last executing test programs:

2m26.017201962s ago: executing program 4 (id=412):
epoll_create(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000000000001ac, 0x10)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x709}, 0x14}}, 0x0)

2m25.092399888s ago: executing program 4 (id=414):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@journal_async_commit}, {@localflocks}, {@intr}, {@dir_resv_level}]}, 0x9, 0x442b, &(0x7f0000004480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(0xffffffffffffffff, 0x2000009)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000dc0)={0x17c04, 0xffffffffffffffff, 0xfff, 0xf, 0x4000000000000002, 0xffffffffffffffff})

2m22.762320343s ago: executing program 4 (id=420):
r0 = socket(0x10, 0x3, 0x0)
syz_emit_vhci(0x0, 0xd)
socket$kcm(0x10, 0x0, 0x4)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}})

1m17.2021512s ago: executing program 4 (id=435):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
fcntl$setstatus(r1, 0x4, 0x2000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x11)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x0)

1m16.163394105s ago: executing program 4 (id=506):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x200000c0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0)

30.367453929s ago: executing program 4 (id=523):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0)
openat$ttynull(0xffffff9c, 0x0, 0x200, 0x0)

21.180875327s ago: executing program 3 (id=617):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
r1 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x5, &(0x7f0000000240)=[{0xc0c5, 0x15, 0x0, 0x8}, {0x3, 0x5, 0x6, 0x7}, {0x2, 0x7, 0x2f, 0x5}, {0x2, 0x80, 0x5, 0x4}, {0x7, 0x7, 0x6, 0x6}]})
r2 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045503, &(0x7f0000000340)={0x1, 0x1})
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
ioctl$UI_DEV_CREATE(r4, 0x5501)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e000000900000000000000eb02000100000000000000000200000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000000580)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83\x00\x00\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d-Z0\xf1e\x10\xe9\x99\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/@\xbfo\x05\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000081d00048008000340000000000800054008000000080007"], 0x3c}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0xc084)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r9)
sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r10, 0x800, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0)

18.6527722s ago: executing program 0 (id=620):
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x408)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r6 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

17.111690162s ago: executing program 0 (id=621):
openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={0xffffffffffffffff, &(0x7f0000000880)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

17.108595682s ago: executing program 3 (id=623):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

15.536674127s ago: executing program 3 (id=626):
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x5c23, &(0x7f0000000240), &(0x7f0000000440), &(0x7f0000000080))
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200000001)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000400))
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r2, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc)
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000cc0)='./bus\x00', 0x400000, &(0x7f0000000d00)=ANY=[], 0x1, 0xaaa, &(0x7f00000020c0)="$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")
socket(0x15, 0x5, 0x0)

11.129022694s ago: executing program 1 (id=629):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r1 = dup(0xffffffffffffffff)
write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[], 0xb0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(0xffffffffffffffff, 0x5)
setsockopt(r2, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0)
close_range(r3, r1, 0x0)

11.126562584s ago: executing program 2 (id=630):
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = dup2(r4, r3)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044160, 0x0)

9.342876159s ago: executing program 0 (id=631):
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x408)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r6 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

9.342375809s ago: executing program 1 (id=632):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

9.341873859s ago: executing program 2 (id=633):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = userfaultfd(0x801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

9.340894819s ago: executing program 3 (id=634):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
close(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3d, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x115, &(0x7f0000000440)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "11ebc7", 0xdf, 0x21, 0x1, @empty, @mcast2, {[@dstopts={0x2f, 0xd, '\x00', [@ra={0x5, 0x2, 0xf001}, @generic={0xc, 0x68, "f4b142126331fe0d8958089288b5e479865f5d69847b92dc06081e4415671fa20ee48f1ac5a167ab72b3ada53b23e35d468a54695304808393a5f414ee8f287601072939042bb2462c21f13ab988083e3df9dd9b82cefda57d14711ab72f03df4f1fae0ecdc5bd51"}]}], {{0x4e22, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x5, 0x5, '\x00', 0x8, "e30e35"}, "a4a65be4267c7a5637a7dc7a054643d7a84bdfa81206dd74205e52bb4fdeed77876a696759ca51c4bfbc53a0243f20b5673b7d065b07936a9c1484be2fc63d43486a33bee8cee8656e88673f0d96e5986059487c6c3318"}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

7.450343983s ago: executing program 0 (id=635):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x9, 0x7fe2, 0x1, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d2, 0x0)

7.449451424s ago: executing program 1 (id=636):
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180), 0x14)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000)

7.448352833s ago: executing program 2 (id=637):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)

5.380272274s ago: executing program 0 (id=638):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000001100), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0x0, 0x0}, 0x10)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

5.371848485s ago: executing program 1 (id=639):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000030603000000000000006517912bfd3b0000000000000500010007000000225865c369c711b258e1f6f510f42699356406c004fedc7ea912a0b7e3c11bb16e6252550f9c98a6f91621a1c36729fc6a823eeb9849f87b2f133fd0aa88718bb0a6f96a03c62eeeab79630fb34d7624"], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d39"])
chdir(&(0x7f0000000100)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0xc540, 0x1a0)
write$binfmt_script(r4, 0x0, 0xffffff3c)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r5, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$ax25(r5, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20080080}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000c00)="8bf690c0a0e32fa28450c7702b09b65ab76e47f0b4f7524a9d21b5f98533845287b769dcbd804449016dc710a1f39e4ab10ba9c7a277be1de1ab03a884cb1ac61a43c19978f17c467e29c26f55e7c82e19668a678444e6029bb42a1b2558c1dcdd384a9e7e03e2b9023a184971b9da4b411f966f944ade7cc82e51e548afb844cbdda3fb72cc3d448ef5a6116f8ecd07a14a2b70e9084c8779ed195613e9d23a89691318187dda39b832c3e62fbcf0f88d7bf8523744fe258165ae5d514079ba4647bfbe527c4ecd82461936a45efc72fed6eb00b59a5fc9b4", 0xd9}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x84}}, {{&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000ec0)="c7ef0c1bdad87f42b30ed6f31b01f9bf400870b3242d97e432ba9311fb316bd8363c24bd99817814ac51c4157d4ddfb9c1379af16b222871035e192aa8f88fd90bdfd8d14dc2824b5e51", 0x4a}, {&(0x7f0000000f40)="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", 0xfd}, {&(0x7f00000010c0)="42e8d42a64efcc98181223fd1f0b7f77bfa38d26944b4d4bde694988265965d0a0273b4a574a58e75db2f8b4c6b52e65e14792af01b3c45e137f10397206", 0x3e}, {&(0x7f0000001180)="b56c5d3aae012254badec3dd0b2763794bd763347022c848e790c74bef2a3ffbe09b6c14bb19608d83243f015c8e1bf114e0c4a608f3c62b677cc6ae16ab787d5167b035dceb2d164b8c612b0defce50e2e6d7cd432f0fa12756c7d2", 0x5c}], 0x4, 0x0, 0x0, 0x4004000}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001300)="ae842613229c11f78c21b83c61f3f523ccbef41032b2851052ee766cb1cf08fb951883f1234970f467ad61cc4354cfa37f57ed51b8248a3aedb7b7bf890a703c8d63f716be753bd442c9acb11033865fedf9f6702ce0c2fbad4c2c6087c4ab807345be1cd51cc5c17df6c90f6a92cb651987bd1c4567b2c96ddacfad7107e01db426c6", 0x83}, {&(0x7f00000013c0)}, {&(0x7f0000001440)="dd3a4c0e45b8d19b0610ef5d3416df428a20178319da5b585c1fab57e5f603daec6ee1913f035c60db5617f177054e01e8ff29686bcbb3e495148bfc24cbdb5b1055c5ed190ebcca6a9c7a080762f612abdb3697e4ecf4c4df71b927446feb26101104dc78fd7a81fb303a8c4fef2aba4fcfd1ac0790480cdbb7b94c9ccf2090148b1b5abcacb952c99697682b194606338a1280797235a1ab9f6367ccc6754255dc8f7acc3e6bc604a3001784cd4031d71d44eef1ad7ac1d2cc4db77a95f583b2fd3f8ef4ac8f1941c02c46577a9a53fac8a4ca3ab239d5b7e1dbe2d5f3266fe26e0fc8ad6de345ad39", 0xea}, {&(0x7f0000001540)="2b993e56a752fad9c6e1ac8c145b6f4b8f60228e8a037a9665b2bece03ba3cca14c994a04a9787bd46db2656e4d3cd685b7a588d62834bf33ba2a43fede7f6471036ffba87daf64c5863eae40095184e06213f15c8c4d0715f91de4b12da3912cf4359ad7705fac9043cd315f7fda515f63047f591b204da14fb96eb36388b0b173f2fa7f50d9ac656af50d89989d70e698e496f69dbe830b5146e1ffd54cb4428f1d9cc767e107d886bad63fc491d797d07bc72e5591b7b0e8ab993cee8d45c3374d60e99315e1d4c955818bdc78b517285f7f06027b52b7e1172d79142898cbd5fa234c330c5eee2a5", 0xea}, {&(0x7f0000001640)}, {0x0}], 0x6, &(0x7f0000001e80)=ANY=[], 0x118, 0x40000}}], 0x4, 0x0)

