last executing test programs:

1.084573329s ago: executing program 2 (id=164):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)={0x2c, 0x10, 0x21, 0x70bd29, 0x0, {0x3}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x11, 0x1f, 0x0, 0x0, @binary="9f8186758acbf240b4b2e3e881"}]}]}, 0x2c}}, 0x0)

966.987652ms ago: executing program 2 (id=167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1ac9}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3022}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5c055}, 0x4054)

964.201858ms ago: executing program 2 (id=169):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0)

903.794283ms ago: executing program 2 (id=172):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg(r1, &(0x7f0000008240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048143)
poll(&(0x7f0000000080)=[{r1}], 0x1, 0xfffffc00)

679.698246ms ago: executing program 1 (id=180):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000007001000040000002500000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0)
fdatasync(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

549.872827ms ago: executing program 1 (id=183):
msgctl$IPC_RMID(0x0, 0x1000000)

500.410267ms ago: executing program 1 (id=184):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x1fff, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x11, 0x1}, 0x8, 0xd2, 0x8, 0x0, 0x0, 0x0, 0x0})

500.229827ms ago: executing program 0 (id=185):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004440)=@acquire={0x128, 0x17, 0x1, 0x10000000, 0xfffffffd, {{@in6=@remote, 0x200}, @in=@multicast1, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x73}, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x120000}}, 0x128}}, 0x0)

499.995642ms ago: executing program 1 (id=186):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)

420.347381ms ago: executing program 1 (id=187):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x111, 0x0, @remote}}}, 0x118)

420.239663ms ago: executing program 1 (id=188):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0)

370.119715ms ago: executing program 0 (id=189):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000500)=[{0x2d, 0x0, 0x4, 0x2000}, {0x40, 0x40, 0xff}]})

310.204409ms ago: executing program 0 (id=190):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mlockall(0x2)
brk(0x75555ede6001)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f0000000180)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@noauto_da_alloc}, {@nouser_xattr}, {@noinit_itable}, {@grpid}, {@sysvgroups}, {@i_version}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@dax_inode}]}, 0x3, 0x525, &(0x7f0000000840)="$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")
r0 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24008000, 0x0, 0x0)
fsopen(0x0, 0x1)
r1 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x2000, 0x0)

258.099036ms ago: executing program 0 (id=191):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)

228.31896ms ago: executing program 0 (id=192):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x800, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xfffffff3, 0x4, 0x8000, 0x4}, 0x4, 0x1, 0x2, 0x1, 0x2, 0x10, 0x1d, 0x0, 0x2, 0x9, {0x4, 0x7fffffff, 0x3, 0x8, 0x5, 0x3ff}}}}]}, 0x78}}, 0x20000000)

159.91547ms ago: executing program 0 (id=193):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(r0)
setresuid(0xee01, 0xee01, 0x0)
r1 = inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = getpid()
fcntl$setown(r0, 0x8, r2)
rt_sigtimedwait(&(0x7f0000000040)={[0xfbffffffffff7ff6]}, 0x0, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa2000b60)
rmdir(&(0x7f00000000c0)='./control\x00')

184.115µs ago: executing program 2 (id=194):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130014000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x4004000)

0s ago: executing program 2 (id=195):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
pipe2$watch_queue(0x0, 0x80)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000600)=@mmap={0x401, 0x2, 0x4, 0x4414, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x400})
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})

0s ago: executing program 0 (id=196):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="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")
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELCHAIN={0x18, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[])

