last executing test programs:

6.336401072s ago: executing program 0 (id=1007):
socket(0xa, 0x3, 0x3)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)={'a', ' *:* ', 'rwm\x00'}, 0xa)

5.91307805s ago: executing program 2 (id=1009):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r0, 0x25, 0x8, @void}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r0, 0x25, 0x0, @val=@tcx={@link_id}}, 0x40)

5.6711451s ago: executing program 0 (id=1010):
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r3)
socket$kcm(0x28, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)={@in, 0x0, 0x0, 0x0, 0x0, "563dbb9c87a52dc31f531f724ec80c30401072bc5c50cc553f68ddb6eb3e2cb700ee60a7d07e208342a99fd64bdc9a5b970afaafe54ab920d404c09a27728e5635a457b848fdb9f2790093e0ea5de269"}, 0xd8)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f00000001c0))
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0)
listen(0xffffffffffffffff, 0x0)

4.684987655s ago: executing program 2 (id=1012):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100), 0x6)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x48}}, 0x0)
write(r0, &(0x7f00000002c0)="03feba85", 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f0000001300)="05", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x6, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r2, &(0x7f0000000080)="a5", 0x1, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x7, [@array, @const={0x4}, @enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x3f}, {0x2, 0x6}]}, @typedef, @int, @restrict, @func, @fwd, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x1, 0x8}}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x5}]}]}, {0x0, [0x71, 0x5f, 0x5f, 0x0, 0x0]}}, 0x0, 0x147, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet6(r1, &(0x7f00000011c0)="a0", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@dev, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @timestamp}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x26, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

3.996694854s ago: executing program 4 (id=1013):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0)

3.761135512s ago: executing program 3 (id=1014):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

3.600280065s ago: executing program 1 (id=1015):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3.005895503s ago: executing program 3 (id=1016):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
prctl$PR_GET_FPEMU(0x9, 0x0)

2.973011173s ago: executing program 2 (id=1017):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0)
write(r2, 0x0, 0x0)
read$dsp(r2, 0x0, 0x0)

2.915887706s ago: executing program 1 (id=1018):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="0800390000000100080026000816000008009f00060000000800570038"], 0x3c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2.204936659s ago: executing program 0 (id=1019):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r1}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000240)=@tcp6=r1}, 0x20)

2.204625452s ago: executing program 3 (id=1020):
socket(0xa, 0x3, 0x3)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)={'a', ' *:* ', 'rwm\x00'}, 0xa)

1.967366434s ago: executing program 1 (id=1021):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x8, 0x40, 0x101, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xf)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0), 0x700}, 0x20)

1.920904153s ago: executing program 2 (id=1022):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000182000", @ANYRES32=r0, @ANYBLOB="00000000ffffff1f35000000000000009500aac38532be6d7df1902eb2000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0xe2, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.816641482s ago: executing program 4 (id=1023):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000300)=0x200000000)

1.790273112s ago: executing program 0 (id=1024):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x4}, 0x10, 0x0)
read(r0, 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x400, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2179cb26"}})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0)
utimensat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)=ANY=[@ANYBLOB="740000001200200026bd7000fcdbdf250f0701094e224e24040000007f000000040000000400000001000080050000007a5d00007f000000", @ANYRES32, @ANYBLOB="27caffff00000000d300000000000000250001001ee31ee031f02a266bc4cc4cb15475a70c54a90abb35d80a8d1f6e54d18d3a9089316387"], 0x74}, 0x1, 0x0, 0x0, 0xc010}, 0x40400c0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7060000000000006d0a00000000000007000000000000009500000000000100"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x4800)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000000080)={0xc, {"a2e3ad21ed0d52f91b5d520987f70e06d038e7ff7fc6e5539b3247298b089b0708356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x304, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x268, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x190, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0xb0, 0x0, 0x0, 0x0, {{0x9}, {0x84, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xc4, 0x6, [@m_nat={0x94, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x19, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x304}}, 0x0)
socket(0x10, 0x803, 0x0)

1.740815437s ago: executing program 3 (id=1025):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x20000000000000d7, &(0x7f0000002080)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1e, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
unshare(0x22020400)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000004, '\x00', 0x0, r0, 0xfffffffd, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000900)={0x11, @multicast1, 0x4e20, 0x800, 'rr\x00'}, 0x2c)

1.474512559s ago: executing program 1 (id=1026):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300)='@', 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r0, &(0x7f0000000400), 0x20000000}, 0x20)

1.455315473s ago: executing program 3 (id=1027):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100), 0x6)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x48}}, 0x0)
write(r0, &(0x7f00000002c0)="03feba85", 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f0000001300)="05", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x6, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r2, &(0x7f0000000080)="a5", 0x1, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x7, [@array, @const={0x4}, @enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x3f}, {0x2, 0x6}]}, @typedef, @int, @restrict, @func, @fwd, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x1, 0x8}}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x5}]}]}, {0x0, [0x71, 0x5f, 0x5f, 0x0, 0x0]}}, 0x0, 0x147, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet6(r1, &(0x7f00000011c0)="a0", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
shutdown(r1, 0x0)
syz_emit_ethernet(0x26, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

1.39359258s ago: executing program 4 (id=1028):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x68}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1.350936873s ago: executing program 2 (id=1029):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x354, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
read$FUSE(r0, &(0x7f0000001f40)={0x2020}, 0x2020)
gettid()
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r2)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000b80)={{}, 0x0, 0x0}, 0x20)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00')
preadv2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)=""/117, 0x75}], 0x1, 0x68, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)="9462e4fa5e246b193c53fd5c7806998f23dc5ec33f6350d3f502a8ccf20557364e19a445692203516ca8852eefac5f51548be63d91148bee3d26a4c0ba0471067b22c9ac600979d4eacd6e252cfa", 0x4e}, {&(0x7f0000000500)="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", 0x1000}], 0x2, &(0x7f0000001540), 0x0, 0x8801}, 0x0)
ftruncate(r0, 0x1200)

1.093587106s ago: executing program 4 (id=1030):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
connect$can_bcm(r1, &(0x7f0000000200), 0x10)
r3 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@gettaction={0x28, 0x32, 0x53798618904db2d7, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b0a2a7cf704005cd"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e54d53db8fc80bb"}}, 0x48}}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x29c, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200040}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43affc19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x502}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "b66fee6f5f4f83339408fa11b5c5d478eafc1bb1bbe8db0d0822c6b8a0d7f1e5c36623"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "7351b4a5d76276db12554167b5688642cc1907b416566c865f81188334"}}, @TIPC_NLA_NODE_ID={0x5a, 0x3, "e76fac5f2c0770fc66dd977f2d9ce5753c45b21ecc8b388c822c8c7197bc7a38cde9b8fd7f88602a65939018147cf3bf5ab9e2f4d7adef395d07ed938a8d0a9bececc35dc63bd7d93008eecae3eb0cc6d84001e60c95"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6aaa0a672d66fda2bdd1caf64467a0bce64afffeeb32f6ea0891fd68bf"}}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0)

1.011814732s ago: executing program 1 (id=1031):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
prctl$PR_GET_FPEMU(0x9, 0x0)

590.561164ms ago: executing program 1 (id=1032):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x5}, 0x14}}, 0x1)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x124, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x106, 0x33, @beacon={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0xa4, {0x0, 0x0, 0x0, "ea052c17b3c4b50f83c0f51d4dee268fceddd914345f03942f804665bcc3e7869c114f4e7a96d4bcd5d8979260a4588ab8d499e5b96ba45ffeec8f5e3d03c41190d18d55fe76917e06b77c2a40b3bcac9943a624853df4743b29dc2af23d2ff9890da475a7a4b7a740e9e9a341828a483b3eae9f3029d06ec1b6f4c0d893a4d6f4ff74becbf8af58161cb72928740fe8c1945a25df99ffc292b01c96b14d9b55e1"}}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0x3, 0x1ff4, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x3, 0x6}}, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x124}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4, 0x4}]}]}]}, 0x28}}, 0x0)
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x70bd2a, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xe64b}]}}}]}, 0x40}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r11)
sendmsg$IPVS_CMD_GET_INFO(r12, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, r13, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd53}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4010)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x0, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3b, 0x0, 0x0, 0x0, {}, [@generic]}, 0x14}}, 0x0)
r14 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

499.412423ms ago: executing program 4 (id=1033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0)

350.207803ms ago: executing program 0 (id=1034):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r1}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000240)=@tcp6=r1}, 0x20)

223.782349ms ago: executing program 3 (id=1035):
socket(0xa, 0x3, 0x3)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)={'a', ' *:* ', 'rwm\x00'}, 0xa)

117.88869ms ago: executing program 2 (id=1036):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5521)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022ee000000061bcf755cb2a29256"], 0x0}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0xfffff801, [0x8, 0x8], 0x86e}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
syz_open_dev$usbfs(0x0, 0x200, 0x102)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0xfffffffffffffd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

69.460254ms ago: executing program 4 (id=1037):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)

0s ago: executing program 0 (id=1038):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000300)=0x200000000)

kernel console output (not intermixed with test programs):

