last executing test programs:

1m31.488007839s ago: executing program 1 (id=17):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
iopl(0x3)
rt_sigsuspend(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x8, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = gettid()
r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30}, 0x30)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

1m30.58603753s ago: executing program 1 (id=29):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x6, 0x4)

1m29.618980429s ago: executing program 1 (id=35):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x300})

1m29.504216921s ago: executing program 1 (id=36):
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x152a, &(0x7f0000003000)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL/T+Z1+x/mceb6fz/5Yz6z9rP287/Ne9t6YbzoOqtageuV6RAT/ErzwRxIAxAJAPwC4BgACACgdVzru/Hx2iUn/2kHYX+vh1CtdAbuSuP9ZG/c/a+P+Z23c/6yN+5+1cf+zNu5/1sb9Zywr2zg1/7W8Zd2N7///96vzhzP8/f9fJLPE6C9Wl7i+E0DMn03h/mdt3P//WsGf2Yn7n7Vx/7Oq2CtdAPsPwO//rCDbH85w/7M27j9jWdmVvv98pTeIZO3n4Eq//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ2n/GUKAC6Nr3RdjDHGGGOMMcYY++v4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/ZP7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFY1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiSjOl/If5b/9O/oCfj75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/TL4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufOnfYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDq4P8gR5g3xB/iA+KBAUDHRgAhuIi02PBjcERYIbg6LBTUGxoHjgghJBQnBzUDK4JSgV3BqUDm4LygS3B2WDckH5oEJwR1AxuDOoFNwVVA7uDqoEVYNqQfXgnqBGcG9QM7gvqBXcH9QOHgjqBA8GdYOHgnrBw0H94JGgQfBo0DB4LGgUNA6aBE2DZn/p+t6fyPuE66a76yTdQ/fUL+teurfuo/vqfvoV3V+/qgfo13SyHqgH6df1YP2GHqLf1EP1MD1cv6VH6JF6lB6tx+ixOkWP0+P123qCfkdP1JP0ZD1Fp+qpepp+V0/XM/RM/Z6epd/Xs/UcPVfP02n6Az1fL9Dp+kO9UH+kM/QivVgv0Uv1Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9Fb9Ta9XX+sd+hP9E69S+/Wn+o9+jO9V3+u9+kv9H79pc7UX+kD+mt9UH+jD+lv9WH9nT6ij+pj+nt9XP+gT+iT+pQ+rc/oH/VZ/ZM+p/35k/vzX+9GGWViTIyJNbEmh8lhcpqcJpfJZSImYuJMnMltcps8Jo/JZ/KZeBNvCpqC5jwyZAqZQiZqoqaIKWKKmqKmmClmnHEmwSSYkqakKWVKmdKmtCljypiypqwpb8qbO8wd5k5zp7nL3GXuNnebqqaqqW6qmxqmhqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWKamGammWlumpsWpoVpZVqZ1qa1aWPamESTaNqatqadaWfam/amg+lgOpqOppPpZLqYLqar6Wq6mW4mySSZnqan6WV6mT6mj+ln+pn+pr8ZYAaYZJNsBplBZrAZbIaYIWaoGWaGnz9RNSPNKDPajDFjTYpJMePNeDPBTDATzUQz2Uw2qSbVTDPTzHQz3cw0M80sM8vMNrPNXDPXpJk0M9/MN+km3Sw0C02GyTCLzWKz1Cw1y81ys9KsNKvNarMW1pr1Zr3ZaDaazWaz2Wq2mu1mu9lhdpidZqfZbXabPWaP2Wv2mn1mn9lv9ptMk2kOmAPmoDloDplD5rA5bI6YI+aYOWaOm+PmhDlhTplT5ozJe/H70ptYm93msFfZnPZqm8teY/8+zmfz23hbwBa02uaxeX8VG2ttUXuTLWaLW2dL2AR782/isracLW8r2DtsRXunrfSbuIa919a099la9n5b3d7zq7i2fcDWsY/auogAtrGtb5vaBvZR29A+ZhvZxraJbWpb26dsG/u0TbTP2Lb22d/E8+0Cu9KusqvtGrvT7rKn7Gl70H5jz9gfbTfb3fazr9j+9lU7wL5mk+3A38TD7Vt2hB1pR9nRdowd+5t4sp1iU+1UO82+a6fbGb+J0+wHdpZNt7PtHDvXzvs5Pl9Tuv3QLrQf2QwbwGK7xC61y+xyu+L/17rErrPr7Qa7w35iN9stdqvdZrdfOhG2u+xu+6ndYz+zB+zXdp/9wu63h2ym/ern+PzjO2S/tYftd/aIPWqP2e/tcfuD+jl3ZC8A+6P93v5kz1lvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCXyitGxclRCUqgm6kk3UKl6FYqTbdRGbqdylI5Kk8V6A6qSHdSJbqLKtPdVIWqUjWqTvdQDbqXatJ9VIvup9r0ANWhB6kuPUT16GGqT49QA3qUGtJj1IgaUxNqSs3ocWpOT1ALakmt6ElqTU9RG3qaEukZakvPUjv6G7Wn56gDPU8d6QXqRJ2pC71IXekl6kbdKYl6UE96mXpRb+pDfakfvUL96VUaQK9RMg2kQfQ6DaY3aAi9SUNpGA2nt2gEjaRRNJrG0FhKoXE0nt6mCfQOTaRJNJmmUCpNpWn0Lk2nGTST3qNZ9D7Npjk0l+ZRGn1A82kBpdOHtJA+ogxaRItpCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ0+ph30Ce2kXbSbPqU99Bntpc9pH31B++lLyqSv6AB9TQfpGzpE3/ru9B0doaN0jL6n4/QDnaCTdIpO0xn6kc7ST3SOPEGIoQhlqMIgjAmzhbFh9jBHeFWYM7w6zBVeE0bCa8O48Lowd3h9mCfMG+YL84fxYYGwYKhDE9qQwjAsFBYOo+ENYZHwxrBoiGGxsHjowhJhQnhzWDK8JSwV3hqWDm8Ly4S3h2XDcuGj91cI7wgrhneGlcK7wsrh3WGVsGpYLawe3hPWCO8Na4b3hbXC+8NS4QNhnfDBsG74UFgvfDisHz4SNggfDRuGj4WNwsZhk7Bp2Cx8PGwePhG2CFuGrcInw9bhU2Gb8OkwMXwmbBs++/P8Awv+eD4p7BH2DF8OXw69v0/Ojc6LpkU/iM6PLoimRz+MLox+FM2ILoouji6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Iel89Gzh0wkmnXOBiXDYX67K7HO4ql9Nd7XK5a1zEXevi3HUut7ve5XF5XT6X38W7Aq6g084468iFrpAr7KLuBlfE3eiKuptcMVfcOVfCJbimrplr5pq7J1wL19K1ck+6J91T7in3tHvaPePaumddO/c319495zq4593z7gXXyXV2XdyLrqsbl+vCezLJ9XQ9XS/Xy/VxfVw/18/1d/3dADfAJbtkN8gNcoPdYDfEDXFD3VA33A13I9wIN8qNcmPcGJfiUtx4N95NcBPcRDfRTXaTXapLddPcNDfdTXcVZ1w4ymw32811c12aS3Pz3flzxnS30C10GS7DLXaL3VK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtd9vdDrfD7fTXXFjU7XF73V63z+1z+92XLtN95Q64r91B94075L51h9137og76o65791x94M74U66U+60O+N+dGfdT+6c8y4lMi4yPvJ2ZELkncjEyKTI5MiUSGpkamRa5N3I9MiMyMzIe5FZkfcjsyNzInMj8yJpkQ8i8yMLIumRDyMLIx9FMiKLIosjSyJLI8si3hfYHPpCvrCP+ht8EX+jL+pv8sV8ce98CZ/gb/Yl/S2+lL/Vl/a3+TL+dl/Wl/Pl/WO+kW/sm/imvpl/3Df3T/gWvqVv5Z/0rf1Tvo1/2if6Z3xb/6xv5//m2/vnfAf/vO/oX/CdfGffxb/ou/qXfDff3Sf5Hr6nf9n38r19H9/X9/Ov+P7+VT/Av+aT/UA/yL/uB/s3/BD/ph/qh/nhMW/5EZcukWGsT/Hj/Hj/tp/g3/ET/SQ/2U/xqX6qn+bf9dP9DD/Tv+dn+ff9bD/Hz/XzfJr/wM/3C3y6/9Av9B/5DL/o0k1lv9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nr/df+x3+E/8Tr/L7/af+j3+M7/Xf+73+S/8fv+lz/Rf+QP+a3/Qf+MP+W/9Yf+dP+KP+mP+e3/c/+BP+JP+lD/tz/gf/Vn/kz/H/2eNMcYYY+xPGXd5KH49c+F2fo/fyRG/2LknAFy9JX/mL+fPn1GuzXNh3FvEt44AwDPdOz58aatSJSkp6eK+GRKCwnMALv1N0HkxcDleBK3gKUiEllDyd+vvLTqfoX+wfvQ2gBy/yImFy/Hl9T8HwKTfWf/xJ4fPLxOeivsf1p8DULTw5ZzscDleBK1+vr/SEkr9Qf15m/+y/tjfrp/9ixSAFr/IyQmX48v1J8AT8Cwk/mpPxhhjjDHGGGPsgt6ifPtL15+X/sXn712fx6vLOdngcvyPrs8ZY4wxxhhjjDF25T3XucvTjycmtmz/zw8q/a+y/vSgIfxfrcyD3x14D3DpJwoA/sUFAc4P5L/zUWz6txwr+eJb5++nlp72AfxntPKvGFzhDybGGGOMMcbYX+7ySf+vf66uVEGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlgW9O/4dWJX+jEyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9r/CwAA///UxgMC")
mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0))
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000080)="17000000020001000003d68c5ee17688a2003c08020300ecff3f0200000300000a00000c89f1608558134fcf9f98c1811900009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68", 0xb8)

1m27.550057181s ago: executing program 1 (id=43):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0xfffffffffffffff7)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x6, &(0x7f0000000100)=0x8)
openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
userfaultfd(0x801)
process_vm_readv(r0, 0x0, 0x0, &(0x7f0000002100)=[{0x0}, {0x0}, {&(0x7f0000001000)=""/198, 0xc6}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x4, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000c00)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on}, {@index_on}], [], 0x2c})

1m27.137345412s ago: executing program 1 (id=46):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x20, r2, 0x501, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

1m26.876601577s ago: executing program 32 (id=46):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x20, r2, 0x501, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

1m8.277851117s ago: executing program 2 (id=203):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r2 = socket(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e"], 0x14c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)

1m8.109977956s ago: executing program 2 (id=206):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)

1m8.039234814s ago: executing program 2 (id=208):
mlockall(0x7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1m7.911276602s ago: executing program 2 (id=209):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

1m7.368345171s ago: executing program 2 (id=213):
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx:Dd', 0x0)

1m6.855301284s ago: executing program 2 (id=219):
socket(0x26, 0x3, 0x0)

1m6.528367612s ago: executing program 33 (id=219):
socket(0x26, 0x3, 0x0)

5.891218712s ago: executing program 3 (id=919):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x7}]}]}, 0x5c}}, 0x0)

5.793786741s ago: executing program 3 (id=921):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa10004, &(0x7f0000000680)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@adinicb}, {@uid}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@unhide}]}, 0x1, 0xc51, &(0x7f0000001100)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)

