last executing test programs:

6m13.160195445s ago: executing program 32 (id=25):
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9c, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x7ffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

6m11.531553407s ago: executing program 33 (id=31):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x3)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x8d6, &(0x7f00000001c0)={0x0, 0x0, 0x800, 0x0, 0x379}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

5m36.379997791s ago: executing program 1 (id=94):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, 0x0, 0x11e)

5m33.142885222s ago: executing program 1 (id=96):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(0x3)
syz_init_net_socket$ax25(0x3, 0x3, 0xc3)

5m30.810377464s ago: executing program 1 (id=100):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000))
io_uring_enter(r3, 0x0, 0xe38e, 0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20)

5m29.209478947s ago: executing program 1 (id=102):
setrlimit(0x2, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0)

5m27.098770135s ago: executing program 1 (id=103):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

5m11.715200723s ago: executing program 34 (id=103):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

4m22.23872003s ago: executing program 5 (id=169):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x190)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x1818400, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x431581, 0x78e22799f4a46ffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)

4m19.985756688s ago: executing program 5 (id=172):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000300)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a)

4m18.017430093s ago: executing program 5 (id=174):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

4m16.410368782s ago: executing program 5 (id=176):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

4m0.007755509s ago: executing program 5 (id=190):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)

3m53.341412516s ago: executing program 5 (id=184):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, &(0x7f0000000000))
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2a060400)
openat$zero(0xffffffffffffff9c, 0x0, 0xc00, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x4)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)

3m36.992015385s ago: executing program 35 (id=184):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, &(0x7f0000000000))
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2a060400)
openat$zero(0xffffffffffffff9c, 0x0, 0xc00, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x4)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)

2m20.938694421s ago: executing program 6 (id=316):
r0 = userfaultfd(0x80801)
r1 = epoll_create1(0x0)
close(0x3)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0xfff, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
dup2(r4, r2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

2m18.765671723s ago: executing program 6 (id=322):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x1ff, 0x7, 0x7f, 0x4f6, 0xdd, 0x0, 0x4, 0x3, 0x8, 0x8000, 0x2, 0x7, 0xff, 0x9, 0x0, 0x4, 0x5f25, 0x10, 0x5, 0x5, 0x1, 0x7, 0x1000, 0x79, 0x29, 0x8001, 0xc9b, 0x6, 0x48000000, 0x1, 0x4, 0x8, 0x80000000, 0x7fff, 0x0, 0x0, 0x7f, 0x4, 0x9, 0x2, 0xffffff81, 0x8, 0xf83, 0x1c4, 0x1, 0xfffff8be, 0x8, 0x400, 0x2, 0x3, 0x3, 0x7fffffff, 0x0, 0x8, 0x81, 0xd1, 0x4, 0x3, 0x8, 0xb58, 0x2b, 0x0, 0x81, 0x1, 0x4, 0x4, 0x2, 0x10001, 0x8c, 0xff, 0x7ff, 0x4, 0x1, 0x8, 0x6, 0x8, 0x1000, 0x9, 0x1, 0xfffffff9, 0x0, 0x101, 0x800, 0x80000000, 0x6, 0xe, 0x0, 0xff, 0xfffff812, 0x8, 0x6, 0x7, 0x9, 0x6b, 0x101, 0x40, 0x2, 0x0, 0xff, 0x77, 0x10000, 0x2, 0x2, 0x1a5, 0x4, 0x2, 0x7, 0xe978, 0x9, 0x7e6, 0x7f, 0x1, 0x2, 0x5, 0x6, 0x8001, 0xc, 0x8, 0x3, 0xfffffffc, 0x9, 0x6, 0x6, 0x96, 0x4, 0x100, 0x6, 0x7, 0x4, 0xd, 0x1, 0x7fff, 0x5, 0x40, 0x7, 0x4, 0xff, 0x2, 0x350, 0xcd9, 0x1, 0x100, 0x0, 0x101, 0x1, 0x5, 0x7fff, 0xa, 0x8000, 0x2, 0xfffffff4, 0x2, 0x3, 0xe3, 0x7ff, 0x1, 0xe, 0x6, 0x1997, 0x5, 0x8c, 0x9, 0x0, 0xffffff3d, 0x3ff, 0x4, 0xc9, 0x2a, 0x81, 0xffffff06, 0x5, 0x5, 0x0, 0xd2e, 0xcac, 0x8, 0x3b, 0x4, 0x6, 0x2506, 0xa, 0x1000, 0x7, 0x3, 0x0, 0x6, 0x6, 0x0, 0xc, 0xf, 0x610e, 0x500, 0xbbbe, 0x10001, 0x2, 0xc824, 0x1, 0x9, 0x3, 0x7, 0x800, 0x200, 0x5, 0x8, 0x2, 0xffffffff, 0x5, 0xffffffff, 0xad, 0x0, 0xfffffff9, 0xfffff801, 0xdd1, 0x9, 0x3, 0x8, 0x10000, 0x5, 0x1, 0x4, 0x6, 0xb, 0x7fffffff, 0x5, 0xe, 0x80000001, 0xc, 0x1000, 0xffff, 0x4, 0x4, 0x1, 0x4, 0x5a4, 0x8, 0xb, 0x5, 0x3, 0x0, 0x9, 0x5e, 0x3, 0x8001, 0xce70, 0xd51b, 0x0, 0x7, 0x28c2, 0x9, 0x1, 0x5, 0x7fff, 0x9, 0x9299, 0x101, 0x3]}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0x2, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x0, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0x7, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x2, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r7, 0x0, 0x0, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14)

2m15.630107324s ago: executing program 6 (id=326):
openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r4=>0x0], &(0x7f0000000340)=[<r5=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2})

2m13.706829406s ago: executing program 6 (id=328):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000005c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x26004844)

2m11.600150372s ago: executing program 6 (id=330):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0)

1m59.270322536s ago: executing program 6 (id=342):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600ffa600000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1)