XT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.927451][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.935865][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.514488][ T5663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.642576][ T5994] netlink: 'syz.2.163': attribute type 16 has an invalid length.
[  359.650555][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'.
[  362.304644][ T6008] loop2: detected capacity change from 0 to 1024
[  362.600426][ T6008] EXT4-fs (loop2): bad geometry: first data block 100663296 is beyond end of filesystem (512)
[  362.798680][ T6008] loop2: detected capacity change from 0 to 256
[  362.917433][ T6008] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x207d53fc, utbl_chksum : 0xe619d30d)
[  363.420795][ T6016] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  363.644523][ T6021] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 46406 - 0
[  363.659501][ T6021] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 46406 - 0
[  363.671122][ T6021] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 46406 - 0
[  363.681974][ T6021] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 46406 - 0
[  363.691816][ T6021] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 43182 - 0
[  363.701265][ T6021] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 43182 - 0
[  363.710458][ T6021] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 43182 - 0
[  363.720272][ T6021] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 43182 - 0
[  363.729509][ T6021] geneve2: entered promiscuous mode
[  363.735096][ T6021] geneve2: entered allmulticast mode
[  364.031303][ T5711] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  364.097537][ T6029] netlink: 'syz.3.177': attribute type 16 has an invalid length.
[  364.106127][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'.
[  364.271035][ T5711] usb 1-1: Using ep0 maxpacket: 16
[  364.707473][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  364.719842][ T5711] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  364.729346][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.299346][ T5711] usb 1-1: config 0 descriptor??
[  366.645633][ T5711] usb 1-1: can't set config #0, error -71
[  366.690633][ T5711] usb 1-1: USB disconnect, device number 6
[  366.875302][ T6041] loop2: detected capacity change from 0 to 1024
[  367.015979][ T6041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  367.066433][ T6041] UDF-fs: error (device loop2): udf_read_inode: (ino 832) failed !bh
[  367.074987][ T6041] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=48, partition=0
[  379.243454][ T6070] netlink: 'syz.0.191': attribute type 16 has an invalid length.
[  379.251994][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'.
[  379.491205][ T5190] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.505646][ T5190] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.515192][ T5190] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.535892][ T5190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.547485][ T5190] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  379.576419][ T5190] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  380.526512][ T5194] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.536137][ T5194] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.543175][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'.
[  380.623968][ T5186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.638542][ T5186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  380.717652][ T5186] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  380.728304][ T5186] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  380.743797][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  380.745041][ T5186] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  380.776744][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  380.788569][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  380.799299][   T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  380.814129][ T5186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  381.626522][ T6072] chnl_net:caif_netlink_parms(): no params data found
[  381.680195][ T5194] Bluetooth: hci3: command tx timeout
[  382.873778][ T5194] Bluetooth: hci5: command tx timeout
[  382.963514][ T5194] Bluetooth: hci6: command tx timeout
[  383.124094][ T6084] chnl_net:caif_netlink_parms(): no params data found
[  383.169311][ T6087] chnl_net:caif_netlink_parms(): no params data found
[  383.751592][ T5194] Bluetooth: hci3: command tx timeout
[  383.956404][ T3864] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.913004][ T5194] Bluetooth: hci5: command tx timeout
[  385.918551][ T5194] Bluetooth: hci6: command tx timeout
[  385.924412][ T5186] Bluetooth: hci3: command tx timeout
[  386.157776][ T3864] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.316126][ T3864] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.536365][ T3864] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.575394][ T6118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'.
[  386.845699][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.853868][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.861884][ T6072] bridge_slave_0: entered allmulticast mode
[  386.871114][ T6072] bridge_slave_0: entered promiscuous mode
[  387.187980][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.195637][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.209610][ T6072] bridge_slave_1: entered allmulticast mode
[  387.217868][ T6072] bridge_slave_1: entered promiscuous mode
[  387.402026][ T3864] bridge_slave_1: left allmulticast mode
[  387.413631][ T3864] bridge_slave_1: left promiscuous mode
[  387.420326][ T3864] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.486849][ T3864] bridge_slave_0: left allmulticast mode
[  387.498094][ T3864] bridge_slave_0: left promiscuous mode
[  387.505590][ T3864] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.002286][ T5194] Bluetooth: hci6: command tx timeout
[  388.005041][ T5190] Bluetooth: hci3: command tx timeout
[  388.007830][ T5194] Bluetooth: hci5: command tx timeout
[  388.048188][ T3864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.096245][ T3864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.133887][ T3864] bond0 (unregistering): Released all slaves
[  388.305158][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.314049][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.322308][ T6084] bridge_slave_0: entered allmulticast mode
[  388.338432][ T6084] bridge_slave_0: entered promiscuous mode
[  388.497848][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.505810][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.514637][ T6087] bridge_slave_0: entered allmulticast mode
[  388.522937][ T6087] bridge_slave_0: entered promiscuous mode
[  388.606357][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.614236][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.621915][ T6084] bridge_slave_1: entered allmulticast mode
[  388.629982][ T6084] bridge_slave_1: entered promiscuous mode
[  388.657199][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.669654][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.681240][ T6087] bridge_slave_1: entered allmulticast mode
[  388.689210][ T6087] bridge_slave_1: entered promiscuous mode
[  388.838621][ T6072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.839963][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'.
[  389.292856][ T6087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.340624][ T6072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.397239][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.450575][ T6087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.574866][ T3864] hsr_slave_0: left promiscuous mode
[  389.583823][ T3864] hsr_slave_1: left promiscuous mode
[  389.617946][ T3864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  389.625779][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.675653][ T3864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.683530][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.741540][ T3864] veth1_macvtap: left promiscuous mode
[  389.747315][ T3864] veth0_macvtap: left promiscuous mode
[  389.753593][ T3864] veth1_vlan: left promiscuous mode
[  389.759153][ T3864] veth0_vlan: left promiscuous mode
[  390.076794][ T5194] Bluetooth: hci6: command tx timeout
[  390.076826][ T5190] Bluetooth: hci5: command tx timeout
[  391.574327][ T3864] team0 (unregistering): Port device team_slave_1 removed
[  391.651141][ T3864] team0 (unregistering): Port device team_slave_0 removed
[  392.331603][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.505694][ T6072] team0: Port device team_slave_0 added
[  393.066762][ T6072] team0: Port device team_slave_1 added
[  393.089117][ T6087] team0: Port device team_slave_0 added
[  393.106430][ T6084] team0: Port device team_slave_0 added
[  393.273509][ T6087] team0: Port device team_slave_1 added
[  393.285841][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.294535][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.322308][ T6072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.367441][ T6084] team0: Port device team_slave_1 added
[  393.580221][ T6072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.589008][ T6072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.616812][ T6072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.854205][ T5190] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.868935][ T5190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.885795][ T5190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  393.899634][ T5190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  393.913723][ T5190] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  393.923285][ T5190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  393.982484][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.989752][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.016271][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.306773][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.314122][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.340709][ T6084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.418996][ T6072] hsr_slave_0: entered promiscuous mode
[  394.463252][ T6072] hsr_slave_1: entered promiscuous mode
[  394.489040][ T6072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  394.498295][ T6072] Cannot create hsr debugfs directory
[  394.512030][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.519174][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.546257][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.653152][ T3864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.712291][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.720457][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.746994][ T6084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.068296][ T3864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.314695][ T3864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.490006][ T3864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.755324][ T6087] hsr_slave_0: entered promiscuous mode
[  395.778256][ T6087] hsr_slave_1: entered promiscuous mode
[  395.825609][ T6087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.833825][ T6087] Cannot create hsr debugfs directory
[  396.023945][ T5190] Bluetooth: hci2: command tx timeout
[  396.128095][ T6084] hsr_slave_0: entered promiscuous mode
[  396.185009][ T6084] hsr_slave_1: entered promiscuous mode
[  396.234350][ T6084] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  396.242322][ T6084] Cannot create hsr debugfs directory
[  396.593133][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.210'.
[  396.632127][ T3864] bridge_slave_1: left allmulticast mode
[  396.638046][ T3864] bridge_slave_1: left promiscuous mode
[  396.644764][ T3864] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.769278][ T3864] bridge_slave_0: left allmulticast mode
[  396.775288][ T3864] bridge_slave_0: left promiscuous mode
[  396.782077][ T3864] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.625777][ T3864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.705552][ T3864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.803233][ T3864] bond0 (unregistering): Released all slaves
[  398.076183][ T5190] Bluetooth: hci2: command tx timeout
[  398.096748][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'.
[  398.426674][ T6072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.767262][ T6072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.220543][ T6072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.390384][ T3864] hsr_slave_0: left promiscuous mode
[  399.429974][ T3864] hsr_slave_1: left promiscuous mode
[  399.449210][ T3864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.457313][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  399.527122][ T3864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.535990][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.618352][ T3864] veth1_macvtap: left promiscuous mode
[  399.624298][ T3864] veth0_macvtap: left promiscuous mode
[  399.630204][ T3864] veth1_vlan: left promiscuous mode
[  399.635958][ T3864] veth0_vlan: left promiscuous mode
[  400.160143][ T5190] Bluetooth: hci2: command tx timeout
[  400.725912][ T3864] team0 (unregistering): Port device team_slave_1 removed
[  400.772207][ T3864] team0 (unregistering): Port device team_slave_0 removed
[  401.207120][ T6072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.281683][ T6137] chnl_net:caif_netlink_parms(): no params data found
[  402.123027][ T6072] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  402.187879][ T6072] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  402.231887][ T5190] Bluetooth: hci2: command tx timeout
[  402.268608][ T6072] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  402.408768][ T6072] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  402.528885][ T3864] bridge_slave_1: left allmulticast mode
[  402.535329][ T3864] bridge_slave_1: left promiscuous mode
[  402.542268][ T3864] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.601893][ T3864] bridge_slave_0: left allmulticast mode
[  402.607794][ T3864] bridge_slave_0: left promiscuous mode
[  402.614865][ T3864] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.287952][ T3864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.320443][ T3864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  403.338884][ T3864] bond0 (unregistering): Released all slaves
[  403.388509][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  403.395445][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  403.443260][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.217'.
[  403.924168][ T6087] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  404.066759][ T6087] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  404.204552][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.212483][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.220300][ T6137] bridge_slave_0: entered allmulticast mode
[  404.234245][ T6137] bridge_slave_0: entered promiscuous mode
[  404.285489][ T6087] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  404.347194][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.355345][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.363298][ T6137] bridge_slave_1: entered allmulticast mode
[  404.372608][ T6137] bridge_slave_1: entered promiscuous mode
[  404.417845][ T3864] hsr_slave_0: left promiscuous mode
[  404.436574][ T3864] hsr_slave_1: left promiscuous mode
[  404.446430][ T3864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.454360][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.467802][ T3864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.476055][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.531407][ T3864] veth1_macvtap: left promiscuous mode