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4022' (ED25519) to the list of known hosts.
syzkaller login: [   41.521699][ T5523] cgroup: Unknown subsys name 'net'
[   41.659103][ T5523] cgroup: Unknown subsys name 'cpuset'
[   41.664113][ T5523] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.898287][ T5523] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.896928][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.900190][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.902818][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.905721][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.913272][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.917552][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.918681][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.921617][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.923714][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.926615][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.929036][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.932038][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.937271][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.939306][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.945896][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.519662][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.522713][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.525609][ T5601] bridge_slave_0: entered allmulticast mode
[   47.529846][ T5601] bridge_slave_0: entered promiscuous mode
[   47.547376][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.550042][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.552426][ T5601] bridge_slave_1: entered allmulticast mode
[   47.554955][ T5601] bridge_slave_1: entered promiscuous mode
[   47.608947][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.627662][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.639618][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.642178][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.644681][ T5597] bridge_slave_0: entered allmulticast mode
[   47.647447][ T5597] bridge_slave_0: entered promiscuous mode
[   47.651012][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.653419][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.655525][ T5605] bridge_slave_0: entered allmulticast mode
[   47.658442][ T5605] bridge_slave_0: entered promiscuous mode
[   47.676759][ T5601] team0: Port device team_slave_0 added
[   47.679237][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.683002][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.685834][ T5597] bridge_slave_1: entered allmulticast mode
[   47.689620][ T5597] bridge_slave_1: entered promiscuous mode
[   47.693501][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.696324][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.699060][ T5605] bridge_slave_1: entered allmulticast mode
[   47.703250][ T5605] bridge_slave_1: entered promiscuous mode
[   47.717149][ T5601] team0: Port device team_slave_1 added
[   47.755711][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.759842][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.762213][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.770890][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.777744][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.782991][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.787048][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.790076][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.800770][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.815561][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.862775][ T5605] team0: Port device team_slave_0 added
[   47.872857][ T5597] team0: Port device team_slave_0 added
[   47.875526][ T5605] team0: Port device team_slave_1 added
[   47.892210][ T5597] team0: Port device team_slave_1 added
[   47.900179][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.902383][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.911187][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.917711][ T5601] hsr_slave_0: entered promiscuous mode
[   47.920377][ T5601] hsr_slave_1: entered promiscuous mode
[   47.931572][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.934266][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.943064][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.959255][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.961632][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.972023][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.977515][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.980516][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.990481][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.062842][ T5605] hsr_slave_0: entered promiscuous mode
[   48.065641][ T5605] hsr_slave_1: entered promiscuous mode
[   48.067814][ T5605] debugfs: 'hsr0' already exists in 'hsr'
[   48.070187][ T5605] Cannot create hsr debugfs directory
[   48.082607][ T5597] hsr_slave_0: entered promiscuous mode
[   48.085537][ T5597] hsr_slave_1: entered promiscuous mode
[   48.088325][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[   48.090848][ T5597] Cannot create hsr debugfs directory