1m50.905325812s ago: executing program 7 (id=351):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x94=\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4c\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8p\xa1\xaa\x80I\xa5\xc6\xf3\xf2\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xf1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4b\xe3j%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7\x00<\x9b\xd5vZ1\xa2j\x9a\xeb6\xa8\xb4\xd9\vv\x94O\xb1\tS\x7f\xf2\xfe\x8dl\xf8\x00\x99\f5\xb7\xee\x95\xf3\xa5\xf1\xf2Z?\xcc\x8d\x9dy\x969\xd8}u\x88\"biYO\xac=j_\xf66{\xf0\xec\xdc1n\x1b\x15\x85N\x1d\x80Z\x1b\x86\xdby4\xcf\x90\b\xf6\x1b\xe6\xf8U\xe9F\x1c+\x14&\x00B\xb0jUS\xaa9\xe5\x1agO\x93\xfe\x98\x00\x00\x00\x00\x00\x04', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000640)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x94=\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4c\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8p\xa1\xaa\x80I\xa5\xc6\xf3\xf2\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xf1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4b\xe3j%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7\x00<\x9b\xd5vZ1\xa2j\x9a\xeb6\xa8\xb4\xd9\vv\x94O\xb1\tS\x7f\xf2\xfe\x8dl\xf8\x00\x99\f5\xb7\xee\x95\xf3\xa5\xf1\xf2Z?\xcc\x8d\x9dy\x969\xd8}u\x88\"biYO\xac=j_\xf66{\xf0\xec\xdc1n\x1b\x15\x85N\x1d\x80Z\x1b\x86\xdby4\xcf\x90\b\xf6\x1b\xe6\xf8U\xe9F\x1c+\x14&\x00B\xb0jUS\xaa9\xe5\x1agO\x93\xfe\x98\x00\x00\x00\x00\x00\x04', 0x0)

1m49.55317777s ago: executing program 7 (id=353):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0x0)
connect$x25(r3, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)

1m49.386160162s ago: executing program 3 (id=354):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vcsa(0x0, 0x1, 0x102)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006)

1m48.223804346s ago: executing program 7 (id=355):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000140))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0)
preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x800004, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000d1}, 0x34)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000080))
r4 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8800c, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="fbda4355110f83231a3423a0871b7200c8b1296584cbcb7ad273891c4cd86689645498e285fa08de3d024eca63fb86a526909ac7c77c1f93864eb3f2df9f8abbf0057f7bb0cd57e370d9340e2e504b10646daad19207797800e174fef81aa5c1a643af42a26294f99bdd33ea45736d0ff2b110aec294e813f6bdf9ac184b3a7350701dd797efb11a"], 0x1, 0x11f8, &(0x7f00000013c0)="$eJzs3E+LW2UUB+AzJnUmqRnHf9V244tudBNsF65cGGQGpAGlbYRWEG6ZVENiMuRmkYiLgjtXfg5x4cKdIH4A5yu4cjcIopuuesWmkxlnFOM4k0h5nk1e7i+H9x4SLtyQc/fe+OLj7p1STK1EuRIR91KkeCz2j96NVz/b+u3z6zdvXW00m5vXUtpq3Lj8ekpp/cXv3v/0q5e+H51/75v1b1djd+ODvV+u/LR7Yffi3v0bH3Xy1MlTfzBKWbo9GIyy271I2528W0/p3V47y9up08/bw0N5O93pDXZ2Jinrb9eqO8N2nqesP0nd9iSNBmk0nKTsw6zTT/V6PdWqwX/R+vJeURQRRXEuHo+iKIpKVON8PBG1WI8nYyOeiqfjmXi2sl9x8cG7lnvWAAAAAAAAAAAAAAAAAAAA8KiZc/4/nosL8Xy8YP4fAAAAAAAAAAAAAAAAAAAAzoD5fwAAAAAAAAAAAAAAAAAAAFi+6fx/OcL8PwAAAAAAAAAAAAAAAAAAACzN9Zu3rjaazc1rKa1F/Hx33Bq3pq/TfOvt5uZr6YGNg6pfx+NWaZZfnubpz/lqVB/mVw7lpVm+Fq+8PM3/yN56p3mk/lJs//PpexIBAAAAzKGeZv7y/r5e/7s8In748fDvA0fu38txqbzITjiJfPJJN+v12sO5F+dOVHWKi7WIOB6tPGzoaNXXp7b7/dp0h2X2brG/aETEgjct/i+9z7dY+ddVlYiYHYmIN0vHrheri708ccYOPv35a3wHAAAAAAAAAAAAlm8R/0Zcdo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ds7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqgAAAP//9eSIKg==")
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)

1m47.446411893s ago: executing program 3 (id=356):
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000180)='P', 0x1, 0x24000005, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r0, 0x0, 0xffffffb0, 0x775, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

1m43.943510517s ago: executing program 36 (id=342):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600ffa600000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1)

1m43.921821465s ago: executing program 7 (id=359):
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)

1m40.838739166s ago: executing program 3 (id=363):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)

1m37.784783123s ago: executing program 3 (id=366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x94=\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4c\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8p\xa1\xaa\x80I\xa5\xc6\xf3\xf2\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xf1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4b\xe3j%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7\x00<\x9b\xd5vZ1\xa2j\x9a\xeb6\xa8\xb4\xd9\vv\x94O\xb1\tS\x7f\xf2\xfe\x8dl\xf8\x00\x99\f5\xb7\xee\x95\xf3\xa5\xf1\xf2Z?\xcc\x8d\x9dy\x969\xd8}u\x88\"biYO\xac=j_\xf66{\xf0\xec\xdc1n\x1b\x15\x85N\x1d\x80Z\x1b\x86\xdby4\xcf\x90\b\xf6\x1b\xe6\xf8U\xe9F\x1c+\x14&\x00B\xb0jUS\xaa9\xe5\x1agO\x93\xfe\x98\x00\x00\x00\x00\x00\x04', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f0000000640)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x94=\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4c\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8p\xa1\xaa\x80I\xa5\xc6\xf3\xf2\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xf1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4b\xe3j%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7\x00<\x9b\xd5vZ1\xa2j\x9a\xeb6\xa8\xb4\xd9\vv\x94O\xb1\tS\x7f\xf2\xfe\x8dl\xf8\x00\x99\f5\xb7\xee\x95\xf3\xa5\xf1\xf2Z?\xcc\x8d\x9dy\x969\xd8}u\x88\"biYO\xac=j_\xf66{\xf0\xec\xdc1n\x1b\x15\x85N\x1d\x80Z\x1b\x86\xdby4\xcf\x90\b\xf6\x1b\xe6\xf8U\xe9F\x1c+\x14&\x00B\xb0jUS\xaa9\xe5\x1agO\x93\xfe\x98\x00\x00\x00\x00\x00\x04', 0x0)