[  404.537195][ T3864] veth0_macvtap: left promiscuous mode
[  404.543236][ T3864] veth1_vlan: left promiscuous mode
[  404.548779][ T3864] veth0_vlan: left promiscuous mode
[  404.823060][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[  405.236802][ T3864] team0 (unregistering): Port device team_slave_1 removed
[  405.259565][ T3864] team0 (unregistering): Port device team_slave_0 removed
[  405.668661][ T6087] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  406.055087][ T6137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.233218][ T6137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.398339][ T6137] team0: Port device team_slave_0 added
[  406.460068][ T6084] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  406.520024][ T6084] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  406.585808][ T6137] team0: Port device team_slave_1 added
[  406.651190][ T6084] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  406.803335][ T3864] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.818974][ T6084] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  406.972643][ T6137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.979913][ T6137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.006782][ T6137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.073677][ T3864] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.148173][ T6137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.155595][ T6137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.184859][ T6137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.236366][ T3864] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.312652][ T6072] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.412344][ T3864] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.641192][ T6137] hsr_slave_0: entered promiscuous mode
[  407.659070][ T6137] hsr_slave_1: entered promiscuous mode
[  407.688699][ T6137] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  407.696666][ T6137] Cannot create hsr debugfs directory
[  407.793026][ T6072] 8021q: adding VLAN 0 to HW filter on device team0
[  407.916929][ T1583] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.924688][ T1583] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.021569][ T1583] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.029244][ T1583] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.321610][ T3864] bridge_slave_1: left allmulticast mode
[  408.327512][ T3864] bridge_slave_1: left promiscuous mode
[  408.335167][ T3864] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.358599][ T3864] bridge_slave_0: left allmulticast mode
[  408.365584][ T3864] bridge_slave_0: left promiscuous mode
[  408.372413][ T3864] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.918956][ T3864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  408.939459][ T3864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  408.962064][ T3864] bond0 (unregistering): Released all slaves
[  409.038897][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[  409.196918][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.745666][ T6087] 8021q: adding VLAN 0 to HW filter on device team0
[  409.810261][ T6084] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.910917][ T2547] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.918649][ T2547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.980269][ T3864] hsr_slave_0: left promiscuous mode
[  409.997091][ T3864] hsr_slave_1: left promiscuous mode
[  410.022525][ T3864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.030367][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.060688][ T3864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.068750][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.099276][ T3864] veth1_macvtap: left promiscuous mode
[  410.105769][ T3864] veth0_macvtap: left promiscuous mode
[  410.111961][ T3864] veth1_vlan: left promiscuous mode
[  410.117513][ T3864] veth0_vlan: left promiscuous mode
[  411.057352][ T3864] team0 (unregistering): Port device team_slave_1 removed
[  411.103118][ T3864] team0 (unregistering): Port device team_slave_0 removed
[  412.199014][ T6087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  412.210080][ T6087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  412.504718][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.512564][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.789226][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'.
[  412.808985][ T6084] 8021q: adding VLAN 0 to HW filter on device team0
[  412.936941][ T3864] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.944810][ T3864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.148148][ T3864] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.155929][ T3864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.536815][ T6137] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  413.585439][ T6137] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  413.658465][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.669243][ T6137] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  413.731984][ T6137] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  413.762652][   T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  414.045139][   T25] usb 1-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  414.058550][   T25] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  414.069132][   T25] usb 1-1: config 16 has no interfaces?
[  414.075333][   T25] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  414.084810][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.195862][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.246914][ T6072] veth0_vlan: entered promiscuous mode
[  414.378009][ T6072] veth1_vlan: entered promiscuous mode
[  414.608295][ T5639] usb 1-1: USB disconnect, device number 7
[  414.768459][ T6087] veth0_vlan: entered promiscuous mode
[  414.799276][ T6072] veth0_macvtap: entered promiscuous mode
[  414.918214][ T6072] veth1_macvtap: entered promiscuous mode
[  414.957125][ T6087] veth1_vlan: entered promiscuous mode
[  415.089204][ T6084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.117846][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.128796][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.144263][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.211691][ T6137] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.337753][ T6072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.348675][ T6072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.365390][ T6072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.442874][ T6072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.452215][ T6072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.461576][ T6072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.471815][ T6072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.555037][ T6137] 8021q: adding VLAN 0 to HW filter on device team0
[  415.590632][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.598428][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.614345][ T6087] veth0_macvtap: entered promiscuous mode
[  415.689309][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.697058][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.815263][ T6087] veth1_macvtap: entered promiscuous mode
[  416.069766][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.081808][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.093938][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.104707][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.119817][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.179874][ T6084] veth0_vlan: entered promiscuous mode
[  416.324828][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.335836][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.346085][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.356944][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.372077][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.415048][ T6084] veth1_vlan: entered promiscuous mode
[  416.619528][ T6087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.630388][ T6087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.639763][ T6087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.649013][ T6087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.794599][ T6084] veth0_macvtap: entered promiscuous mode
[  416.899433][ T6084] veth1_macvtap: entered promiscuous mode
[  417.074479][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.086127][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.096466][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.107214][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.117397][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.128235][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.143347][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  417.251111][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.263468][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.273788][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.284589][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.294646][ T6084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.305551][ T6084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.320411][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.548692][ T6084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.557938][ T6084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.567107][ T6084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.576308][ T6084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.984759][ T6137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.259625][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'.
[  419.919104][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'.
[  420.308048][ T6137] veth0_vlan: entered promiscuous mode
[  420.466532][ T6137] veth1_vlan: entered promiscuous mode
[  420.663606][ T6274] loop0: detected capacity change from 0 to 1024
[  420.762882][ T6137] veth0_macvtap: entered promiscuous mode
[  420.847315][ T6137] veth1_macvtap: entered promiscuous mode
[  421.436625][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.447485][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.457764][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.469000][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.479209][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.489959][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.500491][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.516267][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.526384][ T6281] netlink: 'syz.0.236': attribute type 16 has an invalid length.
[  421.526456][ T6281] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.236'.
[  421.553573][ T6137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.652020][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.662893][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.673246][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.684056][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.694710][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.705469][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.717753][ T6137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.729465][ T6137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.744697][ T6137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.031202][ T6137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.040273][ T6137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.049548][ T6137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.058733][ T6137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.432906][ T3971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.442058][ T3971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.592451][ T1583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.600706][ T1583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.702380][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'.
[  423.791051][ T2547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.799107][ T2547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.933037][ T6309] netlink: 'syz.0.238': attribute type 1 has an invalid length.
[  424.037887][ T2547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.046882][ T2547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.500008][ T3276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.508813][ T3276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.627136][ T3276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.636293][ T3276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.200020][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'.
[  425.240320][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[  425.793405][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'.
[  426.285920][ T6348] netlink: 'syz.0.249': attribute type 1 has an invalid length.
[  427.543000][ T5249] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  427.685019][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.693457][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.877854][ T6371] loop1: detected capacity change from 0 to 256
[  427.890267][ T3971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.898604][ T3971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.906845][ T5249] usb 4-1: Using ep0 maxpacket: 8
[  427.944065][ T5249] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  427.952847][ T5249] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  427.969990][ T5249] usb 4-1: config 0 has no interface number 0
[  427.978819][ T5249] usb 4-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  427.990531][ T5249] usb 4-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  428.002529][ T5249] usb 4-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  428.014192][ T5249] usb 4-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  428.097517][ T5249] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  428.107333][ T5249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.116867][ T5249] usb 4-1: Product: syz
[  428.121479][ T5249] usb 4-1: Manufacturer: syz
[  428.126330][ T5249] usb 4-1: SerialNumber: syz
[  428.150166][ T6371] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  428.181621][ T5249] usb 4-1: config 0 descriptor??
[  428.246273][ T5249] ttusb_dec_send_command: command bulk message failed: error -8
[  428.257730][ T5249] ttusb-dec 4-1:0.113: probe with driver ttusb-dec failed with error -8
[  428.277364][ T5249] usbhid 4-1:0.113: couldn't find an input interrupt endpoint
[  428.518842][ T6350] loop2: detected capacity change from 0 to 8192
[  428.602216][ T6350] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  428.814564][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.259'.
[  429.182589][ T6386] netlink: 'syz.4.261': attribute type 1 has an invalid length.
[  429.784978][ T6398] loop2: detected capacity change from 0 to 1024
[  429.888419][ T6398] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002]
[  429.897622][ T6398] System zones: 0-1, 3-12
[  429.920494][ T6398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.860209][ T5249] usb 4-1: USB disconnect, device number 2
[  431.258017][ T6407] bridge0: port 3(team0) entered blocking state
[  431.265112][ T6407] bridge0: port 3(team0) entered disabled state
[  431.272383][ T6407] team0: entered allmulticast mode
[  431.277725][ T6407] team_slave_0: entered allmulticast mode
[  431.283836][ T6407] team_slave_1: entered allmulticast mode
[  431.294950][ T6407] team0: entered promiscuous mode
[  431.300299][ T6407] team_slave_0: entered promiscuous mode
[  431.307293][ T6407] team_slave_1: entered promiscuous mode
[  431.316386][ T6407] bridge0: port 3(team0) entered blocking state
[  431.323386][ T6407] bridge0: port 3(team0) entered forwarding state
[  431.767744][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'.
[  431.808910][ T6084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.343336][ T6422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.274'.
