last executing test programs:

1m17.293478113s ago: executing program 0 (id=133):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a"], 0x94}}, 0x20008841)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(r3, r3, r3)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2)

1m16.722502946s ago: executing program 0 (id=136):
socket$inet_sctp(0x2, 0x5, 0x84)
syz_emit_ethernet(0x4e, &(0x7f00000021c0)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x2, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}]}]}}}}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x2, 0xb5}]}}}}}, 0x0)

1m16.571960855s ago: executing program 0 (id=137):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a0001000000"], 0x64}}, 0x4000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084)

1m16.307319189s ago: executing program 0 (id=143):
mkdir(&(0x7f0000001940)='./file0\x00', 0x40)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x31056, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

1m16.213255965s ago: executing program 0 (id=145):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r2, &(0x7f00000013c0)="eaa3", 0x2)
splice(r2, &(0x7f0000000040), r1, 0x0, 0x6, 0x0)
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0)

1m15.836072567s ago: executing program 0 (id=147):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="020304000100090104006bd648c610112f01fe80000000000000000000000000002eff020000000000000000000000000001042065"], 0x1043)

1m15.645023478s ago: executing program 32 (id=147):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="020304000100090104006bd648c610112f01fe80000000000000000000000000002eff020000000000000000000000000001042065"], 0x1043)

1m4.618473783s ago: executing program 5 (id=203):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe)

1m4.472761132s ago: executing program 5 (id=204):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x8, 0xca, 0x0, 0x1000, {[@eol]}}}}}}}, 0x0)

1m4.260015304s ago: executing program 5 (id=205):
setgroups(0x2, &(0x7f0000000040)=[0x0, 0x0])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000031c0)=""/157, &(0x7f0000000280)=0x9d)

1m4.15288517s ago: executing program 5 (id=206):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$9p_unix(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0)
syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000001400)='proc\x00', 0x4200001, 0x0)

1m3.936890993s ago: executing program 5 (id=208):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r0, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c"], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0)

1m1.956547767s ago: executing program 5 (id=221):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)

1m1.703294152s ago: executing program 33 (id=221):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)

20.585609983s ago: executing program 2 (id=523):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020)
read$FUSE(r0, 0x0, 0x0)

20.435226612s ago: executing program 2 (id=526):
r0 = io_uring_setup(0x68f4, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168})
r1 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
mq_timedreceive(r1, &(0x7f00000003c0)=""/100, 0x64, 0xfffffffffffffff8, 0x0)
mremap(&(0x7f00005a7000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)

20.198616195s ago: executing program 2 (id=530):
socket$igmp(0x2, 0x3, 0x2)
r0 = timerfd_create(0x9, 0x800)
timerfd_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835f, 0xc000, 0x20000a, 0xfd})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x40004)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

20.025628765s ago: executing program 2 (id=531):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@fat=@showexec}, {@utf8no}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x9)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

19.659411096s ago: executing program 2 (id=534):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x14, 0x0, &(0x7f0000000040)="b98bd90ca5b62691b89afe70ec06163f1941e494", 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000300)="3a59bbb0975a"}, 0x50)

18.438393827s ago: executing program 2 (id=541):
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/156)

18.173818452s ago: executing program 34 (id=541):
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/156)

3.748951624s ago: executing program 6 (id=604):
r0 = socket(0x11, 0x3, 0x0)
setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg(r0, &(0x7f0000000100)={&(0x7f00000003c0)=@xdp={0x2c, 0x8, r2, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000006c0)="000502000b00000000002d3922ff65b4355e953d23d254f09cd2893ffd966d3b07110a5fb45458ac33", 0x29}], 0x1}, 0x818)

3.46789582s ago: executing program 6 (id=606):
syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x4001, &(0x7f00000000c0)=ANY=[], 0x1, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x0, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x4, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.46756799s ago: executing program 1 (id=607):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0xfd, 0x80000001}}, 0x940)

3.249352963s ago: executing program 1 (id=609):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x3ac, 0x6, 0x3, 0x201, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x9}, [@nested={0x109, 0xa, 0x0, 0x1, [@generic="572bc35b94e593f206de4c86da6bf6d9f41b2e16988f61851dc2c4d137c365782cbcde4b14311700db7ed7c9485d7f7e85d2bc085e6c681340a751d97d05dc784e5bb56fd7106546a7fc3b31e264f27e938cb43e474cc308f69953298d3cfdf51f8b29f5eff057368ba0a376e228aac5d56d35f7989463aa86e21f7f536d", @nested={0x4, 0xd}, @generic="4093c0ff7b9cf17276a4", @generic="9ba3c350e4fdd22b243be48327763dff4d2cfbc8c4e470193c317f5ff68ce310880876f4ccdbc1a81d697e375230e37acf2bc8a5c88051d2cfb8d04ff19add21c0422fdd650921c3ba7f1518cf5403d0b7813a074668adac663c8ee0e507da690499d455bd", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x8, 0x11c, 0x0, 0x0, @uid}, @nested={0xa5, 0xf3, 0x0, 0x1, [@generic="ba89292a0e7ffa485bdb406640358bddd4652f6c447bb3949d67f0094bce1e456283b8223c38c90da2c8a305a69010f1afe29d304df10b208caec94667f893a1f7d99a7c3d1d75aa9f68bdf96cfa069426f6a9deb7dd2c9033b224cd4c90d3a12ce7f6e3c38b9d345bd4f41ce3cdee024f5abf4fff42067a0b272fe05006ea6e23da51a1d07b07832e20bd1da1efc6e0e2ea025dcf89f3f380bb13424c", @nested={0x4, 0x146}]}, @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x7b, 0x0, 0x0, @binary}, @nested={0x1cd, 0xfc, 0x0, 0x1, [@nested={0x4, 0xc1}, @generic="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"]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.076746652s ago: executing program 1 (id=610):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

2.979983588s ago: executing program 1 (id=611):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x2, 0x4e21, @empty}, 0x10, 0x0}, 0x4004)

2.77589763s ago: executing program 6 (id=612):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x88}}, 0x24040084)
r3 = inotify_init()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)
close_range(r3, 0xffffffffffffffff, 0x0)

2.707347404s ago: executing program 1 (id=613):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000180)={0x0, 0xfffffffd, 0x2, 0x4}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x7bfe, 0x3ffb, 0x5, 0x0, 0x0)

2.539079084s ago: executing program 6 (id=614):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
r5 = getpid()
r6 = syz_open_procfs$namespace(r5, &(0x7f0000000340)='ns/pid\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x3c}}, 0x40060)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="796100000000000000047e"], 0x14}}, 0x4000054)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r2, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r9, 0x16, 0x0, @void}, 0x10)
r10 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r10, 0x0, 0x33, &(0x7f0000000280)={@rand_addr=0x64010101, @remote, @empty}, 0xc)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x4, @random="2000f040f10b"}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xde46f1e64a0e3aa4}}, 0x10)

2.25602822s ago: executing program 7 (id=542):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x4, 0x10}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xffe0}}, @TCA_FW_MASK={0x8, 0x5, 0x100}, @TCA_FW_MASK={0x8, 0x5, 0x3d7}]}}]}, 0x5c}, 0x1, 0x4000000}, 0x0)

1.314351984s ago: executing program 1 (id=617):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = mq_open(&(0x7f0000000040)='$@\x00', 0x40, 0xb4, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0)
mq_open(&(0x7f0000000280)='!\x00', 0x2, 0x104, 0x0)
r1 = syz_clone(0x80208000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
syz_mount_image$vfat(&(0x7f0000008140), &(0x7f0000008180)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r1], 0x1, 0x8137, &(0x7f0000010340)="$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")
setns(r2, 0x10000000)