5.643537145s ago: executing program 3 (id=926):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x14440, &(0x7f0000003580)=ANY=[], 0x2, 0xc3f, &(0x7f0000001780)="$eJzs3U9sHNd9B/DfGy3FpdxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUWRNi3+EWV9Prb43Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cvHU6fSwWwEA7KfLo189dcb9HwAeK1f9/z8AAAAAAAAAAAAAABx0KYp4MlLMXl5N49X7jvqldt/tO2PDI5tXG0hVzUNV+fJX/fSZs+e+9MLQ+W5eak9/QP3d9tl4bfTqxcbLM7dm5ybn5ycnGmPT7eszE5Pb3sNO6290ojoBjVuv3564cWO+ceb5s/d8fGfw/f4njg1eGHr25DPdsmPDIyOj60XqveVrD9yQjq1meByOIk5Giue+99PUiogidn4u6vs79hsNVJ04UXVibHik6shUuzW9UH54pXsiiohGT6Vm9xxtPhZR69vXPmytGbFYNr9s8Imye6OzrbnWtanJxpXW3EJ7oT0zfSV1Wlv2pxFFnE8RSxGx0n//7vqiiFqk+M7R1XQtIg51z8MXq4nBW7ej2MM+bkPZzkZfxFLxCIzZAdYfRbwaKX72zvG4nq8z1bXmCxGvlvmDiLfKfCkilV+McxHvbfI94tFUiyL+shz/C6tporoedK8rl77W+Mr0jZmest3ryke8P9x3pXhI94eBDbk/7rs2Ha1+HpRrUz2KaFVX/NX04L/ZAQAAAAAAAAAAAAAAAGC3DUQRn4kUr/zHn1TziqOal370wtAfDv5q75zxpz9kP2XZ5yNisdjenNzDeWLglXQlpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989npaid03x9vTNxtXWtanOqrDdtX+7a6avra2tNVInmznHcy7mXMq5nHMlZxS5fs5mzvGcizmXci7nXMkZh3L9nM2c4zkXcy7lXM65kjNquX7OZs7xnIs5l3Iu51zJGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jdWU6SIaEaMRyeX+x926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzbvbahGRqn87jpc/zkXzcJmfjOZQmS9F82LOVpW15rceQvvZmb5UxI8jRX/97bsDnse/r/Pu7tcg3vrm+rvP1jp5qPvh4Pv9Txw7emFo5Dee3up12qwBJy61p2/faYwNj4yM9myu5aN/smfbYD5usTtdJyLm33jz9dbU1OTcg78ovwIPUr0c4Z0ffT9fpNqD9dSLR/RF1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xY072ub9v7axXr7/l/f0ze7/T/ZsezH/bqSvFlFfuDXbdyyiPv/Gmyfbt1o3J29OTp87derLQ0NfPnuq73BE/UZ7arLn1a6cLgAAAAAAAAAAAAAAAID9k4r4/UjR+vFqakTEnWq+1uCFoWdPPnMoDlXzre6Zt/3a6NWLjZdnbs3OTc7PT040xqbb12cmJrd7uHo13WtseGRPOvOhBva4/QP1l2dm35hr3/zjhU0/P1K/eG1+Ya51ffOPYyCKiGbvlhNVg8eGR6pGT7Vb01XVK5tOpv/o+lIR/xUprp9rpM/nbXn+/8YZ/vfM/1/cuKM9mv//iZ5t5TFTKuLnkeJ3/urp+HzVziNx3znL5f4uUpw4/7lcLg6X5bpt6DxXoDMzsCz7f5Hin35xb9nufMgn18ue3vaJfUSU4380Unz/L74bv5m33fv8h83H/8jGHe3R+D/Vs+3IPc8r2HHXyeN/MlK89OTb8Vt52wc9/6P77I3jufDd53Ps0fh/qmfbYD7ub+9O1wEAAAAAAAAAAB5pfamIv48UPxyppRfytu38/b+JjTvao7//9emebRO7s17Rh77Y8UkFAAAAgAOiLxXxk0hxc+Htu3Oo753/3TP/8/fW538Opw2fVn/O92vVcwN288//eg3m447vvNsAAAAAAAAAAAAAAAAAAABwoKRUxAt5PfXxaj7/xJbrqS9Hilf+57lcLh0ry3XXgR+sftYvz0yfvDg1NXO9tdC6NjXZGJ1tXZ8s6z4VKVb/9nO5blGtr95db76zxvv6WuxzkWLkH7plO2uxd9cmf2q97Omy7CcixX//471lu+tYf2q97Jmy7N9Eiq//y+Zlj62XPVuW/W6k+NHXG92yR8qy3eejfnq97PPXZ4o9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97a+nuXP68/n9fz9vKW9/sWe9/gzvVOv+D1fr/W71+kPX/q+cKLG51VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWL28mpa7i/fd9Qvtadv3xkbHtm82kCqah6qype/6qfPnD33pReGznfzg+vvts/Ea6NXLzZenrk1Ozc5Pz850Ribbl+fmZjc9h52Wn+jE9UJaNx6/fbEjRvzjTPPn73n4zuD7/c/cWzwwtCzJ5/plh0bHhkZ7SlT63vgo98nbbH9cBTx15Hiue/9NP2wP6KInZ+L+747u9iPbRioOnGi6sTY8EjVkal2a3qh/PBK90QUEY2eSs3uOdqHsdiRZsRi2fyywSfK7o3OtuZa16YmG1dacwvthfbM9JXUaW3Zn0YUcT5FLEXESv/9u+uLIl6PFN85upr+tT/iUPc8fPHy6FdPndm6HcUe9nEbynY2+iKWikdgzA6w/ijinyPFz945Hv/WH1GLzq/4QsSrZf4g4q3ojHcqvxjnIt7b5HvEo6kWRfx/Of4XVtM7/flSXV1XLn2t8ZXpGzM9ZbvXlV2/P+yvgX092gG/NtWjiB9VV/zV9O/+uwYAAAAAAAAAAAAAAAA4QIr49Ujx4rvHUzU/+O6c4vb0zcbV1rWpzrS+7ty/7pzptbW1tUbqZDPneM7FnEs5l3Ou5Iwi18/ZLLO+tjae3y/mXMq5nHMlZxzK9XM2c47nXMy5lHM550rOqOX6OZs5x3Mu5lzKuZxzJec+z2cHAAAAAAAAAAAAAAAAAAAeE0X1T4pvf2M1rfV31pcej04uWw/0Y++XAQAA//8acfcO")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.584370757s ago: executing program 3 (id=944):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

4.288523459s ago: executing program 3 (id=945):
syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @mdlm={0x12, 0x24, 0x12, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x7b}}}}}]}}]}}, 0x0)

3.78887619s ago: executing program 3 (id=948):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0xfff}, 0x8)

3.533823002s ago: executing program 34 (id=948):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0xfff}, 0x8)

2.253288435s ago: executing program 0 (id=965):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x148bc9a0}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}]}]}], {0x14, 0x11, 0x1, 0x74, 0x0, {0x1}}}, 0x78}}, 0x0)

2.154420009s ago: executing program 0 (id=967):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="280000004e000000008000000000"], 0x0)

1.780639969s ago: executing program 0 (id=968):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790040000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94)

1.454788105s ago: executing program 0 (id=970):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x7f)

1.293949135s ago: executing program 4 (id=972):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="8d", 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xffffffff, 0x4)

1.213885133s ago: executing program 4 (id=973):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0)

352.80362ms ago: executing program 4 (id=974):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
read$FUSE(r0, &(0x7f00000082c0)={0x2020}, 0x2020)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x8)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

291.884001ms ago: executing program 4 (id=975):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x8000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ftruncate(r1, 0x7)

291.565718ms ago: executing program 0 (id=976):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)

102.360626ms ago: executing program 4 (id=977):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

50.727552ms ago: executing program 4 (id=978):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