5.367976115s ago: executing program 2 (id=640):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r4=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x9, 0x7fe2, 0x1, 0x200, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='dlm_unlock_end\x00'}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x800448d2, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x2090, &(0x7f0000000040)=[{0x0, 0x0, 0x40}]}, 0x10)
bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7ff, 0x2, 0x9, 0x0, r3, 0xffff397f, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0xc, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.359703206s ago: executing program 3 (id=641):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001640)={{0x0, 0x1ff, 0x8, 0x1000, 0x5, 0x6, 0x1, 0x5, 0x2, 0x10001, 0x7, 0x9, 0xca, 0xe, 0x10001}})
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0)

2.626823969s ago: executing program 1 (id=642):
openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={0xffffffffffffffff, &(0x7f0000000880)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

2.034335063s ago: executing program 2 (id=643):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r1 = dup(0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r2, 0x5)
setsockopt(r3, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5)
r4 = accept4$inet6(r2, 0x0, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
sendmmsg(r3, &(0x7f0000002980), 0x400000000000239, 0x0)
close_range(r4, r1, 0x0)

18.843548ms ago: executing program 0 (id=644):
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = dup2(r4, r3)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044160, 0x0)

18.016729ms ago: executing program 1 (id=645):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
r1 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x5, &(0x7f0000000240)=[{0xc0c5, 0x15, 0x0, 0x8}, {0x3, 0x5, 0x6, 0x7}, {0x2, 0x7, 0x2f, 0x5}, {0x2, 0x80, 0x5, 0x4}, {0x7, 0x7, 0x6, 0x6}]})
r2 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045503, &(0x7f0000000340)={0x1, 0x1})
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r4, 0x5501)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e000000900000000000000eb02000100000000000000000200000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000000580)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83\x00\x00\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d-Z0\xf1e\x10\xe9\x99\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/@\xbfo\x05\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000081d00048008000340000000000800054008000000080007"], 0x3c}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0xc084)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r9)
sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r10, 0x800, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0)

16.955809ms ago: executing program 2 (id=646):
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x408)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)
r6 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=647):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = userfaultfd(0x801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

kernel console output (not intermixed with test programs):