1.310572515s ago: executing program 3 (id=618):
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a00, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.20689349s ago: executing program 6 (id=619):
setuid(0xee01)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
fcntl$notify(r0, 0x402, 0x1)
getdents(r0, 0x0, 0x0)

1.071917178s ago: executing program 4 (id=620):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000002c0)={0x0, &(0x7f00000006c0)=[@code={0xa, 0x57, {"b805000000b98000c0fe0f01d9400f0766b89c008ec842d9a0020000000f01cb0f10502866baf80cb89c781c83ef66bafc0c66edf2466f66ba4100b80c000000efc401d1f600"}}], 0x57})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f00000000c0)={0xce, 0x0, r3})
ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r3})

1.071580738s ago: executing program 3 (id=621):
syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x4001, &(0x7f00000000c0)=ANY=[], 0x1, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x0, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x4, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.071285958s ago: executing program 6 (id=622):
r0 = io_uring_setup(0x68f4, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168})
r1 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
mq_timedreceive(r1, &(0x7f00000003c0)=""/100, 0x64, 0xfffffffffffffff8, 0x0)
mremap(&(0x7f00005a7000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)

1.03062154s ago: executing program 4 (id=623):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047f9, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
recvmsg(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x24)
write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
shutdown(r0, 0x1)

948.282625ms ago: executing program 7 (id=624):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001640)={[{@init_itable}]}, 0xff, 0x49b, &(0x7f0000001040)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x800, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020)
removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=@random={'user.', 'ext4\x00'})

766.350505ms ago: executing program 4 (id=625):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xf5af99b}, 0x1c)
sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000200)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x20040004)

765.648686ms ago: executing program 3 (id=626):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='statm\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

531.875649ms ago: executing program 4 (id=627):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x10}}], 0x30}, 0x0)

531.555229ms ago: executing program 3 (id=628):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0xc008aeba, &(0x7f0000000000)={0x8, 0x4, 0x1000a, 0x20000000000000, 0xffffffffffffffff})

423.957096ms ago: executing program 4 (id=629):
rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c0)
signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff9, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

362.456989ms ago: executing program 3 (id=630):
unshare(0x2a020400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xc008aeba, 0x1000005)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f00000000c0)={0x13fffff, 0x15000})
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000000)={0x13fffff})

283.798384ms ago: executing program 4 (id=631):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
pipe2$9p(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
chdir(0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