1m37.690736636s ago: executing program 7 (id=367):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m35.548544616s ago: executing program 7 (id=370):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x20, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = gettid()
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1m31.769970001s ago: executing program 3 (id=373):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0)

1m26.766260647s ago: executing program 3 (id=377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0)

1m18.918693008s ago: executing program 37 (id=370):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x20, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = gettid()
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1m11.352008603s ago: executing program 38 (id=377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0)

1m9.389958126s ago: executing program 8 (id=392):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000993000/0x2000)=nil, 0x2000, 0xb635773f06ebbee6, 0x4000010, 0xffffffffffffffff, 0x28704000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0)

1m7.87201284s ago: executing program 8 (id=393):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000180)=""/65, 0x41)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x210001, 0x169)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000040)={0xfa6, 0x3, 0xf, 0x9, 0x2b, 0x18000000000000})

55.092986389s ago: executing program 8 (id=403):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
listen(r0, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

53.989014548s ago: executing program 8 (id=395):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)

51.956001293s ago: executing program 8 (id=396):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x4, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x0, &(0x7f0000000500)}, 0x10)

45.936494296s ago: executing program 1 (id=388):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
ioctl$EVIOCGLED(r2, 0x80284511, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
syz_io_uring_submit(0x0, 0x0, 0x0)

42.96109653s ago: executing program 8 (id=407):
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
socket(0x28, 0x80005, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
unshare(0x28000600)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x541b)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x10040, 0x0)

30.449038448s ago: executing program 39 (id=388):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
ioctl$EVIOCGLED(r2, 0x80284511, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
syz_io_uring_submit(0x0, 0x0, 0x0)

27.51442803s ago: executing program 40 (id=407):
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
socket(0x28, 0x80005, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
unshare(0x28000600)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x541b)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x10040, 0x0)

16.766329498s ago: executing program 4 (id=433):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, 'pq'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0xd1}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

14.065700294s ago: executing program 2 (id=436):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x3, 0x53a, 0xfff})
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r1, 0x1000006)
bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x2)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000})

12.022194544s ago: executing program 4 (id=438):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0xa)
fchdir(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4)
ftruncate(r3, 0x2007ffb)
close(r3)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
fcntl$setsig(r4, 0xa, 0x21)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0)

11.35603102s ago: executing program 2 (id=439):
socket$inet_tcp(0x2, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pipe2(&(0x7f0000000400), 0x80800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101300, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1})

11.102306346s ago: executing program 2 (id=440):
socket$inet6(0xa, 0x3, 0xff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1)
syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)
r2 = openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0)
write$khugepaged_scan(r2, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)

10.090404549s ago: executing program 4 (id=441):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8"], 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0xf)
syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500, 0x0, 0x104}, 0x0, 0x0)
socket(0x11, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

8.833774839s ago: executing program 0 (id=442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
gettid()
timer_create(0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0)

8.800866408s ago: executing program 4 (id=443):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.153016401s ago: executing program 0 (id=444):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100)
r2 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0)
ftruncate(r2, 0x51a9497)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1})
readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)
socket$inet6(0xa, 0x5, 0x0)

6.424311271s ago: executing program 2 (id=445):
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x16}, {0x7fffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff}, {0xfffffffffffffffc, 0x380a, 0xffffffffffffffff, 0xa78a}, 0xfffffffd, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x2b}, 0x0, @in6=@mcast2, 0x4, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0xfffffffffffffe4d, 0x10)

5.322264221s ago: executing program 0 (id=446):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

5.078497557s ago: executing program 4 (id=447):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0xd1302af0c2963958)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)

4.79753491s ago: executing program 2 (id=448):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept$alg(r3, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x1, 0xcb, 0x0)

4.130816103s ago: executing program 0 (id=449):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
syz_open_dev$vim2m(0x0, 0x800, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffff, 0x4, 0x2}, {0x0, 0x8000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@local, 0xfffffffc, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0)

2.754068832s ago: executing program 2 (id=450):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0)

1.14223828s ago: executing program 4 (id=451):
write$dsp(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

1.133184104s ago: executing program 0 (id=460):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)

0s ago: executing program 0 (id=452):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x4, 0xb60e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90)
symlinkat(0x0, r2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000011c0)={[{@acl}, {@barrier}, {@minixdf}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=")
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

kernel console output (not intermixed with test programs):

devsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.624967][ T5970] loop1: detected capacity change from 0 to 4096
[  112.632901][   T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.666065][   T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.689396][   T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.712928][ T5829] veth1_macvtap: entered promiscuous mode
[  112.721331][   T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.750217][ T5970] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  112.750996][   T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.773483][ T1981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.787215][ T5970] ntfs3(loop1): Failed to load $Extend (-22).
[  112.797873][ T5970] ntfs3(loop1): Failed to initialize $Extend.
[  112.988616][ T5838] veth0_macvtap: entered promiscuous mode
[  112.998683][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.061286][ T5838] veth1_macvtap: entered promiscuous mode
[  113.103501][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.115823][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.126598][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.886903][ T1981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.896662][ T3479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.910650][ T1981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.937005][ T3479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.993171][ T1981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.001059][ T1981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.072475][ T3479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.115743][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.130281][  T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.139988][  T145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.184635][  T145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.200775][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.209069][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.221485][  T145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.248819][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.277514][   T62] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.323231][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.331111][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.366506][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.407500][   T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.438446][   T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.465853][   T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.570668][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.587630][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.666530][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.761217][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.501441][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.526525][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.706252][ T5986] Zero length message leads to an empty skb
[  116.449535][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'.
[  116.487128][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'.
[  117.033628][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.041474][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.564824][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.567173][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.337902][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.432048][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.892394][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  122.082882][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  122.576850][ T6031] Bluetooth: MGMT ver 1.23
[  122.673704][ T6031] Bluetooth: hci0: unsupported parameter 255
[  122.695399][ T6031] Bluetooth: hci0: unsupported parameter 255
[  122.885695][ T6040] loop2: detected capacity change from 0 to 512
[  124.762670][ T6040] EXT4-fs error (device loop2): ext4_iget_extra_inode:5072: inode #15: comm syz.2.3: corrupted in-inode xattr: e_value size too large
[  124.865433][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  124.875367][ T6040] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3: couldn't read orphan inode 15 (err -117)
[  124.911044][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  124.934604][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.053236][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  125.106116][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  125.182460][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  125.711207][ T6040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.332302][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  127.255982][ T6081] F2FS-fs: Conflicting test_dummy_encryption options
[  128.003429][ T6084] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  128.021801][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  129.142774][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  136.607278][ T6145] loop1: detected capacity change from 0 to 1024
[  139.302548][ T6143] hfsplus: b-tree write err: -5, ino 4
[  142.618090][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  142.636403][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  146.271791][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  146.292736][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.300226][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.312311][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.320025][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.752543][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.772150][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.779668][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.789928][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  147.032579][ T6192] loop1: detected capacity change from 0 to 2048
[  147.102217][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  147.604090][ T6192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.454799][ T5833] Bluetooth: hci6: command tx timeout
[  149.482954][ T5833] Bluetooth: hci7: command tx timeout
[  150.563458][ T5833] Bluetooth: hci6: command tx timeout
[  151.697836][ T5833] Bluetooth: hci7: command tx timeout
[  152.177377][ T6179] chnl_net:caif_netlink_parms(): no params data found
[  152.283279][ T6225] loop0: detected capacity change from 0 to 128
[  152.345895][ T6225] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.541001][ T6225] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  152.624618][ T5833] Bluetooth: hci6: command tx timeout
[  152.638017][ T6231] loop1: detected capacity change from 0 to 512
[  152.680653][ T6231] ext4: Unknown parameter 'dioread_nolock2'
[  154.368679][ T5833] Bluetooth: hci7: command tx timeout
[  155.642904][ T5833] Bluetooth: hci6: command tx timeout
[  156.099634][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  156.382317][ T5833] Bluetooth: hci7: command tx timeout
[  160.114278][ T6259] loop5: detected capacity change from 0 to 16
[  160.174054][ T6259] erofs (device loop5): mounted with root inode @ nid 36.
[  160.236953][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.538520][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.562947][ T6179] bridge_slave_0: entered allmulticast mode
[  160.824130][ T6179] bridge_slave_0: entered promiscuous mode
[  161.736313][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.000948][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.093716][ T6179] bridge_slave_1: entered allmulticast mode
[  162.893364][ T6179] bridge_slave_1: entered promiscuous mode
[  163.117197][ T6139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.352420][ T6281] loop5: detected capacity change from 0 to 32768
[  163.379426][ T6281] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.73 (6281)
[  163.408830][ T6281] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.419193][ T6281] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  163.610811][ T6188] chnl_net:caif_netlink_parms(): no params data found
[  163.673532][ T6281] BTRFS info (device loop5): enabling ssd optimizations
[  163.680526][ T6281] BTRFS info (device loop5): turning on async discard
[  163.687422][ T6281] BTRFS info (device loop5): enabling free space tree
[  165.070764][ T5828] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.173924][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.296688][ T6139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.464057][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.708340][ T6309] loop5: detected capacity change from 0 to 512
[  165.743688][ T6309] EXT4-fs (loop5): Test dummy encryption mode enabled
[  165.750510][ T6309] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  165.786354][ T6309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  165.892051][ T6309] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.77: bad orphan inode 131083
[  165.913942][ T6309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.924002][ T6139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.238493][ T6318] process 'syz.0.78' launched './file0' with NULL argv: empty string added
[  167.723428][ T6179] team0: Port device team_slave_0 added
[  167.746818][ T6179] team0: Port device team_slave_1 added
[  167.794421][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.374690][ T6221] IPVS: starting estimator thread 0...