[   48.320620][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.328919][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.332793][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.338927][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.358320][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.364455][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.367010][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.372467][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.403310][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.408995][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.415586][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.421580][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.426963][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.432674][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.445239][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.450249][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.510526][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.518778][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.526465][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.532476][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.535910][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.542794][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.550950][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.556769][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.619209][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.638817][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   48.644234][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.657682][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.660022][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.681888][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.684217][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.694513][ T5601] 8021q: adding VLAN 0 to HW filter on device team0
[   48.712953][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.715269][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.728959][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.731191][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.737764][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.766230][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[   48.788832][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.791139][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.810194][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.812601][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.981888][ T5599] Bluetooth: hci1: command tx timeout
[   48.982455][ T4986] Bluetooth: hci2: command tx timeout
[   48.983851][ T5599] Bluetooth: hci0: command tx timeout
[   49.023403][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.059074][ T5601] veth0_vlan: entered promiscuous mode
[   49.068933][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.076907][ T5601] veth1_vlan: entered promiscuous mode
[   49.105374][ T5601] veth0_macvtap: entered promiscuous mode
[   49.111950][ T5601] veth1_macvtap: entered promiscuous mode
[   49.133007][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.136922][ T5605] veth0_vlan: entered promiscuous mode
[   49.149026][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.155488][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.172477][ T5605] veth1_vlan: entered promiscuous mode
[   49.177622][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.181054][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.186566][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.194510][ T5707] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.236941][ T5605] veth0_macvtap: entered promiscuous mode
[   49.252172][ T5605] veth1_macvtap: entered promiscuous mode
[   49.264274][ T5597] veth0_vlan: entered promiscuous mode
[   49.277245][ T5597] veth1_vlan: entered promiscuous mode
[   49.288348][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.303335][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.309846][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.314042][ T5707] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.317012][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.322026][ T5707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.342604][ T5707] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.357686][ T5707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.371034][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.375158][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.388195][ T5597] veth0_macvtap: entered promiscuous mode
[   49.402197][ T5597] veth1_macvtap: entered promiscuous mode
[   49.432042][ T5601] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.435474][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.443038][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.447248][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.458247][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.486295][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.490933][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.493854][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.494750][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.508504][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.521175][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.586979][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.596703][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.626209][ T5710] macvlan2: entered allmulticast mode