0s ago: executing program 3 (id=632):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = fanotify_init(0x40, 0x80000)
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts.
[   55.061245][ T4173] cgroup: Unknown subsys name 'net'
[   55.213916][ T4173] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.698100][ T4173] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   58.098113][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   58.193385][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   58.282396][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   58.303734][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.313428][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.325330][ T4188] device bridge_slave_0 entered promiscuous mode
[   58.364938][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   58.375572][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.385358][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.394141][ T4188] device bridge_slave_1 entered promiscuous mode
[   58.449534][ T4193] chnl_net:caif_netlink_parms(): no params data found
[   58.473366][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.494428][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.502291][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.511080][ T4186] device bridge_slave_0 entered promiscuous mode
[   58.519341][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.526594][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.535434][ T4189] device bridge_slave_0 entered promiscuous mode
[   58.552508][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.574881][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.582470][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.591727][ T4186] device bridge_slave_1 entered promiscuous mode
[   58.599470][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.606802][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.616035][ T4189] device bridge_slave_1 entered promiscuous mode
[   58.660266][ T4188] team0: Port device team_slave_0 added
[   58.688718][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.706351][ T4188] team0: Port device team_slave_1 added
[   58.719777][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.731386][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.771615][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.789788][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.797309][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.806394][ T4187] device bridge_slave_0 entered promiscuous mode
[   58.820719][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.828304][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.837195][ T4193] device bridge_slave_0 entered promiscuous mode
[   58.853540][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.861092][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.870201][ T4193] device bridge_slave_1 entered promiscuous mode
[   58.890197][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.897393][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.905795][ T4187] device bridge_slave_1 entered promiscuous mode
[   58.914018][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.921194][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.948332][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.962347][ T4186] team0: Port device team_slave_0 added
[   58.976635][ T4189] team0: Port device team_slave_0 added
[   58.985526][ T4189] team0: Port device team_slave_1 added
[   58.997326][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.004897][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.031322][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.048833][ T4186] team0: Port device team_slave_1 added
[   59.057004][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.099120][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.106281][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.133641][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.146791][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.165643][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.179348][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.189475][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.196445][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.223385][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.242519][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.250336][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.276972][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.292597][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.300343][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.327261][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.383975][ T4187] team0: Port device team_slave_0 added
[   59.393845][ T4193] team0: Port device team_slave_0 added
[   59.405117][ T4188] device hsr_slave_0 entered promiscuous mode
[   59.412582][ T4188] device hsr_slave_1 entered promiscuous mode
[   59.427920][ T4187] team0: Port device team_slave_1 added
[   59.449484][ T4193] team0: Port device team_slave_1 added
[   59.468608][ T4186] device hsr_slave_0 entered promiscuous mode
[   59.475723][ T4186] device hsr_slave_1 entered promiscuous mode
[   59.482975][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.491028][ T4186] Cannot create hsr debugfs directory
[   59.519249][ T4189] device hsr_slave_0 entered promiscuous mode
[   59.526137][ T4189] device hsr_slave_1 entered promiscuous mode
[   59.533783][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.542009][ T4189] Cannot create hsr debugfs directory
[   59.567325][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.574720][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.601779][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.628524][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.635771][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.662807][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.684105][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.691555][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.718125][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.738200][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.745359][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.772417][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.838694][ T1111] Bluetooth: hci0: command 0x0409 tx timeout
[   59.843997][ T4198] Bluetooth: hci4: command 0x0409 tx timeout
[   59.845463][ T1111] Bluetooth: hci3: command 0x0409 tx timeout
[   59.879994][ T4187] device hsr_slave_0 entered promiscuous mode
[   59.887211][ T4187] device hsr_slave_1 entered promiscuous mode
[   59.894083][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.902351][ T4187] Cannot create hsr debugfs directory
[   59.917866][ T4198] Bluetooth: hci2: command 0x0409 tx timeout
[   59.929368][ T4193] device hsr_slave_0 entered promiscuous mode
[   59.939099][ T1111] Bluetooth: hci1: command 0x0409 tx timeout
[   59.945910][ T4193] device hsr_slave_1 entered promiscuous mode
[   59.953454][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.961176][ T4193] Cannot create hsr debugfs directory
[   60.213012][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.227006][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.237452][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.248751][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.295007][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.308358][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.334061][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.343521][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.415440][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.431303][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.457394][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.483078][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.534510][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.553912][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   60.568154][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   60.592646][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   60.603074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.613428][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.626614][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.634438][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   60.651037][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   60.680702][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.690769][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.702990][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.710657][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.720252][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.731963][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.741129][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.748554][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.756904][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.770144][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   60.784788][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   60.794479][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   60.805913][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   60.817098][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.832951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.841476][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.866298][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   60.896246][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.905980][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.915250][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.922496][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.933919][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.943200][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.952434][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.961796][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.973907][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.983675][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.991190][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.999531][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.008092][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.039351][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.051565][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.060704][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.072918][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.081826][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.091517][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.100652][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.109202][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.117421][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.126452][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.135397][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.154195][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.164083][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.214668][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.225820][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.245000][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.257278][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.267268][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.276927][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.286271][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   61.340689][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.363699][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.399435][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.417805][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.435403][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   61.446505][ T4193] 8021q: adding VLAN 0 to HW filter on device team0
[   61.467831][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.476254][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.486339][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.495413][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.516978][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.528191][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.537130][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.544583][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.552994][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.562952][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.573123][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.580616][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.589509][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.598357][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.606704][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.613853][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.622290][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.632404][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.640436][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.659097][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.686761][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.703369][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.713126][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.721231][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.731546][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.740845][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.749395][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.756467][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.770922][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.781656][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.789800][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.811948][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.822078][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.831975][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.845982][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.855087][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.864913][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.874442][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.883449][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.892274][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.901218][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.910542][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.920621][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.932609][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   61.940069][ T4242] Bluetooth: hci4: command 0x041b tx timeout