[  170.402866][ T6139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.562065][ T6341] IPVS: using max 21 ests per chain, 50400 per kthread
[  172.863200][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.870160][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.918268][ T6353] loop1: detected capacity change from 0 to 8
[  173.026871][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.080095][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.140777][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.177579][ T6354] Invalid logical block size (2046)
[  173.269382][ T6188] bridge_slave_0: entered allmulticast mode
[  173.473095][ T6188] bridge_slave_0: entered promiscuous mode
[  173.572893][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.579964][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.689875][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.722657][ T6188] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.729771][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.755138][ T6188] bridge_slave_1: entered allmulticast mode
[  173.782786][ T6188] bridge_slave_1: entered promiscuous mode
[  174.245353][ T6188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.316284][ T6179] hsr_slave_0: entered promiscuous mode
[  174.333257][ T6179] hsr_slave_1: entered promiscuous mode
[  174.339946][ T6179] debugfs: 'hsr0' already exists in 'hsr'
[  174.372385][ T6179] Cannot create hsr debugfs directory
[  174.381273][ T6188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.314236][ T6188] team0: Port device team_slave_0 added
[  177.499134][ T6188] team0: Port device team_slave_1 added
[  177.533784][ T6139] bridge_slave_1: left allmulticast mode
[  177.539571][ T6139] bridge_slave_1: left promiscuous mode
[  177.585385][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.702418][ T6139] bridge_slave_0: left allmulticast mode
[  179.708108][ T6139] bridge_slave_0: left promiscuous mode
[  179.737055][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.169630][ T6378] netlink: 84 bytes leftover after parsing attributes in process `syz.5.93'.
[  190.633139][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.711162][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.065470][ T6139] bond0 (unregistering): Released all slaves
[  192.265709][ T6429] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  192.298936][ T6430] loop0: detected capacity change from 0 to 2048
[  192.364217][ T6430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.536011][ T3479] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  192.582240][   T50] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  192.591004][   T50] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  192.827977][ T5833] Bluetooth: Wrong link type (-22)
[  193.935203][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.952104][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  194.029121][ T6188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.062662][   T50] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  194.352026][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.068070][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.111767][ T6188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.883082][ T6451] netlink: 104 bytes leftover after parsing attributes in process `syz.5.110'.
[  197.042370][ T6449] loop3: detected capacity change from 0 to 32768
[  197.083119][   T31] audit: type=1800 audit(1766792633.676:2): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.111" name="file1" dev="loop3" ino=4 res=0 errno=0
[  197.753153][ T5833] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7
[  199.324473][ T6188] hsr_slave_0: entered promiscuous mode
[  199.529091][ T6188] hsr_slave_1: entered promiscuous mode
[  199.535543][ T6188] debugfs: 'hsr0' already exists in 'hsr'
[  199.541274][ T6188] Cannot create hsr debugfs directory
[  199.666929][ T6469] atomic_op ffff88804dbff198 conn xmit_atomic 0000000000000000
[  200.735246][ T6139] hsr_slave_0: left promiscuous mode
[  200.762013][ T6139] hsr_slave_1: left promiscuous mode
[  200.766465][ T6474] loop5: detected capacity change from 0 to 64
[  201.532944][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.540400][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.583555][ T6474] =======================================================
[  201.583555][ T6474] WARNING: The mand mount option has been deprecated and
[  201.583555][ T6474]          and is ignored by this kernel. Remove the mand
[  201.583555][ T6474]          option from the mount to silence this warning.
[  201.583555][ T6474] =======================================================
[  201.809099][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.823488][ T5833] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  201.833328][ T5833] Bluetooth: hci1: Injecting HCI hardware error event
[  201.841204][ T5846] Bluetooth: hci1: hardware error 0x00
[  201.894053][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.002119][ T6139] veth1_macvtap: left promiscuous mode
[  203.002947][ T5939] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  203.008306][ T6139] veth0_macvtap: left promiscuous mode
[  203.049701][ T6139] veth1_vlan: left promiscuous mode
[  203.060564][ T6139] veth0_vlan: left promiscuous mode
[  204.065286][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  204.071634][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  204.531003][ T5939] usb 6-1: device descriptor read/all, error -71
[  204.687200][ T6500] loop0: detected capacity change from 0 to 256
[  204.777787][ T6500] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  204.942046][ T5846] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  207.332450][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  207.349360][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  207.357029][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  207.365641][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  207.373585][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  207.860412][ T6527] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  211.555461][ T5846] Bluetooth: hci3: command tx timeout
[  211.834614][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  211.845275][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  211.853938][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  211.866499][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  211.879905][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  214.203343][ T5846] Bluetooth: hci4: command tx timeout
[  214.209556][ T5833] Bluetooth: hci3: command tx timeout
[  214.434975][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  214.453058][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  214.461723][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  214.470126][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  214.478060][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  216.360374][ T5833] Bluetooth: hci4: command tx timeout
[  216.365965][ T5846] Bluetooth: hci3: command tx timeout
[  216.546767][ T5846] Bluetooth: hci8: command tx timeout
[  218.441999][ T5846] Bluetooth: hci3: command tx timeout
[  218.452260][ T5846] Bluetooth: hci4: command tx timeout
[  218.631948][ T5846] Bluetooth: hci8: command tx timeout
[  218.892746][ T6139] team0 (unregistering): Port device team_slave_1 removed
[  219.282616][ T6139] team0 (unregistering): Port device team_slave_0 removed
[  220.462222][ T5833] Bluetooth: hci4: command tx timeout
[  220.709562][ T5846] Bluetooth: hci8: command tx timeout
[  223.602146][ T5846] Bluetooth: hci8: command tx timeout
[  224.964136][ T6582] loop3: detected capacity change from 0 to 256
[  224.978653][ T6582] exfat: Unknown parameter 'f00000000080000006'
[  225.021587][ T6582] overlayfs: option "workdir=./file1/file0" is useless in a non-upper mount, ignore
[  225.031382][ T6582] overlayfs: missing 'lowerdir'
[  226.410149][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  226.416647][ T5846] Bluetooth: hci5: command 0x0406 tx timeout
[  234.592813][ T6516] chnl_net:caif_netlink_parms(): no params data found
[  234.865543][ T6139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.166251][ T6139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.312854][ T6530] chnl_net:caif_netlink_parms(): no params data found
[  235.576403][ T6139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.897175][ T5833] Bluetooth: hci5: unexpected event for opcode 0x0411
[  236.272903][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.280125][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.303139][ T6516] bridge_slave_0: entered allmulticast mode
[  236.385515][ T6516] bridge_slave_0: entered promiscuous mode
[  237.146878][ T6139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.464977][ T6658] loop5: detected capacity change from 0 to 32768
[  237.651803][   T31] audit: type=1800 audit(1766792674.106:3): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.152" name="file1" dev="loop5" ino=4 res=0 errno=0
[  237.693886][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.492094][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.524704][ T6516] bridge_slave_1: entered allmulticast mode
[  238.557526][ T6516] bridge_slave_1: entered promiscuous mode
[  238.573886][ T6542] chnl_net:caif_netlink_parms(): no params data found
[  238.715200][ T6677] loop3: detected capacity change from 0 to 128