] device veth0_macvtap left promiscuous mode
[  203.885564][  T144] device veth1_vlan left promiscuous mode
[  203.905674][  T144] device veth0_vlan left promiscuous mode
[  205.631623][  T144] team0 (unregistering): Port device team_slave_1 removed
[  205.713985][  T144] team0 (unregistering): Port device team_slave_0 removed
[  205.748979][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.767074][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.899916][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  206.960012][  T144] bond0 (unregistering): Released all slaves
[  207.376123][  T144] team0 (unregistering): Port device team_slave_1 removed
[  207.407823][  T144] team0 (unregistering): Port device team_slave_0 removed
[  207.442751][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.483343][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.682591][  T144] bond0 (unregistering): Released all slaves
[  207.857488][  T144] team0 (unregistering): Port device team_slave_1 removed
[  207.876345][  T144] team0 (unregistering): Port device team_slave_0 removed
[  207.890039][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.907405][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.996996][  T144] bond0 (unregistering): Released all slaves
[  208.159318][ T4845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.185148][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  208.208277][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  209.177072][ T3658] Bluetooth: hci3: command 0x0409 tx timeout
[  210.265032][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  210.282557][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  210.401478][ T4845] device veth0_vlan entered promiscuous mode
[  210.459823][ T4845] device veth1_vlan entered promiscuous mode
[  210.589316][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  210.601691][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  210.615581][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  210.624731][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  210.667576][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  210.705040][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'.
[  210.834946][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  210.905114][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  211.013508][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  211.223689][ T3658] Bluetooth: hci3: command 0x041b tx timeout
[  211.238453][ T5081] chnl_net:caif_netlink_parms(): no params data found
[  211.489076][ T4845] device veth0_macvtap entered promiscuous mode
[  211.523786][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  212.489360][ T4845] device veth1_macvtap entered promiscuous mode
[  212.613916][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.639444][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.651115][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.665793][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.675862][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.686543][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.696534][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.707416][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.730261][ T4845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.775420][ T5127] mkiss: ax0: crc mode is auto.
[  212.777286][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.830713][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.881032][ T5081] device bridge_slave_0 entered promiscuous mode
[  212.900472][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.924209][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.948859][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.078452][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.088679][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.099305][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.109577][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.120233][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.203943][ T4845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.212917][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  213.224336][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  213.236019][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  213.268110][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  213.291862][ T3658] Bluetooth: hci3: command 0x040f tx timeout
[  213.757100][ T2086] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  214.963023][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.981013][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.010258][ T5081] device bridge_slave_1 entered promiscuous mode
[  215.140259][ T2086] usb 3-1: Using ep0 maxpacket: 16
[  215.164951][ T4845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.180769][ T4845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.200576][ T4845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.210527][ T4845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.260364][ T2086] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.360863][ T3658] Bluetooth: hci3: command 0x0419 tx timeout
[  215.450444][ T2086] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  215.463226][ T5136] loop1: detected capacity change from 0 to 128
[  215.470382][ T2086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.478904][ T2086] usb 3-1: Product: syz
[  215.483929][ T2086] usb 3-1: Manufacturer: syz
[  215.490505][ T2086] usb 3-1: SerialNumber: syz
[  215.505133][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.507748][ T2086] usb 3-1: config 0 descriptor??
[  215.583140][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.640850][ T2086] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  215.641181][ T5136] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  215.730079][ T5136] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff)
[  215.829097][ T5081] team0: Port device team_slave_0 added
[  215.865180][ T4698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.874901][ T4698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.884751][ T5081] team0: Port device team_slave_1 added
[  215.948299][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  215.986442][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.996936][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.027950][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  216.268276][   T26] audit: type=1804 audit(1727737559.583:16): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.285" name="/newroot/7/file0/bus" dev="loop1" ino=12 res=1 errno=0
[  216.740718][ T4606] usb 3-1: Failed to submit usb control message: -110
[  216.756618][ T4606] usb 3-1: unable to send the bmi data to the device: -110
[  216.895026][ T4606] usb 3-1: unable to get target info from device
[  216.905969][ T4606] usb 3-1: could not get target info (-110)
[  216.917235][ T4606] usb 3-1: could not probe fw (-110)
[  216.953781][ T3613] usb 3-1: USB disconnect, device number 4
[  217.256266][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.263624][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.292648][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.313213][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.372659][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.606272][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.369032][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'.
[  220.036745][ T5081] device hsr_slave_0 entered promiscuous mode
[  220.050986][ T5081] device hsr_slave_1 entered promiscuous mode
[  220.101053][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.243904][ T5081] Cannot create hsr debugfs directory
[  221.807543][ T5081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.983796][ T5081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.251071][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'.
[  222.262293][ T5195] 9pnet_virtio: no channels available for device syz
[  222.538949][ T5081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.697748][ T5081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.198507][ T5204] loop2: detected capacity change from 0 to 128
[  223.304061][ T5081] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  223.364921][ T5081] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  223.394149][ T5204] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  223.420343][ T5204] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff)
[  223.511486][ T5081] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  223.777885][ T5213] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  224.639538][   T26] audit: type=1804 audit(1727737567.453:17): pid=5217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.295" name="/newroot/12/file0/bus" dev="loop2" ino=12 res=1 errno=0
[  225.041518][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[  225.362319][ T5081] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  227.220343][ T1077] Bluetooth: hci4: command 0x041b tx timeout
[  227.238031][ T5200] chnl_net:caif_netlink_parms(): no params data found
[  229.712559][ T3614] Bluetooth: hci4: command 0x040f tx timeout
[  231.014643][ T5254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.304'.
[  231.118763][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.157786][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.182070][ T5200] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.209227][ T5200] device bridge_slave_0 entered promiscuous mode
[  231.389498][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.412699][ T5200] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.577186][ T5200] device bridge_slave_1 entered promiscuous mode
[  232.350615][ T3614] Bluetooth: hci4: command 0x0419 tx timeout
[  232.582296][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  232.794157][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  234.664929][ T5081] 8021q: adding VLAN 0 to HW filter on device team0
[  234.685129][ T5200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.730745][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  234.739997][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  234.830846][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.838041][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.601437][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  235.673121][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  235.719928][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.727114][ T4698] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.785895][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  235.837867][ T5200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.882374][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  235.902400][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  236.019660][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  236.298575][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  236.310262][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  236.323996][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  236.335558][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  236.434484][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  236.457305][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  236.521530][ T5200] team0: Port device team_slave_0 added
[  236.545657][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  236.611265][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  236.619000][ T5296] netlink: 44 bytes leftover after parsing attributes in process `syz.4.315'.
[  236.645387][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  236.669605][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  236.681475][ T5200] team0: Port device team_slave_1 added
[  236.805385][ T5200] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.825587][ T5200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.853277][ T5200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.868809][ T5200] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.881267][ T5200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.932510][ T5200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.116426][ T5200] device hsr_slave_0 entered promiscuous mode
[  237.190042][ T5200] device hsr_slave_1 entered promiscuous mode
[  237.240431][ T5200] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.258139][ T5200] Cannot create hsr debugfs directory
[  237.368414][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.473181][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  237.505197][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  237.604186][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  237.692934][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  237.791319][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  237.803391][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  237.839819][ T5081] device veth0_vlan entered promiscuous mode
[  237.857024][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  237.885369][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  237.957676][ T5081] device veth1_vlan entered promiscuous mode
[  238.000459][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  238.026662][ T5200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.197074][ T5200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.268821][ T5081] device veth0_macvtap entered promiscuous mode
[  238.315538][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  238.348363][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  238.356040][ T5325] loop1: detected capacity change from 0 to 40427
[  238.441094][ T5081] device veth1_macvtap entered promiscuous mode
[  238.454001][ T5325] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  238.461923][ T5325] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  238.491607][ T5325] F2FS-fs (loop1): invalid crc value
[  238.523240][ T5325] F2FS-fs (loop1): Found nat_bits in checkpoint
[  238.584521][ T5325] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  238.591734][ T5325] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  238.713587][ T5200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.819772][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  238.945875][ T5339] attempt to access beyond end of device
[  238.945875][ T5339] loop1: rw=2049, want=78344, limit=40427
[  239.379667][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  239.637720][ T5200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.834635][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.855915][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.036901][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.049142][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.138555][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.267853][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.373640][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.487692][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.583061][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.610505][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.629605][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.676981][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.744233][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.752512][ T5351] loop2: detected capacity change from 0 to 512
[  240.760990][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.771889][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.781974][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.793710][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.804901][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.815427][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.825291][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.835779][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.873177][ T5351] EXT4-fs (loop2): Ignoring removed oldalloc option
[  240.879802][ T5351] EXT4-fs (loop2): Ignoring removed oldalloc option
[  240.910229][ T5351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  240.930032][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.964988][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  241.020055][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  241.028985][ T5351] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.321: invalid indirect mapped block 83886080 (level 1)
[  241.052500][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  241.064296][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  241.115687][ T5351] EXT4-fs (loop2): 1 orphan inode deleted
[  241.134222][ T5351] EXT4-fs (loop2): 1 truncate cleaned up
[  241.140757][ T5351] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,lazytime,oldalloc,block_validity,block_validity,oldalloc,,errors=continue. Quota mode: none.