[   61.945522][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.957168][ T4242] Bluetooth: hci3: command 0x041b tx timeout
[   61.963891][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   61.971317][ T4242] Bluetooth: hci0: command 0x041b tx timeout
[   62.004654][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.013656][ T4256] Bluetooth: hci1: command 0x041b tx timeout
[   62.014171][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.021196][ T4256] Bluetooth: hci2: command 0x041b tx timeout
[   62.036022][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.045474][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.055127][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.064617][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.073173][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.083115][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.092616][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.102046][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.110785][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.117852][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.126246][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.163661][ T4188] device veth0_vlan entered promiscuous mode
[   62.179909][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.190261][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.200420][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.207751][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.218603][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.228253][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.236473][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.245383][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.255063][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.265025][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.273499][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.296250][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.306463][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.315704][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.324779][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.336699][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.355585][ T4188] device veth1_vlan entered promiscuous mode
[   62.367528][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.396511][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.417605][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.426650][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.436286][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.446958][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.457254][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.466747][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.475296][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.484446][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.493338][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.502591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.517572][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.533024][ T4186] device veth0_vlan entered promiscuous mode
[   62.570436][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.588998][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.608816][ T4188] device veth0_macvtap entered promiscuous mode
[   62.638229][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.646929][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.664781][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.675525][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.687013][ T4186] device veth1_vlan entered promiscuous mode
[   62.701011][ T4188] device veth1_macvtap entered promiscuous mode
[   62.795245][ T4186] device veth0_macvtap entered promiscuous mode
[   62.803157][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   62.813288][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   62.822068][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.830893][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.840580][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.850005][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.858635][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.867261][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.887548][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.898458][ T4186] device veth1_macvtap entered promiscuous mode
[   62.914159][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.922958][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.931586][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.939898][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.949466][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.963397][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.975147][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.990396][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.004901][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.019261][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.029690][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.040136][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.052582][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.066058][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.078650][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.090683][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.140498][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.154065][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.167279][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.175953][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.186710][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.198663][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.210366][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.221856][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.243591][ T4193] device veth0_vlan entered promiscuous mode
[   63.252566][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.263989][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.273976][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.284105][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.295990][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.305856][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.316900][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.326819][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.352907][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.366169][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.426860][ T4193] device veth1_vlan entered promiscuous mode
[   63.443052][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   63.461240][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.473123][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.521238][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   63.544742][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.554043][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.600919][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.610339][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.620378][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.629465][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.638311][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.646146][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.654502][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.662674][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.672910][ T4187] device veth0_vlan entered promiscuous mode
[   63.682036][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.691986][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.714351][ T4189] device veth0_vlan entered promiscuous mode
[   63.725810][ T4193] device veth0_macvtap entered promiscuous mode
[   63.733149][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.754439][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.771778][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.774119][ T4189] device veth1_vlan entered promiscuous mode
[   63.784857][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.791825][ T4187] device veth1_vlan entered promiscuous mode
[   63.803991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   63.812816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   63.821785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.831334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.840793][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.858304][ T4193] device veth1_macvtap entered promiscuous mode
[   63.911994][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.919684][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.931608][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.933794][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.965235][ T4189] device veth0_macvtap entered promiscuous mode
[   63.975821][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   63.984976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   63.995546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.006406][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.008330][ T4271] Bluetooth: hci0: command 0x040f tx timeout
[   64.014985][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.026230][ T4271] Bluetooth: hci3: command 0x040f tx timeout
[   64.028556][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.033830][ T4271] Bluetooth: hci4: command 0x040f tx timeout
[   64.042379][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.056162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.070939][ T4187] device veth0_macvtap entered promiscuous mode
[   64.080455][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.095121][ T4271] Bluetooth: hci2: command 0x040f tx timeout
[   64.101642][ T4271] Bluetooth: hci1: command 0x040f tx timeout
[   64.114453][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.137481][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.155494][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.170200][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.181019][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.194982][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.205579][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.216711][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.216759][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.216774][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.252233][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.260435][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.271445][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.280778][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.290231][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.300377][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.320763][ T4189] device veth1_macvtap entered promiscuous mode
[   64.348725][ T4187] device veth1_macvtap entered promiscuous mode
[   64.363243][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.381269][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.401572][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.417353][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.499875][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.521517][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.538794][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.555910][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.576306][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.597864][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.620077][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.642665][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.664728][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.685073][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.702952][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.723960][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.745012][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.767787][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.793693][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.815725][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.836411][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.852023][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.877136][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.906201][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.932012][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.953910][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.966868][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.991238][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.014304][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.026318][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.045128][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.070528][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.089362][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.102627][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.121878][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.135824][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.147980][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.158834][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.170807][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.183600][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.197733][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   65.212900][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.227116][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.238703][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.250263][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.265954][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.287210][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.321853][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.338841][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.384075][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.397453][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.416839][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.445415][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.591009][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.604379][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.634922][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.764778][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.774801][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.827974][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.863040][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.889468][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.897423][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.914815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.947818][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.007878][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.036802][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.056383][ T4311] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   66.078464][ T4271] Bluetooth: hci4: command 0x0419 tx timeout