0s ago: executing program 0 (id=979):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44337' (ED25519) to the list of known hosts.
syzkaller login: [   56.606772][ T5775] cgroup: Unknown subsys name 'net'
[   56.689786][ T5775] cgroup: Unknown subsys name 'cpuset'
[   56.697977][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.636739][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.227092][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.231206][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.235110][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.240449][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.243970][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.259889][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.276751][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.280269][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.286924][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.290505][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.350927][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.356339][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.359632][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.371176][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.379116][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.760811][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   64.769213][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   64.874793][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   64.969910][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.972776][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.976832][ T5849] bridge_slave_0: entered allmulticast mode
[   64.980991][ T5849] bridge_slave_0: entered promiscuous mode
[   65.000108][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.002954][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.006856][ T5849] bridge_slave_1: entered allmulticast mode
[   65.010717][ T5849] bridge_slave_1: entered promiscuous mode
[   65.014804][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.017898][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.020353][ T5853] bridge_slave_0: entered allmulticast mode
[   65.023271][ T5853] bridge_slave_0: entered promiscuous mode
[   65.049252][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.052146][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.054867][ T5853] bridge_slave_1: entered allmulticast mode
[   65.059124][ T5853] bridge_slave_1: entered promiscuous mode
[   65.100134][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.123199][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.145089][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.151816][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.211433][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.214237][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.217462][ T5858] bridge_slave_0: entered allmulticast mode
[   65.221420][ T5858] bridge_slave_0: entered promiscuous mode
[   65.242845][ T5849] team0: Port device team_slave_0 added
[   65.247438][ T5853] team0: Port device team_slave_0 added
[   65.250385][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.253272][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.258581][ T5858] bridge_slave_1: entered allmulticast mode
[   65.262329][ T5858] bridge_slave_1: entered promiscuous mode
[   65.282122][ T5853] team0: Port device team_slave_1 added
[   65.301778][ T5849] team0: Port device team_slave_1 added
[   65.365252][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.369324][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.371547][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.379774][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.385339][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.390283][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.400776][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.408997][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.413215][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.417118][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.427058][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.432039][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.434760][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.445287][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.549778][ T5858] team0: Port device team_slave_0 added
[   65.558483][ T5853] hsr_slave_0: entered promiscuous mode
[   65.561557][ T5853] hsr_slave_1: entered promiscuous mode
[   65.571575][ T5849] hsr_slave_0: entered promiscuous mode
[   65.574747][ T5849] hsr_slave_1: entered promiscuous mode
[   65.577885][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   65.580288][ T5849] Cannot create hsr debugfs directory
[   65.584619][ T5858] team0: Port device team_slave_1 added
[   65.652950][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.656508][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.666951][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.698996][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.701179][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.710132][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.843774][ T5858] hsr_slave_0: entered promiscuous mode
[   65.848681][ T5858] hsr_slave_1: entered promiscuous mode
[   65.851578][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   65.853886][ T5858] Cannot create hsr debugfs directory
[   66.066413][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.078164][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.097249][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.120700][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.198523][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.225703][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.232808][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.243647][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.288495][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.297661][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.304481][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.316031][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.326338][   T55] Bluetooth: hci1: command tx timeout
[   66.328888][ T5854] Bluetooth: hci0: command tx timeout
[   66.407691][ T5854] Bluetooth: hci2: command tx timeout
[   66.460303][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.489610][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.504366][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   66.522082][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.538496][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.546527][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.549872][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.555583][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.558409][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.576801][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.579965][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.601880][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.604637][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.612095][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   66.634490][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.637474][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.658517][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.661360][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.897424][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.912409][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.948765][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.977728][ T5849] veth0_vlan: entered promiscuous mode
[   66.997523][ T5849] veth1_vlan: entered promiscuous mode
[   67.031861][ T5858] veth0_vlan: entered promiscuous mode
[   67.038457][ T5853] veth0_vlan: entered promiscuous mode
[   67.057867][ T5858] veth1_vlan: entered promiscuous mode
[   67.061366][ T5849] veth0_macvtap: entered promiscuous mode
[   67.068476][ T5853] veth1_vlan: entered promiscuous mode
[   67.077464][ T5849] veth1_macvtap: entered promiscuous mode
[   67.098930][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.112105][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.127776][ T5679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.131243][ T5679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.142189][ T5679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.160158][ T5858] veth0_macvtap: entered promiscuous mode
[   67.163827][ T5679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.184697][ T5858] veth1_macvtap: entered promiscuous mode
[   67.190583][ T5853] veth0_macvtap: entered promiscuous mode
[   67.211126][ T5853] veth1_macvtap: entered promiscuous mode
[   67.251851][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.273555][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.278126][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.284567][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.317620][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.321697][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.331184][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.342639][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.345811][ T3628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.349296][ T3628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.352973][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.372580][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.389214][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.404255][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.438860][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.442096][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.479911][ T3628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.484007][ T3628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.519029][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.564562][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.570239][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.597854][ T3628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.600389][ T3628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.647270][ T3628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.652303][ T3628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.837317][ T5930] loop1: detected capacity change from 0 to 1024
[   67.839489][ T5932] netlink: 324 bytes leftover after parsing attributes in process `syz.0.9'.
[   67.840520][ T5930] EXT4-fs: Ignoring removed i_version option
[   67.843351][ T5932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'.
[   67.853864][ T5930] EXT4-fs: Ignoring removed nobh option
[   67.858784][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'.
[   67.903289][ T5930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.117857][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.406496][   T55] Bluetooth: hci1: command tx timeout
[   68.408782][ T5854] Bluetooth: hci0: command tx timeout
[   68.485672][ T5854] Bluetooth: hci2: command tx timeout
[   69.101439][ T5971] loop0: detected capacity change from 0 to 2048
[   69.119688][ T5971] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   69.130611][ T5971] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   69.133602][ T5971] UDF-fs: Scanning with blocksize 512 failed
[   69.140236][ T5971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.236977][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   69.397960][ T5894] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   69.405497][ T5894] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   69.408990][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   69.425806][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   69.436618][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   69.445276][ T5894] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   69.450899][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   69.454550][ T5894] usb 3-1: Product: syz
[   69.460540][ T5894] usb 3-1: Manufacturer: syz
[   69.472591][ T5894] cdc_wdm 3-1:1.0: skipping garbage
[   69.475669][ T5894] cdc_wdm 3-1:1.0: skipping garbage
[   69.479544][ T5894] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   69.481409][ T5894] cdc_wdm 3-1:1.0: Unknown control protocol
[   69.602860][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   69.643169][ T5991] loop0: detected capacity change from 0 to 256
[   69.658819][ T5991] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d)
[   69.683962][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   69.686458][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   69.689497][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   69.692093][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   69.695410][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   69.698079][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   69.701129][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   69.703885][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   69.706259][ T5894] usb 3-1: USB disconnect, device number 2
[   69.706265][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   70.346086][ T5997] loop1: detected capacity change from 0 to 512
[   70.374116][ T5997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.381116][ T5997] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   70.400088][ T5997] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.35: lblock 23 mapped to illegal pblock 18 (length 1)
[   70.408110][ T5997] EXT4-fs (loop1): Remounting filesystem read-only
[   70.429959][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.446200][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   70.470675][ T6001] loop1: detected capacity change from 0 to 256
[   70.483574][ T6001] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[   70.489512][ T5854] Bluetooth: hci0: command tx timeout
[   70.491663][ T5854] Bluetooth: hci1: command tx timeout
[   70.575970][   T55] Bluetooth: hci2: command tx timeout
[   70.596120][ T5913] usb 1-1: Using ep0 maxpacket: 16
[   70.796944][ T6008] loop2: detected capacity change from 0 to 64
[   71.381922][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.387415][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   72.567146][   T55] Bluetooth: hci1: command tx timeout
[   72.569764][ T5854] Bluetooth: hci0: command tx timeout
[   72.646830][ T5854] Bluetooth: hci2: command tx timeout
[   72.854526][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short
[   72.867630][ T5913] usb 1-1: unable to read config index 0 descriptor/start: -71
[   72.870731][ T5913] usb 1-1: can't read configurations, error -71
[   72.897600][ T6020] loop2: detected capacity change from 0 to 2048
[   72.937663][ T5878] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.937980][ T6020] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh
[   72.967739][ T6020] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   72.977532][ T6020] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   72.986358][ T6020] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[   72.990739][ T6020] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   73.011175][ T6020] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   73.023022][ T6020] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[   73.030144][ T5878] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.034954][ T6020] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[   73.170278][ T5878] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.202212][ T6025] Zero length message leads to an empty skb
[   73.206211][ T6025] process 'syz.0.48' launched '/dev/fd/5' with NULL argv: empty string added
[   73.291157][ T6028] netlink: 200 bytes leftover after parsing attributes in process `syz.0.50'.
[   73.301263][ T5878] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.319242][ T6029] loop2: detected capacity change from 0 to 128
[   73.499317][ T6029] loop2: detected capacity change from 0 to 1024
[   73.522527][ T6029] =======================================================
[   73.522527][ T6029] WARNING: The mand mount option has been deprecated and
[   73.522527][ T6029]          and is ignored by this kernel. Remove the mand
[   73.522527][ T6029]          option from the mount to silence this warning.
[   73.522527][ T6029] =======================================================
[   73.615821][ T6029] ext4: Bad value for 'barrier'
[   73.701351][ T5878] bridge_slave_1: left allmulticast mode
[   73.703315][ T5878] bridge_slave_1: left promiscuous mode
[   73.706136][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.748243][ T5878] bridge_slave_0: left allmulticast mode