[  241.172022][ T5081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.195711][ T5081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.206187][ T5081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.215623][ T5081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.545824][ T5200] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  242.553150][ T5200] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  243.413099][ T5200] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  243.452631][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.477977][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.486956][ T5200] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  243.568017][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  243.583037][ T5367] loop4: detected capacity change from 0 to 40427
[  243.584468][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.648193][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.663581][ T5367] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  243.671388][ T5367] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  243.684251][ T5367] F2FS-fs (loop4): invalid crc value
[  243.723301][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  243.734322][ T5367] F2FS-fs (loop4): Found nat_bits in checkpoint
[  243.910434][ T5367] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  243.917519][ T5367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  244.184727][ T5380] attempt to access beyond end of device
[  244.184727][ T5380] loop4: rw=2049, want=78344, limit=40427
[  244.256944][ T5200] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.329241][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  244.345515][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  244.365543][ T5200] 8021q: adding VLAN 0 to HW filter on device team0
[  244.385261][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  244.395005][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  244.404050][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.411191][ T3684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.443509][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  245.280711][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  245.302464][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  245.396843][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.404152][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.460492][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  245.479101][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  245.549432][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  245.578870][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  245.636495][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  245.683429][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  245.735203][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  245.773921][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  245.886034][ T5200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  245.952195][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  246.001511][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  246.012924][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  246.032777][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  246.196309][ T5401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.329'.
[  246.782788][ T5200] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.794205][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.817040][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  246.866392][ T5414] loop1: detected capacity change from 0 to 40427
[  247.019924][  T144] device hsr_slave_0 left promiscuous mode
[  247.072427][ T5414] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  247.080270][ T5414] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  247.091590][ T5414] F2FS-fs (loop1): invalid crc value
[  247.097553][  T144] device hsr_slave_1 left promiscuous mode
[  247.228597][ T5414] F2FS-fs (loop1): Found nat_bits in checkpoint
[  247.399260][ T5414] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  247.406521][ T5414] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  247.660430][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.671691][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.679814][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.798845][ T5432] attempt to access beyond end of device
[  247.798845][ T5432] loop1: rw=2049, want=78344, limit=40427
[  247.867084][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.062730][  T144] device bridge_slave_1 left promiscuous mode
[  248.104300][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.151028][  T144] device bridge_slave_0 left promiscuous mode
[  248.197975][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.310528][  T144] device hsr_slave_0 left promiscuous mode
[  248.347265][  T144] device hsr_slave_1 left promiscuous mode
[  248.399165][ T5439] 9pnet: p9_errstr2errno: server reported unknown error �@í
[  248.407793][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.428380][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.442862][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.458237][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.471078][  T144] device bridge_slave_1 left promiscuous mode
[  248.478251][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.499679][  T144] device bridge_slave_0 left promiscuous mode
[  248.550389][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.618796][  T144] device veth1_macvtap left promiscuous mode
[  248.640881][  T144] device veth0_macvtap left promiscuous mode
[  248.667759][  T144] device veth1_vlan left promiscuous mode
[  248.687455][  T144] device veth0_vlan left promiscuous mode
[  248.717197][  T144] device veth1_macvtap left promiscuous mode
[  248.736705][  T144] device veth0_macvtap left promiscuous mode
[  248.760617][  T144] device veth1_vlan left promiscuous mode
[  248.796951][  T144] device veth0_vlan left promiscuous mode
[  249.374003][ T5458] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer.
[  249.408026][ T5457] sctp: [Deprecated]: syz.1.334 (pid 5457) Use of int in maxseg socket option.
[  249.408026][ T5457] Use struct sctp_assoc_value instead
[  249.760439][ T5461] loop1: detected capacity change from 0 to 40427
[  249.825944][ T5461] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  249.833717][ T5461] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  249.858457][ T5461] F2FS-fs (loop1): invalid crc value
[  249.897249][ T5461] F2FS-fs (loop1): Found nat_bits in checkpoint
[  251.911473][ T5461] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  251.918622][ T5461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  253.425979][ T5476] attempt to access beyond end of device
[  253.425979][ T5476] loop1: rw=2049, want=78344, limit=40427
[  254.794280][  T144] team0 (unregistering): Port device team_slave_1 removed
[  255.089487][  T144] team0 (unregistering): Port device team_slave_0 removed
[  255.140750][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.181674][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.475973][  T144] bond0 (unregistering): Released all slaves
[  255.692618][ T1399] ieee802154 phy0 wpan0: encryption failed: -22
[  255.699042][ T1399] ieee802154 phy1 wpan1: encryption failed: -22
[  256.507883][  T144] team0 (unregistering): Port device team_slave_1 removed
[  256.573119][  T144] team0 (unregistering): Port device team_slave_0 removed
[  256.660684][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.720454][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.017277][  T144] bond0 (unregistering): Released all slaves
[  257.104979][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  257.131745][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  257.242302][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  257.298411][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  257.314623][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  257.333287][ T5508] loop1: detected capacity change from 0 to 1024
[  257.351187][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  257.379981][ T5200] device veth0_vlan entered promiscuous mode
[  257.529341][ T5200] device veth1_vlan entered promiscuous mode
[  257.653696][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  257.806180][ T5514] loop4: detected capacity change from 0 to 512
[  257.924891][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  258.112489][ T5514] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback.
[  258.126481][ T5514] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff)
[  258.324326][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  258.326906][ T5513] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[  258.341116][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  258.359434][ T5200] device veth0_macvtap entered promiscuous mode
[  258.419485][ T5508] hfsplus: xattr search failed
[  258.452568][ T5200] device veth1_macvtap entered promiscuous mode
[  258.516785][ T5513] Process accounting resumed
[  258.575901][ T5519] loop2: detected capacity change from 0 to 512
[  258.594930][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.632754][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.649996][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.681712][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.700648][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.714758][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.725145][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.737996][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.766937][ T5200] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.768470][ T3650] hfsplus: b-tree write err: -5, ino 3
[  258.782029][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  258.800046][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  258.820846][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.846362][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.857152][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.868401][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.875912][ T5519] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.352: casefold flag without casefold feature
[  258.878877][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.901452][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.911602][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.923811][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.935350][ T5200] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.947749][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  259.006597][ T5519] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.352: couldn't read orphan inode 15 (err -117)
[  259.070908][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  259.143341][ T5519] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  259.173384][ T5200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.235336][   T26] audit: type=1804 audit(1727737602.563:18): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.352" name="/newroot/29/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  259.243440][ T5200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.318316][ T5200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.350672][ T5200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.396275][   T26] audit: type=1804 audit(1727737602.563:19): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.352" name="/newroot/29/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  259.986288][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.010445][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.072541][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.266086][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.991723][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.031909][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  263.650796][ T5569] netlink: 'syz.4.358': attribute type 1 has an invalid length.
[  263.735700][ T5569] netlink: 60 bytes leftover after parsing attributes in process `syz.4.358'.
[  263.830325][   T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  264.220495][   T21] usb 4-1: Using ep0 maxpacket: 16
[  264.360552][   T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.510266][   T21] usb 4-1: string descriptor 0 read error: -71
[  264.518739][   T21] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  264.554055][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.597070][   T21] usb 4-1: config 0 descriptor??
[  264.641962][   T21] usb 4-1: can't set config #0, error -71
[  265.490978][   T21] usb 4-1: USB disconnect, device number 2
[  267.152099][ T5613] loop1: detected capacity change from 0 to 128
[  268.865781][ T5613] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  268.881236][ T5613] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff)
[  272.561709][ T5639] loop1: detected capacity change from 0 to 40427
[  272.662484][ T5639] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  272.670338][ T5639] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  272.780163][ T5639] F2FS-fs (loop1): invalid crc value
[  272.869893][ T5639] F2FS-fs (loop1): Found nat_bits in checkpoint
[  273.250414][ T4660] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  273.900465][ T5639] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  273.908009][ T5639] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  274.270125][ T5659] attempt to access beyond end of device
[  274.270125][ T5659] loop1: rw=2049, want=78344, limit=40427
[  274.951708][ T5664] loop3: detected capacity change from 0 to 164
[  275.901595][   T21] Bluetooth: hci5: command 0x0409 tx timeout
[  275.924127][ T5664] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  276.271837][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'.
[  276.290559][ T5678] 9pnet: Unknown protocol version 9
[  277.230810][ T5647] chnl_net:caif_netlink_parms(): no params data found
[  278.000700][   T13] Bluetooth: hci5: command 0x041b tx timeout
[  279.135199][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.156096][ T5702] loop1: detected capacity change from 0 to 1024
[  279.172948][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.232645][ T5647] device bridge_slave_0 entered promiscuous mode
[  279.270611][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.300251][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.339388][ T5647] device bridge_slave_1 entered promiscuous mode
[  279.413029][ T5700] loop2: detected capacity change from 0 to 40427
[  279.452361][ T5700] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  279.460189][ T5700] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  279.460441][ T5702] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  279.484237][ T5700] F2FS-fs (loop2): invalid crc value
[  279.544079][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.571521][ T5700] F2FS-fs (loop2): Found nat_bits in checkpoint
[  279.631171][ T5700] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  279.638263][ T5700] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  279.643412][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.711545][ T5702] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x00000000000005c9,grpid,noblock_validity,jqfmt=vfsv1,grpid,dioread_nolock,noquota,min_batch_time=0x0000000000007fff,delalloc,dioread_nolock,quota,,errors=continue. Quota mode: writeback.
[  280.051280][ T5711] attempt to access beyond end of device
[  280.051280][ T5711] loop2: rw=2049, want=78344, limit=40427
[  280.754627][ T5647] team0: Port device team_slave_0 added
[  280.817053][ T5647] team0: Port device team_slave_1 added
[  281.001412][   T26] audit: type=1800 audit(1727737624.323:20): pid=5712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.383" name="file1" dev="loop1" ino=15 res=0 errno=0
[  281.493141][ T2086] Bluetooth: hci5: command 0x040f tx timeout
[  281.582635][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.589633][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.716109][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.793598][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.850302][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.861815][ T5715] loop1: detected capacity change from 0 to 8
[  281.952716][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.334944][ T5647] device hsr_slave_0 entered promiscuous mode
[  282.383216][ T5647] device hsr_slave_1 entered promiscuous mode
[  283.006459][ T5647] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.015918][ T5647] Cannot create hsr debugfs directory
[  283.023934][ T5717] SQUASHFS error: Failed to read block 0x1ec: -5
[  283.030969][ T5717] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  283.060201][   T26] audit: type=1800 audit(1727737626.373:21): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.385" name="file1" dev="loop1" ino=5 res=0 errno=0
[  283.702017][ T4660] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  284.794976][ T2086] Bluetooth: hci5: command 0x0419 tx timeout
[  286.663551][ T4660] usb 2-1: device descriptor read/all, error -71
[  287.143833][ T5741] loop1: detected capacity change from 0 to 512
[  287.213024][ T5647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.660729][ T5647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.823850][ T5741] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  287.835706][ T5741] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff)
[  289.495258][ T5754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'.