[   66.087297][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.096002][ T4271] Bluetooth: hci3: command 0x0419 tx timeout
[   66.104475][ T4308] loop1: detected capacity change from 0 to 8192
[   66.112101][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.119937][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.127494][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.135326][ T4271] Bluetooth: hci0: command 0x0419 tx timeout
[   66.159007][    T7] Bluetooth: hci1: command 0x0419 tx timeout
[   66.169975][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.177622][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[   66.194415][ T4308] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.489149][ T4316] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only
[   67.024670][ T4339] loop1: detected capacity change from 0 to 128
[   67.254906][ T4339] =======================================================
[   67.254906][ T4339] WARNING: The mand mount option has been deprecated and
[   67.254906][ T4339]          and is ignored by this kernel. Remove the mand
[   67.254906][ T4339]          option from the mount to silence this warning.
[   67.254906][ T4339] =======================================================
[   68.542814][   T26] audit: type=1804 audit(1770446399.939:2): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.15" name="/newroot/3/file0/bus" dev="loop1" ino=1048591 res=1 errno=0
[   68.697626][   T26] audit: type=1804 audit(1770446399.999:3): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.15" name="/newroot/3/file0/bus" dev="loop1" ino=1048591 res=1 errno=0
[   68.728808][ T4353] Zero length message leads to an empty skb
[   68.877238][   T26] audit: type=1804 audit(1770446399.999:4): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.15" name="/newroot/3/file0/bus" dev="loop1" ino=1048591 res=1 errno=0
[   68.977664][    C0] sched: RT throttling activated
[   69.465142][ T4362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   70.119699][ T4384] loop0: detected capacity change from 0 to 8
[   70.205859][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   70.224966][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   70.236277][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.316928][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   70.328361][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.398542][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   70.409557][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.444256][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   70.455771][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.466586][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   70.477936][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.553240][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   70.556217][ T4391] loop1: detected capacity change from 0 to 128
[   70.572504][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   70.583760][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.642435][    C0] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   70.653965][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.663879][    C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   70.675101][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.705590][    C1] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.717392][    C0] Buffer I/O error on dev loop0, logical block 0, async page read
[   70.750853][   T26] audit: type=1800 audit(1770446402.149:5): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.30" name="bus" dev="loop1" ino=1048592 res=0 errno=0
[   70.774487][ T4396] loop3: detected capacity change from 0 to 512
[   70.891724][ T4396] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   70.939991][ T4396] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[   71.504679][ T4418] overlayfs: failed to clone upperpath
[   71.550264][ T4421] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET)
[   71.608733][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[   71.615586][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[   72.438468][ T4450] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3595790783 (460261220224 ns) > initial count (421801831808 ns). Using initial count to start timer.
[   72.581587][ T4459] overlayfs: failed to clone upperpath
[   72.775960][ T4465] netlink: 'syz.4.60': attribute type 3 has an invalid length.
[   72.814417][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'.
[   72.836216][ T4463] loop2: detected capacity change from 0 to 8192
[   72.964029][ T4463] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   73.021814][   T26] audit: type=1800 audit(1770446404.419:6): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.59" name="file2" dev="loop2" ino=1048595 res=0 errno=0
[   73.051780][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   73.082593][ T4463] FAT-fs (loop2): Filesystem has been set read-only
[   73.136365][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   73.215147][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   73.222198][ T4483] process 'syz.0.66' launched './file0' with NULL argv: empty string added
[   73.278390][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   73.287330][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   73.342153][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   73.388205][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   73.432492][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   73.476517][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   73.556629][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   74.002670][ T4511] loop0: detected capacity change from 0 to 2048
[   75.109524][ T4557] device syzkaller0 entered promiscuous mode
[   75.484635][ T4578] netlink: 'syz.2.96': attribute type 3 has an invalid length.
[   75.499746][ T4578] netlink: 'syz.2.96': attribute type 3 has an invalid length.
[   75.635252][ T4572] ipt_CLUSTERIP: Please specify destination IP
[   76.293093][ T4599] loop0: detected capacity change from 0 to 8192
[   76.725561][ T4615] loop1: detected capacity change from 0 to 512
[   76.815474][ T4615] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   76.993263][  T154] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   77.275648][ T4630] loop1: detected capacity change from 0 to 512
[   77.389566][ T4630] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   77.611758][ T4632] loop1: detected capacity change from 0 to 128
[   77.653997][ T4632] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   77.698433][ T4632] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512)
[   77.706517][ T4632] FAT-fs (loop1): Filesystem has been set read-only
[   80.223983][ T4658] loop0: detected capacity change from 0 to 128
[   80.809875][ T4670] loop2: detected capacity change from 0 to 1764
[   81.076136][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'.
[   81.093644][ T4676] device vlan2 entered promiscuous mode
[   81.100882][ T4676] device gretap0 entered promiscuous mode
[   81.843477][ T1108] cfg80211: failed to load regulatory.db
[   82.434695][ T4704] loop3: detected capacity change from 0 to 512
[   82.669647][ T4704] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   82.793415][ T4704] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[   82.811547][ T4710] loop2: detected capacity change from 0 to 512
[   82.871775][ T4704] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.150: Corrupt directory, running e2fsck is recommended
[   82.916965][ T4710] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   82.985938][ T4705] chnl_net:caif_netlink_parms(): no params data found
[   83.099099][ T4704] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   83.107554][ T4704] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.150: corrupted in-inode xattr
[   83.266720][ T4704] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.150: couldn't read orphan inode 15 (err -117)
[   83.401216][ T4704] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[   83.466197][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.596871][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.655757][ T4705] device bridge_slave_0 entered promiscuous mode
[   83.854193][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.896252][ T4723] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   83.908394][ T4723] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[   83.918949][ T4723] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.150: Corrupt directory, running e2fsck is recommended
[   83.949439][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.960147][ T4705] device bridge_slave_1 entered promiscuous mode
[   84.063630][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.130715][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.311082][ T4705] team0: Port device team_slave_0 added
[   84.368294][ T4705] team0: Port device team_slave_1 added
[   84.461247][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.485742][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.558016][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[   84.565392][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.598658][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.613539][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.640664][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.689136][ T4705] device hsr_slave_0 entered promiscuous mode
[   84.703649][ T4705] device hsr_slave_1 entered promiscuous mode
[   84.717857][ T4705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.730934][ T4705] Cannot create hsr debugfs directory
[   85.727918][   T26] audit: type=1326 audit(1770446416.439:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7564efeb9 code=0x0
[   85.786964][ T4705] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   85.827567][ T4705] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   85.914964][ T4705] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   85.945369][ T4705] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   86.057883][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'.
[   86.087269][ T4758] 8021q: VLANs not supported on gre0
[   86.596469][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.647811][ T1111] Bluetooth: hci1: command 0x041b tx timeout
[   86.682830][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.697336][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.756529][ T4705] 8021q: adding VLAN 0 to HW filter on device team0
[   86.781996][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.814531][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.936031][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.943395][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.013529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.049324][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.124520][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.137965][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.145176][ T4751] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.219009][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.831812][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.869066][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.998037][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.030379][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   88.056646][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   88.091214][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   88.099861][ T4784] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   88.122495][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.156998][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.186405][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.211538][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.236967][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   88.261966][ T4786] netlink: 52 bytes leftover after parsing attributes in process `syz.4.175'.
[   88.319913][ T4787] ipt_CLUSTERIP: Please specify destination IP
[   88.727983][ T1111] Bluetooth: hci1: command 0x040f tx timeout
[   88.779187][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.791608][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.828252][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.084846][  T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.186473][  T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.296278][  T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.445787][  T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.554565][ T4817] loop3: detected capacity change from 0 to 164
[   89.664774][ T4817] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   89.735414][ T4817] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   89.754686][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   89.788802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.801003][ T4817] Symlink component flag not implemented
[   89.807176][ T4817] Symlink component flag not implemented
[   89.873027][ T4819] netlink: 'syz.4.184': attribute type 16 has an invalid length.
[   89.899402][ T4817] Symlink component flag not implemented (7)
[   89.905787][ T4817] Symlink component flag not implemented (116)
[   89.914058][ T4819] netlink: 'syz.4.184': attribute type 17 has an invalid length.
[   89.961072][ T4819] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.989529][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.144731][ T4705] device veth0_vlan entered promiscuous mode
[   90.185312][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   90.202388][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.253490][ T4705] device veth1_vlan entered promiscuous mode
[   90.294063][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.320175][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.364386][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.461736][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   90.480557][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.518615][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.518741][ T4835] overlayfs: empty lowerdir
[   90.552297][ T4705] device veth0_macvtap entered promiscuous mode
[   90.692512][ T4705] device veth1_macvtap entered promiscuous mode
[   90.763135][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.798829][ T4271] Bluetooth: hci1: command 0x0419 tx timeout