[   73.750395][ T5878] bridge_slave_0: left promiscuous mode
[   73.767255][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.938476][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.947350][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.951732][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.959110][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.966431][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.561944][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.593389][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.613681][ T5878] bond0 (unregistering): Released all slaves
[   75.230973][ T6035] chnl_net:caif_netlink_parms(): no params data found
[   75.454792][ T6055] loop0: detected capacity change from 0 to 32768
[   75.458436][ T6055] XFS: ikeep mount option is deprecated.
[   75.515336][ T6055] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.576737][ T6055] XFS (loop0): Ending clean mount
[   75.582721][ T6055] XFS (loop0): Quotacheck needed: Please wait.
[   75.615279][ T5878] hsr_slave_0: left promiscuous mode
[   75.635938][ T6055] XFS (loop0): Quotacheck: Done.
[   75.644834][ T5878] hsr_slave_1: left promiscuous mode
[   75.656152][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.665967][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.699739][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.702801][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.772470][ T5878] veth1_macvtap: left promiscuous mode
[   75.774400][ T5878] veth0_macvtap: left promiscuous mode
[   75.786512][ T6075] capability: warning: `syz.2.58' uses deprecated v2 capabilities in a way that may be insecure
[   75.793858][ T5878] veth1_vlan: left promiscuous mode
[   75.803041][ T5878] veth0_vlan: left promiscuous mode
[   76.015933][ T5854] Bluetooth: hci0: command tx timeout
[   76.219905][ T5858] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.398096][ T5878] team0 (unregistering): Port device team_slave_1 removed
[   76.440128][ T5878] team0 (unregistering): Port device team_slave_0 removed
[   77.539803][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.550834][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.559021][ T6035] bridge_slave_0: entered allmulticast mode
[   77.569791][ T6035] bridge_slave_0: entered promiscuous mode
[   77.577106][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.580159][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.583009][ T6035] bridge_slave_1: entered allmulticast mode
[   77.603968][ T6035] bridge_slave_1: entered promiscuous mode
[   77.744679][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.756622][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.920904][ T6035] team0: Port device team_slave_0 added
[   77.946656][ T6035] team0: Port device team_slave_1 added
[   78.054940][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.063544][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.080429][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.086387][ T6112] tap0: tun_chr_ioctl cmd 1074025681
[   78.096260][ T5854] Bluetooth: hci0: command tx timeout
[   78.109055][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.111847][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.124154][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.183639][ T6118] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[   78.277307][ T6035] hsr_slave_0: entered promiscuous mode
[   78.280601][ T6035] hsr_slave_1: entered promiscuous mode
[   78.284702][ T6035] debugfs: 'hsr0' already exists in 'hsr'
[   78.289148][ T6035] Cannot create hsr debugfs directory
[   78.520720][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   78.620670][ T6035] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.637658][ T6035] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.645992][ T6035] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.657069][ T6035] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.688952][ T5894] usb 3-1: Using ep0 maxpacket: 8
[   78.706470][ T5894] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   78.712245][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.722285][ T5894] usb 3-1: Product: syz
[   78.723994][ T5894] usb 3-1: Manufacturer: syz
[   78.733905][ T5894] usb 3-1: SerialNumber: syz
[   78.744404][ T5894] usb 3-1: config 0 descriptor??
[   78.761208][ T5894] gspca_main: se401-2.14.0 probing 047d:5003
[   78.855027][ T6142] netlink: 'syz.0.77': attribute type 1 has an invalid length.
[   78.860605][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.864678][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'.
[   78.903584][ T6035] 8021q: adding VLAN 0 to HW filter on device team0
[   78.912802][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.916028][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.939648][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.942562][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.023019][ T6147] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   79.195657][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.263744][ T6035] veth0_vlan: entered promiscuous mode
[   79.276201][ T6035] veth1_vlan: entered promiscuous mode
[   79.308241][ T6035] veth0_macvtap: entered promiscuous mode
[   79.314838][ T6035] veth1_macvtap: entered promiscuous mode
[   79.350140][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.363736][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.378750][ T5878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.399867][ T5878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.405850][ T5878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.413611][ T5878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.442031][ T6162] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095
[   79.553324][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.558967][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.600598][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.603733][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.781423][ T5894] gspca_se401: read req failed req 0x06 error -19
[   79.792192][ T6177] loop3: detected capacity change from 0 to 1024
[   79.803524][ T5894] usb 3-1: USB disconnect, device number 3
[   79.871062][ T6177] hfsplus: failed to load root directory
[   80.054933][ T6189] loop2: detected capacity change from 0 to 512
[   80.119022][ T6189] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.95: Invalid inode bitmap blk 4 in block_group 0
[   80.128881][ T6189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.169477][ T5854] Bluetooth: hci0: command tx timeout
[   80.214041][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.133659][ T6224] sock: sock_set_timeout: `syz.2.109' (pid 6224) tries to set negative timeout
[   81.252813][   T33] audit: type=1326 audit(1757069800.380:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098ef8ebe9 code=0x7ffc0000
[   81.275475][   T33] audit: type=1326 audit(1757069800.400:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.112" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f098ef8ebe9 code=0x7ffc0000
[   81.313063][   T33] audit: type=1326 audit(1757069800.400:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098ef8ebe9 code=0x7ffc0000
[   81.321625][   T33] audit: type=1326 audit(1757069800.400:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098ef8ebe9 code=0x7ffc0000
[   81.329571][   T33] audit: type=1326 audit(1757069800.400:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.112" exe="/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f098ef8ebe9 code=0x7ffc0000
[   81.339364][   T33] audit: type=1326 audit(1757069800.400:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.112" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f098ef85ba7 code=0x7ffc0000
[   81.348502][   T33] audit: type=1326 audit(1757069800.400:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.112" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f098ef2adb9 code=0x7ffc0000
[   81.364015][   T33] audit: type=1326 audit(1757069800.400:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098ef8ebe9 code=0x7ffc0000
[   81.383619][   T33] audit: type=1326 audit(1757069800.400:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098ef8ebe9 code=0x7ffc0000
[   81.485524][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   81.600140][ T6247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.701603][ T6243] loop2: detected capacity change from 0 to 32768
[   81.821914][ T6243] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   81.821937][ T6243]   allowing incompatible features above 0.0: (unknown version)
[   81.821947][ T6243]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   81.840176][ T6243] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   81.843611][ T6243] bcachefs (loop2): initializing new filesystem
[   81.858721][ T6243] bcachefs (loop2): going read-write
[   81.871214][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.878214][ T6243] bcachefs (loop2): marking superblocks
[   81.889048][ T6243] bcachefs (loop2): initializing freespace
[   81.893205][ T6243] bcachefs (loop2): done initializing freespace
[   81.899198][ T6243] bcachefs (loop2): reading snapshots table
[   81.901686][ T6243] bcachefs (loop2): reading snapshots done
[   81.929470][ T6243] bcachefs (loop2): done starting filesystem
[   81.952703][ T5913] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c
[   81.957123][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.960315][ T5913] usb 4-1: Product: syz
[   81.962054][ T5913] usb 4-1: Manufacturer: syz
[   81.963962][ T5913] usb 4-1: SerialNumber: syz
[   81.973602][ T5913] usb 4-1: config 0 descriptor??
[   81.992483][ T5913] ims_pcu 4-1:0.0: Missing CDC union descriptor
[   81.997147][ T5913] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22
[   82.181553][ T6273] evm: overlay not supported
[   82.221017][ T5913] usb 4-1: USB disconnect, device number 2
[   82.245755][ T5854] Bluetooth: hci0: command tx timeout
[   82.538777][ T6277] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.883538][ T6284] netlink: 260 bytes leftover after parsing attributes in process `syz.3.133'.
[   82.889425][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'.
[   83.395709][ T6243] syz.2.118 (6243) used greatest stack depth: 16280 bytes left
[   83.417749][ T6290] loop0: detected capacity change from 0 to 4096
[   83.428684][ T6290] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   83.431716][ T6290] UDF-fs: Scanning with blocksize 512 failed
[   83.442518][ T5853] bcachefs (loop2): shutting down
[   83.445030][ T5853] bcachefs (loop2): going read-only
[   83.448444][ T5853] bcachefs (loop2): finished waiting for writes to stop
[   83.453927][ T6290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.454541][ T5853] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[   83.600544][ T5879] IPVS: starting estimator thread 0...
[   83.731426][ T6294] IPVS: using max 42 ests per chain, 100800 per kthread
[   83.842640][   T33] audit: type=1800 audit(1757069802.960:11): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.134" name="bus" dev="loop0" ino=1347 res=0 errno=0
[   83.963396][ T5853] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[   83.994192][ T5853] bcachefs (loop2): clean shutdown complete, journal seq 5
[   84.024110][ T5853] bcachefs (loop2): marking filesystem clean
[   84.139910][ T5853] bcachefs (loop2): shutdown complete
[   85.234149][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'.
[   85.397169][ T6316] loop3: detected capacity change from 0 to 32768
[   85.447918][ T6316] ERROR: (device loop3): dtReadFirst: stbl[0] out of bound
[   85.447918][ T6316] 
[   85.467348][ T6316] ERROR: (device loop3): remounting filesystem as read-only
[   85.888126][ T6336] loop0: detected capacity change from 0 to 1764
[   86.612279][    T9] cfg80211: failed to load regulatory.db
[   87.152297][ T6345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.558123][ T6344] loop3: detected capacity change from 0 to 32768
[   88.838873][ T6361] loop3: detected capacity change from 0 to 16
[   88.897890][ T6363] loop0: detected capacity change from 0 to 22
[   88.905016][ T6363] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   88.917342][ T6363] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   89.142228][ T6373] loop3: detected capacity change from 0 to 4096
[   89.199371][ T6373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.277455][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.422632][ T6385] syz.2.173 uses obsolete (PF_INET,SOCK_PACKET)
[   90.020782][ T6408] loop2: detected capacity change from 0 to 7
[   90.030331][ T6408] Dev loop2: unable to read RDB block 7
[   90.032787][ T6408]  loop2: AHDI p1 p2 p3
[   90.034502][ T6408] loop2: partition table partially beyond EOD, truncated
[   90.042526][ T6408] loop2: p1 start 1601398130 is beyond EOD, truncated
[   90.045867][ T6408] loop2: p2 start 1702059890 is beyond EOD, truncated
[   90.173959][ T5298] udevd[5298]: worker [5850] terminated by signal 33 (Unknown signal 33)
[   90.435813][ T6434] loop3: detected capacity change from 0 to 128
[   90.770823][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'.
[   90.846219][ T6449] loop3: detected capacity change from 0 to 24
[   90.848625][ T6449] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   90.861696][ T6449] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   90.873682][ T6449] fuse: Unknown parameter '0xffffffffffffffff'
[   90.924909][ T6442] loop0: detected capacity change from 0 to 32768
[   91.167030][ T6451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   91.531293][ T6453] loop2: detected capacity change from 0 to 16
[   91.690865][ T6462] loop2: detected capacity change from 0 to 2048
[   91.698785][ T6462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.846977][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'.
[   91.849694][ T6468] loop3: detected capacity change from 0 to 1024
[   91.850701][ T6467] netlink: 236 bytes leftover after parsing attributes in process `syz.2.203'.
[   91.860799][ T6468] EXT4-fs: Ignoring removed i_version option
[   91.862731][ T6468] EXT4-fs: inline encryption not supported
[   91.865170][ T6468] EXT4-fs (loop3): Test dummy encryption mode enabled
[   91.868359][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'.
[   91.898993][ T6468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.057583][ T6480] loop2: detected capacity change from 0 to 512
[   92.083612][ T6480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.091238][ T6480] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.642215][ T5853] VFS: Lookup of '' in ext4 loop2 would have caused loop
[   92.646290][ T5853] VFS: Lookup of '' in ext4 loop2 would have caused loop
[   92.800216][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.995227][ T6501] loop0: detected capacity change from 0 to 32768
[   93.034393][ T6501] JBD2: Ignoring recovery information on journal
[   93.037959][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.131738][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.133070][ T6501] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   93.193353][ T6513] netlink: 'syz.3.220': attribute type 10 has an invalid length.
[   93.200418][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.206019][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.232024][ T6513] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.235002][ T6513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.238992][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.241776][ T6513] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.250414][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'.
[   93.254511][ T6513] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   93.292837][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.320053][ T6514] bridge_slave_1: left allmulticast mode
[   93.328353][ T6514] bridge_slave_1: left promiscuous mode
[   93.335843][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.355698][ T6514] bridge_slave_0: left allmulticast mode
[   93.357392][ T5858] ocfs2: Unmounting device (7,0) on (node local)
[   93.358057][ T6514] bridge_slave_0: left promiscuous mode
[   93.363019][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.388009][ T6514] bond0: (slave bridge0): Releasing backup interface
[   93.479108][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.622089][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.788286][ T6524] loop0: detected capacity change from 0 to 8
[   93.793024][ T6524] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   93.889561][   T12] bridge_slave_1: left allmulticast mode
[   93.891951][   T12] bridge_slave_1: left promiscuous mode