[  289.517689][   T21] Bluetooth: hci0: command 0x0406 tx timeout
[  289.780284][   T13] Bluetooth: hci1: command 0x0406 tx timeout
[  290.011278][ T5647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.533485][ T5759] loop4: detected capacity change from 0 to 1024
[  291.683238][ T5759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.847933][ T5647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.917082][   T26] audit: type=1800 audit(1727737635.243:22): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.395" name="bus" dev="loop4" ino=861 res=0 errno=0
[  293.169448][ T5647] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  293.365976][ T5647] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  293.578000][ T5647] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  293.763655][ T5783] loop2: detected capacity change from 0 to 2048
[  293.783250][ T5647] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  295.411939][ T5792] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.737564][ T5796] loop1: detected capacity change from 0 to 256
[  296.474079][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.483411][ T5793] FAT-fs (loop1): Filesystem has been set read-only
[  296.490309][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.500111][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.508843][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.517671][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.526514][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.535298][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.544188][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.552960][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.561842][ T5793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  296.574369][   T26] audit: type=1800 audit(1727737639.903:23): pid=5793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.403" name="file1" dev="loop1" ino=1048607 res=0 errno=0
[  296.583718][ T5793] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  297.066293][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.116365][ T5647] 8021q: adding VLAN 0 to HW filter on device team0
[  297.130719][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  297.181888][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  297.244369][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  297.588504][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  297.796106][  T549] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.803368][  T549] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.972538][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  298.023930][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  298.090378][  T549] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.097492][  T549] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.228947][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  298.267546][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  298.297793][  T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  298.338932][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  298.370912][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  298.401033][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  298.444338][ T4660] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  298.456846][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  298.483660][ T4660] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  298.492016][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  298.536525][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  298.555368][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  298.589989][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  298.604302][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  298.616888][ T5800] loop1: detected capacity change from 0 to 32768
[  298.629107][ T5647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  298.780918][ T4660] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  298.789872][ T5800] XFS (loop1): Mounting V5 Filesystem
[  298.965639][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.022813][ T5800] XFS (loop1): Ending clean mount
[  299.223854][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  299.231984][ T5800] XFS (loop1): Quotacheck needed: Please wait.
[  299.245045][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  299.268790][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  299.307280][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  299.334914][ T4660] usb 4-1: Using ep0 maxpacket: 32
[  299.365467][ T5800] XFS (loop1): Quotacheck: Done.
[  299.633760][ T5647] device veth0_vlan entered promiscuous mode
[  299.664131][ T4660] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  299.674068][ T4660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.682318][ T4660] usb 4-1: Product: syz
[  299.686866][ T4660] usb 4-1: Manufacturer: syz
[  299.692337][ T4660] usb 4-1: SerialNumber: syz
[  299.711221][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  299.731637][ T4660] usb 4-1: config 0 descriptor??
[  299.766506][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  299.767554][ T4692] XFS (loop1): Unmounting Filesystem
[  299.779179][ T4660] hdpvr 4-1:0.0: Could not find bulk-in endpoint
[  299.800250][ T4660] hdpvr: probe of 4-1:0.0 failed with error -12
[  299.817810][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  299.829788][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  300.014556][ T4660] usb 4-1: USB disconnect, device number 3
[  300.220739][ T3650] device hsr_slave_0 left promiscuous mode
[  300.241528][ T3650] device hsr_slave_1 left promiscuous mode
[  300.252920][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.300339][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.320502][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.379815][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.393870][ T3650] device bridge_slave_1 left promiscuous mode
[  300.421753][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.434609][ T3650] device bridge_slave_0 left promiscuous mode
[  300.454206][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.481720][ T3650] device veth1_macvtap left promiscuous mode
[  300.498874][ T3650] device veth0_macvtap left promiscuous mode
[  300.545972][ T3650] device veth1_vlan left promiscuous mode
[  300.570845][ T3650] device veth0_vlan left promiscuous mode
[  300.720988][ T5840] loop4: detected capacity change from 0 to 32768
[  301.023678][ T5840] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  302.001304][ T4845] ocfs2: Unmounting device (7,4) on (node local)
[  302.203487][ T3650] team0 (unregistering): Port device team_slave_1 removed
[  302.257577][ T3650] team0 (unregistering): Port device team_slave_0 removed
[  302.308854][ T3650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.368535][ T3650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.563152][ T3650] bond0 (unregistering): Released all slaves
[  302.651558][ T5647] device veth1_vlan entered promiscuous mode
[  302.666134][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  302.772671][ T5647] device veth0_macvtap entered promiscuous mode
[  302.802867][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  302.830236][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  302.849420][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  302.882935][ T5647] device veth1_macvtap entered promiscuous mode
[  302.937756][ T5852] loop1: detected capacity change from 0 to 32768
[  302.954294][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.995754][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.026324][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.057468][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.087907][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.118827][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.147444][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.168464][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.192306][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.218580][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  303.227772][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  303.264051][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  303.337835][ T5852] XFS (loop1): Mounting V5 Filesystem
[  303.346684][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.395934][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.458572][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.500201][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.510903][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.522324][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.533943][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.541627][ T5852] XFS (loop1): Ending clean mount
[  303.545371][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.584777][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.608308][ T5875] netlink: 'syz.2.422': attribute type 10 has an invalid length.
[  303.680833][ T5875] team0: Port device netdevsim0 added
[  303.691070][ T4692] XFS (loop1): Unmounting Filesystem
[  303.699595][ T5877] netlink: 'syz.2.422': attribute type 10 has an invalid length.
[  303.882188][ T5877] team0: Port device netdevsim0 removed
[  303.921598][ T5877] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  303.943570][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  303.957225][ T5875] syz.2.422 (5875) used greatest stack depth: 18776 bytes left
[  303.958363][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  304.026309][ T5647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.060238][ T5647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.089570][ T5879] loop3: detected capacity change from 0 to 512
[  304.090283][ T5647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.126927][ T5647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.578412][ T5879] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  304.752146][ T5879] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff)
[  304.820238][ T3614] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  305.360837][ T3614] usb 3-1: Using ep0 maxpacket: 16
[  305.503367][ T3614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.183550][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.201937][ T3689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.569183][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.677111][ T3689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.710297][ T3614] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  306.719498][ T3614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.961623][ T5893] loop1: detected capacity change from 0 to 40427
[  306.982350][ T3614] usb 3-1: Product: syz
[  306.986550][ T3614] usb 3-1: Manufacturer: syz
[  306.991429][ T3614] usb 3-1: SerialNumber: syz
[  307.000558][ T3614] usb 3-1: config 0 descriptor??
[  307.019749][ T5893] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  307.027708][ T5893] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  307.028077][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  307.065751][ T5893] F2FS-fs (loop1): invalid crc value
[  307.171553][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  307.384096][ T3614] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  307.423749][ T5893] F2FS-fs (loop1): Found nat_bits in checkpoint
[  308.382893][  T144] usb 3-1: Failed to submit usb control message: -71
[  308.412219][ T5893] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  308.413211][  T144] usb 3-1: unable to send the bmi data to the device: -71
[  308.419486][ T5893] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  308.573296][ T3614] usb 3-1: USB disconnect, device number 6
[  308.623052][ T5910] attempt to access beyond end of device
[  308.623052][ T5910] loop1: rw=2049, want=78344, limit=40427
[  309.170179][  T144] usb 3-1: unable to get target info from device
[  309.176564][  T144] usb 3-1: could not get target info (-71)
[  309.183286][  T144] usb 3-1: could not probe fw (-71)
[  309.612563][ T5919] tmpfs: Unknown parameter 'usrquota'
[  312.547227][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'.
[  314.800364][ T4660] Bluetooth: hci3: command 0x0409 tx timeout
[  315.300178][ T3615] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  315.550222][ T3615] usb 2-1: Using ep0 maxpacket: 16
[  315.670620][ T3615] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.701968][ T5939] chnl_net:caif_netlink_parms(): no params data found
[  315.850470][ T3615] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  315.882779][ T3615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.904046][ T3615] usb 2-1: Product: syz
[  315.920974][ T3615] usb 2-1: Manufacturer: syz
[  315.930365][ T3615] usb 2-1: SerialNumber: syz
[  315.947571][ T3615] usb 2-1: config 0 descriptor??
[  316.218348][ T5954] netlink: 'syz.0.438': attribute type 2 has an invalid length.
[  317.040570][ T3649] Bluetooth: hci3: command 0x041b tx timeout
[  317.057654][ T3615] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  317.490232][ T3944] usb 2-1: Failed to submit usb control message: -71
[  317.497217][ T3944] usb 2-1: unable to send the bmi data to the device: -71
[  317.506409][ T1399] ieee802154 phy0 wpan0: encryption failed: -22
[  317.512838][ T1399] ieee802154 phy1 wpan1: encryption failed: -22
[  317.527184][ T3615] usb 2-1: USB disconnect, device number 6
[  317.540043][ T3944] usb 2-1: unable to get target info from device
[  317.546937][ T3944] usb 2-1: could not get target info (-71)
[  317.552969][ T3944] usb 2-1: could not probe fw (-71)
[  318.792215][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.809132][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.857025][ T5939] device bridge_slave_0 entered promiscuous mode
[  318.914488][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.942394][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.982351][ T5939] device bridge_slave_1 entered promiscuous mode
[  319.121460][ T3612] Bluetooth: hci3: command 0x040f tx timeout
[  319.131885][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.194642][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.520329][ T3615] Bluetooth: hci2: command 0x0406 tx timeout
[  321.200604][ T3615] Bluetooth: hci3: command 0x0419 tx timeout
[  321.290482][ T5939] team0: Port device team_slave_0 added
[  321.337475][ T5939] team0: Port device team_slave_1 added
[  321.599292][ T5997] syz.2.449[5997] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  321.599829][ T5997] syz.2.449[5997] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  322.541772][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.699809][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.929106][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.037577][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.141836][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.209489][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.809462][ T5939] device hsr_slave_0 entered promiscuous mode
[  323.817730][ T5939] device hsr_slave_1 entered promiscuous mode
[  323.825503][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  323.847498][ T5939] Cannot create hsr debugfs directory
[  324.156922][ T6001] mkiss: ax0: crc mode is auto.
[  325.483873][ T3650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.707180][ T3650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.829524][ T3650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.757529][ T3650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.385475][ T6026] loop3: detected capacity change from 0 to 512
[  329.118702][ T6026] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback.
[  329.132192][ T6026] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff)
[  329.155992][ T6025] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[  329.344091][ T6026] Process accounting resumed
[  331.300279][    T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  331.630229][    T7] usb 1-1: Using ep0 maxpacket: 16
[  331.750487][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.150326][    T7] usb 1-1: string descriptor 0 read error: -71
[  332.156707][    T7] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  332.241506][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.287087][    T7] usb 1-1: config 0 descriptor??
[  332.344444][ T5939] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  332.353566][    T7] usb 1-1: can't set config #0, error -71
[  332.503556][    T7] usb 1-1: USB disconnect, device number 3
[  332.574864][ T5939] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  332.773478][ T5939] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  333.706907][ T5939] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  333.810954][ T6061] mkiss: ax0: crc mode is auto.
[  334.116676][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.209723][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  334.223671][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  334.308685][ T3650] device hsr_slave_0 left promiscuous mode
[  334.329595][ T3650] device hsr_slave_1 left promiscuous mode