[   90.828992][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.848899][ T4847] netlink: 72 bytes leftover after parsing attributes in process `syz.3.190'.
[   90.874510][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.885680][ T4847] netlink: 32 bytes leftover after parsing attributes in process `syz.3.190'.
[   90.916509][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.957905][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.994737][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.028003][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.074417][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.110898][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.137273][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.165618][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.200795][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'.
[   91.223368][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   91.242467][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.262248][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.319740][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.340870][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.367755][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.388783][ T4863] xt_hashlimit: size too large, truncated to 1048576
[   91.407720][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.435091][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.461986][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.485328][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.505928][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.519979][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.530930][ T4705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.543710][ T4705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.576486][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.628315][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.644296][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.670975][ T4705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.691579][ T4705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.706704][ T4705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.718011][ T4705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.013046][ T4751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.044622][ T4751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.071832][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.208438][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.224878][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.288321][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   92.304087][ T4880] device syzkaller0 entered promiscuous mode
[   92.909422][ T4901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.201'.
[   92.974409][  T144] device hsr_slave_0 left promiscuous mode
[   93.003369][  T144] device hsr_slave_1 left promiscuous mode
[   93.018510][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.050734][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.086043][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.112319][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.138922][  T144] device bridge_slave_1 left promiscuous mode
[   93.154803][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.203983][  T144] device bridge_slave_0 left promiscuous mode
[   93.219665][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.288948][  T144] device veth1_macvtap left promiscuous mode
[   93.306956][  T144] device veth0_macvtap left promiscuous mode
[   93.326581][  T144] device veth1_vlan left promiscuous mode
[   93.346228][  T144] device veth0_vlan left promiscuous mode
[   94.058673][ T4925] fuse: Bad value for 'fd'
[   94.191558][  T144] team0 (unregistering): Port device team_slave_1 removed
[   94.235815][  T144] team0 (unregistering): Port device team_slave_0 removed
[   94.285952][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.315214][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.464923][ T4937] loop1: detected capacity change from 0 to 512
[   94.550174][ T4937] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   94.574736][ T4937] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[   94.597809][ T4937] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.214: Corrupt directory, running e2fsck is recommended
[   94.632523][ T4937] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   94.651038][  T144] bond0 (unregistering): Released all slaves
[   94.657820][ T4937] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.214: corrupted in-inode xattr
[   94.686048][ T4937] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.214: couldn't read orphan inode 15 (err -117)
[   94.706614][ T4937] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[   95.036998][ T4931] device ipvlan1 entered promiscuous mode
[   95.046761][ T4933] device ipvlan1 left promiscuous mode
[   95.718808][ T4940] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   95.775608][ T4950] loop3: detected capacity change from 0 to 8192
[   95.813368][ T4940] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[   95.884967][ T4179]  loop3: p1 p2 p4 < >
[   95.890973][ T4940] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.214: Corrupt directory, running e2fsck is recommended
[   95.900015][ T4179] loop3: partition table partially beyond EOD, truncated
[   95.959004][ T4179] loop3: p1 start 16777216 is beyond EOD, truncated
[   95.986143][ T4179] loop3: p2 size 515840 extends beyond EOD, truncated
[   96.038110][ T4179] loop3: p4 start 16777216 is beyond EOD, truncated
[   96.071283][ T4950]  loop3: p1 p2 p4 < >
[   96.097569][ T4950] loop3: partition table partially beyond EOD, truncated
[   96.143922][ T4950] loop3: p1 start 16777216 is beyond EOD, truncated
[   96.167909][ T4950] loop3: p2 size 515840 extends beyond EOD, truncated
[   96.232378][ T4950] loop3: p4 start 16777216 is beyond EOD, truncated
[   96.866485][ T4993] loop2: detected capacity change from 0 to 7
[   96.885051][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   96.920938][ T4993] Dev loop2: unable to read RDB block 7
[   96.941245][ T4993]  loop2: unable to read partition table
[   96.947101][ T4993] loop2: partition table beyond EOD, truncated
[   97.006822][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   97.029643][ T4993] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   97.447428][ T4984] chnl_net:caif_netlink_parms(): no params data found
[   97.729426][ T5030] overlayfs: failed to clone upperpath
[   97.738156][ T5026] netlink: 'syz.3.235': attribute type 12 has an invalid length.
[   97.803745][ T5026] netlink: 'syz.3.235': attribute type 29 has an invalid length.
[   97.829502][ T5026] netlink: 148 bytes leftover after parsing attributes in process `syz.3.235'.
[   97.889290][ T4984] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.896407][ T4984] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.907395][ T5035] kvm: emulating exchange as write
[   97.946114][ T5035] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   97.969427][ T4984] device bridge_slave_0 entered promiscuous mode
[   98.028749][ T4984] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.063235][ T4984] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.100352][ T4984] device bridge_slave_1 entered promiscuous mode
[   98.236025][ T4984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.294464][ T4984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.460015][ T4984] team0: Port device team_slave_0 added
[   98.520847][ T4984] team0: Port device team_slave_1 added
[   98.607255][ T4984] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.676041][ T4984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.730414][ T1111] Bluetooth: hci1: command 0x0409 tx timeout
[   98.764695][ T4984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.803540][ T4984] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.821110][ T4984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.897683][ T4984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.117692][ T4984] device hsr_slave_0 entered promiscuous mode
[   99.228188][   T26] audit: type=1326 audit(1770446430.609:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.4.250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7564efeb9 code=0x0
[   99.405022][ T4984] device hsr_slave_1 entered promiscuous mode
[  100.386485][ T4984] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  100.441751][ T4984] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  100.477054][ T4984] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  100.513562][ T4984] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  100.554421][ T5105] overlayfs: failed to clone upperpath
[  100.807876][ T1111] Bluetooth: hci1: command 0x041b tx timeout
[  100.838070][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'.
[  100.864974][ T5117] 8021q: VLANs not supported on gre0
[  101.086899][   T26] audit: type=1326 audit(1770446432.479:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5120 comm="syz.1.261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40408eaeb9 code=0x0
[  101.500503][ T4984] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.876919][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.888651][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.952139][ T4984] 8021q: adding VLAN 0 to HW filter on device team0
[  101.988190][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.997308][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.069481][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.076621][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.119245][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.179316][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.228835][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.253268][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.260619][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.288476][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.309078][ T5144] loop3: detected capacity change from 0 to 8192
[  102.369806][ T5144] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.407081][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  102.422148][   T26] audit: type=1800 audit(1770446433.789:10): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.263" name="file2" dev="loop3" ino=1048602 res=0 errno=0
[  102.503909][ T5144] FAT-fs (loop3): Filesystem has been set read-only
[  102.512242][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  102.521667][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  102.522607][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.536535][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  102.547768][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  102.604384][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  102.648393][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.658783][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.674930][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.798466][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  102.872901][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.882762][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.891890][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  102.896140][ T4271] Bluetooth: hci1: command 0x040f tx timeout
[  103.008405][   T26] audit: type=1326 audit(1770446434.379:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.4.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7564efeb9 code=0x0
[  103.303021][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  103.631062][ T4984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  103.662413][ T5144] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  103.730445][ T4984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.787610][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.818537][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.862823][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.951774][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  104.008492][ T3079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  104.176326][  T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.330477][  T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.427233][  T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.513423][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.535394][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.554134][ T5214] loop2: detected capacity change from 0 to 512
[  104.601181][  T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.649304][ T5214] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  104.679560][ T5214] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  104.698121][ T4984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.747926][ T5214] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.282: Corrupt directory, running e2fsck is recommended
[  104.840569][ T5214] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  104.887846][ T5214] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.282: corrupted in-inode xattr
[  104.978259][ T5214] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.282: couldn't read orphan inode 15 (err -117)
[  105.052658][ T5214] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  106.499483][   T26] audit: type=1326 audit(1770446437.889:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz.4.285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7564efeb9 code=0x0
[  106.552540][ T5236] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  106.586173][ T5236] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  106.596536][ T5236] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.282: Corrupt directory, running e2fsck is recommended
[  106.920382][ T4271] Bluetooth: hci1: command 0x0419 tx timeout
[  107.192946][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  107.214849][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  107.293610][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  107.314233][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  107.414022][ T4984] device veth0_vlan entered promiscuous mode
[  107.425037][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  107.444058][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  107.498361][ T4984] device veth1_vlan entered promiscuous mode
[  107.800344][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  107.888433][   T26] audit: type=1326 audit(1770446439.279:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5272 comm="syz.4.296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7564efeb9 code=0x0