[  238.748851][ T6677] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  238.803191][ T6677] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  240.574778][ T5833] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  240.584096][ T5833] Bluetooth: hci5: Injecting HCI hardware error event
[  240.593043][ T5833] Bluetooth: hci5: hardware error 0x00
[  240.899873][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  240.977176][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.134531][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'.
[  242.240552][ T6688] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  242.247877][ T6688] block (null): Could not allocate knbd recv work queue.
[  242.318136][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.327929][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.335682][ T6530] bridge_slave_0: entered allmulticast mode
[  242.343943][ T6530] bridge_slave_0: entered promiscuous mode
[  242.357502][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.412722][ T6688] nbd: failed to add new device
[  242.484931][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.502141][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.513153][ T6530] bridge_slave_1: entered allmulticast mode
[  242.521131][ T6530] bridge_slave_1: entered promiscuous mode
[  242.886815][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  244.077927][ T6516] team0: Port device team_slave_0 added
[  244.147635][ T6516] team0: Port device team_slave_1 added
[  244.536720][ T6039] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  245.367741][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.415714][ T6039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.440047][ T6039] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  245.469661][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.543243][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.555857][ T6039] usb 6-1: config 0 descriptor??
[  245.561235][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.595130][ T6039] pwc: Askey VC010 type 2 USB webcam detected.
[  246.157742][ T6542] bridge_slave_0: entered allmulticast mode
[  246.494282][ T6542] bridge_slave_0: entered promiscuous mode
[  246.528308][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.562084][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.589922][ T6542] bridge_slave_1: entered allmulticast mode
[  246.622753][ T6542] bridge_slave_1: entered promiscuous mode
[  246.771585][ T6039] pwc: recv_control_msg error -32 req 02 val 2b00
[  246.779961][ T6039] pwc: recv_control_msg error -32 req 02 val 2700
[  246.797447][ T6039] pwc: recv_control_msg error -32 req 02 val 2c00
[  246.807481][ T6039] pwc: recv_control_msg error -32 req 04 val 1000
[  246.825255][ T6039] pwc: recv_control_msg error -32 req 04 val 1300
[  246.835701][ T6039] pwc: recv_control_msg error -32 req 04 val 1400
[  246.860678][ T6039] pwc: recv_control_msg error -32 req 02 val 2000
[  246.901228][ T6039] pwc: recv_control_msg error -32 req 02 val 2100
[  246.956923][ T6039] pwc: recv_control_msg error -32 req 04 val 1500
[  247.024362][ T6039] pwc: recv_control_msg error -32 req 02 val 2500
[  247.098171][ T6039] pwc: recv_control_msg error -32 req 02 val 2400
[  249.516154][ T6039] pwc: recv_control_msg error -71 req 02 val 2900
[  249.531687][ T6039] pwc: recv_control_msg error -71 req 02 val 2800
[  249.562621][ T6039] pwc: recv_control_msg error -71 req 04 val 1100
[  249.564520][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.579703][ T6039] pwc: recv_control_msg error -71 req 04 val 1200
[  249.590207][ T6039] pwc: Registered as video103.
[  249.623172][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.630180][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.662259][ T6039] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5
[  249.689732][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.696605][ T6734] loop5: detected capacity change from 0 to 128
[  249.711517][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.750469][ T6039] usb 6-1: USB disconnect, device number 4
[  249.751008][ T6734] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  249.794249][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.843332][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.854079][ T6734] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  250.253576][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.651329][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.679990][ T6530] team0: Port device team_slave_0 added
[  251.705565][ T6516] hsr_slave_0: entered promiscuous mode
[  251.725720][ T6516] hsr_slave_1: entered promiscuous mode
[  251.781286][ T6530] team0: Port device team_slave_1 added
[  251.848491][ T6139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.913357][ T5828] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  252.288250][ T6542] team0: Port device team_slave_0 added
[  252.887922][ T6139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.203289][ T6542] team0: Port device team_slave_1 added
[  253.316349][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.330523][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.376637][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.429635][ T6139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.492234][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.499232][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.543215][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.614069][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.621058][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.692074][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.727639][ T6139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.791095][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.801140][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.861929][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.163891][ T6530] hsr_slave_0: entered promiscuous mode
[  254.170715][ T6530] hsr_slave_1: entered promiscuous mode
[  254.192903][ T6530] debugfs: 'hsr0' already exists in 'hsr'
[  254.198648][ T6530] Cannot create hsr debugfs directory
[  256.424664][ T6542] hsr_slave_0: entered promiscuous mode
[  256.575448][ T6542] hsr_slave_1: entered promiscuous mode
[  256.757173][ T6542] debugfs: 'hsr0' already exists in 'hsr'
[  256.838900][ T6542] Cannot create hsr debugfs directory
[  258.867233][ T6139] bridge_slave_1: left allmulticast mode
[  258.906198][ T6139] bridge_slave_1: left promiscuous mode
[  259.956480][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.056698][ T6139] bridge_slave_0: left allmulticast mode
[  260.084446][ T6139] bridge_slave_0: left promiscuous mode
[  260.090204][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.115529][ T6139] bridge_slave_1: left allmulticast mode
[  260.132396][ T6139] bridge_slave_1: left promiscuous mode
[  260.138099][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.948528][ T6139] bridge_slave_0: left allmulticast mode
[  260.985509][ T6139] bridge_slave_0: left promiscuous mode
[  260.991324][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.106971][ T6792] netlink: 64 bytes leftover after parsing attributes in process `syz.5.176'.
[  261.910618][ T6139] bridge_slave_1: left allmulticast mode
[  261.923302][ T6139] bridge_slave_1: left promiscuous mode
[  261.942952][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.004129][ T6139] bridge_slave_0: left allmulticast mode
[  262.009817][ T6139] bridge_slave_0: left promiscuous mode
[  262.054658][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.089775][ T6139] bridge_slave_1: left allmulticast mode
[  262.101943][ T6139] bridge_slave_1: left promiscuous mode
[  262.134378][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.170680][ T6139] bridge_slave_0: left allmulticast mode
[  262.187764][ T6139] bridge_slave_0: left promiscuous mode
[  262.212121][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.444678][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.455779][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.467371][ T6139] bond0 (unregistering): Released all slaves
[  262.581361][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.592725][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.603723][ T6139] bond0 (unregistering): Released all slaves
[  262.799866][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.811080][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.822501][ T6139] bond0 (unregistering): Released all slaves
[  263.031159][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.042563][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.052908][ T6139] bond0 (unregistering): Released all slaves
[  263.267462][ T6516] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  263.333840][ T6516] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  263.345089][ T6516] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  263.377790][ T6516] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  263.650529][ T6542] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  263.690385][ T6542] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  263.734943][ T6542] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  263.771146][ T6542] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  263.800560][ T6139] hsr_slave_0: left promiscuous mode
[  263.809187][ T6139] hsr_slave_1: left promiscuous mode