[   93.894733][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.927109][   T12] bridge_slave_0: left allmulticast mode
[   93.929472][   T12] bridge_slave_0: left promiscuous mode
[   93.932437][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.333398][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.345557][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.348896][ T6532] loop3: detected capacity change from 0 to 128
[   94.349941][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.361533][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.369156][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.393634][ T6532] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   94.429259][ T6532] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   94.543963][ T6035] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   94.866165][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.881913][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.892858][   T12] bond0 (unregistering): Released all slaves
[   95.417848][ T6546] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   95.479445][ T6546] bond1: entered promiscuous mode
[   95.481555][ T6546] bond1: entered allmulticast mode
[   95.484280][ T6546] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.564460][   T12] hsr_slave_0: left promiscuous mode
[   95.577994][   T12] hsr_slave_1: left promiscuous mode
[   95.588157][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.591135][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.601205][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.606333][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.636174][   T12] veth1_macvtap: left promiscuous mode
[   95.638570][   T12] veth0_macvtap: left promiscuous mode
[   95.641050][   T12] veth1_vlan: left promiscuous mode
[   95.643353][   T12] veth0_vlan: left promiscuous mode
[   96.025764][ T3144] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.131644][   T12] team0 (unregistering): Port device team_slave_1 removed
[   96.160252][   T12] team0 (unregistering): Port device team_slave_0 removed
[   96.193520][ T3144] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   96.200017][ T3144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   96.204283][ T3144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   96.208471][ T3144] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.213583][ T3144] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.217552][ T3144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.230436][ T3144] usb 4-1: config 0 descriptor??
[   96.406412][   T55] Bluetooth: hci1: command tx timeout
[   96.679096][ T3144] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   96.749976][ T3144] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   96.785078][ T6529] chnl_net:caif_netlink_parms(): no params data found
[   96.919180][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.922128][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.925074][ T6529] bridge_slave_0: entered allmulticast mode
[   96.931963][ T6529] bridge_slave_0: entered promiscuous mode
[   96.936983][ T6571] loop0: detected capacity change from 0 to 2048
[   96.942269][ T6571] NILFS (loop0): couldn't find nilfs on the device
[   96.942831][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.951331][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.953427][ T3144] usb 4-1: USB disconnect, device number 3
[   96.954124][ T6529] bridge_slave_1: entered allmulticast mode
[   96.968168][ T6529] bridge_slave_1: entered promiscuous mode
[   97.020875][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.029185][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.065819][ T6529] team0: Port device team_slave_0 added
[   97.071250][ T6529] team0: Port device team_slave_1 added
[   97.104432][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.107581][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.120077][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.126638][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.129401][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.141599][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.189253][ T6529] hsr_slave_0: entered promiscuous mode
[   97.192302][ T6529] hsr_slave_1: entered promiscuous mode
[   97.364013][ T6529] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.371834][ T6529] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.379972][ T6529] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.386460][ T6529] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.423349][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.426239][ T6529] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.429895][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.432699][ T6529] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.501202][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.521602][ T6529] 8021q: adding VLAN 0 to HW filter on device team0
[   97.528831][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.532459][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.554504][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.557558][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.576782][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.579570][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.799299][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.918421][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'.
[   98.021362][ T6529] veth0_vlan: entered promiscuous mode
[   98.031164][ T6529] veth1_vlan: entered promiscuous mode
[   98.076953][ T6529] veth0_macvtap: entered promiscuous mode
[   98.082796][ T6529] veth1_macvtap: entered promiscuous mode
[   98.104099][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.115209][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.132977][ T5878] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.155106][ T5878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.161223][ T6628] capability: warning: `syz.3.262' uses 32-bit capabilities (legacy support in use)
[   98.177550][ T5878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.180920][ T5878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.259666][ T6632] warning: `syz.0.264' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.265085][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.269591][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.304684][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.308915][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.496828][   T55] Bluetooth: hci1: command tx timeout
[   98.712753][ T6664] loop3: detected capacity change from 0 to 512
[   98.724757][ T6664] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   98.731531][ T6664] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[   98.736723][ T6664] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.278: Corrupt directory, running e2fsck is recommended
[   98.744056][ T6664] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   98.748171][ T6664] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.278: corrupted in-inode xattr: invalid ea_ino
[   98.753744][ T6664] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.278: couldn't read orphan inode 15 (err -117)
[   98.760983][ T6664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.772693][ T6664] EXT4-fs (loop3): shut down requested (1)
[   98.805149][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.158572][ T6684] loop3: detected capacity change from 0 to 2048
[   99.182072][ T6684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.202344][   T33] audit: type=1800 audit(1757069818.330:12): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.287" name="bus" dev="loop3" ino=18 res=0 errno=0
[   99.260564][ T6691] loop0: detected capacity change from 0 to 256
[   99.280749][ T6691] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.300233][ T6691] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   99.310837][ T6691] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   99.605076][ T6702] loop4: detected capacity change from 0 to 2048
[   99.619395][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.678091][ T6702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.684501][ T6702] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.705833][   T33] audit: type=1804 audit(1757069818.830:13): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.295" name="/newroot/7/file0/file1" dev="loop4" ino=15 res=1 errno=0
[   99.729121][ T6529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.799870][ T6712] Bluetooth: MGMT ver 1.23
[   99.803617][ T6712] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[   99.923430][ T6720] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[   99.926837][ T6720] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[  100.576575][   T55] Bluetooth: hci1: command tx timeout
[  101.106258][ T6737] loop3: detected capacity change from 0 to 2048
[  101.134499][ T6737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.175562][ T6737] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  101.203892][ T6737] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  101.211653][ T6737] EXT4-fs (loop3): This should not happen!! Data will be lost
[  101.211653][ T6737] 
[  101.220287][ T6737] EXT4-fs (loop3): Total free blocks count 0
[  101.223980][ T6737] EXT4-fs (loop3): Free/Dirty block details
[  101.236788][ T6737] EXT4-fs (loop3): free_blocks=66060288
[  101.244346][ T6737] EXT4-fs (loop3): dirty_blocks=16
[  101.255644][ T6737] EXT4-fs (loop3): Block reservation details
[  101.257948][ T6737] EXT4-fs (loop3): i_reserved_data_blocks=1
[  101.270539][ T6751] loop0: detected capacity change from 0 to 128
[  101.280304][ T6751] EXT4-fs (loop0): Test dummy encryption mode enabled
[  101.292132][ T6751] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  101.308548][ T6751] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  101.310850][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.669909][ T6759] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  101.812338][ T6771] loop3: detected capacity change from 0 to 1024
[  101.890558][ T1088] hfsplus: b-tree write err: -5, ino 4
[  102.625895][ T5858] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  102.647362][   T55] Bluetooth: hci1: command tx timeout
[  102.842322][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'.
[  103.227340][ T6792] loop4: detected capacity change from 0 to 32768
[  103.386742][ T6798] loop0: detected capacity change from 0 to 40427
[  103.396218][ T6798] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  103.399197][ T6798] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  103.517011][ T6798] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  103.525113][ T6798] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  103.531049][ T6798] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  103.572050][ T5858] syz-executor: attempt to access beyond end of device
[  103.572050][ T5858] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  103.581386][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  103.581405][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.581415][ T5858] Call Trace:
[  103.581439][ T5858]  <TASK>
[  103.581446][ T5858]  dump_stack_lvl+0x189/0x250
[  103.581471][ T5858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.581487][ T5858]  ? __pfx_queue_work_on+0x10/0x10
[  103.581501][ T5858]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  103.581522][ T5858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.581548][ T5858]  f2fs_handle_critical_error+0x37c/0x540
[  103.581575][ T5858]  f2fs_write_end_io+0x886/0xb60
[  103.581602][ T5858]  __submit_merged_bio+0x27a/0x6a0
[  103.581626][ T5858]  __submit_merged_write_cond+0x255/0x530
[  103.581650][ T5858]  f2fs_write_data_pages+0x261d/0x3000
[  103.581669][ T5858]  ? __pfx_usage_match+0x10/0x10
[  103.581681][ T5858]  ? __bfs+0x154/0x2a0
[  103.581716][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.581734][ T5858]  ? __switch_to+0xdae/0x1670
[  103.581785][ T5858]  ? check_path+0x21/0x40
[  103.581799][ T5858]  ? check_noncircular+0xe0/0x160
[  103.581848][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.581896][ T5858]  do_writepages+0x32e/0x550
[  103.581925][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[  103.581945][ T5858]  filemap_fdatawrite+0x199/0x240
[  103.581963][ T5858]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  103.582016][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[  103.582043][ T5858]  f2fs_sync_dirty_inodes+0x31f/0x830
[  103.582068][ T5858]  f2fs_write_checkpoint+0x95a/0x1df0
[  103.582100][ T5858]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  103.582144][ T5858]  ? call_rcu+0x6ff/0x9c0
[  103.582159][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.582179][ T5858]  ? kill_f2fs_super+0x298/0x6c0
[  103.582197][ T5858]  kill_f2fs_super+0x2c3/0x6c0
[  103.582215][ T5858]  ? __pfx_kill_f2fs_super+0x10/0x10
[  103.582227][ T5858]  ? radix_tree_delete_item+0x2b6/0x400
[  103.582251][ T5858]  ? shrinker_free+0x2ce/0x3e0
[  103.582268][ T5858]  deactivate_locked_super+0xbc/0x130
[  103.582287][ T5858]  cleanup_mnt+0x425/0x4c0
[  103.582303][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.582323][ T5858]  task_work_run+0x1d4/0x260
[  103.582343][ T5858]  ? __pfx_task_work_run+0x10/0x10
[  103.582358][ T5858]  ? __x64_sys_umount+0x122/0x160
[  103.582384][ T5858]  ? exit_to_user_mode_loop+0x40/0x110
[  103.582408][ T5858]  exit_to_user_mode_loop+0xec/0x110
[  103.582425][ T5858]  do_syscall_64+0x2bd/0x3b0
[  103.582438][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.582455][ T5858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.582469][ T5858]  ? exc_page_fault+0x9f/0xf0
[  103.582487][ T5858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.582500][ T5858] RIP: 0033:0x7f098ef8ff17
[  103.582514][ T5858] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  103.582526][ T5858] RSP: 002b:00007ffe80bafb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.582541][ T5858] RAX: 0000000000000000 RBX: 00007f098f011c05 RCX: 00007f098ef8ff17
[  103.582551][ T5858] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe80bafc20
[  103.582558][ T5858] RBP: 00007ffe80bafc20 R08: 0000000000000000 R09: 0000000000000000
[  103.582565][ T5858] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe80bb0cb0
[  103.582574][ T5858] R13: 00007f098f011c05 R14: 0000000000019402 R15: 00007ffe80bb0cf0
[  103.582596][ T5858]  </TASK>
[  103.582603][ T5858] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  103.628475][ T6809] loop3: detected capacity change from 0 to 1024
[  103.705557][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  103.912291][ T5913] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  103.925618][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.928735][ T5913] usb 5-1: Product: syz
[  103.930389][ T5913] usb 5-1: Manufacturer: syz
[  103.932263][ T5913] usb 5-1: SerialNumber: syz
[  103.943280][ T5913] usb 5-1: config 0 descriptor??
[  104.102918][ T6813] loop0: detected capacity change from 0 to 32768
[  104.112559][ T6813] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  104.113912][ T6811] loop3: detected capacity change from 0 to 32768
[  104.129454][ T6811] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.181688][ T5858] ocfs2: Unmounting device (7,0) on (node local)
[  104.184066][ T6811] XFS (loop3): Ending clean mount
[  104.206415][ T6811] XFS (loop3): Quotacheck needed: Please wait.
[  104.242298][ T6811] XFS (loop3): Quotacheck: Done.
[  104.299177][ T6035] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.621687][ T6828] loop3: detected capacity change from 0 to 32768
[  104.630864][ T6828] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.340 (6828)
[  104.639317][ T6828] BTRFS error: invalid seeding and uuid-changed device detected
[  105.183287][ T5913] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  105.188284][ T5913] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  105.195210][ T5913] asix 5-1:0.0: probe with driver asix failed with error -71
[  105.210567][ T5913] usb 5-1: USB disconnect, device number 2
[  105.506412][ T6857] loop3: detected capacity change from 0 to 2048
[  105.521228][ T6857] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.545955][ T5913] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  107.736743][ T5913] usb 5-1: Using ep0 maxpacket: 8
[  107.742588][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short
[  107.747949][ T5913] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.752589][ T5913] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  107.758378][ T5913] usb 5-1: config 1 interface 0 has no altsetting 0