[   49.628676][ T5710] bridge0: entered allmulticast mode
[   49.630933][ T5710] bridge0: entered promiscuous mode
[   49.635552][ T5710] bridge0: port 3(macvlan2) entered blocking state
[   49.638815][ T5710] bridge0: port 3(macvlan2) entered disabled state
[   49.646671][ T5710] bridge0: left allmulticast mode
[   49.664192][   T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.669019][ T5669] bridge0: left promiscuous mode
[   49.673223][   T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.806343][ T5722] loop2: detected capacity change from 0 to 512
[   49.816021][ T5722] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   49.849973][ T5722] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.7: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[   49.856551][ T5722] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   49.856938][ T5722] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7: couldn't read orphan inode 15 (err -117)
[   49.860409][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   49.860431][    C1] EXT4-fs (loop2): initial error at time 1787035117: ext4_iget_extra_inode:5180: inode 15
[   49.860443][    C1] EXT4-fs (loop2): last error at time 1787035117: ext4_iget_extra_inode:5180: inode 15
[   49.878930][ T5728] loop0: detected capacity change from 0 to 1024
[   49.881253][ T5722] loop2: lost filesystem error report for type 5 error -117
[   49.882227][ T5728] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.887363][ T5728] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.888029][ T5722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.927907][ T5728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   49.935585][ T5728] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.941610][ T5734] loop1: detected capacity change from 0 to 128
[   49.944549][ T5734] =======================================================
[   49.944549][ T5734] WARNING: The mand mount option has been deprecated and
[   49.944549][ T5734]          and is ignored by this kernel. Remove the mand
[   49.944549][ T5734]          option from the mount to silence this warning.
[   49.944549][ T5734] =======================================================
[   49.960868][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.963298][ T5734] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   49.971809][ T5734] hpfs: filesystem error: improperly stopped
[   49.984412][ T5734] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   49.989614][ T5734] hpfs: You really don't want any checks? You are crazy...
[   50.000504][ T5734] hpfs: hpfs_map_sector(): read error
[   50.003559][ T5728] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9: bg 0: block 112: padding at end of block bitmap is not set
[   50.008798][ T5734] hpfs: code page support is disabled
[   50.012479][ T5734] hpfs: hpfs_map_4sectors(): unaligned read
[   50.016220][ T5734] hpfs: hpfs_map_4sectors(): unaligned read
[   50.022549][ T5728] EXT4-fs (loop0): Remounting filesystem read-only
[   50.024677][ T5734] hpfs: filesystem error: unable to find root dir
[   50.028446][   T82] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5075: inode #15: block 4: len 2: ext4_ext_map_blocks returned -30
[   50.068237][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   50.184516][ T5740] loop1: detected capacity change from 0 to 4096
[   50.210016][ T5740] EXT4-fs (loop1): Test dummy encryption mode enabled
[   50.251127][ T5740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.758368][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   50.931396][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'.
[   51.055238][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.060211][ T4986] Bluetooth: hci2: command tx timeout
[   51.071546][   T54] Bluetooth: hci1: command tx timeout
[   51.074202][ T4986] Bluetooth: hci0: command tx timeout
[   51.114647][ T5768] netlink: 'syz.1.26': attribute type 1 has an invalid length.
[   51.237727][ T5774] Zero length message leads to an empty skb
[   51.575183][ T5788] loop2: detected capacity change from 0 to 1764
[   52.032296][ T5791] loop2: detected capacity change from 0 to 1024
[   52.106623][ T5793] loop0: detected capacity change from 0 to 512
[   52.111359][ T5793] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   52.116553][ T5793] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   52.133265][ T5793] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.37: Invalid block bitmap block 0 in block_group 0
[   52.137659][   T33] audit: type=1800 audit(1787035119.508:2): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36" name="file1" dev="loop2" ino=20 res=0 errno=0
[   52.140626][ T5791] syz.2.36: attempt to access beyond end of device
[   52.140626][ T5791] loop2: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[   52.144684][ T5793] loop0: lost filesystem error report for type 5 error -117
[   52.152581][ T5793] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   52.159410][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   52.161908][    C1] EXT4-fs (loop0): initial error at time 1787035119: ext4_read_block_bitmap_nowait:483
[   52.164830][    C1] EXT4-fs (loop0): last error at time 1787035119: ext4_read_block_bitmap_nowait:483