[  334.403158][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.438974][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.507773][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.523694][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.548260][ T3650] device bridge_slave_1 left promiscuous mode
[  334.580892][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.644938][ T3650] device bridge_slave_0 left promiscuous mode
[  334.659753][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.743126][ T3650] device veth1_macvtap left promiscuous mode
[  334.760392][ T3650] device veth0_macvtap left promiscuous mode
[  334.781824][ T3650] device veth1_vlan left promiscuous mode
[  334.787689][ T3650] device veth0_vlan left promiscuous mode
[  336.304036][ T3650] team0 (unregistering): Port device team_slave_1 removed
[  336.389441][ T3650] team0 (unregistering): Port device team_slave_0 removed
[  336.468026][ T3650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.543963][ T3650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.945640][ T3650] bond0 (unregistering): Released all slaves
[  337.054998][ T6091] binder: 6090:6091 ioctl 4018620d 0 returned -22
[  337.235189][ T5939] 8021q: adding VLAN 0 to HW filter on device team0
[  338.690554][ T6094] vivid-006: disconnect
[  338.697236][ T3615] Bluetooth: hci2: command 0x0409 tx timeout
[  338.850237][ T3614] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  339.229899][ T6090] vivid-006: reconnect
[  339.260445][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  339.415522][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  339.470939][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.478052][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.650147][ T3614] usb 1-1: Using ep0 maxpacket: 16
[  339.733495][ T5939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  340.223134][ T5939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  340.300333][ T3614] usb 1-1: unable to read config index 0 descriptor/all
[  340.307346][ T3614] usb 1-1: can't read configurations, error -71
[  340.359737][ T6108] futex_wake_op: syz.3.473 tries to shift op by 32; fix this program
[  342.289584][ T6116] loop0: detected capacity change from 0 to 16
[  343.626521][ T2086] Bluetooth: hci2: command 0x041b tx timeout
[  343.643449][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  343.661529][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  343.698509][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  344.732724][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.739886][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.949849][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  346.835108][ T3649] Bluetooth: hci2: command 0x040f tx timeout
[  346.922634][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  346.977636][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  347.210897][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  347.251310][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  347.309923][ T6145] loop3: detected capacity change from 0 to 1024
[  347.329211][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  347.346762][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  347.366622][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  347.404867][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  347.420458][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  347.507297][ T6145] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  347.569944][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  347.718642][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  349.423535][ T2086] Bluetooth: hci2: command 0x0419 tx timeout
[  351.977246][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  351.991356][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  352.114668][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.140318][ T2086] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  352.160978][ T6083] chnl_net:caif_netlink_parms(): no params data found
[  352.470223][ T2086] usb 4-1: Using ep0 maxpacket: 16
[  352.601148][ T2086] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.791366][ T2086] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  352.826199][ T2086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.280150][ T2086] usb 4-1: Product: syz
[  353.284356][ T2086] usb 4-1: Manufacturer: syz
[  353.288958][ T2086] usb 4-1: SerialNumber: syz
[  353.422326][ T2086] usb 4-1: config 0 descriptor??
[  353.460250][ T2086] usb 4-1: can't set config #0, error -71
[  353.486432][ T2086] usb 4-1: USB disconnect, device number 4
[  354.609848][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.664763][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.212495][ T6083] device bridge_slave_0 entered promiscuous mode
[  355.308031][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.325975][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.398818][ T6083] device bridge_slave_1 entered promiscuous mode
[  356.021180][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.077508][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  356.104422][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  356.149999][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.352294][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  356.368729][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  356.378889][ T5939] device veth0_vlan entered promiscuous mode
[  356.671742][ T6083] team0: Port device team_slave_0 added
[  356.679722][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  358.805386][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  358.871722][ T5939] device veth1_vlan entered promiscuous mode
[  358.891330][ T6219] loop0: detected capacity change from 0 to 8
[  358.908773][ T6083] team0: Port device team_slave_1 added
[  361.174714][ T6219] SQUASHFS error: zlib decompression failed, data probably corrupt
[  361.213739][ T6219] SQUASHFS error: Failed to read block 0x9b: -5
[  361.241987][ T6219] SQUASHFS error: Unable to read metadata cache entry [99]
[  361.278249][ T6219] SQUASHFS error: Unable to read inode 0x127
[  361.371852][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.427927][ T2086] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  361.436030][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.540487][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.599911][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.660204][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.710162][ T2086] usb 4-1: Using ep0 maxpacket: 16
[  361.748931][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.791110][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  361.830410][ T2086] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.850441][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  361.940299][ T2086] usb 4-1: string descriptor 0 read error: -71
[  361.960282][ T2086] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  361.990138][ T2086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.999999][ T2086] usb 4-1: config 0 descriptor??
[  362.030248][ T2086] usb 4-1: can't set config #0, error -71
[  362.055127][ T2086] usb 4-1: USB disconnect, device number 5
[  362.067953][ T5939] device veth0_macvtap entered promiscuous mode
[  362.120972][ T3613] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  362.296602][ T5939] device veth1_macvtap entered promiscuous mode
[  363.157885][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  363.186684][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  363.194325][ T3613] usb 1-1: Using ep0 maxpacket: 8
[  363.991339][ T3614] Bluetooth: hci6: command 0x0409 tx timeout
[  364.044551][ T6083] device hsr_slave_0 entered promiscuous mode
[  364.071604][ T6083] device hsr_slave_1 entered promiscuous mode
[  364.080482][ T3613] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  364.100649][ T3613] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  364.130164][ T3613] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  364.147549][ T3613] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  364.170276][ T3613] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  364.192794][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.234799][ T6083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  364.260819][ T6083] Cannot create hsr debugfs directory
[  364.324501][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.348962][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.369149][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.389050][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.399306][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.430230][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.457659][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.490249][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.490384][ T3613] usb 1-1: GET_CAPABILITIES returned 0
[  364.520411][ T3613] usbtmc 1-1:16.0: can't read capabilities
[  364.546018][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.658550][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  364.693607][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  364.781088][ T1074] usb 1-1: USB disconnect, device number 6
[  364.848784][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.869864][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.890099][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.911311][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.931666][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.944196][ T6235] loop3: detected capacity change from 0 to 32768
[  364.960460][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.970667][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.981786][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.993349][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.012808][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  365.039120][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  365.064983][ T6235] JBD2: Ignoring recovery information on journal
[  365.105999][ T5939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.125187][ T5939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.139762][ T5939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.141446][ T6235] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  365.149151][ T5939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.231496][   T26] audit: type=1800 audit(1727737708.563:24): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.499" name="bus" dev="loop3" ino=17058 res=0 errno=0
[  365.266617][   T26] audit: type=1800 audit(1727737708.593:25): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.499" name="file1" dev="loop3" ino=17059 res=0 errno=0
[  365.368201][ T5200] ocfs2: Unmounting device (7,3) on (node local)
[  365.585361][ T6083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.630016][ T6223] chnl_net:caif_netlink_parms(): no params data found
[  365.676472][ T3947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.690527][ T6241] loop0: detected capacity change from 0 to 40427
[  365.701648][ T3947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.734965][ T6241] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  365.735649][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  365.742788][ T6241] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  365.745450][ T6241] F2FS-fs (loop0): invalid crc value
[  365.802181][ T6241] F2FS-fs (loop0): Found nat_bits in checkpoint
[  365.826934][ T6083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.861728][ T6241] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  365.868900][ T6241] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  366.072258][ T6241] attempt to access beyond end of device
[  366.072258][ T6241] loop0: rw=2049, want=78344, limit=40427
[  366.101709][    T7] Bluetooth: hci6: command 0x041b tx timeout
[  366.861381][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.878502][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.904234][ T6223] device bridge_slave_0 entered promiscuous mode
[  366.929792][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.937076][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.957034][ T6223] device bridge_slave_1 entered promiscuous mode
[  366.996406][ T6083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.067670][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.099810][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.111479][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.147443][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.186072][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  367.219973][ T3650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.311064][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  367.551082][ T6223] team0: Port device team_slave_0 added
[  367.580963][ T6223] team0: Port device team_slave_1 added
[  367.845651][ T6083] bond0: (slave netdevsim0): Releasing backup interface
[  367.867013][ T6083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.937095][ T3650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.966729][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.974629][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.011354][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.087772][ T3650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.160300][ T3658] Bluetooth: hci6: command 0x040f tx timeout
[  368.217078][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.232879][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.419337][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.449845][ T6274] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  368.475420][ T3650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.566723][ T6223] device hsr_slave_0 entered promiscuous mode
[  368.580300][ T6223] device hsr_slave_1 entered promiscuous mode
[  368.597022][ T6223] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  368.660427][ T6223] Cannot create hsr debugfs directory
[  370.028792][ T6083] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  370.133399][ T6083] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  370.180868][ T6083] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  370.235373][ T6083] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  370.240714][ T3658] Bluetooth: hci6: command 0x0419 tx timeout
[  370.481521][ T3658] Bluetooth: hci4: command 0x0406 tx timeout
[  370.715091][ T6286] loop3: detected capacity change from 0 to 32768
[  370.735627][ T6083] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.811895][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  370.825047][ T6286] (syz.3.508,6286,0):ocfs2_verify_userspace_stack:855 ERROR: cluster stack passed to mount, but this filesystem does not support it
[  370.845685][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  370.862886][ T6223] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  370.874943][ T6286] (syz.3.508,6286,1):ocfs2_fill_super:1177 ERROR: status = -22
[  370.902555][ T6083] 8021q: adding VLAN 0 to HW filter on device team0
[  370.933803][ T6223] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  371.055576][ T6223] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  371.076414][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  371.094565][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  371.132435][ T3944] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.139536][ T3944] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.170732][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  371.181927][ T6223] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  371.200300][ T2086] Bluetooth: hci0: command 0x1003 tx timeout
[  371.206495][ T3574] Bluetooth: hci0: sending frame failed (-49)
[  371.225823][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  371.246316][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  371.259726][ T3944] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.266881][ T3944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.343706][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  371.401929][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  371.550763][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  371.579215][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  371.784994][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  371.878352][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  372.087118][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  372.444166][ T6083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  372.499641][ T6083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.537545][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  372.556563][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  372.586237][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  372.608451][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  372.685434][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  372.778746][ T6223] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.798363][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  372.839489][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  372.874870][ T6223] 8021q: adding VLAN 0 to HW filter on device team0