[  432.558810][ T6425] loop0: detected capacity change from 0 to 256
[  433.028347][ T6425] FAT-fs (loop0): Directory bread(block 64) failed
[  433.035705][ T6425] FAT-fs (loop0): Directory bread(block 65) failed
[  433.042879][ T6425] FAT-fs (loop0): Directory bread(block 66) failed
[  433.049643][ T6425] FAT-fs (loop0): Directory bread(block 67) failed
[  433.056698][ T6425] FAT-fs (loop0): Directory bread(block 68) failed
[  433.063743][ T6425] FAT-fs (loop0): Directory bread(block 69) failed
[  433.070648][ T6425] FAT-fs (loop0): Directory bread(block 70) failed
[  433.085321][ T6425] FAT-fs (loop0): Directory bread(block 71) failed
[  433.094932][ T6425] FAT-fs (loop0): Directory bread(block 72) failed
[  433.101874][ T6425] FAT-fs (loop0): Directory bread(block 73) failed
[  433.851119][ T5249] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  434.540521][ T6447] loop3: detected capacity change from 0 to 256
[  434.603114][ T6447] =======================================================
[  434.603114][ T6447] WARNING: The mand mount option has been deprecated and
[  434.603114][ T6447]          and is ignored by this kernel. Remove the mand
[  434.603114][ T6447]          option from the mount to silence this warning.
[  434.603114][ T6447] =======================================================
[  434.641609][ T6447] exfat: Invalid uid '0x00000000ffffffff'
[  434.727264][ T6435] loop2: detected capacity change from 0 to 4096
[  434.884552][ T6448] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  435.678720][ T5249] usb 2-1: Using ep0 maxpacket: 8
[  435.704458][ T5249] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  435.713069][ T5249] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.723636][ T5249] usb 2-1: config 0 has no interface number 0
[  435.729979][ T5249] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  435.748199][ T5249] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  435.761932][ T5249] usb 2-1: config 0 interface 113 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7
[  435.816553][ T5249] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  435.826180][ T5249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.836358][ T5249] usb 2-1: Product: syz
[  435.841193][ T5249] usb 2-1: Manufacturer: syz
[  435.852584][ T5249] usb 2-1: SerialNumber: syz
[  435.898384][ T5249] usb 2-1: config 0 descriptor??
[  435.903304][ T6452] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  435.942923][ T5249] ttusb_dec_send_command: command bulk message failed: error -8
[  435.965047][ T5249] ttusb-dec 2-1:0.113: probe with driver ttusb-dec failed with error -8
[  435.975101][ T5249] usbhid 2-1:0.113: couldn't find an input interrupt endpoint
[  436.685558][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.287'.
[  436.730324][ T5249] usb 2-1: USB disconnect, device number 2
[  436.819950][ T6463] loop2: detected capacity change from 0 to 16
[  436.851645][ T6463] cramfs: bad root offset 24652
[  436.950229][ T6463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.288'.
[  437.027535][ T6467] netlink: 172 bytes leftover after parsing attributes in process `syz.2.288'.
[  437.117875][ T6463] Cannot find add_set index 0 as target
[  438.013244][ T6482] loop3: detected capacity change from 0 to 256
[  438.022860][ T6482] exfat: Invalid uid '0x00000000ffffffff'
[  438.068372][ T6484] loop1: detected capacity change from 0 to 256
[  438.304592][ T6484] FAT-fs (loop1): Directory bread(block 64) failed
[  438.315452][ T6484] FAT-fs (loop1): Directory bread(block 65) failed
[  438.323092][ T6484] FAT-fs (loop1): Directory bread(block 66) failed
[  438.329861][ T6484] FAT-fs (loop1): Directory bread(block 67) failed
[  438.336976][ T6484] FAT-fs (loop1): Directory bread(block 68) failed
[  438.343892][ T6484] FAT-fs (loop1): Directory bread(block 69) failed
[  438.351069][ T6484] FAT-fs (loop1): Directory bread(block 70) failed
[  438.357832][ T6484] FAT-fs (loop1): Directory bread(block 71) failed
[  438.365361][ T6484] FAT-fs (loop1): Directory bread(block 72) failed
[  438.372503][ T6484] FAT-fs (loop1): Directory bread(block 73) failed
[  439.299167][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'.
[  439.931559][ T5236] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  440.201042][ T5236] usb 4-1: Using ep0 maxpacket: 8
[  440.267725][ T5236] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  440.276468][ T5236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.287180][ T5236] usb 4-1: config 0 has no interface number 0
[  440.293660][ T5236] usb 4-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  440.304984][ T5236] usb 4-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  440.316216][ T5236] usb 4-1: config 0 interface 113 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7
[  440.465090][ T5236] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  440.479125][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.498146][ T5236] usb 4-1: Product: syz
[  440.502706][ T5236] usb 4-1: Manufacturer: syz
[  440.507522][ T5236] usb 4-1: SerialNumber: syz
[  440.650653][ T6511] loop0: detected capacity change from 0 to 16
[  440.684004][ T5236] usb 4-1: config 0 descriptor??
[  440.768032][ T5236] ttusb_dec_send_command: command bulk message failed: error -8
[  440.777176][ T5236] ttusb-dec 4-1:0.113: probe with driver ttusb-dec failed with error -8
[  440.787248][ T5236] usbhid 4-1:0.113: couldn't find an input interrupt endpoint
[  440.852962][ T6511] cramfs: bad root offset 24652
[  441.234528][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'.
[  441.293429][ T5186] Bluetooth: hci0: command 0x0406 tx timeout
[  441.629446][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.307'.
[  441.688197][ T6526] loop2: detected capacity change from 0 to 1024
[  441.712042][ T6526] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  441.776766][ T6526] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  441.793424][ T6526] EXT4-fs (loop2): orphan cleanup on readonly fs
[  441.807745][ T6526] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=2
[  441.817933][ T6526] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  441.833231][ T6526] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  441.843842][ T6526] EXT4-fs (loop2): 1 truncate cleaned up
[  441.851426][ T6526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  442.247718][ T6533] loop1: detected capacity change from 0 to 256
[  442.357081][ T6533] exfat: Invalid uid '0x00000000ffffffff'
[  442.523658][ T6084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.810447][ T1668] usb 4-1: USB disconnect, device number 3
[  443.213647][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'.
[  443.738747][ T6556] loop0: detected capacity change from 0 to 16
[  443.783520][ T6556] cramfs: bad root offset 24652
[  444.048335][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'.
[  444.268125][ T6562] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  445.131268][ T4641] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  445.206193][ T6574] usb usb5: usbfs: process 6574 (syz.0.325) did not claim interface 0 before use
[  445.353143][ T4641] usb 4-1: Using ep0 maxpacket: 8
[  445.390938][ T4641] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  445.399541][ T4641] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  445.410096][ T4641] usb 4-1: config 0 has no interface number 0
[  445.416717][ T4641] usb 4-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  445.428366][ T4641] usb 4-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  445.439695][ T4641] usb 4-1: config 0 interface 113 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 7
[  445.525653][ T4641] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  445.535516][ T4641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.543824][ T4641] usb 4-1: Product: syz
[  445.548399][ T4641] usb 4-1: Manufacturer: syz
[  445.553256][ T4641] usb 4-1: SerialNumber: syz
[  445.667934][ T4641] usb 4-1: config 0 descriptor??
[  445.703669][ T4641] ttusb_dec_send_command: command bulk message failed: error -8
[  445.712613][ T4641] ttusb-dec 4-1:0.113: probe with driver ttusb-dec failed with error -8
[  445.722381][ T4641] usbhid 4-1:0.113: couldn't find an input interrupt endpoint
[  446.270272][ T6585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.328'.
[  446.680419][ T6596] loop1: detected capacity change from 0 to 1024
[  446.763842][ T6596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.984475][ T6596] syz.1.331: attempt to access beyond end of device
[  446.984475][ T6596] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0
[  447.193495][ T6611] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  447.225153][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'.
[  447.568756][ T6072] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.691297][   T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  447.733762][ T6619] ax25_connect(): syz.0.337 uses autobind, please contact jreuter@yaina.de
[  447.746051][ T5236] IPVS: starting estimator thread 0...
[  447.841818][ T6620] IPVS: using max 240 ests per chain, 12000 per kthread
[  447.911415][   T25] usb 3-1: Using ep0 maxpacket: 16
[  448.029725][   T25] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  448.039204][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.047597][   T25] usb 3-1: Product: syz
[  448.052061][   T25] usb 3-1: Manufacturer: syz
[  448.056889][   T25] usb 3-1: SerialNumber: syz
[  448.097701][ T5249] usb 4-1: USB disconnect, device number 4
[  448.142850][   T25] r8152-cfgselector 3-1: Unknown version 0x0000
[  448.149474][   T25] r8152-cfgselector 3-1: config 0 descriptor??
[  448.632281][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.343'.
[  448.944879][   T29] audit: type=1326 audit(1725943890.250:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  448.964462][ T6627] sctp: failed to load transform for md5: -2
[  448.970680][   T29] audit: type=1326 audit(1725943890.250:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  448.996123][   T29] audit: type=1326 audit(1725943890.260:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  449.018596][   T29] audit: type=1326 audit(1725943890.260:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  449.041234][   T29] audit: type=1326 audit(1725943890.270:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  449.065710][   T29] audit: type=1326 audit(1725943890.270:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  449.088410][   T29] audit: type=1326 audit(1725943890.310:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  449.111089][   T29] audit: type=1326 audit(1725943890.310:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  449.134049][   T29] audit: type=1326 audit(1725943890.310:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  449.159600][   T29] audit: type=1326 audit(1725943890.310:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad48b7def9 code=0x7ffc0000
[  449.341327][ T4641] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  449.405367][   T25] r8152-cfgselector 3-1: Unknown version 0x0000
[  449.412223][   T25] r8152-cfgselector 3-1: bad CDC descriptors
[  449.532441][   T25] r8152-cfgselector 3-1: USB disconnect, device number 2
[  449.622236][ T4641] usb 4-1: Using ep0 maxpacket: 32
[  449.696578][ T4641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.708110][ T4641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.719165][ T4641] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  449.729884][ T4641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.785411][ T4641] usb 4-1: config 0 descriptor??
[  450.064149][ T6649] usb usb5: usbfs: process 6649 (syz.0.346) did not claim interface 0 before use
[  450.369210][ T4641] glorious 0003:258A:0033.0001: item fetching failed at offset 2/3
[  450.432543][ T4641] glorious 0003:258A:0033.0001: probe with driver glorious failed with error -22
[  450.599556][ T5236] usb 4-1: USB disconnect, device number 5
[  450.828662][ T6659] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  453.042512][   T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  453.273098][   T25] usb 1-1: Using ep0 maxpacket: 8
[  453.292205][   T25] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  453.300753][   T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  453.311440][   T25] usb 1-1: config 0 has no interface number 0
[  453.317725][   T25] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  453.329016][   T25] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  453.340500][   T25] usb 1-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  453.353847][   T25] usb 1-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  453.450109][   T25] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  453.452243][ T6674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.355'.
[  453.462301][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.462446][   T25] usb 1-1: Product: syz
[  453.462551][   T25] usb 1-1: Manufacturer: syz
[  453.462659][   T25] usb 1-1: SerialNumber: syz
[  453.493287][   T25] usb 1-1: config 0 descriptor??
[  453.546192][   T25] ttusb_dec_send_command: command bulk message failed: error -8
[  453.554844][   T25] ttusb-dec 1-1:0.113: probe with driver ttusb-dec failed with error -8
[  453.567106][   T25] usbhid 1-1:0.113: couldn't find an input interrupt endpoint
[  454.050106][ T6682] usb usb5: usbfs: process 6682 (syz.2.358) did not claim interface 0 before use
[  454.781194][ T4641] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  455.024093][ T6696] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  455.038636][ T4641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.050485][ T4641] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00
[  455.060130][ T4641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.077697][ T4641] usb 5-1: config 0 descriptor??
[  456.229703][ T6690] binder: 6689:6690 ioctl 4018620d 0 returned -22
[  456.260106][ T6708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.368'.
[  456.276651][ T4641] sony 0003:054C:0374.0002: item fetching failed at offset 6/7
[  456.315794][ T4641] sony 0003:054C:0374.0002: parse failed
[  456.322305][ T4641] sony 0003:054C:0374.0002: probe with driver sony failed with error -22
[  456.366069][   T25] usb 1-1: USB disconnect, device number 8
[  456.492972][ T4641] usb 5-1: USB disconnect, device number 2
[  461.879817][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'.
[  461.883929][ T6738] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  462.071379][ T5236] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  462.312018][ T5236] usb 1-1: Using ep0 maxpacket: 8
[  462.329651][ T5236] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  462.338490][ T5236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.349136][ T5236] usb 1-1: config 0 has no interface number 0
[  462.355643][ T5236] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  462.368671][ T5236] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  462.380872][ T5236] usb 1-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  462.395133][ T5236] usb 1-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  462.453829][ T5236] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  462.463573][ T5236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.473754][ T5236] usb 1-1: Product: syz
[  462.478249][ T5236] usb 1-1: Manufacturer: syz
[  462.483793][ T5236] usb 1-1: SerialNumber: syz
[  462.513221][ T5236] usb 1-1: config 0 descriptor??
[  462.548334][ T5236] ttusb_dec_send_command: command bulk message failed: error -8
[  462.557549][ T5236] ttusb-dec 1-1:0.113: probe with driver ttusb-dec failed with error -8
[  462.567630][ T5236] usbhid 1-1:0.113: couldn't find an input interrupt endpoint
[  462.701323][ T6751] usb usb5: usbfs: process 6751 (syz.4.385) did not claim interface 0 before use