[   52.175232][ T5793] loop0: lost filesystem error report for type 5 error -117
[   52.176237][ T5793] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.37: attempt to clear invalid blocks 983261 len 1
[   52.220834][ T5793] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   52.222231][ T5793] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.37: Invalid inode table block 0 in block_group 0
[   52.260475][ T5793] loop0: lost filesystem error report for type 5 error -117
[   52.265329][ T5793] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   52.300859][ T5793] loop0: lost filesystem error report for type 5 error -117
[   52.305266][ T5793] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   52.322421][ T5793] loop0: lost filesystem error report for type 5 error -117
[   52.326609][ T5793] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.37: Invalid inode table block 0 in block_group 0
[   52.352251][ T5793] loop0: lost filesystem error report for type 5 error -117
[   52.353350][ T5793] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[   52.358746][ T5793] loop0: lost filesystem error report for type 5 error -117
[   52.359234][ T5793] EXT4-fs error (device loop0): ext4_truncate:4691: inode #11: comm syz.0.37: mark_inode_dirty error
[   52.365272][ T5793] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   52.365571][ T5793] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   52.373780][ T5793] loop0: lost filesystem error report for type 5 error -117
[   52.374379][ T5793] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.37: Invalid inode table block 0 in block_group 0
[   52.390777][ T5793] loop0: lost filesystem error report for type 5 error -117
[   52.393709][ T5793] EXT4-fs (loop0): 1 truncate cleaned up
[   52.418929][ T5793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.506213][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.897566][ T5822] overlayfs: workdir and upperdir must reside under the same mount
[   53.002206][ T5830] warning: `syz.1.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.139522][   T54] Bluetooth: hci1: command tx timeout
[   53.139652][ T5599] Bluetooth: hci2: command tx timeout
[   53.142402][ T4986] Bluetooth: hci0: command tx timeout
[   53.304757][ T5844] loop1: detected capacity change from 0 to 256
[   53.309584][ T5844] vfat: Bad value for 'time_offset'
[   53.321529][ T5844] dummy_hcd dummy_hcd.0: remove, state 1
[   53.323597][ T5844] usb usb1: USB disconnect, device number 1
[   53.345362][ T5844] dummy_hcd dummy_hcd.0: stopped
[   53.347446][ T5844] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[   53.417483][ T5849] netlink: 'syz.2.63': attribute type 1 has an invalid length.
[   53.514790][ T5860] loop0: detected capacity change from 0 to 256
[   53.770582][  T804] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   53.922948][  T804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   53.926254][  T804] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   53.931435][  T804] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   53.934735][  T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.937757][  T804] usb 3-1: Product: syz
[   53.940550][  T804] usb 3-1: Manufacturer: syz
[   53.942946][  T804] usb 3-1: SerialNumber: syz
[   54.296670][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'.
[   54.439499][ T5881] loop0: detected capacity change from 0 to 256
[   54.442303][ T5881] vfat: Deprecated parameter 'posix'
[   54.444124][ T5881] FAT-fs: "posix" option is obsolete, not supported now
[   54.590829][  T804] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   54.613968][  T804] usb 3-1: USB disconnect, device number 2
[   54.631870][  T804] usblp0: removed
[   54.814734][ T5903] input: syz1 as /devices/virtual/input/input4
[   55.174799][ T5909] loop0: detected capacity change from 0 to 256
[   55.177875][ T5909] exfat: Deprecated parameter 'utf8'
[   55.196370][ T5909] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[   55.247590][   T54] Bluetooth: hci0: command tx timeout
[   55.249080][ T5599] Bluetooth: hci1: command tx timeout
[   55.249450][ T4986] Bluetooth: hci2: command tx timeout
[   55.268127][ T5911] netlink: 76 bytes leftover after parsing attributes in process `syz.0.89'.
[   55.775344][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[   55.876669][ T5927] loop1: detected capacity change from 0 to 8
[   55.893337][ T5927] SQUASHFS error: Failed to read block 0x260685: -5
[   55.898759][ T5927] SQUASHFS error: Unable to read metadata cache entry [260685]
[   55.908581][ T5927] SQUASHFS error: Unable to read directory block [260685:0]
[   55.923991][ T5929] sctp: [Deprecated]: syz.0.98 (pid 5929) Use of int in maxseg socket option.
[   55.923991][ T5929] Use struct sctp_assoc_value instead
[   55.937782][ T5931] binder: 5930:5931 ioctl c0306201 0 returned -14
[   55.960970][ T5932] ima: policy update failed
[   55.962991][   T33] audit: type=1802 audit(1787035123.338:3): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.100" res=0 errno=0
[   55.991686][ T5935] loop0: detected capacity change from 0 to 512
[   55.994259][ T5935] EXT4-fs: Ignoring removed oldalloc option
[   55.998726][ T5935] EXT4-fs (loop0): Test dummy encryption mode enabled