[  372.909676][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  372.927618][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  372.963827][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  372.998725][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  373.022474][ T4606] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.029603][ T4606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.081924][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.131692][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  373.140823][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  373.161249][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  373.169886][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.177047][ T4606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.219008][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  373.252907][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  373.290242][ T3658] Bluetooth: hci0: command 0x1001 tx timeout
[  373.296732][ T3574] Bluetooth: hci0: sending frame failed (-49)
[  373.401583][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  373.413293][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  373.456726][ T6331] loop0: detected capacity change from 0 to 512
[  373.496923][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  373.516293][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  373.535264][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  373.554740][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  373.564541][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  373.574050][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  373.583323][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  373.780964][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  373.801204][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  373.821786][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  373.839884][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  373.851237][ T6333] loop0: detected capacity change from 0 to 1024
[  373.862324][ T6083] device veth0_vlan entered promiscuous mode
[  373.881817][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  373.914302][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  373.953836][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  373.994576][ T6083] device veth1_vlan entered promiscuous mode
[  374.067365][ T3650] device hsr_slave_0 left promiscuous mode
[  374.100829][ T3650] device hsr_slave_1 left promiscuous mode
[  374.120353][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.128051][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.149325][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.157144][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.181233][ T3650] device bridge_slave_1 left promiscuous mode
[  374.187466][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.211598][ T3650] device bridge_slave_0 left promiscuous mode
[  374.218421][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.261078][ T3650] device hsr_slave_0 left promiscuous mode
[  374.267753][ T3650] device hsr_slave_1 left promiscuous mode
[  374.299548][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.329475][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.348524][ T3650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.380386][ T3650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.401397][ T3650] device bridge_slave_1 left promiscuous mode
[  374.407617][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.431641][ T3650] device bridge_slave_0 left promiscuous mode
[  374.437860][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.467663][ T3650] device veth1_macvtap left promiscuous mode
[  374.477552][ T3650] device veth0_macvtap left promiscuous mode
[  374.488523][ T3650] device veth1_vlan left promiscuous mode
[  374.510251][ T3650] device veth0_vlan left promiscuous mode
[  374.519129][ T3650] device veth1_macvtap left promiscuous mode
[  374.534875][ T3650] device veth0_macvtap left promiscuous mode
[  374.545429][ T3650] device veth1_vlan left promiscuous mode
[  374.556048][ T3650] device veth0_vlan left promiscuous mode
[  374.975794][ T6344] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  375.540215][    T7] Bluetooth: hci0: command 0x1009 tx timeout
[  376.110570][ T3650] team0 (unregistering): Port device team_slave_1 removed
[  376.156486][ T3650] team0 (unregistering): Port device team_slave_0 removed
[  376.186441][ T3650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  376.206919][ T3650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  376.422025][ T3650] bond0 (unregistering): Released all slaves
[  376.886109][ T3650] team0 (unregistering): Port device team_slave_1 removed
[  376.916207][ T3650] team0 (unregistering): Port device team_slave_0 removed
[  376.945527][ T3650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  376.984051][ T3650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.129470][ T3650] bond0 (unregistering): Released all slaves
[  377.217433][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  377.248618][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  378.056853][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  378.076691][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  378.572024][ T1399] ieee802154 phy0 wpan0: encryption failed: -22
[  378.596441][ T1399] ieee802154 phy1 wpan1: encryption failed: -22
[  378.664038][ T6083] device veth0_macvtap entered promiscuous mode
[  378.751485][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  378.764616][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  378.803637][ T6083] device veth1_macvtap entered promiscuous mode
[  378.836990][ T6223] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.879193][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.901461][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.925193][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.950206][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.970208][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.981964][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.993967][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.028860][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  379.092486][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  379.144389][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  379.175348][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.204919][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  379.239314][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.263648][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  379.275165][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  379.287345][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.328284][ T6083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.381412][ T6083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.430374][ T6083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.464406][ T6083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.490200][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  379.499735][ T6372] loop0: detected capacity change from 0 to 32768
[  379.507218][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  379.538494][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  379.657585][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  380.296591][ T6372] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.524 (6372)
[  380.365171][ T6372] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  380.386523][ T6372] BTRFS info (device loop0): enabling auto defrag
[  380.393630][ T6372] BTRFS info (device loop0): max_inline at 0
[  380.399781][ T6372] BTRFS info (device loop0): enabling ssd optimizations
[  380.420567][ T6372] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  380.435363][ T6372] BTRFS info (device loop0): use lzo compression, level 0
[  380.442796][ T6372] BTRFS info (device loop0): using free space tree
[  380.449460][ T6372] BTRFS info (device loop0): has skinny extents
[  380.726736][ T6385] loop3: detected capacity change from 0 to 40427
[  380.767127][ T6223] device veth0_vlan entered promiscuous mode
[  380.786213][ T6385] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  380.794283][ T6385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  380.806402][   T26] audit: type=1800 audit(1727737724.133:26): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.524" name="bus" dev="loop0" ino=263 res=0 errno=0
[  380.827171][ T6385] F2FS-fs (loop3): invalid crc value
[  380.833258][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  380.895367][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  380.918448][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  380.938727][ T6385] F2FS-fs (loop3): Found nat_bits in checkpoint
[  380.941901][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  380.999298][ T6385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  381.006469][ T6385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  381.068214][ T6223] device veth1_vlan entered promiscuous mode
[  381.093945][ T6385] attempt to access beyond end of device
[  381.093945][ T6385] loop3: rw=2049, want=78344, limit=40427
[  381.120336][ T4660] Bluetooth: hci1: command 0x0409 tx timeout
[  381.252649][ T3788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.276527][ T3788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.377917][ T6223] device veth0_macvtap entered promiscuous mode
[  381.415016][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  381.452721][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  381.471141][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  381.481084][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  381.582985][ T6223] device veth1_macvtap entered promiscuous mode
[  381.641404][ T3746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.649742][ T3746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.675965][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  381.706431][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  381.783293][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.833477][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.870684][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.884346][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.895613][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.906524][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.916790][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  381.928154][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  381.941040][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.952625][ T6373] chnl_net:caif_netlink_parms(): no params data found
[  381.994747][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  382.013107][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  382.070759][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.130660][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.169110][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.198666][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.257587][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.320004][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.390871][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.460138][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.508222][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.565627][ T6223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.596079][ T6416] Bluetooth: hci1: command 0x041b tx timeout
[  384.650244][ T6223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.659605][ T6223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.672902][ T6433] loop0: detected capacity change from 0 to 64
[  384.690660][ T6223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.974440][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  384.991117][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  385.422875][ T6444] loop3: detected capacity change from 0 to 1024
[  385.690706][ T6444] EXT4-fs (loop3): Ignoring removed nobh option
[  385.906254][ T6444] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  386.251912][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.279749][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.288091][ T6444] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  386.374800][ T6373] device bridge_slave_0 entered promiscuous mode
[  386.650485][ T4321] Bluetooth: hci1: command 0x040f tx timeout
[  386.738377][ T3731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.774213][ T3731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.127295][ T3731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.518167][ T3731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.690682][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.703520][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.711980][ T6373] device bridge_slave_1 entered promiscuous mode
[  387.808269][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  387.884628][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  387.989711][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  388.109583][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.183312][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.572194][ T6373] team0: Port device team_slave_0 added
[  388.629857][ T6373] team0: Port device team_slave_1 added
[  388.640662][ T3614] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  388.888921][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.894654][ T4321] Bluetooth: hci1: command 0x0419 tx timeout
[  388.904414][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  388.930686][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.944277][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  388.976982][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.151148][ T3614] usb 2-1: Using ep0 maxpacket: 32
[  389.812170][ T6472] loop3: detected capacity change from 0 to 32768
[  389.818747][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.915375][ T6472] XFS (loop3): Mounting V5 Filesystem
[  389.930502][ T3614] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[  389.981581][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.134930][ T3614] usb 2-1: config 0 descriptor??
[  390.593620][ T3614] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[  390.662078][ T3614] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  390.669593][ T6373] device hsr_slave_0 entered promiscuous mode
[  390.685160][ T6472] XFS (loop3): Ending clean mount
[  390.707973][ T6373] device hsr_slave_1 entered promiscuous mode
[  390.713555][ T3614] dvbdev: DVB: registering new adapter (HCW 126xxx)
[  390.767617][ T3614] usb 2-1: media controller created
[  390.876946][ T3614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  391.082001][ T3614] usb 2-1: selecting invalid altsetting 1
[  391.100561][ T3614] set interface failed
[  391.101335][ T3614] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  391.113704][ T3614] error writing reg: 0xff, val: 0x00
[  391.180730][ T5200] XFS (loop3): Unmounting Filesystem
[  391.232512][ T3614] dvb_usb_mxl111sf: probe of 2-1:0.0 failed with error -22
[  391.258964][ T3614] usb 2-1: USB disconnect, device number 7
[  391.546267][ T6373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.631556][ T6373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.687543][ T6505] loop1: detected capacity change from 0 to 64
[  391.913295][ T6373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.152879][ T6373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.473429][ T6512] loop2: detected capacity change from 0 to 2048
[  392.586465][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  392.867513][ T6512] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noinit_itable,init_itable=0x0000000000000080,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  393.179235][ T6512] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.554: bg 0: block 234: padding at end of block bitmap is not set
[  393.228506][ T6512] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 214 with error 28
[  393.258902][ T6512] EXT4-fs (loop2): This should not happen!! Data will be lost
[  393.258902][ T6512] 
[  393.278781][ T6373] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  393.299621][ T6512] EXT4-fs (loop2): Total free blocks count 0
[  393.307199][ T6512] EXT4-fs (loop2): Free/Dirty block details
[  393.321567][ T6512] EXT4-fs (loop2): free_blocks=0
[  393.327648][ T6512] EXT4-fs (loop2): dirty_blocks=224
[  393.345896][ T6512] EXT4-fs (loop2): Block reservation details
[  393.384034][ T6512] EXT4-fs (loop2): i_reserved_data_blocks=14
[  393.445182][ T6373] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  394.200749][ T6373] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  394.241294][ T6373] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  394.525374][ T6535] loop3: detected capacity change from 0 to 1024
[  394.631262][ T6538] loop2: detected capacity change from 0 to 1024