[  463.539463][ T5236] usb 1-1: USB disconnect, device number 9
[  463.656298][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'.
[  464.448430][ T6774] loop1: detected capacity change from 0 to 1024
[  464.630216][ T6774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  464.715065][ T6774] UDF-fs: error (device loop1): udf_read_inode: (ino 832) failed !bh
[  464.728226][ T6774] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0
[  464.849508][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  464.856371][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  465.813750][ T5236] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  466.002211][ T6804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.403'.
[  466.021141][ T5236] usb 5-1: Using ep0 maxpacket: 8
[  466.048670][ T5236] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  466.059162][ T5236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  466.070325][ T5236] usb 5-1: config 0 has no interface number 0
[  466.076812][ T5236] usb 5-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  466.088167][ T5236] usb 5-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  466.099416][ T5236] usb 5-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  466.110454][ T5236] usb 5-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  466.195029][ T5236] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  466.204705][ T5236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.213519][ T5236] usb 5-1: Product: syz
[  466.217806][ T5236] usb 5-1: Manufacturer: syz
[  466.222568][ T5236] usb 5-1: SerialNumber: syz
[  466.270066][ T5236] usb 5-1: config 0 descriptor??
[  466.318863][ T5236] ttusb_dec_send_command: command bulk message failed: error -8
[  466.328710][ T5236] ttusb-dec 5-1:0.113: probe with driver ttusb-dec failed with error -8
[  466.338752][ T5236] usbhid 5-1:0.113: couldn't find an input interrupt endpoint
[  468.804286][ T4641] usb 5-1: USB disconnect, device number 3
[  468.839154][ T6829] loop0: detected capacity change from 0 to 1024
[  469.110066][ T6829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  469.213983][ T6829] UDF-fs: error (device loop0): udf_read_inode: (ino 832) failed !bh
[  469.222634][ T6829] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=48, partition=0
[  469.358813][ T6835] netlink: 44 bytes leftover after parsing attributes in process `syz.2.412'.
[  471.084978][ T6841] usb usb5: usbfs: process 6841 (syz.3.414) did not claim interface 0 before use
[  471.355332][ T6846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'.
[  472.961631][ T5236] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  473.474665][ T5236] usb 3-1: Using ep0 maxpacket: 8
[  473.500508][ T5236] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[  473.509341][ T5236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.520006][ T5236] usb 3-1: config 0 has no interface number 0
[  473.528077][ T5236] usb 3-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  473.540078][ T5236] usb 3-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  473.551468][ T5236] usb 3-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  473.562608][ T5236] usb 3-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  473.605287][ T5236] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  473.614988][ T5236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.623534][ T5236] usb 3-1: Product: syz
[  473.629767][ T5236] usb 3-1: Manufacturer: syz
[  473.640548][ T5236] usb 3-1: SerialNumber: syz
[  473.651146][ T5236] usb 3-1: config 0 descriptor??
[  473.673857][ T5236] ttusb_dec_send_command: command bulk message failed: error -8
[  473.683027][ T5236] ttusb-dec 3-1:0.113: probe with driver ttusb-dec failed with error -8
[  473.693120][ T5236] usbhid 3-1:0.113: couldn't find an input interrupt endpoint
[  473.903038][ T6881] netlink: 44 bytes leftover after parsing attributes in process `syz.0.427'.
[  474.177656][ T6885] loop1: detected capacity change from 0 to 1024
[  474.276966][ T6885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  474.351740][ T6885] UDF-fs: error (device loop1): udf_read_inode: (ino 832) failed !bh
[  474.360132][ T6885] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0
[  474.374746][ T6889] usb usb5: usbfs: process 6889 (syz.3.429) did not claim interface 0 before use
[  474.740061][ T6896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'.
[  476.442369][ T5236] usb 3-1: USB disconnect, device number 3
[  476.747976][ T6916] netlink: 44 bytes leftover after parsing attributes in process `syz.4.441'.
[  477.135120][ T6926] usb usb5: usbfs: process 6926 (syz.0.442) did not claim interface 0 before use
[  477.347716][ T6930] loop1: detected capacity change from 0 to 1024
[  477.439484][ T6930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  477.468397][ T6930] UDF-fs: error (device loop1): udf_read_inode: (ino 832) failed !bh
[  477.476977][ T6930] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=48, partition=0
[  477.512459][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'.
[  478.082247][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.447'.
[  478.202302][ T6945] loop2: detected capacity change from 0 to 1024
[  478.333539][ T6945] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  478.511239][ T6945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.267410][   T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  481.384326][ T6958] loop4: detected capacity change from 0 to 256
[  481.393224][ T6084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.511304][   T25] usb 2-1: Using ep0 maxpacket: 8
[  481.720730][   T25] usb 2-1: device descriptor read/all, error -71
[  481.826482][ T6962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.454'.
[  481.844734][ T6958] FAT-fs (loop4): Directory bread(block 64) failed
[  481.851832][ T6958] FAT-fs (loop4): Directory bread(block 65) failed
[  481.858727][ T6958] FAT-fs (loop4): Directory bread(block 66) failed
[  481.866136][ T6958] FAT-fs (loop4): Directory bread(block 67) failed
[  481.873262][ T6958] FAT-fs (loop4): Directory bread(block 68) failed
[  481.880021][ T6958] FAT-fs (loop4): Directory bread(block 69) failed
[  481.887150][ T6958] FAT-fs (loop4): Directory bread(block 70) failed
[  481.894081][ T6958] FAT-fs (loop4): Directory bread(block 71) failed
[  481.901147][ T6958] FAT-fs (loop4): Directory bread(block 72) failed
[  481.907911][ T6958] FAT-fs (loop4): Directory bread(block 73) failed
[  484.173005][ T6965] usb usb5: usbfs: process 6965 (syz.1.455) did not claim interface 0 before use
[  484.702801][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'.
[  485.235197][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'.
[  485.358723][ T6988] loop0: detected capacity change from 0 to 1024
[  485.448279][ T6988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  485.488320][ T6988] UDF-fs: error (device loop0): udf_read_inode: (ino 832) failed !bh
[  485.497094][ T6988] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=48, partition=0
[  485.539410][ T6995] loop3: detected capacity change from 0 to 128
[  485.591464][ T6995] FAT-fs (loop3): bogus number of reserved sectors
[  485.598243][ T6995] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  485.610676][ T6995] FAT-fs (loop3): Can't find a valid FAT filesystem
[  486.398657][ T7003] hub 6-0:1.0: USB hub found
[  486.404666][ T7003] hub 6-0:1.0: 1 port detected
[  487.978955][ T7005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.466'.
[  488.042673][   T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  488.220451][ T7007] usb usb5: usbfs: process 7007 (syz.0.468) did not claim interface 0 before use
[  488.242040][   T25] usb 2-1: Using ep0 maxpacket: 8
[  488.285586][   T25] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  488.294485][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  488.305265][   T25] usb 2-1: config 0 has no interface number 0
[  488.311662][   T25] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  488.323486][   T25] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  488.334658][   T25] usb 2-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  488.345592][   T25] usb 2-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  488.416970][   T25] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  488.426460][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.435784][   T25] usb 2-1: Product: syz
[  488.440097][   T25] usb 2-1: Manufacturer: syz
[  488.445017][   T25] usb 2-1: SerialNumber: syz
[  488.464469][   T25] usb 2-1: config 0 descriptor??
[  488.499581][   T25] ttusb_dec_send_command: command bulk message failed: error -8
[  488.508244][   T25] ttusb-dec 2-1:0.113: probe with driver ttusb-dec failed with error -8
[  488.518010][   T25] usbhid 2-1:0.113: couldn't find an input interrupt endpoint
[  490.064445][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'.
[  490.663705][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.476'.
[  491.057827][ T7042] loop4: detected capacity change from 0 to 1024
[  491.083318][ T4641] usb 2-1: USB disconnect, device number 5
[  491.172847][ T7044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.479'.
[  491.191291][ T7042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  491.214837][ T7042] UDF-fs: error (device loop4): udf_read_inode: (ino 832) failed !bh
[  491.223645][ T7042] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=48, partition=0
[  491.635544][ T7051] usb usb5: usbfs: process 7051 (syz.3.482) did not claim interface 0 before use
[  493.107752][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'.
[  494.841309][ T5249] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  495.051228][ T5249] usb 1-1: Using ep0 maxpacket: 8
[  495.089054][ T5249] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  495.091583][ T7089] netlink: 44 bytes leftover after parsing attributes in process `syz.4.493'.
[  495.097578][ T5249] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.116986][ T5249] usb 1-1: config 0 has no interface number 0
[  495.123543][ T5249] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  495.141487][ T5249] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  495.155738][ T5249] usb 1-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  495.166877][ T5249] usb 1-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  495.308778][ T5249] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  495.318369][ T5249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.326908][ T5249] usb 1-1: Product: syz
[  495.331436][ T5249] usb 1-1: Manufacturer: syz
[  495.343016][ T5249] usb 1-1: SerialNumber: syz
[  495.365974][ T5249] usb 1-1: config 0 descriptor??
[  495.400633][ T5249] ttusb_dec_send_command: command bulk message failed: error -8
[  495.409775][ T5249] ttusb-dec 1-1:0.113: probe with driver ttusb-dec failed with error -8
[  495.419937][ T5249] usbhid 1-1:0.113: couldn't find an input interrupt endpoint
[  496.482848][ T7105] usb usb5: usbfs: process 7105 (syz.3.497) did not claim interface 0 before use
[  497.929202][   T25] usb 1-1: USB disconnect, device number 10
[  498.333322][ T7136] netlink: 44 bytes leftover after parsing attributes in process `syz.1.506'.
[  506.438806][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'.
[  506.561325][ T5249] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  506.791369][ T5249] usb 3-1: Using ep0 maxpacket: 8
[  506.835344][ T5249] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[  506.844000][ T5249] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  506.854393][ T5249] usb 3-1: config 0 has no interface number 0
[  506.860635][ T5249] usb 3-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  506.872011][ T5249] usb 3-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  506.883166][ T5249] usb 3-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  506.894124][ T5249] usb 3-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  507.000586][ T5249] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  507.015803][ T5249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.026625][ T5249] usb 3-1: Product: syz
[  507.031134][ T5249] usb 3-1: Manufacturer: syz
[  507.035913][ T5249] usb 3-1: SerialNumber: syz
[  507.093384][ T5249] usb 3-1: config 0 descriptor??
[  507.128391][ T5249] ttusb_dec_send_command: command bulk message failed: error -8
[  507.137098][ T5249] ttusb-dec 3-1:0.113: probe with driver ttusb-dec failed with error -8
[  507.147298][ T5249] usbhid 3-1:0.113: couldn't find an input interrupt endpoint
[  507.374108][ T7171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.519'.
[  507.433809][ T7154] Bluetooth: hci3: command 0x0406 tx timeout
[  507.835981][ T5186] Bluetooth: hci5: command 0x0406 tx timeout
[  507.842541][ T5186] Bluetooth: hci6: command 0x0406 tx timeout
[  507.992750][ T7190] loop0: detected capacity change from 0 to 256
[  508.221839][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[  508.424670][ T7190] FAT-fs (loop0): Directory bread(block 64) failed
[  508.431889][ T7190] FAT-fs (loop0): Directory bread(block 65) failed
[  508.438827][ T7190] FAT-fs (loop0): Directory bread(block 66) failed
[  508.448250][ T7190] FAT-fs (loop0): Directory bread(block 67) failed
[  508.455884][ T7190] FAT-fs (loop0): Directory bread(block 68) failed
[  508.462741][ T7190] FAT-fs (loop0): Directory bread(block 69) failed
[  508.472942][ T7190] FAT-fs (loop0): Directory bread(block 70) failed
[  508.482963][ T7190] FAT-fs (loop0): Directory bread(block 71) failed
[  508.491028][ T7190] FAT-fs (loop0): Directory bread(block 72) failed
[  508.497812][ T7190] FAT-fs (loop0): Directory bread(block 73) failed
[  509.901870][ T5236] usb 3-1: USB disconnect, device number 4
[  510.309342][ T7208] netlink: 44 bytes leftover after parsing attributes in process `syz.2.532'.
[  512.192965][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'.
[  512.611085][ T4641] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  512.768945][ T7243] netlink: 44 bytes leftover after parsing attributes in process `syz.1.546'.
[  512.857345][ T4641] usb 1-1: Using ep0 maxpacket: 8
[  512.886594][ T4641] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  512.895266][ T4641] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.905905][ T4641] usb 1-1: config 0 has no interface number 0
[  512.912447][ T4641] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  512.924170][ T4641] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  512.935407][ T4641] usb 1-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  512.946374][ T4641] usb 1-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  513.090484][ T4641] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  513.099926][ T4641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.108798][ T4641] usb 1-1: Product: syz
[  513.113289][ T4641] usb 1-1: Manufacturer: syz
[  513.118039][ T4641] usb 1-1: SerialNumber: syz
[  513.174518][ T4641] usb 1-1: config 0 descriptor??
[  513.231421][ T4641] ttusb_dec_send_command: command bulk message failed: error -8
[  513.239983][ T4641] ttusb-dec 1-1:0.113: probe with driver ttusb-dec failed with error -8
[  513.249980][ T4641] usbhid 1-1:0.113: couldn't find an input interrupt endpoint
[  513.755476][ T7253] loop1: detected capacity change from 0 to 64
[  513.794199][ T7253] syz.1.548: attempt to access beyond end of device
[  513.794199][ T7253] loop1: rw=0, sector=1048584, nr_sectors = 1 limit=64
[  513.808385][ T7253] Buffer I/O error on dev loop1, logical block 1048584, async page read
[  513.817129][ T7253] syz.1.548: attempt to access beyond end of device
[  513.817129][ T7253] loop1: rw=0, sector=1048585, nr_sectors = 1 limit=64
[  513.831034][ T7253] Buffer I/O error on dev loop1, logical block 1048585, async page read
[  513.839628][ T7253] syz.1.548: attempt to access beyond end of device
[  513.839628][ T7253] loop1: rw=0, sector=1048586, nr_sectors = 1 limit=64