[  107.764503][ T5913] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.40
[  107.768243][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.771597][ T5913] usb 5-1: Product: syz
[  107.773552][ T5913] usb 5-1: Manufacturer: syz
[  107.775703][ T5913] usb 5-1: SerialNumber: syz
[  108.321664][ T6890] ieee802154 phy0 wpan0: encryption failed: -22
[  110.529582][ T5913] hid (null): invalid report_count 58840
[  110.548822][ T5913] uclogic 0003:28BD:0078.0002: interface is invalid, ignoring
[  110.769598][ T5913] usb 5-1: USB disconnect, device number 3
[  111.550790][ T6908] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  111.902405][ T6919] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  111.908969][ T6919] block device autoloading is deprecated and will be removed.
[  111.915573][ T3144] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  111.917320][ T6912] loop3: detected capacity change from 0 to 32768
[  111.926265][ T6912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.372 (6912)
[  111.944278][ T6912] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.951951][ T6912] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  112.030618][ T6912] BTRFS info (device loop3): setting nodatasum
[  112.033367][ T6912] BTRFS info (device loop3): setting nodatacow
[  112.038072][ T6912] BTRFS info (device loop3): enabling free space tree
[  112.040893][ T6912] BTRFS info (device loop3): max_inline set to 0
[  112.095092][ T3144] usb 5-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  112.103529][ T3144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.114866][ T3144] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 33
[  112.127217][ T3144] usb 5-1: New USB device found, idVendor=1039, idProduct=12b6, bcdDevice=af.00
[  112.132365][ T3144] usb 5-1: New USB device strings: Mfr=99, Product=0, SerialNumber=0
[  112.144504][ T3144] usb 5-1: Manufacturer: syz
[  112.153524][ T3144] usb 5-1: config 0 descriptor??
[  112.216476][ T6930] loop0: detected capacity change from 0 to 32768
[  112.222507][ T6930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.376 (6930)
[  112.234342][ T6930] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.238951][ T6930] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  112.243848][ T6035] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  112.377743][ T6930] BTRFS info (device loop0): enabling ssd optimizations
[  112.378583][ T3144] usb 5-1: USB disconnect, device number 4
[  112.380690][ T6930] BTRFS info (device loop0): enabling free space tree
[  112.442313][ T5858] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.801172][ T6972] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  112.951922][ T6976] loop0: detected capacity change from 0 to 4096
[  112.979730][ T6976] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  112.983221][ T6979] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.992819][ T6976] NILFS (loop0): mounting fs with errors
[  113.061572][ T6970] loop3: detected capacity change from 0 to 32768
[  113.105345][ T6987] loop0: detected capacity change from 0 to 4096
[  113.112605][ T6970] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  113.115968][ T6987] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  113.119688][ T6970] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.137752][ T6987] ntfs3(loop0): ino=1a, mi_enum_attr
[  113.139566][ T6987] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  113.146623][ T6987] ntfs3(loop0): ino=1a, mi_enum_attr
[  113.154586][ T6987] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  113.159850][ T6970] XFS (loop3): Ending clean mount
[  113.234047][ T6035] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.492061][ T7002] loop0: detected capacity change from 0 to 8192
[  113.520843][ T7006] 9pnet_fd: p9_fd_create_unix (7006): problem connecting socket: ./file0: -5
[  113.559298][ T5914] IPVS: starting estimator thread 0...
[  113.680993][ T7012] IPVS: using max 64 ests per chain, 153600 per kthread
[  113.752082][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'.
[  113.803055][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.408'.
[  114.091314][ T7046] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.415'.
[  115.065819][   T55] Bluetooth: hci1: unexpected cc 0x0402 length: 61 > 1
[  115.068918][   T55] Bluetooth: hci1: Ignoring error of Inquiry Cancel command
[  115.089436][ T7058] loop4: detected capacity change from 0 to 64
[  115.760220][ T7066] loop4: detected capacity change from 0 to 4096
[  115.785307][ T7066] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  116.017739][ T7072] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  116.035188][ T7072] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  116.094158][ T7072] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  116.104885][ T7072] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  116.140974][ T7072] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  116.159993][ T7072] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  116.346489][ T7088] loop0: detected capacity change from 0 to 512
[  116.350465][ T7088] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  116.356865][ T7088] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  116.372339][ T7088] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  116.380274][ T7088] EXT4-fs (loop0): 1 truncate cleaned up
[  116.383846][ T7088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.416263][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.626013][ T5879] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  116.810396][ T5879] usb 5-1: Using ep0 maxpacket: 8
[  116.821780][ T5879] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  116.829871][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.832987][ T5879] usb 5-1: Product: syz
[  116.834607][ T5879] usb 5-1: Manufacturer: syz
[  116.844733][ T5879] usb 5-1: SerialNumber: syz
[  116.851144][ T5879] usb 5-1: config 0 descriptor??
[  116.889733][ T7117] loop3: detected capacity change from 0 to 256
[  116.895883][ T7114] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.901500][ T7114] team0: Port device bond1 added
[  116.903544][ T7117] FAT-fs (loop3): Directory bread(block 64) failed
[  116.907296][ T7117] FAT-fs (loop3): Directory bread(block 65) failed
[  116.909545][ T7117] FAT-fs (loop3): Directory bread(block 66) failed
[  116.912040][ T7117] FAT-fs (loop3): Directory bread(block 67) failed
[  116.914661][ T7117] FAT-fs (loop3): Directory bread(block 68) failed
[  116.920345][ T7117] FAT-fs (loop3): Directory bread(block 69) failed
[  116.923073][ T7117] FAT-fs (loop3): Directory bread(block 70) failed
[  116.928325][ T7117] FAT-fs (loop3): Directory bread(block 71) failed
[  116.931065][ T7117] FAT-fs (loop3): Directory bread(block 72) failed
[  116.933701][ T7117] FAT-fs (loop3): Directory bread(block 73) failed
[  116.983423][   T33] audit: type=1800 audit(1757069836.110:14): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.445" name="file1" dev="loop3" ino=1048607 res=0 errno=0
[  116.990872][ T7117] syz.3.445: attempt to access beyond end of device
[  116.990872][ T7117] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256
[  117.101658][ T7122] loop0: detected capacity change from 0 to 512
[  117.110211][ T7122] EXT4-fs (loop0): orphan cleanup on readonly fs
[  117.113941][ T7122] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.448: bad orphan inode 13
[  117.119708][ T7122] ext4_test_bit(bit=12, block=18) = 1
[  117.121926][ T7122] is_bad_inode(inode)=0
[  117.123644][ T7122] NEXT_ORPHAN(inode)=2130706432
[  117.125858][ T7122] max_ino=32
[  117.127217][ T7122] i_nlink=1
[  117.137507][ T7122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  117.156846][ T7122] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.448: deleted inode referenced: 12
[  117.197117][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.492437][ T7134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.498949][ T7134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.504252][ T5879] usb read operation failed. (-71)
[  117.507270][ T5879] usb write operation failed. (-71)
[  117.510206][ T5879] usb write operation failed. (-71)
[  117.512466][ T5879] usb write operation failed. (-71)
[  117.514423][ T5879] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  117.521960][ T5879] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  117.526377][ T5879] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  118.472319][ T7140] loop3: detected capacity change from 0 to 128
[  118.488524][ T7140] qnx6: superblock #1 checksum error
[  118.639284][ T7152] loop3: detected capacity change from 0 to 164
[  118.649565][ T7152] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  118.661562][ T7152] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  119.057084][    T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  119.394051][    T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  119.401431][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.408755][    T9] usb 4-1: config 0 descriptor??
[  119.415078][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  119.592629][ T7172] 8021q: adding VLAN 0 to HW filter on device team0
[  119.597247][ T7172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.621597][    T9] gp8psk: usb in 128 operation failed.
[  119.825923][    T9] gp8psk: usb in 146 operation failed.
[  119.828143][    T9] gp8psk: failed to get FW version
[  119.830798][    T9] gp8psk: FPGA Version = 0
[  119.842360][ T7177] loop4: detected capacity change from 0 to 256
[  119.885347][ T7177] exFAT-fs (loop4): start_clu is invalid cluster(0x400)
[  120.035576][    T9] gp8psk: usb in 138 operation failed.
[  120.037898][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  120.042802][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  120.077683][    T9] usb 4-1: USB disconnect, device number 4
[  121.335629][    T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  121.517799][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  121.521938][    T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  121.526236][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.532047][    T9] usb 4-1: config 0 descriptor??
[  121.535012][ T7194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  121.604429][ T7208] loop0: detected capacity change from 0 to 512
[  121.627048][ T7208] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.481: invalid block
[  121.646013][ T7208] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.481: invalid indirect mapped block 4294967295 (level 1)
[  121.656903][ T7208] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.481: invalid indirect mapped block 4294967295 (level 1)
[  121.666310][ T7208] EXT4-fs (loop0): 2 truncates cleaned up
[  121.670911][ T7208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.693263][ T7208] EXT4-fs error (device loop0): empty_inline_dir:1760: inode #12: block 7: comm syz.0.481: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  121.718909][ T7208] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  121.733921][ T7202] loop4: detected capacity change from 0 to 32768
[  121.739397][ T7202] XFS: noikeep mount option is deprecated.
[  121.777595][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.830254][ T7202] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.868848][ T7202] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  121.901225][ T7202] XFS (loop4): Starting recovery (logdev: internal)
[  121.930445][   T10] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  121.934329][   T10] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  121.936157][ T7202] XFS (loop4): Ending recovery (logdev: internal)
[  121.945782][   T10] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  121.955759][   T10] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  121.966460][    T9] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  121.969415][   T10] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  121.972303][   T10] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  121.975077][   T10] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  121.981195][    T9] elan 0003:04F3:0755.0004: item fetching failed at offset 3/5
[  121.984726][    T9] elan 0003:04F3:0755.0004: Hid Parse failed
[  121.995579][    T9] elan 0003:04F3:0755.0004: probe with driver elan failed with error -22
[  121.998995][   T10] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  122.001907][   T10] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0
[  122.020253][   T10] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  122.177942][   T10] usb 4-1: USB disconnect, device number 5
[  122.192463][ T6529] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  122.470357][ T7229] loop0: detected capacity change from 0 to 1024
[  122.502547][ T7229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.507379][ T7229] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.534828][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.948784][ T7236] loop4: detected capacity change from 0 to 32768
[  122.964831][ T7236] 
[  122.964831][ T7236]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  122.964831][ T7236] 
[  123.021715][   T32] 
[  123.021715][   T32]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  123.021715][   T32] 
[  123.027296][   T32] 
[  123.027296][   T32]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  123.027296][   T32] 
[  123.032483][ T6529] 
[  123.032483][ T6529]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  123.032483][ T6529] 
[  123.048209][  T115] 
[  123.048209][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  123.048209][  T115] 
[  123.054030][ T6529] 
[  123.054030][ T6529]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  123.054030][ T6529] 
[  123.492128][ T7273] loop0: detected capacity change from 0 to 256
[  124.841764][ T7300] loop3: detected capacity change from 0 to 4096
[  125.057547][ T7296] loop0: detected capacity change from 0 to 32768
[  125.062519][ T7296] jfs_mount: Failed to read AGGREGATE_I
[  125.064391][ T7296] Mount JFS Failure: -5
[  125.066075][ T7296] jfs_mount failed w/return code = -5
[  125.181642][ T7302] overlayfs: upper fs does not support tmpfile.
[  125.281076][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'.
[  125.291324][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'.
[  125.505130][ T7306] loop4: detected capacity change from 0 to 32768
[  126.383256][ T7366] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  127.487449][ T7424] md2: using deprecated bitmap file support
[  127.491744][ T7424] md2: error: failed to get bitmap file
[  127.569459][ T7428] loop3: detected capacity change from 0 to 512
[  127.573175][ T7428] EXT4-fs: Ignoring removed oldalloc option
[  127.590385][ T7428] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.572: dx entry: limit 1024 != root limit 124
[  127.607556][ T7428] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.572: Corrupt directory, running e2fsck is recommended
[  127.630136][ T7428] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  127.634526][ T7428] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.572: corrupted in-inode xattr: invalid ea_ino
[  127.642452][ T7428] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.572: couldn't read orphan inode 15 (err -117)
[  127.649312][ T7428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.757929][ T7438] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  127.759272][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.205819][ T5914] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.356616][ T5914] usb 4-1: Using ep0 maxpacket: 16
[  128.360739][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.364715][ T5914] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  128.368067][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.379138][ T5914] usb 4-1: config 0 descriptor??
[  128.523381][ T7445] loop4: detected capacity change from 0 to 32768
[  128.528234][ T7445] XFS: ikeep mount option is deprecated.
[  128.622245][ T7445] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.673238][ T7445] XFS (loop4): Ending clean mount
[  128.682917][ T7445] XFS (loop4): Quotacheck needed: Please wait.
[  128.869089][ T5914] hid_parser_main: 8 callbacks suppressed
[  128.869113][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.874444][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.877550][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.880859][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.883649][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.906562][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.909565][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.912356][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.915342][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.922263][ T5914] sunplus 0003:04FC:05D8.0005: unknown main item tag 0x0