[  394.688980][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.739775][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  394.943885][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  395.252945][ T6373] 8021q: adding VLAN 0 to HW filter on device team0
[  395.254110][ T6535] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  395.274597][ T6541] Can't find a SQUASHFS superblock on loop1
[  395.366452][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  395.376789][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  395.481684][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.488805][ T3699] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.581136][ T6538] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback.
[  396.383803][ T3658] Bluetooth: hci5: command 0x0406 tx timeout
[  396.463750][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  396.509244][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  396.544388][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  396.633289][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  397.241341][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.248534][ T3699] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.346463][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  397.671570][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  397.691640][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  397.706103][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  397.716040][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  397.760819][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  397.837955][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  397.936959][ T6373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  397.958919][ T6373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  398.000606][ T4321] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  398.040152][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  398.046971][ T6551] loop0: detected capacity change from 0 to 40427
[  398.053574][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  398.080609][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  398.098503][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  398.225235][ T6551] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  398.232017][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  398.279948][ T6551] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  398.300725][ T4321] usb 4-1: Using ep0 maxpacket: 16
[  398.346768][ T6551] F2FS-fs (loop0): invalid crc value
[  398.491181][ T4321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  398.705279][ T6551] F2FS-fs (loop0): Found nat_bits in checkpoint
[  398.730996][ T4321] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  398.741449][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.749681][ T4321] usb 4-1: Product: syz
[  398.764315][ T4321] usb 4-1: Manufacturer: syz
[  398.770409][ T4321] usb 4-1: SerialNumber: syz
[  398.803419][ T4321] usb 4-1: config 0 descriptor??
[  399.001167][ T4321] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  399.047046][ T6580] loop2: detected capacity change from 0 to 1024
[  399.054864][ T6551] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  399.062616][ T6551] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  400.090882][  T154] usb 4-1: Failed to submit usb control message: -110
[  400.100284][  T154] usb 4-1: unable to send the bmi data to the device: -110
[  400.151748][  T154] usb 4-1: unable to get target info from device
[  400.176204][  T154] usb 4-1: could not get target info (-110)
[  400.196056][  T154] usb 4-1: could not probe fw (-110)
[  400.206231][ T3684] device hsr_slave_0 left promiscuous mode
[  400.313265][ T3684] device hsr_slave_1 left promiscuous mode
[  400.340818][  T144] hfsplus: found bad thread record in catalog
[  400.372086][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.379661][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.400431][  T144] hfsplus: found bad thread record in catalog
[  400.429790][ T3614] usb 4-1: USB disconnect, device number 6
[  400.441212][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.486981][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.628968][ T3684] device bridge_slave_1 left promiscuous mode
[  400.640450][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.676045][ T3684] device bridge_slave_0 left promiscuous mode
[  400.692667][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.754754][ T3684] device veth1_macvtap left promiscuous mode
[  400.793002][ T3684] device veth0_macvtap left promiscuous mode
[  400.799164][ T3684] device veth1_vlan left promiscuous mode
[  400.816835][ T6596] loop3: detected capacity change from 0 to 1024
[  400.821535][ T3684] device veth0_vlan left promiscuous mode
[  400.932059][ T6596] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  402.271097][ T3684] team0 (unregistering): Port device team_slave_1 removed
[  402.298606][ T3684] team0 (unregistering): Port device team_slave_0 removed
[  402.327428][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.384215][ T6594] loop2: detected capacity change from 0 to 32768
[  402.402240][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.515713][ T6594] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  402.534361][ T6594] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  402.606570][ T6594] gfs2: fsid=syz:syz.s: no journals!
[  402.626045][ T3684] bond0 (unregistering): Released all slaves
[  402.812628][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  402.821257][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  402.836311][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  405.212059][ T6639] loop3: detected capacity change from 0 to 1024
[  407.738637][ T6639] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  407.887471][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  407.907297][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  408.078306][ T3614] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  408.121459][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  408.129990][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  408.906872][ T6373] device veth0_vlan entered promiscuous mode
[  408.964972][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  408.992908][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  409.538604][ T6373] device veth1_vlan entered promiscuous mode
[  409.671465][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  409.827086][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  410.592361][ T6373] device veth0_macvtap entered promiscuous mode
[  410.729872][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  410.757865][ T6373] device veth1_macvtap entered promiscuous mode
[  410.814409][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.878581][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.967468][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.060269][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.128223][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.187925][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.248944][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.301571][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.367283][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.419478][ T6677] tipc: Started in network mode
[  411.425852][ T6677] tipc: Node identity ac1414aa, cluster identity 4711
[  411.485433][ T6677] tipc: Enabled bearer <udp:syz2>, priority 10
[  411.523123][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  411.553096][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  411.611025][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.656718][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.707270][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.740909][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.796913][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.849635][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.860452][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.860479][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.862008][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.865590][ T6373] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.865627][ T6373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.865655][ T6373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.865683][ T6373] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.868958][ T6678] tipc: Disabling bearer <udp:syz2>
[  411.876673][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  412.155516][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  412.464342][ T3699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.492525][ T3699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.546226][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  412.732988][ T6689] loop1: detected capacity change from 0 to 1024
[  413.249526][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.410730][ T6689] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  413.449697][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.583542][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  414.716085][ T6707] usb usb8: usbfs: process 6707 (syz.1.602) did not claim interface 0 before use
[  414.727448][ T6711] fuse: Bad value for 'fd'
[  414.854806][ T6708] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[  414.862877][ T6708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.602'.
[  415.265598][ T6720] loop2: detected capacity change from 0 to 8
[  415.357734][ T6720] unable to read xattr id index table
[  416.299601][ T3684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.515637][ T3684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.602106][ T6713] loop3: detected capacity change from 0 to 32768
[  416.647881][ T6713] (syz.3.604,6713,0):ocfs2_sb_probe:756 ERROR: incompatible version: 2.33686018
[  416.669192][ T3684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.677639][ T6713] (syz.3.604,6713,1):ocfs2_sb_probe:769 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2
[  416.695492][ T6713] (syz.3.604,6713,1):ocfs2_fill_super:991 ERROR: superblock probe failed!
[  416.704640][ T6713] (syz.3.604,6713,1):ocfs2_fill_super:1177 ERROR: status = -22
[  416.749483][ T3684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.466902][ T6743] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  420.415498][ T6746] loop3: detected capacity change from 0 to 512
[  420.481194][ T6748] loop2: detected capacity change from 0 to 1024
[  420.628950][ T6748] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  420.658479][ T6746] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  420.670385][ T6746] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038 (0x7fffffff)
[  422.307708][ T3684] device hsr_slave_0 left promiscuous mode
[  422.337980][ T3684] device hsr_slave_1 left promiscuous mode
[  422.359536][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.395994][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.422620][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.440334][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.458728][ T3684] device bridge_slave_1 left promiscuous mode
[  422.579334][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.967896][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'.
[  422.979158][ T6794] 9pnet: Unknown protocol version 9
[  423.576077][ T3684] device bridge_slave_0 left promiscuous mode
[  423.585943][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.603233][ T3684] device veth1_macvtap left promiscuous mode
[  423.609466][ T3684] device veth0_macvtap left promiscuous mode
[  423.619705][ T3684] device veth1_vlan left promiscuous mode
[  423.633255][ T3684] device veth0_vlan left promiscuous mode
[  424.593855][ T6803] usb usb8: usbfs: process 6803 (syz.3.617) did not claim interface 0 before use
[  425.744071][ T3684] team0 (unregistering): Port device team_slave_1 removed
[  425.798629][ T3684] team0 (unregistering): Port device team_slave_0 removed
[  425.855058][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.916789][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  426.395114][ T3684] bond0 (unregistering): Released all slaves
[  427.724261][ T6833] netlink: 'syz.3.623': attribute type 10 has an invalid length.
[  427.839003][ T6833] team0: Port device netdevsim0 added
[  427.867903][ T6836] netlink: 'syz.3.623': attribute type 10 has an invalid length.
[  428.825293][ T6836] team0: Port device netdevsim0 removed
[  428.861841][ T6836] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  429.275175][ T6857] netlink: 'syz.2.625': attribute type 1 has an invalid length.
[  429.345473][ T6857] 8021q: adding VLAN 0 to HW filter on device bond1
[  429.371384][ T6859] loop1: detected capacity change from 0 to 1024
[  429.424740][ T6857] device vlan2 entered promiscuous mode
[  429.445199][ T6857] device bond1 entered promiscuous mode
[  429.510698][ T6859] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  429.820606][ T6867] loop3: detected capacity change from 0 to 2048
[  429.983421][ T6876] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  432.170264][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  432.480411][ T6901] 9pnet: Unknown protocol version 9
[  437.476992][ T6982] loop2: detected capacity change from 0 to 1024
[  438.052531][ T6982] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  439.686286][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'.
[  439.697091][ T7014] 9pnet: Unknown protocol version 9
[  442.097100][ T1399] ieee802154 phy0 wpan0: encryption failed: -22
[  442.112286][ T1399] ieee802154 phy1 wpan1: encryption failed: -22
SYZFAIL: mkdir(syz-tmp) failed
 (errno 28: No space left on device)
loop exited with status 67
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: failed to mkdtemp
 (errno 28: No space left on device)
SYZFAIL: repeatedly failed to execute the program
proc=4 req=523 state=1 status=67 (errno 9: Bad file descriptor)
[  445.811908][ T7042] usb usb8: usbfs: process 7042 (syz.1.645) did not claim interface 0 before use
[  446.829189][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.947994][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.023240][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.108314][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.013404][  T154] device hsr_slave_0 left promiscuous mode
[  448.021698][  T154] device hsr_slave_1 left promiscuous mode
[  448.028328][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.039522][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.054181][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.063425][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.075200][  T154] device bridge_slave_1 left promiscuous mode
[  448.083095][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.096364][  T154] device bridge_slave_0 left promiscuous mode
[  448.104661][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.123929][  T154] device bond1 left promiscuous mode
[  448.135896][  T154] device veth1_macvtap left promiscuous mode
[  448.145909][  T154] device veth0_macvtap left promiscuous mode
[  448.157523][  T154] device veth1_vlan left promiscuous mode
[  448.167528][  T154] device veth0_vlan left promiscuous mode
[  448.307797][  T154] bond1 (unregistering): Released all slaves
[  448.403333][  T154] team0 (unregistering): Port device team_slave_1 removed
[  448.419920][  T154] team0 (unregistering): Port device team_slave_0 removed
[  448.436922][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.451913][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.530875][  T154] bond0 (unregistering): Released all slaves
[  450.443633][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.538393][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.598963][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.666439][  T154] bond0: (slave netdevsim0): Releasing backup interface
[  450.683790][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.479271][  T154] device hsr_slave_0 left promiscuous mode
[  451.489582][  T154] device hsr_slave_1 left promiscuous mode
[  451.496985][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.509164][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.517632][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.530114][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.538035][  T154] device bridge_slave_1 left promiscuous mode
[  451.548796][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.564246][  T154] device bridge_slave_0 left promiscuous mode
[  451.570656][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.589132][  T154] device veth1_macvtap left promiscuous mode
[  451.595414][  T154] device veth0_macvtap left promiscuous mode
[  451.617005][  T154] device veth1_vlan left promiscuous mode
[  451.626502][  T154] device veth0_vlan left promiscuous mode
[  451.844206][  T154] team0 (unregistering): Port device team_slave_1 removed
[  451.857849][  T154] team0 (unregistering): Port device team_slave_0 removed
[  451.874267][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  451.889770][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  451.965875][  T154] bond0 (unregistering): Released all slaves