[  513.853719][ T7253] Buffer I/O error on dev loop1, logical block 1048586, async page read
[  513.862505][ T7253] syz.1.548: attempt to access beyond end of device
[  513.862505][ T7253] loop1: rw=0, sector=1048587, nr_sectors = 1 limit=64
[  513.878512][ T7253] Buffer I/O error on dev loop1, logical block 1048587, async page read
[  513.887815][ T7253] syz.1.548: attempt to access beyond end of device
[  513.887815][ T7253] loop1: rw=0, sector=1048588, nr_sectors = 1 limit=64
[  513.901505][ T7253] Buffer I/O error on dev loop1, logical block 1048588, async page read
[  513.910099][ T7253] syz.1.548: attempt to access beyond end of device
[  513.910099][ T7253] loop1: rw=0, sector=1048589, nr_sectors = 1 limit=64
[  513.924528][ T7253] Buffer I/O error on dev loop1, logical block 1048589, async page read
[  513.933913][ T7253] syz.1.548: attempt to access beyond end of device
[  513.933913][ T7253] loop1: rw=0, sector=1048590, nr_sectors = 1 limit=64
[  513.947578][ T7253] Buffer I/O error on dev loop1, logical block 1048590, async page read
[  513.956389][ T7253] syz.1.548: attempt to access beyond end of device
[  513.956389][ T7253] loop1: rw=0, sector=1048591, nr_sectors = 1 limit=64
[  513.970159][ T7253] Buffer I/O error on dev loop1, logical block 1048591, async page read
[  514.034842][ T7253] hfs: unable to open catalog tree
[  514.045401][ T7253] hfs: can't find a HFS filesystem on dev loop1
[  514.233441][ T7256] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  514.954779][ T7274] loop4: detected capacity change from 0 to 64
[  515.032529][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'.
[  515.569424][ T7279] loop2: detected capacity change from 0 to 1024
[  516.271983][ T7282] netlink: 44 bytes leftover after parsing attributes in process `syz.3.558'.
[  516.312336][   T25] usb 1-1: USB disconnect, device number 11
[  516.377947][ T7279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  516.391592][ T7279] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  517.723833][ T7302] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  518.077890][ T5194] Bluetooth: hci2: command 0x0406 tx timeout
[  518.605962][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'.
[  519.474402][ T7330] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  519.482617][ T7330] netlink: 5 bytes leftover after parsing attributes in process `syz.0.572'.
[  520.638414][ T7342] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  525.913021][ T7379] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  526.304060][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  526.310880][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  526.694282][ T5194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  526.707002][ T5194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  526.733638][ T5194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  526.765452][ T5194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  526.820586][ T5194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  526.867614][ T5194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  528.147876][ T7389] chnl_net:caif_netlink_parms(): no params data found
[  528.613722][ T7279] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.651899][ T7415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.602'.
[  528.959328][ T5194] Bluetooth: hci1: command tx timeout
[  529.529970][ T7423] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  530.340388][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.350178][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.361067][ T7389] bridge_slave_0: entered allmulticast mode
[  530.370256][ T7389] bridge_slave_0: entered promiscuous mode
[  530.478265][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.486329][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.495051][ T7389] bridge_slave_1: entered allmulticast mode
[  530.504568][ T7389] bridge_slave_1: entered promiscuous mode
[  530.794837][ T7389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.886694][ T7389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  531.035833][ T5194] Bluetooth: hci1: command tx timeout
[  531.205824][ T7389] team0: Port device team_slave_0 added
[  531.448542][ T7389] team0: Port device team_slave_1 added
[  531.798063][ T3602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.847608][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.855232][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.881709][ T7389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.274625][ T3602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.400489][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.413382][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.442558][ T7389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.462655][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.615'.
[  532.692982][ T3602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.954211][ T3602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.113119][ T5194] Bluetooth: hci1: command tx timeout
[  533.119792][ T7389] hsr_slave_0: entered promiscuous mode
[  533.171670][ T7389] hsr_slave_1: entered promiscuous mode
[  533.206593][ T7389] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  533.215135][ T7389] Cannot create hsr debugfs directory
[  533.357018][ T7464] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  533.579784][ T3602] bridge_slave_1: left allmulticast mode
[  533.585954][ T3602] bridge_slave_1: left promiscuous mode
[  533.594880][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.699218][ T3602] bridge_slave_0: left allmulticast mode
[  533.705362][ T3602] bridge_slave_0: left promiscuous mode
[  533.712183][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.339775][ T3602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  534.366453][ T3602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  534.403108][ T3602] bond0 (unregistering): Released all slaves
[  535.751353][ T5194] Bluetooth: hci1: command tx timeout
[  536.029712][ T3602] hsr_slave_0: left promiscuous mode
[  536.074339][ T3602] hsr_slave_1: left promiscuous mode
[  536.119441][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.127435][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.160377][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.168754][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_1
[  536.243831][ T3602] veth1_macvtap: left promiscuous mode
[  536.249811][ T3602] veth0_macvtap: left promiscuous mode
[  536.256440][ T3602] veth1_vlan: left promiscuous mode
[  536.262158][ T3602] veth0_vlan: left promiscuous mode
[  536.798793][ T7503] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  537.302145][ T3602] team0 (unregistering): Port device team_slave_1 removed
[  537.384541][ T3602] team0 (unregistering): Port device team_slave_0 removed
[  539.547336][ T7389] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  539.612704][ T7389] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  539.669865][ T7389] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  539.737917][ T7389] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  540.022993][ T7533] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  540.902996][ T7389] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.229549][ T7389] 8021q: adding VLAN 0 to HW filter on device team0
[  541.366684][ T2547] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.374497][ T2547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.698144][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.705922][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.608856][ T7564] loop4: detected capacity change from 0 to 512
[  542.726241][ T7564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.739878][ T7564] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  543.337799][ T7389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.889631][ T7582] input: syz1 as /devices/virtual/input/input5
[  543.957825][ T7389] veth0_vlan: entered promiscuous mode
[  544.098988][ T7389] veth1_vlan: entered promiscuous mode
[  544.417358][ T7389] veth0_macvtap: entered promiscuous mode
[  544.559494][ T7389] veth1_macvtap: entered promiscuous mode
[  544.934625][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.946247][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.957049][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.967718][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.977726][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  544.988337][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  544.998377][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.009046][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.022549][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.218850][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.229661][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.239870][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.250843][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.261010][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.271864][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.282077][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.292844][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.307710][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.381130][ T7572] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  545.485794][ T7389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.495611][ T7389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.504802][ T7389] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.513942][ T7389] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.629237][ T7611] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  548.726337][ T7638] loop3: detected capacity change from 0 to 256
[  549.594466][ T7643] Device name cannot be null; rc = [-22]
[  551.387517][ T7655] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  551.994114][ T7664] overlayfs: missing 'lowerdir'
[  553.565411][ T6137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.033709][ T5190] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  554.046115][ T5190] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  554.083446][ T5190] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  554.099374][ T5190] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  554.114600][ T5190] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  554.130565][ T5190] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  554.255653][ T1583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.264049][ T1583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.312492][ T3222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.327718][ T3222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.471991][ T7701] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  555.575528][ T7705] overlayfs: missing 'lowerdir'
[  556.202988][ T7683] chnl_net:caif_netlink_parms(): no params data found
[  556.241353][ T5190] Bluetooth: hci4: command tx timeout
[  558.091554][ T3971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.208282][ T7728] loop2: detected capacity change from 0 to 256
[  558.266115][ T3971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.320535][ T5190] Bluetooth: hci4: command tx timeout
[  560.315973][ T3971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.391638][ T5190] Bluetooth: hci4: command tx timeout
[  560.662968][ T3971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.762511][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.770239][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.778297][ T7683] bridge_slave_0: entered allmulticast mode
[  560.787501][ T7683] bridge_slave_0: entered promiscuous mode
[  560.865263][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.886799][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.894858][ T7683] bridge_slave_1: entered allmulticast mode
[  560.904121][ T7683] bridge_slave_1: entered promiscuous mode
[  560.990590][ T7750] overlayfs: missing 'lowerdir'
[  561.137324][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  561.254986][ T3971] bridge_slave_1: left allmulticast mode
[  561.261312][ T3971] bridge_slave_1: left promiscuous mode
[  561.268229][ T3971] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.296717][ T3971] bridge_slave_0: left allmulticast mode
[  561.303277][ T3971] bridge_slave_0: left promiscuous mode
[  561.309956][ T3971] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.736007][ T7761] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  561.967106][ T3971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.996900][ T3971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.125850][ T3971] bond0 (unregistering): Released all slaves
[  562.329988][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.494515][ T5190] Bluetooth: hci4: command tx timeout
[  563.194566][ T7683] team0: Port device team_slave_0 added
[  563.310057][ T7683] team0: Port device team_slave_1 added
[  563.850589][ T3971] hsr_slave_0: left promiscuous mode
[  563.912561][ T3971] hsr_slave_1: left promiscuous mode
[  563.959471][ T3971] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.967399][ T3971] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.035015][ T3971] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.045408][ T3971] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.182121][ T7786] overlayfs: missing 'lowerdir'
[  564.234093][ T3971] veth1_macvtap: left promiscuous mode
[  564.240008][ T3971] veth0_macvtap: left promiscuous mode
[  564.246071][ T3971] veth1_vlan: left promiscuous mode
[  564.251769][ T3971] veth0_vlan: left promiscuous mode
[  565.557981][ T3971] team0 (unregistering): Port device team_slave_1 removed
[  565.594942][ T3971] team0 (unregistering): Port device team_slave_0 removed
[  565.894988][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.903354][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.931894][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  566.002230][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.014940][ T7806] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  566.044166][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.051566][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.078176][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.446937][ T7683] hsr_slave_0: entered promiscuous mode
[  566.453531][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.488357][ T7683] hsr_slave_1: entered promiscuous mode
[  566.508019][ T7683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  566.516224][ T7683] Cannot create hsr debugfs directory
[  567.294032][ T7817] loop2: detected capacity change from 0 to 256
[  567.363759][ T7817] FAT-fs (loop2): bogus sectors per cluster 223
[  567.370279][ T7817] FAT-fs (loop2): Can't find a valid FAT filesystem
[  567.401275][ T7819] overlayfs: missing 'lowerdir'
[  568.204166][ T7832] loop3: detected capacity change from 0 to 512
[  568.215736][ T7832] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[  568.221487][ T7683] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  568.239138][ T7832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  568.307484][ T7683] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  568.312979][ T7832] System zones: 1-12
[  568.333239][ T7832] EXT4-fs (loop3): orphan cleanup on readonly fs
[  568.339886][ T7832] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.734: Inode bitmap for bg 0 marked uninitialized
[  568.359980][ T7683] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  568.412427][ T7683] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  568.412949][ T7832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  568.784321][ T6087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.203431][   T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  569.424282][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.433225][   T25] usb 1-1: Using ep0 maxpacket: 8