[  128.934479][ T7445] XFS (loop4): Quotacheck: Done.
[  128.936982][ T5914] sunplus 0003:04FC:05D8.0005: hidraw0: USB HID vff.fd Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0
[  128.995135][ T7463] loop0: detected capacity change from 0 to 128
[  129.001951][ T6529] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.024536][ T7463] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.041329][ T7463] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  129.078547][   T62] usb 4-1: USB disconnect, device number 6
[  129.120716][ T5858] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.371652][ T7482] vlan2: entered promiscuous mode
[  129.373200][ T7484] loop4: detected capacity change from 0 to 8
[  129.374110][ T7482] vlan2: entered allmulticast mode
[  129.382667][ T7482] hsr_slave_1: entered allmulticast mode
[  129.396744][ T7484] SQUASHFS error: lzo decompression failed, data probably corrupt
[  129.401074][ T7484] SQUASHFS error: Failed to read block 0x91: -5
[  129.403765][ T7484] SQUASHFS error: Unable to read metadata cache entry [8f]
[  129.407138][ T7484] SQUASHFS error: Unable to read inode 0x11f
[  129.491948][ T7488] loop0: detected capacity change from 0 to 4096
[  129.506721][ T7490] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.563935][ T7488] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.'
[  129.573332][ T7488] Remounting filesystem read-only
[  129.710756][ T7498] loop4: detected capacity change from 0 to 256
[  129.714105][ T7498] exfat: Deprecated parameter 'namecase'
[  129.718401][ T7498] exfat: Deprecated parameter 'namecase'
[  129.731178][ T7498] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d)
[  129.748241][ T7501] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.597'.
[  130.327254][ T7523] loop0: detected capacity change from 0 to 32768
[  130.335568][ T7523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.610 (7523)
[  130.503770][ T7523] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.507978][ T7523] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  130.623600][ T7523] BTRFS info (device loop0): enabling ssd optimizations
[  130.637285][ T7523] BTRFS info (device loop0): enabling free space tree
[  130.685619][ T5858] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.918300][   T33] audit: type=1804 audit(1757069850.050:15): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.623" name="/newroot/181/file0" dev="tmpfs" ino=978 res=1 errno=0
[  131.012329][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.626'.
[  131.058855][ T7573] loop0: detected capacity change from 0 to 256
[  131.063513][ T7573] FAT-fs (loop0): Directory bread(block 1285) failed
[  131.079644][ T7573] FAT-fs (loop0): Directory bread(block 1285) failed
[  131.083086][ T7573] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  131.089293][ T7573] FAT-fs (loop0): Directory bread(block 1285) failed
[  131.092145][ T7573] FAT-fs (loop0): Directory bread(block 1285) failed
[  131.095781][ T7573] FAT-fs (loop0): Directory bread(block 1285) failed
[  131.107733][ T7573] FAT-fs (loop0): Directory bread(block 1285) failed
[  131.110580][ T7573] FAT-fs (loop0): Directory bread(block 1285) failed
[  131.113271][ T7573] FAT-fs (loop0): Directory bread(block 1285) failed
[  131.120181][ T7573] FAT-fs (loop0): Directory bread(block 1285) failed
[  131.191854][ T7586] loop0: detected capacity change from 0 to 512
[  131.194950][ T7586] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  131.331452][ T7595] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.405755][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  131.567871][   T10] usb 4-1: Using ep0 maxpacket: 8
[  131.576802][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.580709][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  131.591929][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  131.595958][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  131.599074][   T10] usb 4-1: SerialNumber: syz
[  131.610843][   T10] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  131.614142][   T10] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  131.616756][   T10] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[  131.827508][   T10] usb 4-1: USB disconnect, device number 7
[  132.471132][ T7652] loop3: detected capacity change from 0 to 4096
[  132.475927][ T7652] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  132.529959][ T7653] netlink: 'syz.0.662': attribute type 3 has an invalid length.
[  132.533185][ T7653] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.662'.
[  132.651203][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.658199][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.800417][ T7652] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  132.806265][ T7652] ntfs3(loop3): ino=1a, mi_enum_attr
[  132.808357][ T7652] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  133.004475][ T7663] pim6reg1: entered allmulticast mode
[  133.205065][ T7670] binder: 7669:7670 ioctl c0306201 2000000001c0 returned -22
[  133.382553][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'.
[  133.650244][ T7686] loop0: detected capacity change from 0 to 32768
[  133.696129][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  133.711311][ T7686] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  133.711326][ T7686]   allowing incompatible features above 0.0: (unknown version)
[  133.711332][ T7686]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  133.727575][ T7686] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  133.730823][ T7686] bcachefs (loop0): initializing new filesystem
[  133.743661][ T7686] bcachefs (loop0): going read-write
[  133.753403][ T7686] bcachefs (loop0): marking superblocks
[  133.761695][ T7686] bcachefs (loop0): initializing freespace
[  133.767053][ T7686] bcachefs (loop0): done initializing freespace
[  133.772973][ T7686] bcachefs (loop0): reading snapshots table
[  133.775762][ T7686] bcachefs (loop0): reading snapshots done
[  133.802222][ T7686] bcachefs (loop0): done starting filesystem
[  133.847676][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.852158][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  133.858270][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.864258][   T10] usb 4-1: config 0 descriptor??
[  134.602337][   T10] logitech-djreceiver 0003:046D:C71F.0006: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0
[  134.670925][   T10] usb 4-1: USB disconnect, device number 8
[  135.013183][ T5858] bcachefs (loop0): shutting down
[  135.014878][ T5858] bcachefs (loop0): going read-only
[  135.018193][ T5858] bcachefs (loop0): finished waiting for writes to stop
[  135.022400][ T5858] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  135.054694][ T5858] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  135.060177][ T5858] bcachefs (loop0): clean shutdown complete, journal seq 5
[  135.063541][ T5858] bcachefs (loop0): marking filesystem clean
[  135.103910][ T5858] bcachefs (loop0): shutdown complete
[  135.205192][ T7710] loop3: detected capacity change from 0 to 4096
[  135.235868][ T7710] ntfs3(loop3): Failed to initialize $Secure (-22).
[  135.356985][ T7722] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  135.462256][ T7728] loop3: detected capacity change from 0 to 2048
[  135.472952][ T7728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.491635][ T7728] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  135.631764][ T7741] loop3: detected capacity change from 0 to 2048
[  135.637992][ T7741] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.859897][ T7745] loop3: detected capacity change from 0 to 32768
[  137.608500][ T7781] loop3: detected capacity change from 0 to 22
[  137.614420][ T7781] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  137.627671][ T7781] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  137.651049][ T7779] netlink: set zone limit has 4 unknown bytes
[  137.654812][ T7784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.766572][ T7790] loop4: detected capacity change from 0 to 736
[  137.860197][ T7800] loop4: detected capacity change from 0 to 256
[  137.872301][ T7800] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  137.907928][ T7802] loop0: detected capacity change from 0 to 2048
[  137.924425][ T7802] NILFS (loop0): ifile inode (checkpoint number=2) corrupted
[  137.929002][ T7802] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2)
[  137.971159][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'.
[  138.285606][   T62] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  138.435620][   T62] usb 4-1: Using ep0 maxpacket: 16
[  138.439410][   T62] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  138.442067][   T62] usb 4-1: config 0 has no interface number 0
[  138.444132][   T62] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  138.450830][   T62] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  138.454296][   T62] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  138.457120][   T62] usb 4-1: Product: syz
[  138.458479][   T62] usb 4-1: SerialNumber: syz
[  138.462247][   T62] usb 4-1: config 0 descriptor??
[  138.466248][   T62] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[  138.675551][   T62] usb 4-1: USB disconnect, device number 9
[  138.993839][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'.
[  139.994877][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'.
[  140.006662][ T7846] bond_slave_0: entered promiscuous mode
[  140.009908][ T7846] bond_slave_1: entered promiscuous mode
[  140.017331][ T7846] bond_slave_0: left promiscuous mode
[  140.019618][ T7846] bond_slave_1: left promiscuous mode
[  140.398723][ T7861] loop3: detected capacity change from 0 to 2048
[  140.431594][ T7861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.455954][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'.
[  140.490956][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.098203][ T7886] netlink: 76 bytes leftover after parsing attributes in process `syz.3.764'.
[  141.641024][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'.
[  143.524168][ T7906] netlink: 'syz.0.773': attribute type 27 has an invalid length.
[  143.634685][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.638044][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.786705][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.798889][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.979628][ T7906] vlan2: left promiscuous mode
[  143.981922][ T7906] vlan2: left allmulticast mode
[  143.984794][ T7906] hsr_slave_1: left allmulticast mode
[  144.042312][ T7907] 8021q: adding VLAN 0 to HW filter on device team0
[  144.048618][ T7907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.057750][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.063799][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.082495][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.087462][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.219777][ T7925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.780'.
[  144.306962][ T7929] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  144.853982][ T7945] loop0: detected capacity change from 0 to 40427
[  144.856770][ T7945] F2FS-fs: heap/no_heap options were deprecated
[  144.863515][ T7945] F2FS-fs (loop0): invalid crc value
[  144.865370][ T7945] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  144.910160][ T7945] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.919451][ T7953] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  144.919672][ T7945] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  145.170277][ T7971] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  146.291770][ T8003] loop0: detected capacity change from 0 to 32768
[  146.295980][ T8003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.815 (8003)
[  146.304085][ T8003] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.307890][ T8003] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  146.330422][ T8003] BTRFS info (device loop0): rebuilding free space tree
[  146.365227][ T8003] BTRFS info (device loop0): enabling ssd optimizations
[  146.369535][ T8003] BTRFS info (device loop0): using spread ssd allocation scheme
[  146.372434][ T8003] BTRFS info (device loop0): enabling free space tree
[  146.375185][ T8003] BTRFS info (device loop0): force clearing of disk cache
[  146.398827][ T5858] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.820334][ T8024] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  147.366248][ T8024] loop0: detected capacity change from 0 to 32768
[  147.389042][ T8024] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  147.416716][ T8024] XFS (loop0): Ending clean mount
[  148.067658][ T5858] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.336065][ T8040] loop3: detected capacity change from 0 to 256
[  148.354493][ T8040] FAT-fs (loop3): Directory bread(block 64) failed
[  148.357688][ T8040] FAT-fs (loop3): Directory bread(block 65) failed
[  148.360325][ T8040] FAT-fs (loop3): Directory bread(block 66) failed
[  148.364939][ T8040] FAT-fs (loop3): Directory bread(block 67) failed
[  148.369430][ T8040] FAT-fs (loop3): Directory bread(block 68) failed
[  148.372384][ T8040] FAT-fs (loop3): Directory bread(block 69) failed
[  148.375941][ T8040] FAT-fs (loop3): Directory bread(block 70) failed
[  148.380101][ T8040] FAT-fs (loop3): Directory bread(block 71) failed
[  148.386694][ T8040] FAT-fs (loop3): Directory bread(block 72) failed
[  148.389614][ T8040] FAT-fs (loop3): Directory bread(block 73) failed
[  148.823038][ T5894] libceph: connect (1)[c::]:6789 error -101
[  148.828067][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  148.911976][ T8073] futex_wake_op: syz.4.836 tries to shift op by -1; fix this program
[  148.981026][ T8079] loop3: detected capacity change from 0 to 164
[  148.988557][ T8077] loop4: detected capacity change from 0 to 8192
[  148.994878][ T8077] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.099773][ T5894] libceph: connect (1)[c::]:6789 error -101
[  149.103873][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  149.193410][ T8090] loop3: detected capacity change from 0 to 2048
[  149.198988][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'.
[  149.236598][ T8090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.254050][ T8090] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  149.263634][ T8090] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  149.269234][ T8090] EXT4-fs (loop3): This should not happen!! Data will be lost
[  149.269234][ T8090] 
[  149.273397][ T8090] EXT4-fs (loop3): Total free blocks count 0
[  149.275960][ T8090] EXT4-fs (loop3): Free/Dirty block details
[  149.278280][ T8090] EXT4-fs (loop3): free_blocks=2415919104
[  149.280523][ T8090] EXT4-fs (loop3): dirty_blocks=48
[  149.282565][ T8090] EXT4-fs (loop3): Block reservation details
[  149.285060][ T8090] EXT4-fs (loop3): i_reserved_data_blocks=3
[  149.332745][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.625984][ T5894] libceph: connect (1)[c::]:6789 error -101
[  149.630064][ T8063] ceph: No mds server is up or the cluster is laggy
[  149.630479][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  150.174909][ T8107] loop0: detected capacity change from 0 to 8
[  150.178992][ T8107] SQUASHFS error: zlib decompression failed, data probably corrupt
[  150.181833][ T8107] SQUASHFS error: Failed to read block 0x9b: -5
[  150.183911][ T8107] SQUASHFS error: Unable to read metadata cache entry [99]
[  150.186956][ T8107] SQUASHFS error: Unable to read inode 0x127
[  150.562562][ T8125] loop0: detected capacity change from 0 to 512
[  150.571478][ T8125] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.859: corrupted in-inode xattr: bad e_name length
[  150.579356][ T8125] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.859: couldn't read orphan inode 15 (err -117)
[  150.588213][ T8125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.622265][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.701190][ T8136] loop3: detected capacity change from 0 to 4096
[  150.712646][ T8136] ntfs3(loop3): mft corrupted
[  150.714509][ T8136] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  150.720354][ T8136] ntfs3(loop3): ino=1a, mi_enum_attr
[  150.722206][ T8136] ntfs3(loop3): ino=1a, mi_enum_attr
[  150.724050][ T8136] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  151.234548][ T8153] netlink: 'syz.3.871': attribute type 10 has an invalid length.