[  263.816445][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.825339][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.840687][ T6139] hsr_slave_0: left promiscuous mode
[  263.847333][ T6139] hsr_slave_1: left promiscuous mode
[  263.853792][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.861646][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.876378][ T6139] hsr_slave_0: left promiscuous mode
[  263.883880][ T6139] hsr_slave_1: left promiscuous mode
[  263.889983][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.898185][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.910738][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.918618][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.933916][ T6139] hsr_slave_0: left promiscuous mode
[  263.940073][ T6139] hsr_slave_1: left promiscuous mode
[  263.946681][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.955482][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.963942][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.971328][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.018897][ T6139] veth1_macvtap: left promiscuous mode
[  264.025193][ T6139] veth0_macvtap: left promiscuous mode
[  264.030856][ T6139] veth1_vlan: left promiscuous mode
[  264.037039][ T6139] veth0_vlan: left promiscuous mode
[  264.044347][ T6139] veth1_macvtap: left promiscuous mode
[  264.049887][ T6139] veth0_macvtap: left promiscuous mode
[  264.056211][ T6139] veth1_vlan: left promiscuous mode
[  264.061547][ T6139] veth0_vlan: left promiscuous mode
[  264.356461][ T6139] team0 (unregistering): Port device team_slave_1 removed
[  264.383298][ T6139] team0 (unregistering): Port device team_slave_0 removed
[  264.689102][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  264.697630][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  264.708805][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  264.718269][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  264.732684][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  264.760842][ T6139] team0 (unregistering): Port device team_slave_1 removed
[  264.787144][ T6139] team0 (unregistering): Port device team_slave_0 removed
[  265.164044][ T6139] team0 (unregistering): Port device team_slave_1 removed
[  265.194952][ T6139] team0 (unregistering): Port device team_slave_0 removed
[  265.278302][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  265.285094][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  265.693782][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  265.703008][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  265.715186][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  265.727229][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  265.746993][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  265.787587][ T6139] team0 (unregistering): Port device team_slave_1 removed
[  265.813998][ T6139] team0 (unregistering): Port device team_slave_0 removed
[  266.782004][ T5831] Bluetooth: hci0: command tx timeout
[  267.002346][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.050885][ T6819] chnl_net:caif_netlink_parms(): no params data found
[  267.241736][ T6542] 8021q: adding VLAN 0 to HW filter on device team0
[  267.284480][ T6816] chnl_net:caif_netlink_parms(): no params data found
[  267.397530][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.404760][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.479991][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.491389][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.502298][ T6819] bridge_slave_0: entered allmulticast mode
[  267.515012][ T6819] bridge_slave_0: entered promiscuous mode
[  267.578437][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.585649][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.610306][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.618698][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.626392][ T6819] bridge_slave_1: entered allmulticast mode
[  267.640646][ T6819] bridge_slave_1: entered promiscuous mode
[  267.718454][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  267.727778][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  267.736203][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  267.753747][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  267.770776][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  267.821926][ T5833] Bluetooth: hci6: command tx timeout
[  267.858580][ T6819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.869781][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.881820][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.889426][ T6816] bridge_slave_0: entered allmulticast mode
[  267.898680][ T6816] bridge_slave_0: entered promiscuous mode
[  267.916987][ T6819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.927516][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.938421][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.946222][ T6816] bridge_slave_1: entered allmulticast mode
[  267.955877][ T6816] bridge_slave_1: entered promiscuous mode
[  268.100808][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.115548][ T6819] team0: Port device team_slave_0 added
[  268.132199][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.161015][ T6819] team0: Port device team_slave_1 added
[  268.253620][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.260597][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  268.286763][ T6819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.301360][ T6816] team0: Port device team_slave_0 added
[  268.345033][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.352257][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  268.378224][ T6819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.391800][ T6816] team0: Port device team_slave_1 added
[  268.454654][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.461622][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  268.488005][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.501541][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.510510][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  268.537732][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.631970][ T6819] hsr_slave_0: entered promiscuous mode
[  268.638712][ T6819] hsr_slave_1: entered promiscuous mode
[  268.645960][ T6819] debugfs: 'hsr0' already exists in 'hsr'
[  268.651676][ T6819] Cannot create hsr debugfs directory
[  268.664794][ T6816] hsr_slave_0: entered promiscuous mode
[  268.673431][ T6816] hsr_slave_1: entered promiscuous mode
[  268.679882][ T6816] debugfs: 'hsr0' already exists in 'hsr'
[  268.685982][ T6816] Cannot create hsr debugfs directory
[  268.862772][ T5833] Bluetooth: hci0: command tx timeout
[  269.149820][ T6855] chnl_net:caif_netlink_parms(): no params data found
[  269.485202][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.494793][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.509953][ T6855] bridge_slave_0: entered allmulticast mode
[  269.518133][ T6855] bridge_slave_0: entered promiscuous mode
[  269.543607][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.550761][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.559944][ T6855] bridge_slave_1: entered allmulticast mode
[  269.567693][ T6855] bridge_slave_1: entered promiscuous mode
[  269.688759][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.718746][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.769197][ T6855] team0: Port device team_slave_0 added
[  269.779734][ T6855] team0: Port device team_slave_1 added
[  269.822073][ T5833] Bluetooth: hci3: command tx timeout
[  269.830438][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.837479][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.865082][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.890829][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.898064][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.902015][ T5833] Bluetooth: hci6: command tx timeout
[  269.930838][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.028811][ T6855] hsr_slave_0: entered promiscuous mode
[  270.038891][ T6855] hsr_slave_1: entered promiscuous mode
[  270.051132][ T6855] debugfs: 'hsr0' already exists in 'hsr'
[  270.056952][ T6855] Cannot create hsr debugfs directory
[  270.345940][ T6139] bridge_slave_1: left allmulticast mode
[  270.351636][ T6139] bridge_slave_1: left promiscuous mode
[  270.359695][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.371030][ T6139] bridge_slave_0: left allmulticast mode
[  270.377208][ T6139] bridge_slave_0: left promiscuous mode
[  270.384469][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.397693][ T6139] bridge_slave_1: left allmulticast mode
[  270.405880][ T6139] bridge_slave_1: left promiscuous mode
[  270.411644][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.421363][ T6139] bridge_slave_0: left allmulticast mode
[  270.427281][ T6139] bridge_slave_0: left promiscuous mode
[  270.435233][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.447520][ T6139] bridge_slave_1: left allmulticast mode
[  270.454163][ T6139] bridge_slave_1: left promiscuous mode
[  270.461546][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.474617][ T6139] bridge_slave_0: left allmulticast mode
[  270.480267][ T6139] bridge_slave_0: left promiscuous mode