[  569.504818][   T25] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  569.513598][   T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  569.524247][   T25] usb 1-1: config 0 has no interface number 0
[  569.530602][   T25] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  569.542116][   T25] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  569.553498][   T25] usb 1-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  569.560260][ T7683] 8021q: adding VLAN 0 to HW filter on device team0
[  569.564479][   T25] usb 1-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  569.638749][   T25] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  569.648552][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.663000][   T25] usb 1-1: Product: syz
[  569.667413][   T25] usb 1-1: Manufacturer: syz
[  569.672374][   T25] usb 1-1: SerialNumber: syz
[  569.708428][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.716179][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state
[  569.723174][   T25] usb 1-1: config 0 descriptor??
[  569.750337][   T25] ttusb_dec_send_command: command bulk message failed: error -8
[  569.764757][   T25] ttusb-dec 1-1:0.113: probe with driver ttusb-dec failed with error -8
[  569.774848][   T25] usbhid 1-1:0.113: couldn't find an input interrupt endpoint
[  569.811684][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.819367][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state
[  570.041274][ T7851] overlayfs: missing 'lowerdir'
[  570.348230][ T7854] loop3: detected capacity change from 0 to 1024
[  570.385027][ T7854] EXT4-fs: Ignoring removed orlov option
[  570.396721][ T7854] EXT4-fs: Ignoring removed nomblk_io_submit option
[  570.532748][ T7854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  572.334628][   T25] usb 1-1: USB disconnect, device number 12
[  572.779106][ T7683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  573.624962][ T6087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.864498][ T7895] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  573.873664][ T7895] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  574.706560][ T4641] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  574.931387][ T4641] usb 1-1: Using ep0 maxpacket: 8
[  574.962531][ T4641] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  574.972036][ T4641] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  574.982574][ T4641] usb 1-1: config 0 has no interface number 0
[  574.988795][ T4641] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  574.999967][ T4641] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  575.015122][ T4641] usb 1-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  575.027450][ T4641] usb 1-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  575.142670][ T4641] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  575.152408][ T4641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.160670][ T4641] usb 1-1: Product: syz
[  575.165287][ T4641] usb 1-1: Manufacturer: syz
[  575.170112][ T4641] usb 1-1: SerialNumber: syz
[  575.232722][ T4641] usb 1-1: config 0 descriptor??
[  575.267386][ T7683] veth0_vlan: entered promiscuous mode
[  575.273607][ T7914] loop1: detected capacity change from 0 to 1764
[  575.288243][ T4641] ttusb_dec_send_command: command bulk message failed: error -8
[  575.297418][ T4641] ttusb-dec 1-1:0.113: probe with driver ttusb-dec failed with error -8
[  575.307466][ T4641] usbhid 1-1:0.113: couldn't find an input interrupt endpoint
[  575.356680][ T7683] veth1_vlan: entered promiscuous mode
[  575.651601][ T7683] veth0_macvtap: entered promiscuous mode
[  575.743004][ T7683] veth1_macvtap: entered promiscuous mode
[  575.981562][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.993096][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.003319][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.014060][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.024279][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.035053][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.045201][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.056061][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.073235][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.296453][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.307618][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.320498][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.331880][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.342005][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.352721][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.362733][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.373341][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.386577][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  576.433194][ T7683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  576.442607][ T7683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  576.451675][ T7683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  576.460558][ T7683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.241988][ T4641] usb 1-1: USB disconnect, device number 13
[  579.247754][ T7938] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  579.257177][ T7938] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  580.595870][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'.
[  582.461070][ T4641] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  584.451432][ T4641] usb 4-1: Using ep0 maxpacket: 8
[  584.933167][ T4641] usb 4-1: device descriptor read/all, error -71
[  585.603662][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.780'.
[  586.881505][ T5236] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  587.159556][ T5236] usb 4-1: Using ep0 maxpacket: 8
[  587.210602][ T5236] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  587.219569][ T5236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.230060][ T5236] usb 4-1: config 0 has no interface number 0
[  587.236477][ T5236] usb 4-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  587.247827][ T5236] usb 4-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  587.259097][ T5236] usb 4-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  587.270254][ T5236] usb 4-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  587.445132][ T5236] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  587.454702][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.463184][ T5236] usb 4-1: Product: syz
[  587.467570][ T5236] usb 4-1: Manufacturer: syz
[  587.472477][ T5236] usb 4-1: SerialNumber: syz
[  587.548788][ T5236] usb 4-1: config 0 descriptor??
[  587.575336][ T5236] ttusb_dec_send_command: command bulk message failed: error -8
[  587.584667][ T5236] ttusb-dec 4-1:0.113: probe with driver ttusb-dec failed with error -8
[  587.594810][ T5236] usbhid 4-1:0.113: couldn't find an input interrupt endpoint
[  587.690605][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  587.697610][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  587.765238][ T3971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.773739][ T3971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.104161][ T3971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.113844][ T3971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.399759][ T8033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.793'.
[  589.901801][ T5639] usb 4-1: USB disconnect, device number 8
[  590.111864][ T8051] warning: `syz.3.799' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  590.596392][ T8039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  592.061046][ T5236] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  592.331122][ T5236] usb 2-1: Using ep0 maxpacket: 8
[  592.386742][ T5236] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  592.395400][ T5236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.405932][ T5236] usb 2-1: config 0 has no interface number 0
[  592.414993][ T5236] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  592.427130][ T5236] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  592.438433][ T5236] usb 2-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  592.449510][ T5236] usb 2-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  592.604015][ T5236] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  592.613615][ T5236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.624507][ T5236] usb 2-1: Product: syz
[  592.628907][ T5236] usb 2-1: Manufacturer: syz
[  592.634575][ T5236] usb 2-1: SerialNumber: syz
[  592.700430][ T5236] usb 2-1: config 0 descriptor??
[  592.768130][ T5236] ttusb_dec_send_command: command bulk message failed: error -8
[  592.777398][ T5236] ttusb-dec 2-1:0.113: probe with driver ttusb-dec failed with error -8
[  592.787427][ T5236] usbhid 2-1:0.113: couldn't find an input interrupt endpoint
[  592.813861][ T8084] Bluetooth: MGMT ver 1.23
[  592.847230][ T8083] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  592.936339][ T8084] loop3: detected capacity change from 0 to 256
[  592.999567][ T8084] vfat: Bad value for 'fmask'
[  594.146870][ T8109] loop0: detected capacity change from 0 to 512
[  594.194496][ T8109] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  594.204106][ T8109] EXT4-fs (loop0): blocks per group (3008) and clusters per group (32768) inconsistent
[  594.505377][ T8095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  594.932037][ T5190] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  595.256488][ T5639] usb 2-1: USB disconnect, device number 6
[  597.112843][ T8145] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  597.292111][   T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  597.541338][   T25] usb 2-1: Using ep0 maxpacket: 8
[  597.602612][   T25] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  597.611406][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.622076][   T25] usb 2-1: config 0 has no interface number 0
[  597.628443][   T25] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  597.642316][   T25] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  597.654461][   T25] usb 2-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  597.665536][   T25] usb 2-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  597.715689][   T25] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  597.725322][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.733844][   T25] usb 2-1: Product: syz
[  597.740667][   T25] usb 2-1: Manufacturer: syz
[  597.746328][   T25] usb 2-1: SerialNumber: syz
[  597.766651][   T25] usb 2-1: config 0 descriptor??
[  597.794011][   T25] ttusb_dec_send_command: command bulk message failed: error -8
[  597.803134][   T25] ttusb-dec 2-1:0.113: probe with driver ttusb-dec failed with error -8
[  597.813208][   T25] usbhid 2-1:0.113: couldn't find an input interrupt endpoint
[  598.757006][ T8165] loop2: detected capacity change from 0 to 256
[  600.184234][   T25] usb 2-1: USB disconnect, device number 7
[  601.364549][ T8180] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  603.174306][   T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  603.238373][ T8192] netlink: 64 bytes leftover after parsing attributes in process `syz.4.855'.
[  603.324763][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  603.324847][   T29] audit: type=1326 audit(1725944044.660:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.4.855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aac17def9 code=0x0
[  603.401612][   T25] usb 3-1: Using ep0 maxpacket: 8
[  603.435219][   T25] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[  603.444136][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  603.454695][   T25] usb 3-1: config 0 has no interface number 0
[  603.461117][   T25] usb 3-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  603.474303][   T25] usb 3-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  603.486109][   T25] usb 3-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  603.497243][   T25] usb 3-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  603.561689][   T25] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  603.571327][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.581296][   T25] usb 3-1: Product: syz
[  603.585694][   T25] usb 3-1: Manufacturer: syz
[  603.590527][   T25] usb 3-1: SerialNumber: syz
[  603.623215][   T25] usb 3-1: config 0 descriptor??
[  603.668901][   T25] ttusb_dec_send_command: command bulk message failed: error -8
[  603.685093][   T25] ttusb-dec 3-1:0.113: probe with driver ttusb-dec failed with error -8
[  603.698137][   T25] usbhid 3-1:0.113: couldn't find an input interrupt endpoint
[  605.640587][ T5194] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  605.657095][ T5194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  605.675185][ T5194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  605.695857][ T5194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  605.714077][ T5194] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  605.734678][ T5194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  606.362280][ T4641] usb 3-1: USB disconnect, device number 5
[  607.318266][ T8227] chnl_net:caif_netlink_parms(): no params data found
[  607.832582][ T5194] Bluetooth: hci2: command tx timeout
[  608.114187][ T3222] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.125022][ T3222] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46406 - 0
[  608.136058][ T3222] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 43182 - 0
[  608.334886][ T3222] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.345784][ T3222] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46406 - 0
[  608.356769][ T3222] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 43182 - 0
[  608.533083][ T8264] usb usb5: usbfs: process 8264 (syz.3.881) did not claim interface 0 before use
[  608.612887][ T3222] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.623816][ T3222] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46406 - 0
[  608.634764][ T3222] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 43182 - 0
[  609.072766][ T3222] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.084562][ T3222] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46406 - 0
[  609.095404][ T3222] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 43182 - 0
[  609.354789][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.362828][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.370680][ T8227] bridge_slave_0: entered allmulticast mode
[  609.384423][ T8227] bridge_slave_0: entered promiscuous mode
[  609.506361][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.518324][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.528018][ T8227] bridge_slave_1: entered allmulticast mode
[  609.537409][ T8227] bridge_slave_1: entered promiscuous mode
[  609.815687][ T3222] bridge_slave_1: left allmulticast mode
[  609.830046][ T3222] bridge_slave_1: left promiscuous mode
[  609.836842][ T3222] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.890516][ T3222] bridge_slave_0: left allmulticast mode
[  609.896640][ T3222] bridge_slave_0: left promiscuous mode
[  609.903607][ T3222] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.911368][ T5194] Bluetooth: hci2: command tx timeout
[  610.598885][ T3222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  610.795492][ T3222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  610.980355][ T3222] bond0 (unregistering): Released all slaves
[  611.174693][ T8227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  611.236558][ T8227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  611.465020][ T8227] team0: Port device team_slave_0 added
[  611.619039][ T8227] team0: Port device team_slave_1 added
[  611.804821][ T8297] usb usb5: usbfs: process 8297 (syz.1.893) did not claim interface 0 before use
[  611.993507][ T5194] Bluetooth: hci2: command tx timeout
[  612.073215][ T3222] hsr_slave_0: left promiscuous mode
[  612.131659][ T3222] hsr_slave_1: left promiscuous mode