[  151.251315][ T8153] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  151.269202][ T8153] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  151.359291][ T8155] loop3: detected capacity change from 0 to 4096
[  151.706717][ T8158] loop3: detected capacity change from 0 to 32768
[  151.713573][ T8158] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.873 (8158)
[  151.721414][ T8158] BTRFS info (device loop3 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  151.726070][ T8158] BTRFS info (device loop3 state S): using blake2b (blake2b-256-generic) checksum algorithm
[  151.751829][ T8158] BTRFS info (device loop3 state CS): enabling ssd optimizations
[  151.754924][ T8158] BTRFS info (device loop3 state CS): using spread ssd allocation scheme
[  151.758938][ T8158] BTRFS info (device loop3 state CS): turning off barriers
[  151.761848][ T8158] BTRFS info (device loop3 state CS): disabling log replay at mount time
[  151.765182][ T8158] BTRFS info (device loop3 state CS): enabling free space tree
[  151.768409][ T8158] BTRFS info (device loop3 state CS): ignoring bad roots
[  151.771352][ T8158] BTRFS info (device loop3 state CS): ignoring data csums
[  151.774299][ T8158] BTRFS info (device loop3 state CS): ignoring meta csums
[  151.777258][ T8158] BTRFS info (device loop3 state CS): ignoring unknown super block flags
[  151.780608][ T8158] BTRFS info (device loop3 state CS): force zlib compression, level 3
[  151.811488][ T6035] BTRFS info (device loop3 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  152.369735][ T8179] loop3: detected capacity change from 0 to 32768
[  152.379326][ T8179] XFS: noikeep mount option is deprecated.
[  152.419327][ T8179] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  152.443505][ T8179] XFS (loop3): invalid iclog size (4096 bytes), using lsunit (32768 bytes)
[  152.451647][ T8179] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  152.462994][ T8179] XFS (loop3): Starting recovery (logdev: internal)
[  152.479981][ T8179] XFS (loop3): Ending recovery (logdev: internal)
[  152.529682][ T6035] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  152.637199][ T8197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.882'.
[  152.656273][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  152.659745][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  152.675691][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  152.972301][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  153.185688][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  153.350016][ T8221] loop4: detected capacity change from 0 to 32768
[  153.372098][ T8221] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  153.393648][ T8221] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2048 but claims that 39166 are free
[  153.406758][ T8221] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  153.413295][ T8221] OCFS2: File system is now read-only.
[  153.416090][ T8221] (syz.4.893,8221,0):ocfs2_search_chain:1817 ERROR: status = -30
[  153.425558][ T8221] (syz.4.893,8221,0):ocfs2_search_chain:1940 ERROR: status = -30
[  153.429191][ T8221] (syz.4.893,8221,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  153.432333][ T8221] (syz.4.893,8221,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  153.435792][ T8221] (syz.4.893,8221,0):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  153.439259][ T8221] (syz.4.893,8221,0):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  153.442399][ T8221] (syz.4.893,8221,0):ocfs2_mknod_locked:641 ERROR: status = -30
[  153.449162][ T8221] (syz.4.893,8221,0):ocfs2_mknod:388 ERROR: status = -30
[  153.457511][ T8221] (syz.4.893,8221,0):ocfs2_mknod:505 ERROR: status = -30
[  153.462899][ T8221] (syz.4.893,8221,0):ocfs2_create:678 ERROR: status = -30
[  153.496766][ T6529] ocfs2: Unmounting device (7,4) on (node local)
[  153.585348][ T8243] loop4: detected capacity change from 0 to 128
[  154.179006][ T8264] loop0: detected capacity change from 0 to 32768
[  154.183697][ T8264] bcachefs: bch2_fs_parse_param() Error parsing option degraded: option_value
[  154.240904][ T8283] loop3: detected capacity change from 0 to 2048
[  154.263335][ T8283] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.318024][ T8287] IPv6: addrconf: prefix option has invalid lifetime
[  154.431254][ T8295] loop3: detected capacity change from 0 to 2048
[  154.449611][ T8295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.459408][ T8300] sctp: [Deprecated]: syz.4.930 (pid 8300) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.459408][ T8300] Use struct sctp_sack_info instead
[  155.508726][ T8330] loop3: detected capacity change from 0 to 512
[  155.534945][ T8330] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  155.570518][ T8330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  155.579326][ T8330] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.944: corrupted in-inode xattr: e_value size too large
[  155.589073][ T8330] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.944: couldn't read orphan inode 15 (err -117)
[  155.602166][ T8330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.723671][ T6035] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  155.748122][ T6035] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  156.074538][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.194157][ T5679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.343934][ T5679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.433001][ T5679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.541433][ T5679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.976475][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  157.000090][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  157.005650][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  157.011515][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  157.020519][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  157.024242][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  157.043976][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  157.049724][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  157.054000][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  157.087802][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  157.092837][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  157.469593][ T5679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.478630][ T5679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.484803][ T5679] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  157.488852][ T5679] bond0 (unregistering): Released all slaves
[  157.650413][ T5679] bond1 (unregistering): Released all slaves
[  158.023779][ T5679] hsr_slave_0: left promiscuous mode
[  158.026828][ T5679] hsr_slave_1: left promiscuous mode
[  158.028997][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.031925][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.038225][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.041286][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.070348][ T5679] veth1_macvtap: left promiscuous mode
[  158.072649][ T5679] veth0_macvtap: left promiscuous mode
[  158.073292][ T8379] loop0: detected capacity change from 0 to 32768
[  158.075028][ T5679] veth1_vlan: left promiscuous mode
[  158.078174][ T8379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.967 (8379)
[  158.080863][ T5679] veth0_vlan: left promiscuous mode
[  158.087549][ T8379] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.091059][ T8379] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  158.125606][ T8379] BTRFS info (device loop0): enabling ssd optimizations
[  158.127956][ T8379] BTRFS info (device loop0): enabling free space tree
[  158.171731][ T5858] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.445519][    C0] hpet: Lost 1 RTC interrupts
[  158.903765][ T5679] team0 (unregistering): Port device team_slave_1 removed
[  158.951765][ T5679] team0 (unregistering): Port device team_slave_0 removed
[  159.134079][ T5854] Bluetooth: hci0: command tx timeout
[  159.615125][ T8363] chnl_net:caif_netlink_parms(): no params data found
[  159.787620][ T8418] netlink: 'syz.4.975': attribute type 4 has an invalid length.
[  159.793177][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.797799][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.801603][ T8363] bridge_slave_0: entered allmulticast mode
[  159.806940][ T8363] bridge_slave_0: entered promiscuous mode
[  159.878746][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.884414][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.891174][ T8363] bridge_slave_1: entered allmulticast mode
[  159.898386][ T8363] bridge_slave_1: entered promiscuous mode
[  159.948744][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.954878][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.995958][ T5679] ------------[ cut here ]------------
[  159.998687][ T5679] WARNING: CPU: 0 PID: 5679 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  160.002674][ T5679] Modules linked in:
[  160.004634][ T5679] CPU: 0 UID: 0 PID: 5679 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  160.010385][ T5679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  160.014497][ T5679] Workqueue: netns cleanup_net
[  160.017990][ T5679] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  160.021326][ T5679] Code: 98 35 df f7 4b 83 3c 2c 00 75 19 e8 6c c7 7b f7 49 81 fd f8 07 00 00 74 1d e8 5e c7 7b f7 49 83 c5 08 eb c9 e8 53 c7 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  160.029192][ T5679] RSP: 0000:ffffc90002b278b0 EFLAGS: 00010293
[  160.031520][ T5679] RAX: ffffffff8a43e6bd RBX: ffff8881053c0000 RCX: ffff888020a3d640
[  160.034511][ T5679] RDX: 0000000000000000 RSI: ffffffff8d9b8241 RDI: ffff8881053c0000
[  160.038698][ T5679] RBP: ffffc90002b279b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  160.041868][ T5679] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffff8881053c0000
[  160.044884][ T5679] R13: 0000000000000000 R14: ffff88810fff2440 R15: dffffc0000000000
[  160.048019][ T5679] FS:  0000000000000000(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  160.051467][ T5679] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.055141][ T5679] CR2: 00007f098f197cc0 CR3: 000000010f668000 CR4: 00000000000006f0
[  160.058921][ T5679] Call Trace:
[  160.060246][ T5679]  <TASK>
[  160.061433][ T5679]  ops_undo_list+0x49a/0x990
[  160.063191][ T5679]  ? __pfx_ops_undo_list+0x10/0x10
[  160.065128][ T5679]  ? do_raw_spin_unlock+0x4d/0x240
[  160.067265][ T5679]  cleanup_net+0x4c5/0x800
[  160.069682][ T5679]  ? __pfx_cleanup_net+0x10/0x10
[  160.071674][ T5679]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.073762][ T5679]  ? process_scheduled_works+0x9ef/0x17b0
[  160.076242][ T5679]  ? process_scheduled_works+0x9ef/0x17b0
[  160.078535][ T5679]  process_scheduled_works+0xae1/0x17b0
[  160.080784][ T5679]  ? __pfx_process_scheduled_works+0x10/0x10
[  160.084477][ T5679]  worker_thread+0x8a0/0xda0
[  160.086556][ T5679]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  160.089103][ T5679]  ? __kthread_parkme+0x7b/0x200
[  160.091227][ T5679]  kthread+0x711/0x8a0
[  160.092905][ T5679]  ? __pfx_worker_thread+0x10/0x10
[  160.094979][ T5679]  ? __pfx_kthread+0x10/0x10
[  160.096943][ T5679]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.099650][ T5679]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.101726][ T5679]  ? __pfx_kthread+0x10/0x10
[  160.103575][ T5679]  ret_from_fork+0x3fc/0x770
[  160.105646][ T5679]  ? __pfx_ret_from_fork+0x10/0x10
[  160.107705][ T5679]  ? __switch_to_asm+0x39/0x70
[  160.109621][ T5679]  ? __switch_to_asm+0x33/0x70
[  160.111522][ T5679]  ? __pfx_kthread+0x10/0x10
[  160.113432][ T5679]  ret_from_fork_asm+0x1a/0x30
[  160.116084][ T5679]  </TASK>
[  160.117362][ T5679] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  160.120588][ T5679] CPU: 0 UID: 0 PID: 5679 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  160.124521][ T5679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.128873][ T5679] Workqueue: netns cleanup_net
[  160.131074][ T5679] Call Trace:
[  160.132592][ T5679]  <TASK>
[  160.133929][ T5679]  dump_stack_lvl+0x99/0x250
[  160.135993][ T5679]  ? __asan_memcpy+0x40/0x70
[  160.138080][ T5679]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.140446][ T5679]  ? __pfx__printk+0x10/0x10
[  160.142400][ T5679]  vpanic+0x281/0x750
[  160.144306][ T5679]  ? __pfx__printk+0x10/0x10
[  160.146210][ T5679]  ? __pfx_vpanic+0x10/0x10
[  160.148021][ T5679]  ? is_bpf_text_address+0x292/0x2b0
[  160.150170][ T5679]  panic+0xb9/0xc0
[  160.151717][ T5679]  ? __pfx_panic+0x10/0x10
[  160.153508][ T5679]  __warn+0x31b/0x4b0
[  160.155105][ T5679]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  160.157247][ T5679]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  160.159410][ T5679]  report_bug+0x2be/0x4f0
[  160.161147][ T5679]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  160.163223][ T5679]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  160.165331][ T5679]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  160.167262][ T5679]  handle_bug+0x84/0x160
[  160.168893][ T5679]  exc_invalid_op+0x1a/0x50
[  160.170668][ T5679]  asm_exc_invalid_op+0x1a/0x20
[  160.172577][ T5679] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  160.175107][ T5679] Code: 98 35 df f7 4b 83 3c 2c 00 75 19 e8 6c c7 7b f7 49 81 fd f8 07 00 00 74 1d e8 5e c7 7b f7 49 83 c5 08 eb c9 e8 53 c7 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  160.183271][ T5679] RSP: 0000:ffffc90002b278b0 EFLAGS: 00010293
[  160.185973][ T5679] RAX: ffffffff8a43e6bd RBX: ffff8881053c0000 RCX: ffff888020a3d640
[  160.189240][ T5679] RDX: 0000000000000000 RSI: ffffffff8d9b8241 RDI: ffff8881053c0000
[  160.192781][ T5679] RBP: ffffc90002b279b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  160.196175][ T5679] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffff8881053c0000
[  160.199633][ T5679] R13: 0000000000000000 R14: ffff88810fff2440 R15: dffffc0000000000
[  160.203060][ T5679]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  160.205434][ T5679]  ops_undo_list+0x49a/0x990
[  160.207447][ T5679]  ? __pfx_ops_undo_list+0x10/0x10
[  160.209657][ T5679]  ? do_raw_spin_unlock+0x4d/0x240
[  160.211770][ T5679]  cleanup_net+0x4c5/0x800
[  160.213650][ T5679]  ? __pfx_cleanup_net+0x10/0x10
[  160.215790][ T5679]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.218047][ T5679]  ? process_scheduled_works+0x9ef/0x17b0
[  160.220508][ T5679]  ? process_scheduled_works+0x9ef/0x17b0
[  160.222958][ T5679]  process_scheduled_works+0xae1/0x17b0
[  160.225395][ T5679]  ? __pfx_process_scheduled_works+0x10/0x10
[  160.228039][ T5679]  worker_thread+0x8a0/0xda0
[  160.229981][ T5679]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  160.232705][ T5679]  ? __kthread_parkme+0x7b/0x200
[  160.234887][ T5679]  kthread+0x711/0x8a0
[  160.236669][ T5679]  ? __pfx_worker_thread+0x10/0x10
[  160.238750][ T5679]  ? __pfx_kthread+0x10/0x10
[  160.240786][ T5679]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.243066][ T5679]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.245379][ T5679]  ? __pfx_kthread+0x10/0x10
[  160.247419][ T5679]  ret_from_fork+0x3fc/0x770
[  160.249453][ T5679]  ? __pfx_ret_from_fork+0x10/0x10
[  160.251684][ T5679]  ? __switch_to_asm+0x39/0x70
[  160.253821][ T5679]  ? __switch_to_asm+0x33/0x70
[  160.255906][ T5679]  ? __pfx_kthread+0x10/0x10
[  160.257950][ T5679]  ret_from_fork_asm+0x1a/0x30
[  160.260074][ T5679]  </TASK>
[  160.262141][ T5679] Kernel Offset: disabled
[  160.264067][ T5679] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:57:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002b27050
R8 =ffff888020508237 R9 =1ffff110040a1046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8ea R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f098f197cc0 CR3=000000010f668000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f098f012e53
XMM06=0000000000000000 00007f098f012e4d XMM07=0000000000000000 00007f098f012e61
XMM08=0000000000000000 00007f098f012ee7 XMM09=0000000000000000 00007f098f012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44f7b RBX=1ffff11009608341 RCX=ffff8880267eb980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002fb7700 RSP=ffffc90002fb7580
R8 =ffffffff8fa39037 R9 =1ffffffff1f47206 R10=dffffc0000000000 R11=fffffbfff1f47207
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44f63 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff59d8f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007ff59cd976c3 00007ff59cd976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055556971a5ae 0000555569719550
XMM06=00005555697163c4 00005555697163c0 XMM07=1000060275c202a8 10000680040a1000
XMM08=060102a200080008 a0031ffffffff608 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