[  108.013311][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  108.309832][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  108.567360][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  108.655998][ T4984] device veth0_macvtap entered promiscuous mode
[  108.714372][ T4984] device veth1_macvtap entered promiscuous mode
[  108.770010][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  108.786400][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  108.908709][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.949974][ T5302] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns
[  108.974698][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.017042][ T5302] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns
[  109.031050][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.071626][ T5302] pit: kvm: requested 37714 ns i8254 timer period limited to 200000 ns
[  109.095875][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.118421][ T5302] pit: kvm: requested 106438 ns i8254 timer period limited to 200000 ns
[  109.128911][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.163953][ T5302] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns
[  109.191664][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.225823][ T5302] pit: kvm: requested 61180 ns i8254 timer period limited to 200000 ns
[  109.239949][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.278167][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.308403][ T5302] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns
[  109.332472][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.355296][ T5302] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns
[  109.380020][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.398272][ T5302] pit: kvm: requested 173485 ns i8254 timer period limited to 200000 ns
[  109.433705][ T4984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.441520][ T5302] pit: kvm: requested 113142 ns i8254 timer period limited to 200000 ns
[  109.525196][  T144] device hsr_slave_0 left promiscuous mode
[  109.550017][  T144] device hsr_slave_1 left promiscuous mode
[  109.577434][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.607064][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.683443][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.726807][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.759475][  T144] device bridge_slave_1 left promiscuous mode
[  109.776475][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.798730][  T144] device bridge_slave_0 left promiscuous mode
[  109.805017][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.928295][  T144] device veth1_macvtap left promiscuous mode
[  110.017169][  T144] device veth0_macvtap left promiscuous mode
[  110.072158][   T26] audit: type=1326 audit(1770446441.469:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5324 comm="syz.1.310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40408eaeb9 code=0x0
[  110.263171][  T144] device veth1_vlan left promiscuous mode
[  110.431629][  T144] device veth0_vlan left promiscuous mode
[  110.750404][ T5338] capability: warning: `syz.3.313' uses deprecated v2 capabilities in a way that may be insecure
[  111.299042][ T5343] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  111.326475][ T5343] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  111.357357][ T5348] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  111.395231][ T5348] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  111.522400][  T144] team0 (unregistering): Port device team_slave_1 removed
[  111.593166][  T144] team0 (unregistering): Port device team_slave_0 removed
[  111.638050][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.670434][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.863201][  T144] bond0 (unregistering): Released all slaves
[  111.958389][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  111.967436][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  111.997346][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.023259][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.053902][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.075821][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.096370][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.115024][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.137552][ T4984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.162177][ T4984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.186947][ T4984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.207502][ T5349] netlink: 27 bytes leftover after parsing attributes in process `syz.2.317'.
[  112.258317][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  112.270110][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  112.293757][ T4984] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.313498][ T4984] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.359657][ T4984] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.379077][ T4984] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.394638][ T5382] loop2: detected capacity change from 0 to 16
[  112.540199][ T5382] erofs: (device loop2): mounted with root inode @ nid 36.
[  112.634376][ T4780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.664186][ T4780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.713634][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  112.786346][ T5181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.827741][ T5181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.829228][ T5393] netlink: 96 bytes leftover after parsing attributes in process `syz.2.332'.
[  112.959890][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  114.168482][ T5438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'.
[  114.338355][ T5444] loop6: detected capacity change from 0 to 128
[  115.478301][ T5447] netlink: 'syz.1.343': attribute type 1 has an invalid length.
[  115.510082][ T5443] attempt to access beyond end of device
[  115.510082][ T5443] loop6: rw=2049, want=250, limit=128
[  115.850505][ T5455] loop1: detected capacity change from 0 to 128
[  115.884560][ T5455] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  115.974207][ T5455] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  116.232149][   T26] audit: type=1326 audit(1770446447.629:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5456 comm="syz.4.347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7564efeb9 code=0x0
[  117.107973][  T155] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  117.325722][ T5480] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  119.605384][ T5540] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  119.801847][ T5548] device syzkaller0 entered promiscuous mode
[  120.529112][ T5587] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  120.906568][ T5600] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  121.015339][ T5607] device syzkaller0 entered promiscuous mode
[  121.909768][ T5648] device syzkaller1 entered promiscuous mode
[  122.168220][ T5658] netlink: 44 bytes leftover after parsing attributes in process `syz.3.403'.
[  122.425035][ T5666] device ipvlan1 entered promiscuous mode
[  122.738509][ T5671] device ipvlan1 left promiscuous mode
[  123.461127][ T5699] loop6: detected capacity change from 0 to 8192
[  123.503873][ T5718] loop1: detected capacity change from 0 to 128
[  123.536866][ T5699] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  124.075143][ T5734] loop1: detected capacity change from 0 to 256
[  124.201596][ T5734] FAT-fs (loop1): Directory bread(block 64) failed
[  124.268047][ T5745] xt_hashlimit: size too large, truncated to 1048576
[  124.315692][ T5734] FAT-fs (loop1): Directory bread(block 65) failed
[  124.346281][ T5734] FAT-fs (loop1): Directory bread(block 66) failed
[  124.387878][ T5734] FAT-fs (loop1): Directory bread(block 67) failed
[  124.394601][ T5734] FAT-fs (loop1): Directory bread(block 68) failed
[  124.466574][ T5734] FAT-fs (loop1): Directory bread(block 69) failed
[  124.504665][ T5734] FAT-fs (loop1): Directory bread(block 70) failed
[  124.548035][ T5734] FAT-fs (loop1): Directory bread(block 71) failed
[  124.554788][ T5734] FAT-fs (loop1): Directory bread(block 72) failed
[  124.597757][ T5734] FAT-fs (loop1): Directory bread(block 73) failed
[  124.658594][ T5749] xt_hashlimit: size too large, truncated to 1048576
[  125.299694][ T5773] loop3: detected capacity change from 0 to 512
[  125.431674][ T5773] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  125.577836][ T5773] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  125.618337][ T5773] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.440: Corrupt directory, running e2fsck is recommended
[  125.686200][ T5773] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  125.715602][ T5773] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.440: corrupted in-inode xattr
[  125.764585][ T5773] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.440: couldn't read orphan inode 15 (err -117)
[  125.806554][ T5773] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  126.218491][ T5785] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  126.230321][ T5785] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  126.240660][ T5785] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.440: Corrupt directory, running e2fsck is recommended
[  129.053952][ T5833] device syzkaller0 entered promiscuous mode
[  129.422148][ T5845] overlayfs: failed to clone upperpath
[  129.549705][ T5851] loop6: detected capacity change from 0 to 164
[  129.659887][ T5851] iso9660: Corrupted directory entry in block 2 of inode 1792
[  130.219451][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.450'.
[  132.114733][ T5906] loop6: detected capacity change from 0 to 8192
[  132.638051][ T5916] loop1: detected capacity change from 0 to 8192
[  132.698307][ T5916] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  132.794759][   T26] audit: type=1800 audit(1770446464.189:16): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.461" name="file2" dev="loop1" ino=1048612 res=0 errno=0
[  133.041866][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  133.048301][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  134.252764][ T5985] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only
[  134.321231][ T5993] fuse: Unknown parameter '00000000000000000000'
[  134.430002][ T5996] loop1: detected capacity change from 0 to 128
[  135.170795][ T6020] device syzkaller0 entered promiscuous mode
[  136.043094][ T6065] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  136.268457][ T6071] x_tables: duplicate underflow at hook 3
[  136.289221][ T6069] device syzkaller0 entered promiscuous mode
[  137.266470][ T6099] loop3: detected capacity change from 0 to 512
[  137.415232][ T6099] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  137.427975][ T6099] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  137.491144][ T6099] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.524: Corrupt directory, running e2fsck is recommended
[  137.539164][ T6099] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  137.587966][ T6099] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.524: corrupted in-inode xattr
[  137.655536][ T6123] loop2: detected capacity change from 0 to 128
[  137.683455][ T6099] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.524: couldn't read orphan inode 15 (err -117)
[  137.690244][ T6122] xt_hashlimit: size too large, truncated to 1048576
[  137.716821][ T6099] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  138.185626][ T6136] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  138.197431][ T6136] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  138.207664][ T6136] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.524: Corrupt directory, running e2fsck is recommended
[  139.229067][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  139.244907][ T3079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.297584][ T6160] fuse: Bad value for 'fd'
[  139.324216][ T6160] netlink: 'syz.3.540': attribute type 3 has an invalid length.
[  139.361581][ T6160] netlink: 'syz.3.540': attribute type 3 has an invalid length.
[  139.409446][ T6156] ipt_CLUSTERIP: Please specify destination IP
[  139.426862][ T3079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.574150][ T3079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.685361][ T6165] device syzkaller0 entered promiscuous mode
[  139.726328][ T3079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.538003][ T6168] chnl_net:caif_netlink_parms(): no params data found
[  140.946310][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.982395][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.021618][ T6168] device bridge_slave_0 entered promiscuous mode
[  141.096638][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.119177][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.139230][ T6168] device bridge_slave_1 entered promiscuous mode
[  141.272339][ T6168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.349245][ T3079] device hsr_slave_0 left promiscuous mode
[  141.370316][ T3079] device hsr_slave_1 left promiscuous mode
[  141.403293][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.434797][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.453455][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.479562][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.508332][ T3079] device bridge_slave_1 left promiscuous mode
[  141.514810][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.549185][ T3079] device bridge_slave_0 left promiscuous mode
[  141.555505][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.613958][ T3079] device veth1_macvtap left promiscuous mode
[  141.637891][ T3079] device veth0_macvtap left promiscuous mode
[  141.644473][ T3079] device veth1_vlan left promiscuous mode
[  141.671330][ T3079] device veth0_vlan left promiscuous mode
[  141.928162][ T4271] Bluetooth: hci2: command 0x0409 tx timeout
[  142.123373][ T6197] loop1: detected capacity change from 0 to 512
[  142.318903][ T6197] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  142.337903][ T6197] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  142.385170][ T6197] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.547: Corrupt directory, running e2fsck is recommended
[  142.429107][ T6197] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  142.448703][ T6197] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.547: corrupted in-inode xattr
[  142.535449][ T6197] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.547: couldn't read orphan inode 15 (err -117)
[  142.563701][ T6197] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  142.639814][ T3079] team0 (unregistering): Port device team_slave_1 removed
[  142.937479][ T3079] team0 (unregistering): Port device team_slave_0 removed