[  612.171470][ T3222] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  612.183269][ T3222] batman_adv: batadv0: Removing interface: batadv_slave_0
[  612.223542][ T3222] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  612.231491][ T3222] batman_adv: batadv0: Removing interface: batadv_slave_1
[  612.319879][ T3222] veth1_macvtap: left promiscuous mode
[  612.326131][ T3222] veth0_macvtap: left promiscuous mode
[  612.332292][ T3222] veth1_vlan: left promiscuous mode
[  612.337847][ T3222] veth0_vlan: left promiscuous mode
[  613.651838][ T3222] team0 (unregistering): Port device team_slave_1 removed
[  613.692368][ T3222] team0 (unregistering): Port device team_slave_0 removed
[  614.071234][ T5194] Bluetooth: hci2: command tx timeout
[  614.092478][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  614.099841][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.130452][ T8227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  614.178563][ T8329] usb usb5: usbfs: process 8329 (syz.4.905) did not claim interface 0 before use
[  614.256154][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  614.263523][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.289995][ T8227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  614.724325][ T3222] IPVS: stop unused estimator thread 0...
[  614.764886][ T8227] hsr_slave_0: entered promiscuous mode
[  614.832512][ T8227] hsr_slave_1: entered promiscuous mode
[  616.647025][ T8227] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  616.732499][ T8227] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  616.866332][ T8227] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  616.942510][ T8227] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  617.138974][ T8370] loop3: detected capacity change from 0 to 512
[  617.234737][ T8370] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  617.359055][ T8370] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  617.466032][ T8370] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.921: invalid indirect mapped block 4294967295 (level 0)
[  617.530158][ T8370] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.921: invalid indirect mapped block 4294967295 (level 1)
[  617.630642][ T8370] EXT4-fs (loop3): 1 orphan inode deleted
[  617.636895][ T8370] EXT4-fs (loop3): 1 truncate cleaned up
[  617.644612][ T8370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.731363][ T8227] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.831646][ T8227] 8021q: adding VLAN 0 to HW filter on device team0
[  617.870987][ T3222] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.878788][ T3222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.896864][ T8384] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #2: block 13: comm syz.3.921: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[  617.957972][ T3222] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.965718][ T3222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.344669][ T6087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.532880][ T8227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.003295][ T8227] veth0_vlan: entered promiscuous mode
[  621.100380][ T8227] veth1_vlan: entered promiscuous mode
[  621.314636][ T8227] veth0_macvtap: entered promiscuous mode
[  621.358024][ T8227] veth1_macvtap: entered promiscuous mode
[  621.449329][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.461192][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.471480][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.482291][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.492582][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.506507][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.517706][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.528531][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.543856][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.582693][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.593878][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.607156][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.618821][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.629167][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.639950][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.650174][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  621.661003][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.682202][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.846718][ T8227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.856514][ T8227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.865707][ T8227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.874863][ T8227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  622.603416][ T8438] mmap: syz.1.942 (8438): VmData 164384768 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  624.413938][ T8433] Unsupported ieee802154 address type: 0
[  624.490943][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'.
[  629.694380][ T8506] bridge0: port 3(team0) entered blocking state
[  629.704314][ T8506] bridge0: port 3(team0) entered disabled state
[  629.711424][ T8506] team0: entered allmulticast mode
[  629.716796][ T8506] team_slave_0: entered allmulticast mode
[  629.722878][ T8506] team_slave_1: entered allmulticast mode
[  629.733946][ T8506] team0: entered promiscuous mode
[  629.739216][ T8506] team_slave_0: entered promiscuous mode
[  629.746164][ T8506] team_slave_1: entered promiscuous mode
[  629.757773][ T8506] bridge0: port 3(team0) entered blocking state
[  629.764830][ T8506] bridge0: port 3(team0) entered forwarding state
[  630.597353][ T3222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.605891][ T3222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.778309][ T3222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.786645][ T3222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.810326][ T8552] loop4: detected capacity change from 0 to 512
[  633.018491][ T8552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  633.032289][ T8552] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  633.338211][ T8553] loop0: detected capacity change from 0 to 2048
[  633.711345][ T7683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.272874][ T8582] loop2: detected capacity change from 0 to 64
[  636.607183][ T8592] loop3: detected capacity change from 0 to 8
[  636.619652][ T8592] squashfs image failed sanity check
[  637.780051][ T8592] loop3: detected capacity change from 0 to 1024
[  638.074835][ T8592] fuse: Bad value for 'fd'
[  639.684970][ T8611] loop1: detected capacity change from 0 to 2048
[  639.732130][ T8611] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  642.137494][ T8627] loop4: detected capacity change from 0 to 512
[  642.377625][ T8627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1008'.
[  642.423221][ T8627] loop4: detected capacity change from 0 to 512
[  642.435646][ T8627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  642.905896][ T8627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  642.919243][ T8627] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  643.385696][   T29] audit: type=1326 audit(1725944084.690:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.1008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aac17def9 code=0x0
[  643.622231][ T7683] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  646.506435][ T8679] loop2: detected capacity change from 0 to 128
[  646.508587][ T8679] vfat: Unknown parameter './file0'
[  646.900940][ T8683] netlink: 'syz.4.1030': attribute type 1 has an invalid length.
[  646.901039][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1030'.
[  647.283097][ T8688] syz.1.1032[8688] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  647.283654][ T8688] syz.1.1032[8688] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  647.785264][ T8697] =====================================================
[  647.804147][ T8697] BUG: KMSAN: uninit-value in batadv_get_vid+0x1d4/0x300
[  647.811533][ T8697]  batadv_get_vid+0x1d4/0x300
[  647.816414][ T8697]  batadv_interface_tx+0x329/0x1cf0
[  647.821923][ T8697]  dev_hard_start_xmit+0x247/0xa20
[  647.827335][ T8697]  __dev_queue_xmit+0x358c/0x5610
[  647.832729][ T8697]  __bpf_redirect+0x148c/0x1610
[  647.837802][ T8697]  bpf_clone_redirect+0x37e/0x500
[  647.843120][ T8697]  ___bpf_prog_run+0x13fe/0xe0f0
[  647.848270][ T8697]  __bpf_prog_run512+0xc5/0xf0
[  647.853285][ T8697]  bpf_test_run+0x546/0xd20
[  647.857992][ T8697]  bpf_prog_test_run_skb+0x182f/0x24d0
[  647.863770][ T8697]  bpf_prog_test_run+0x6b7/0xad0
[  647.868897][ T8697]  __sys_bpf+0x6aa/0xd90
[  647.873448][ T8697]  __x64_sys_bpf+0xa0/0xe0
[  647.878068][ T8697]  x64_sys_call+0x2cce/0x3ba0
[  647.883052][ T8697]  do_syscall_64+0xcd/0x1e0
[  647.887758][ T8697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.893956][ T8697] 
[  647.896371][ T8697] Uninit was created at:
[  647.900938][ T8697]  kmem_cache_alloc_node_noprof+0x6bf/0xb80
[  647.907125][ T8697]  kmalloc_reserve+0x13d/0x4a0
[  647.912181][ T8697]  pskb_expand_head+0x222/0x19c0
[  647.917334][ T8697]  skb_ensure_writable+0x412/0x4a0
[  647.922739][ T8697]  bpf_clone_redirect+0x1c5/0x500
[  647.927956][ T8697]  ___bpf_prog_run+0x13fe/0xe0f0
[  647.933214][ T8697]  __bpf_prog_run512+0xc5/0xf0
[  647.938236][ T8697]  bpf_test_run+0x546/0xd20
[  647.943040][ T8697]  bpf_prog_test_run_skb+0x182f/0x24d0
[  647.948734][ T8697]  bpf_prog_test_run+0x6b7/0xad0
[  647.953968][ T8697]  __sys_bpf+0x6aa/0xd90
[  647.958424][ T8697]  __x64_sys_bpf+0xa0/0xe0
[  647.963136][ T8697]  x64_sys_call+0x2cce/0x3ba0
[  647.968025][ T8697]  do_syscall_64+0xcd/0x1e0
[  647.972832][ T8697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.978954][ T8697] 
[  647.981581][ T8697] CPU: 1 UID: 0 PID: 8697 Comm: syz.4.1037 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0
[  647.992543][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  648.002856][ T8697] =====================================================
[  648.009907][ T8697] Disabling lock debugging due to kernel taint
[  648.016335][ T8697] Kernel panic - not syncing: kmsan.panic set ...
[  648.022890][ T8697] CPU: 1 UID: 0 PID: 8697 Comm: syz.4.1037 Tainted: G    B              6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0
[  648.035276][ T8697] Tainted: [B]=BAD_PAGE
[  648.039524][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  648.049727][ T8697] Call Trace:
[  648.053106][ T8697]  <TASK>
[  648.056135][ T8697]  dump_stack_lvl+0x216/0x2d0
[  648.061012][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.067029][ T8697]  dump_stack+0x1e/0x30
[  648.071364][ T8697]  panic+0x4e2/0xcd0
[  648.075433][ T8697]  ? kmsan_get_metadata+0xd1/0x1c0
[  648.080763][ T8697]  kmsan_report+0x2c7/0x2d0
[  648.085463][ T8697]  ? is_module_text_address+0x2aa/0x340
[  648.091182][ T8697]  ? __msan_warning+0x95/0x120
[  648.096204][ T8697]  ? batadv_get_vid+0x1d4/0x300
[  648.101242][ T8697]  ? batadv_interface_tx+0x329/0x1cf0
[  648.106808][ T8697]  ? dev_hard_start_xmit+0x247/0xa20
[  648.112282][ T8697]  ? __dev_queue_xmit+0x358c/0x5610
[  648.117670][ T8697]  ? __bpf_redirect+0x148c/0x1610
[  648.122882][ T8697]  ? bpf_clone_redirect+0x37e/0x500
[  648.128261][ T8697]  ? ___bpf_prog_run+0x13fe/0xe0f0
[  648.133578][ T8697]  ? __bpf_prog_run512+0xc5/0xf0
[  648.138669][ T8697]  ? bpf_test_run+0x546/0xd20
[  648.143530][ T8697]  ? bpf_prog_test_run_skb+0x182f/0x24d0
[  648.149354][ T8697]  ? bpf_prog_test_run+0x6b7/0xad0
[  648.154613][ T8697]  ? __sys_bpf+0x6aa/0xd90
[  648.159219][ T8697]  ? __x64_sys_bpf+0xa0/0xe0
[  648.163996][ T8697]  ? x64_sys_call+0x2cce/0x3ba0
[  648.169043][ T8697]  ? do_syscall_64+0xcd/0x1e0
[  648.173955][ T8697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.180266][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.185689][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.191713][ T8697]  ? do_syscall_64+0xcd/0x1e0
[  648.196609][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.201997][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.207386][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.213394][ T8697]  ? batadv_interface_tx+0xc6/0x1cf0
[  648.218881][ T8697]  ? filter_irq_stacks+0x60/0x1a0
[  648.224078][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.229499][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.235534][ T8697]  __msan_warning+0x95/0x120
[  648.240319][ T8697]  batadv_get_vid+0x1d4/0x300
[  648.245193][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.251216][ T8697]  batadv_interface_tx+0x329/0x1cf0
[  648.256618][ T8697]  ? netif_skb_features+0x115a/0x1350
[  648.262218][ T8697]  ? __pfx_batadv_interface_tx+0x10/0x10
[  648.268052][ T8697]  ? __pfx_batadv_interface_tx+0x10/0x10
[  648.273894][ T8697]  dev_hard_start_xmit+0x247/0xa20
[  648.279207][ T8697]  __dev_queue_xmit+0x358c/0x5610
[  648.284428][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.289822][ T8697]  ? __dev_queue_xmit+0x352/0x5610
[  648.295119][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.301141][ T8697]  ? pskb_expand_head+0x15d7/0x19c0
[  648.306561][ T8697]  __bpf_redirect+0x148c/0x1610
[  648.311601][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.317123][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.323147][ T8697]  bpf_clone_redirect+0x37e/0x500
[  648.328385][ T8697]  ___bpf_prog_run+0x13fe/0xe0f0
[  648.333570][ T8697]  __bpf_prog_run512+0xc5/0xf0
[  648.338513][ T8697]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  648.345038][ T8697]  ? kmsan_internal_poison_memory+0x7d/0x90
[  648.351119][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.356505][ T8697]  ? kmsan_internal_poison_memory+0x49/0x90
[  648.362576][ T8697]  ? kmsan_slab_alloc+0xdf/0x160
[  648.367690][ T8697]  ? kmem_cache_alloc_noprof+0x637/0xb20
[  648.373499][ T8697]  ? slab_build_skb+0x5c/0x560
[  648.378434][ T8697]  ? bpf_prog_test_run_skb+0x56d/0x24d0
[  648.384208][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.389596][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.395600][ T8697]  ? bpf_test_run+0x101/0xd20
[  648.400459][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.405851][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.411242][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.416634][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.422654][ T8697]  ? __pfx___bpf_prog_run512+0x10/0x10
[  648.428380][ T8697]  bpf_test_run+0x546/0xd20
[  648.433090][ T8697]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  648.439629][ T8697]  ? kmsan_get_metadata+0x13e/0x1c0
[  648.445032][ T8697]  ? bpf_test_run+0x3af/0xd20
[  648.449924][ T8697]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  648.455968][ T8697]  bpf_prog_test_run_skb+0x182f/0x24d0
[  648.461667][ T8697]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  648.467668][ T8697]  bpf_prog_test_run+0x6b7/0xad0
[  648.472778][ T8697]  __sys_bpf+0x6aa/0xd90
[  648.477251][ T8697]  __x64_sys_bpf+0xa0/0xe0
[  648.481857][ T8697]  x64_sys_call+0x2cce/0x3ba0
[  648.486727][ T8697]  do_syscall_64+0xcd/0x1e0
[  648.491428][ T8697]  ? clear_bhb_loop+0x25/0x80
[  648.496821][ T8697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.502916][ T8697] RIP: 0033:0x7f0aac17def9
[  648.507546][ T8697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  648.527344][ T8697] RSP: 002b:00007f0aaceb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  648.535936][ T8697] RAX: ffffffffffffffda RBX: 00007f0aac335f80 RCX: 00007f0aac17def9
[  648.544055][ T8697] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a
[  648.552173][ T8697] RBP: 00007f0aac1f09f6 R08: 0000000000000000 R09: 0000000000000000
[  648.560281][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  648.568473][ T8697] R13: 0000000000000000 R14: 00007f0aac335f80 R15: 00007ffe3eb42018
[  648.576600][ T8697]  </TASK>
[  648.580096][ T8697] Kernel Offset: disabled
[  648.584474][ T8697] Rebooting in 86400 seconds..