[   56.021926][ T5935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.040979][  T804] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   56.091497][ T5935] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[   56.136981][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.201409][  T804] usb 3-1: Using ep0 maxpacket: 16
[   56.209925][  T804] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[   56.221917][  T804] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   56.231615][  T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.238540][  T804] usb 3-1: Product: syz
[   56.243932][  T804] usb 3-1: Manufacturer: syz
[   56.247757][  T804] usb 3-1: SerialNumber: syz
[   56.271605][  T804] r8152-cfgselector 3-1: Unknown version 0x0000
[   56.283900][  T804] r8152-cfgselector 3-1: config 0 descriptor??
[   56.706517][  T804] r8152-cfgselector 3-1: USB disconnect, device number 3
[   56.784750][ T6009] netlink: 104 bytes leftover after parsing attributes in process `syz.0.130'.
[   57.102364][   T33] audit: type=1326 audit(1787035124.478:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.112798][   T33] audit: type=1326 audit(1787035124.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.120512][   T33] audit: type=1326 audit(1787035124.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.128280][   T33] audit: type=1326 audit(1787035124.478:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.134884][   T33] audit: type=1326 audit(1787035124.478:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.143099][   T33] audit: type=1326 audit(1787035124.478:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.898516][   T33] audit: type=1326 audit(1787035124.478:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.905206][   T33] audit: type=1326 audit(1787035124.478:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.912098][   T33] audit: type=1326 audit(1787035124.478:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.919265][   T33] audit: type=1326 audit(1787035124.478:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.975423][   T33] audit: type=1326 audit(1787035124.478:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.986825][   T33] audit: type=1326 audit(1787035124.478:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   57.996924][   T33] audit: type=1326 audit(1787035124.478:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   58.005295][   T33] audit: type=1326 audit(1787035124.478:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   58.012172][   T33] audit: type=1326 audit(1787035124.478:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.0.138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebf79e0d9 code=0x50000
[   58.160856][ T6049] loop0: detected capacity change from 0 to 256
[   58.167319][ T6049] exfat: Deprecated parameter 'namecase'
[   58.185662][ T6049] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   58.236081][ T6051] loop2: detected capacity change from 0 to 4096
[   58.272141][ T6051] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   58.300243][ T6055] loop1: detected capacity change from 0 to 512
[   58.329200][ T6051] ntfs3(loop2): Failed to load root (-22).
[   58.357054][ T6055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.364937][ T6055] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.390046][ T6055] capability: warning: `syz.1.151' uses deprecated v2 capabilities in a way that may be insecure
[   58.411235][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.650918][ T6078] netlink: 'syz.2.161': attribute type 7 has an invalid length.
[   58.710703][ T6080] Illegal XDP return value 3832045568 on prog  (id 12) dev syz_tun, expect packet loss!
[   58.716487][ T6082] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   58.975654][ T6108] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[   59.061356][ T6116] loop1: detected capacity change from 0 to 512
[   59.072687][ T6116] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.180: iget: bad i_size value: 38620345925642
[   59.083609][ T6116] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   59.086122][ T6116] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.180: couldn't read orphan inode 15 (err -117)
[   59.089737][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   59.089747][    C0] EXT4-fs (loop1): initial error at time 1787035126: ext4_orphan_get:1399: inode 15
[   59.089759][    C0] EXT4-fs (loop1): last error at time 1787035126: ext4_orphan_get:1399: inode 15
[   59.105306][ T6116] loop1: lost filesystem error report for type 5 error -117
[   59.106235][ T6116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.185408][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.599796][ T5656] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   59.765277][ T5656] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   59.771834][ T5656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   59.776317][ T5656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[   59.785594][ T5656] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   59.790041][ T5656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.792684][ T5656] usb 2-1: Product: syz
[   59.803570][ T5656] usb 2-1: Manufacturer: syz
[   59.805204][ T5656] usb 2-1: SerialNumber: syz
[   59.807974][ T5656] usb 2-1: config 0 descriptor??