[  143.071800][ T6201] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  143.083706][ T6201] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  143.094238][ T6201] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.547: Corrupt directory, running e2fsck is recommended
[  143.438870][ T3079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.571565][ T3079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.744640][ T6207] loop6: detected capacity change from 0 to 128
[  143.859878][   T26] audit: type=1800 audit(1770446475.259:17): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.551" name="bus" dev="loop6" ino=1048613 res=0 errno=0
[  143.980124][ T3079] bond0 (unregistering): Released all slaves
[  143.998788][ T4247] Bluetooth: hci2: command 0x041b tx timeout
[  144.927855][ T6168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.995607][ T6168] team0: Port device team_slave_0 added
[  145.057095][ T6168] team0: Port device team_slave_1 added
[  145.135634][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.168358][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.273625][ T6236] loop3: detected capacity change from 0 to 512
[  145.291819][ T6168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.340031][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.391344][ T6233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3595790783 (460261220224 ns) > initial count (421801831808 ns). Using initial count to start timer.
[  145.423659][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.516328][ T6236] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  145.557717][ T6168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.582056][ T6236] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  145.664059][ T6236] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.559: Corrupt directory, running e2fsck is recommended
[  145.739315][ T6236] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  145.791053][ T6168] device hsr_slave_0 entered promiscuous mode
[  145.805450][ T6236] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.559: corrupted in-inode xattr
[  145.821617][ T6168] device hsr_slave_1 entered promiscuous mode
[  145.831250][ T6168] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.839821][ T6236] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.559: couldn't read orphan inode 15 (err -117)
[  145.872974][ T6168] Cannot create hsr debugfs directory
[  145.887892][ T6236] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  146.077759][ T1108] Bluetooth: hci2: command 0x040f tx timeout
[  146.466357][ T6256] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  146.478535][ T6256] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  146.488914][ T6256] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.559: Corrupt directory, running e2fsck is recommended
[  147.085513][ T6168] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  147.144729][ T6168] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  147.230141][ T6168] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  147.294386][ T6168] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  147.665148][ T6168] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.750233][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  147.774453][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.806009][ T6168] 8021q: adding VLAN 0 to HW filter on device team0
[  147.845055][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.865140][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.895380][ T5461] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.903263][ T5461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.950125][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  148.007982][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  148.037371][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  148.098343][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.105782][ T5461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.144793][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  148.165772][ T4247] Bluetooth: hci2: command 0x0419 tx timeout
[  148.365415][ T6168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  148.410687][ T6168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.271956][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.283966][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.299739][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.308995][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.317997][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.326961][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  149.345850][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.389411][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.421157][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.467235][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.516265][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  149.877077][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  149.909062][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  149.951119][ T6168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.669365][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  151.703810][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  151.820182][   T26] audit: type=1326 audit(1770446483.219:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40408eaeb9 code=0x0
[  151.855622][ T6168] device veth0_vlan entered promiscuous mode
[  151.898665][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  151.918357][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.963439][ T6168] device veth1_vlan entered promiscuous mode
[  151.978303][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  152.015492][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  152.027137][ T6399] tmpfs: Unknown parameter 'noswap'
[  152.071322][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  152.190230][ T6168] device veth0_macvtap entered promiscuous mode
[  152.197908][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  152.206171][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  152.263198][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  152.285577][ T6168] device veth1_macvtap entered promiscuous mode
[  152.315974][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  152.358732][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.415204][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.441963][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.657908][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.696905][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.157098][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.513142][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.547838][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.585022][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.626084][ T6168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.675306][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  153.718797][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  153.752739][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.923014][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.950975][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.967283][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.996482][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.017712][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.034174][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.045398][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.085734][ T6168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.115365][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  154.177190][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  154.226451][ T6168] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.252361][ T6168] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.265802][ T6168] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.281255][ T6168] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.338221][ T6448] device syzkaller0 entered promiscuous mode
[  154.913156][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.941065][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.972569][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  155.055314][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.082036][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.113575][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  156.653036][ T6507] device syzkaller0 entered promiscuous mode
[  156.797274][ T6515] loop7: detected capacity change from 0 to 512
[  156.928705][ T6515] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  157.031351][ T6515] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  157.106815][ T6515] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.624: Corrupt directory, running e2fsck is recommended
[  157.185391][ T6515] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  157.220375][ T6515] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.624: corrupted in-inode xattr
[  157.314265][ T6515] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.624: couldn't read orphan inode 15 (err -117)
[  157.365161][ T6515] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  157.429829][ T6542] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  157.847872][    C0] 
[  157.850788][    C0] =============================
[  157.855698][    C0] WARNING: suspicious RCU usage
[  157.860874][    C0] syzkaller #0 Not tainted
[  157.865413][    C0] -----------------------------
[  157.870510][    C0] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage!
[  157.879076][    C0] 
[  157.879076][    C0] other info that might help us debug this:
[  157.879076][    C0] 
[  157.889449][    C0] 
[  157.889449][    C0] rcu_scheduler_active = 2, debug_locks = 1
[  157.898158][    C0] 8 locks held by udevd/4179:
[  157.902945][    C0]  #0: ffffc90002e4fb40 ((&icsk->icsk_retransmit_timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540
[  157.913913][    C0]  #1: ffff8880761524a0 (slock-AF_INET){+.-.}-{2:2}, at: tcp_write_timer+0x29/0x280
[  157.923792][    C0]  #2: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  157.933742][    C0]  #3: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  157.943323][    C0]  #4: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  157.953174][    C0]  #5: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  157.963192][    C0]  #6: ffff88805c26b108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2fd0
[  157.972950][    C0]  #7: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  157.982486][    C0] 
[  157.982486][    C0] stack backtrace:
[  157.988439][    C0] CPU: 0 PID: 4179 Comm: udevd Not tainted syzkaller #0
[  157.995586][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  158.005958][    C0] Call Trace:
[  158.009444][    C0]  <TASK>
[  158.012404][    C0]  dump_stack_lvl+0x188/0x250
[  158.017127][    C0]  ? show_regs_print_info+0x20/0x20
[  158.022477][    C0]  ? lockdep_rcu_suspicious+0x110/0x180
[  158.028165][    C0]  qdisc_lookup+0xa6/0x650
[  158.032631][    C0]  qdisc_tree_reduce_backlog+0x190/0x430
[  158.038499][    C0]  fq_codel_enqueue+0x105e/0x1600
[  158.043585][    C0]  ? INET_ECN_set_ce+0x950/0x950
[  158.048774][    C0]  tbf_enqueue+0x224/0x6e0
[  158.053422][    C0]  ? __rwlock_init+0x140/0x140
[  158.058235][    C0]  dev_qdisc_enqueue+0x48/0x210
[  158.063147][    C0]  __dev_queue_xmit+0xc25/0x2fd0
[  158.068140][    C0]  ? rcu_lockdep_current_cpu_online+0x35/0x130
[  158.074439][    C0]  ? dev_queue_xmit+0x20/0x20
[  158.079240][    C0]  ? mark_lock+0x94/0x320
[  158.083648][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  158.089773][    C0]  ? lock_chain_count+0x20/0x20
[  158.094995][    C0]  ? rcu_lock_acquire+0x30/0x30
[  158.099886][    C0]  ? ip_finish_output2+0x8f7/0x10a0
[  158.105211][    C0]  ? ip_finish_output2+0xaba/0x10a0
[  158.110731][    C0]  ip_finish_output2+0xc87/0x10a0
[  158.115809][    C0]  ? ip_fragment+0x210/0x210
[  158.120535][    C0]  ? ip_skb_dst_mtu+0x584/0x9b0
[  158.125508][    C0]  ? ip_finish_output+0x3e8/0x4b0
[  158.130693][    C0]  ip_output+0x2c0/0x3e0
[  158.135116][    C0]  __ip_queue_xmit+0x11c1/0x1c00
[  158.140200][    C0]  __tcp_transmit_skb+0x1d11/0x3200
[  158.145474][    C0]  ? __tcp_send_ack+0x5d0/0x5d0
[  158.150452][    C0]  ? memset+0x1e/0x40
[  158.154558][    C0]  ? tcp_rbtree_insert+0x114/0x170
[  158.159996][    C0]  __tcp_retransmit_skb+0x92c/0x1290
[  158.165710][    C0]  tcp_send_loss_probe+0x453/0x960
[  158.171252][    C0]  tcp_write_timer_handler+0x258/0x9a0
[  158.177304][    C0]  ? tcp_init_xmit_timers+0xb0/0xb0
[  158.182650][    C0]  tcp_write_timer+0x126/0x280
[  158.187735][    C0]  call_timer_fn+0x17b/0x540
[  158.192840][    C0]  ? tcp_init_xmit_timers+0xb0/0xb0
[  158.198257][    C0]  ? __run_timers+0x7f0/0x7f0
[  158.203187][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  158.208696][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  158.213930][    C0]  ? tcp_init_xmit_timers+0xb0/0xb0
[  158.219341][    C0]  __run_timers+0x53a/0x7f0
[  158.224527][    C0]  ? detach_timer+0x2b0/0x2b0
[  158.229418][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  158.235531][    C0]  ? sched_clock_cpu+0x15/0x3c0
[  158.240467][    C0]  run_timer_softirq+0x63/0xf0
[  158.245249][    C0]  handle_softirqs+0x339/0x830
[  158.250095][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  158.255166][    C0]  ? do_softirq+0x210/0x210
[  158.259688][    C0]  __irq_exit_rcu+0x13b/0x230
[  158.264366][    C0]  ? irq_exit_rcu+0x20/0x20
[  158.269118][    C0]  irq_exit_rcu+0x5/0x20
[  158.273625][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  158.279565][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  158.285714][    C0] RIP: 0033:0x7f0bdb974a07
[  158.290358][    C0] Code: 73 01 c3 48 8b 0d f1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 ff 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48
[  158.310242][    C0] RSP: 002b:00007ffe294417e8 EFLAGS: 00000246
[  158.316919][    C0] RAX: 0000000000000000 RBX: 0000563a55785f10 RCX: 00007f0bdb974a07
[  158.325251][    C0] RDX: 0000000000000007 RSI: 0000000000000277 RDI: 0000000000000007
[  158.333727][    C0] RBP: 0000000000000277 R08: 00000000000001e0 R09: 0000000000000000
[  158.341990][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe294417f0
[  158.350084][    C0] R13: 0000000003938700 R14: 0000563a492ff100 R15: 0000563a492ff140
[  158.358080][    C0]  </TASK>
[  158.400551][ T6549] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  158.412678][ T6549] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it
[  158.423857][ T6549] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.624: Corrupt directory, running e2fsck is recommended