus_bnode_read_u16+0x1c1/0x2c0
[  524.625283][T16647]  ? __pfx_hfs_bnode_split+0x10/0x10
[  524.630567][T16647]  ? __pfx_hfs_find_rec_by_key+0x10/0x10
[  524.636199][T16647]  hfsplus_brec_insert+0x3a6/0xde0
[  524.641309][T16647]  ? do_raw_spin_unlock+0x13c/0x8b0
[  524.646519][T16647]  ? __pfx_hfsplus_brec_insert+0x10/0x10
[  524.652152][T16647]  ? hfsplus_cat_set_perms+0x2d1/0x630
[  524.657625][T16647]  hfsplus_create_cat+0xef5/0x1b70
[  524.662757][T16647]  ? __pfx_hfsplus_create_cat+0x10/0x10
[  524.668339][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.673985][T16647]  ? do_raw_spin_unlock+0x13c/0x8b0
[  524.679190][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.684831][T16647]  ? _raw_spin_unlock+0x28/0x50
[  524.689689][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.695347][T16647]  hfsplus_mknod+0x16a/0x2a0
[  524.699945][T16647]  ? __pfx_hfsplus_create+0x10/0x10
[  524.705151][T16647]  path_openat+0x193e/0x3590
[  524.709761][T16647]  ? __pfx_path_openat+0x10/0x10
[  524.714706][T16647]  ? srso_alias_return_thunk+0x5/0xfbef5
[  524.720355][T16647]  do_filp_open+0x27f/0x4e0
[  524.724870][T16647]  ? __pfx_do_filp_open+0x10/0x10
[  524.729897][T16647]  ? do_raw_spin_lock+0x14f/0x370
[  524.734941][T16647]  do_sys_openat2+0x13e/0x1d0
[  524.739617][T16647]  ? __pfx_do_futex+0x10/0x10
[  524.744299][T16647]  ? __pfx_do_sys_openat2+0x10/0x10
[  524.749503][T16647]  __x64_sys_creat+0x123/0x170
[  524.754269][T16647]  ? __pfx___x64_sys_creat+0x10/0x10
[  524.759561][T16647]  ? do_syscall_64+0x100/0x230
[  524.764333][T16647]  ? do_syscall_64+0xb6/0x230
[  524.769026][T16647]  do_syscall_64+0xf3/0x230
[  524.773541][T16647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.779439][T16647] RIP: 0033:0x7f1b78d8cde9
[  524.783850][T16647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.803452][T16647] RSP: 002b:00007f1b79b7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  524.811869][T16647] RAX: ffffffffffffffda RBX: 00007f1b78fa5fa0 RCX: 00007f1b78d8cde9
[  524.819924][T16647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  524.827888][T16647] RBP: 00007f1b78e0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  524.835851][T16647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  524.843814][T16647] R13: 0000000000000000 R14: 00007f1b78fa5fa0 R15: 00007fff7a852388
[  524.851791][T16647]  </TASK>
[  524.854800][T16647] Modules linked in:
[  524.860139][T16647] ---[ end trace 0000000000000000 ]---
[  524.869668][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.892649][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.902547][T16647] RIP: 0010:hfsplus_bnode_put+0x510/0x520
[  524.902611][T16647] Code: ff e9 bf fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c f3 fe ff ff 4c 89 ef e8 2b 98 85 ff e9 e6 fe ff ff e8 e1 ff 1e ff 90 <0f> 0b e8 d9 ff 1e ff 90 0f 0b 66 0f 1f 44 00 00 90 90 90 90 90 90
[  524.902634][T16647] RSP: 0018:ffffc900047bf090 EFLAGS: 00010287
[  524.911870][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.942951][T16647] RAX: ffffffff82a05e3f RBX: ffff888025c1ac80 RCX: 0000000000080000
[  524.944679][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.961137][T16647] RDX: ffffc9000c339000 RSI: 0000000000001ff4 RDI: 0000000000001ff5
[  524.962243][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.974353][T16647] RBP: 0000000000000000 R08: ffffffff82a059b0 R09: 1ffff11004b83590
[  524.981867][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.999389][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.010596][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.020407][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.030966][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.038937][T16647] R10: dffffc0000000000 R11: ffffed1004b83591 R12: ffff888025c1ac00
[  525.040823][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.049718][T16647] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8880301d2000
[  525.059191][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.060184][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.116977][T16647] FS:  00007f1b79b7d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  525.133412][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.133466][T16647] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  525.152955][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.170392][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.171000][T16647] CR2: 00007f1b79b3af98 CR3: 0000000045922000 CR4: 0000000000350ef0
[  525.183048][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.199665][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.210449][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.213144][T16647] Kernel panic - not syncing: Fatal exception
[  525.220424][T16647] Kernel Offset: disabled