[   59.812064][ T6135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   59.859834][ T5656] rc_core: IR keymap rc-streamzap not found
[   59.862814][ T5656] Registered IR keymap rc-empty
[   59.867293][ T5656] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   59.874055][ T5656] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[   60.031486][   T32] usb 2-1: USB disconnect, device number 2
[   60.446518][ T6158] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[   60.451338][ T6158] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   60.454835][ T6158] CPU: 1 UID: 0 PID: 6158 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT(full) 
[   60.458449][ T6158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.462475][ T6158] RIP: 0010:dummy_udc_start+0xd0/0x1f0
[   60.464533][ T6158] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 15 44 11 fa eb 0c e8 0e 44 11 fa eb 05 e8 07 44 11 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 21 4a 7f fa 4d 8b 36 4c 89 f7 e8
[   60.471754][ T6158] RSP: 0018:ffffc9000774f830 EFLAGS: 00010246
[   60.474138][ T6158] RAX: 0000000000000000 RBX: ffff8881b90f8050 RCX: 0000000000080000
[   60.477164][ T6158] RDX: ffffc9000f7a9000 RSI: 0000000000001e99 RDI: 0000000000001e9a
[   60.480339][ T6158] RBP: ffff88810d8f3000 R08: ffff8881b903bc00 R09: 0000000000000004
[   60.483503][ T6158] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000
[   60.486348][ T6158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
[   60.489244][ T6158] FS:  00007fcebd9f66c0(0000) GS:ffff8882a8f5c000(0000) knlGS:0000000000000000
[   60.492702][ T6158] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   60.495261][ T6158] CR2: 00007fcebf8606cc CR3: 00000001bbbba000 CR4: 00000000000006f0
[   60.498444][ T6158] Call Trace:
[   60.499776][ T6158]  <TASK>
[   60.500970][ T6158]  ? __pfx_dummy_udc_start+0x10/0x10
[   60.503152][ T6158]  gadget_bind_driver+0x3a8/0x9e0
[   60.505199][ T6158]  ? __pfx_gadget_bind_driver+0x10/0x10
[   60.507434][ T6158]  really_probe+0x254/0xae0
[   60.509280][ T6158]  __driver_probe_device+0x1e8/0x360
[   60.511298][ T6158]  driver_probe_device+0x4f/0x240
[   60.513211][ T6158]  __driver_attach+0x339/0x600
[   60.514752][ T6158]  bus_for_each_dev+0x23b/0x2c0
[   60.516340][ T6158]  ? __pfx___driver_attach+0x10/0x10
[   60.518046][ T6158]  ? __pfx_bus_for_each_dev+0x10/0x10
[   60.519817][ T6158]  ? do_raw_spin_unlock+0x4d/0x210
[   60.521478][ T6158]  bus_add_driver+0x345/0x670
[   60.523003][ T6158]  driver_register+0x23a/0x320
[   60.524532][ T6158]  usb_gadget_register_driver_owner+0xf9/0x270
[   60.526513][ T6158]  raw_ioctl+0x1541/0x41c0
[   60.527915][ T6158]  ? tomoyo_path_number_perm+0x219/0x5f0
[   60.530052][ T6158]  ? do_vfs_ioctl+0x116f/0x1530
[   60.532004][ T6158]  ? __pfx_raw_ioctl+0x10/0x10
[   60.533917][ T6158]  ? hook_file_ioctl+0x1f0/0x5f0
[   60.535875][ T6158]  ? __fget_files+0x2a/0x420
[   60.537749][ T6158]  ? __fget_files+0x2a/0x420
[   60.539637][ T6158]  ? __fget_files+0x3a2/0x420
[   60.541542][ T6158]  ? __fget_files+0x2a/0x420
[   60.543376][ T6158]  ? bpf_lsm_file_ioctl+0x9/0x20
[   60.545323][ T6158]  ? __pfx_raw_ioctl+0x10/0x10
[   60.547264][ T6158]  __se_sys_ioctl+0xfc/0x170
[   60.549144][ T6158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.551585][ T6158]  do_syscall_64+0x174/0x580
[   60.553476][ T6158]  ? trace_irq_disable+0x3b/0x140
[   60.555517][ T6158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.557914][ T6158] RIP: 0033:0x7fcebf79dd6b
[   60.559693][ T6158] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   60.567280][ T6158] RSP: 002b:00007fcebd9f3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   60.570522][ T6158] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcebf79dd6b
[   60.573673][ T6158] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[   60.576799][ T6158] RBP: 00007fcebd9f4fd0 R08: 0000000000000000 R09: 00000000ffffffff
[   60.579305][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.582098][ T6158] R13: 0000200000000080 R14: 0000000000000000 R15: 0000000000000000
[   60.584690][ T6158]  </TASK>
[   60.585711][ T6158] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   60.587395][ T6158] ---[ end trace 0000000000000000 ]---
[   60.596697][ T6158] RIP: 0010:dummy_udc_start+0xd0/0x1f0
[   60.609635][ T6158] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 15 44 11 fa eb 0c e8 0e 44 11 fa eb 05 e8 07 44 11 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 21 4a 7f fa 4d 8b 36 4c 89 f7 e8
[   60.621284][ T6158] RSP: 0018:ffffc9000774f830 EFLAGS: 00010246
[   60.624835][ T6158] RAX: 0000000000000000 RBX: ffff8881b90f8050 RCX: 0000000000080000
[   60.636848][ T6158] RDX: ffffc9000f7a9000 RSI: 0000000000001e99 RDI: 0000000000001e9a
[   60.645863][ T6158] RBP: ffff88810d8f3000 R08: ffff8881b903bc00 R09: 0000000000000004
[   60.648358][ T6158] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000
[   60.652573][ T6158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
[   60.655130][ T6158] FS:  00007fcebd9f66c0(0000) GS:ffff88818d95c000(0000) knlGS:0000000000000000
[   60.657879][ T6158] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   60.660266][ T6158] CR2: 000056301a1c4028 CR3: 00000001bbbba000 CR4: 00000000000006f0
[   60.662919][ T6158] Kernel panic - not syncing: Fatal exception
[   60.665489][ T6158] Kernel Offset: disabled
[   60.666836][ T6158] Rebooting in 86400 seconds..