[  270.488013][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.778029][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.790293][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.800832][ T6139] bond0 (unregistering): Released all slaves
[  270.931764][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.942073][ T5833] Bluetooth: hci0: command tx timeout
[  270.948939][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.960213][ T6139] bond0 (unregistering): Released all slaves
[  271.090307][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.101437][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.113851][ T6139] bond0 (unregistering): Released all slaves
[  271.249905][ T6139] hsr_slave_0: left promiscuous mode
[  271.256045][ T6139] hsr_slave_1: left promiscuous mode
[  271.263134][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.270854][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.287385][ T6139] hsr_slave_0: left promiscuous mode
[  271.294509][ T6139] hsr_slave_1: left promiscuous mode
[  271.300398][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.312821][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.325576][ T6139] hsr_slave_0: left promiscuous mode
[  271.331529][ T6139] hsr_slave_1: left promiscuous mode
[  271.337599][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.345859][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.523385][ T6139] team0 (unregistering): Port device team_slave_1 removed
[  271.545839][ T6139] team0 (unregistering): Port device team_slave_0 removed
[  271.901778][ T6139] team0 (unregistering): Port device team_slave_1 removed
[  271.902007][ T5833] Bluetooth: hci3: command tx timeout
[  271.929842][ T6139] team0 (unregistering): Port device team_slave_0 removed
[  271.981964][ T5833] Bluetooth: hci6: command tx timeout
[  272.227377][ T6139] team0 (unregistering): Port device team_slave_1 removed
[  272.249363][ T6139] team0 (unregistering): Port device team_slave_0 removed
[  272.684052][ T6819] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  272.720578][ T6819] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  272.755649][ T6819] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  272.797532][ T6819] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  272.911147][ T6816] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  272.929735][ T6816] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  272.990335][ T6816] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  273.013844][ T6816] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  273.024249][ T5833] Bluetooth: hci0: command tx timeout
[  273.290627][ T6819] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.330738][ T6819] 8021q: adding VLAN 0 to HW filter on device team0
[  273.354593][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.361764][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.397150][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.431697][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.438864][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.546374][ T6855] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  273.575746][ T6816] 8021q: adding VLAN 0 to HW filter on device team0
[  273.583665][ T6855] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  273.599378][ T6855] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  273.617828][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.625014][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.647496][ T6855] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  273.688100][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.695282][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.983968][ T5833] Bluetooth: hci3: command tx timeout
[  274.059288][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.062458][ T5833] Bluetooth: hci6: command tx timeout
[  274.127570][ T6855] 8021q: adding VLAN 0 to HW filter on device team0
[  274.188594][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.195802][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.250574][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.257785][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.499657][ T6819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.518602][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.927893][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.366854][ T6816] veth0_vlan: entered promiscuous mode
[  275.403119][ T6819] veth0_vlan: entered promiscuous mode
[  275.418094][ T6816] veth1_vlan: entered promiscuous mode
[  275.468817][ T6819] veth1_vlan: entered promiscuous mode
[  275.545568][ T6816] veth0_macvtap: entered promiscuous mode
[  275.583020][ T6816] veth1_macvtap: entered promiscuous mode
[  275.618739][ T6819] veth0_macvtap: entered promiscuous mode
[  275.638413][ T6819] veth1_macvtap: entered promiscuous mode
[  275.668319][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.698922][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.716104][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.745561][ T6143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.755073][ T6143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.771697][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.782510][ T6143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.794889][ T6143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.846478][ T6143] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.858253][ T6143] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.875997][ T6143] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.884996][ T6143] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.909793][ T6855] veth0_vlan: entered promiscuous mode
[  275.976007][ T6855] veth1_vlan: entered promiscuous mode
[  276.064763][ T5833] Bluetooth: hci3: command tx timeout
[  276.070253][ T6128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.092627][ T6128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.187446][ T6855] veth0_macvtap: entered promiscuous mode
[  276.212507][ T6855] veth1_macvtap: entered promiscuous mode
[  276.232554][ T6143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.240400][ T6143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.293539][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.324064][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.339349][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.410101][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.555657][   T62] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.567480][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.590094][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.599439][   T62] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.738282][   T62] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.811295][   T62] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.843540][ T7001] loop6: detected capacity change from 0 to 128
[  280.036445][ T7001] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  280.108657][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.141174][ T7001] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  280.213245][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.141943][ T6209] IPVS: starting estimator thread 0...
[  281.261518][ T7017] IPVS: using max 23 ests per chain, 55200 per kthread
[  282.406221][ T7023] loop3: detected capacity change from 0 to 16
[  282.502525][ T7023] erofs (device loop3): mounted with root inode @ nid 36.
[  282.514767][ T6816] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  282.700103][ T7025] loop0: detected capacity change from 0 to 32768
[  282.714947][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.733814][ T7025] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.181 (7025)
[  282.779768][ T7025] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  282.790392][ T7025] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  283.040751][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.219348][ T7032] erofs (device loop3): inline data across blocks @ nid 36
[  283.227168][ T7032] syz.3.182: attempt to access beyond end of device
[  283.227168][ T7032] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  284.105851][ T7025] BTRFS info (device loop0): rebuilding free space tree
[  284.128506][ T7025] BTRFS info (device loop0): disabling free space tree
[  284.139287][ T7025] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  284.152204][ T7025] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  284.196073][ T7025] BTRFS info (device loop0): setting nodatasum
[  284.202421][ T7025] BTRFS info (device loop0): setting nodatacow
[  284.208595][ T7025] BTRFS info (device loop0): turning off barriers
[  284.215102][ T7025] BTRFS info (device loop0): force clearing of disk cache
[  284.416383][ T7046] netlink: 'syz.6.183': attribute type 1 has an invalid length.
[  286.312995][ T5829] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.650651][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.7.193'.
[  290.500383][ T7079] loop6: detected capacity change from 0 to 32768
[  297.284264][ T7122] xt_cgroup: xt_cgroup: no path or classid specified
[  297.599835][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'.
[  297.791239][    C1] vcan0: j1939_tp_rxtimer: 0xffff888054829000: rx timeout, send abort
[  298.292219][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880572b3800: rx timeout, send abort
[  298.300724][    C1] vcan0: j1939_tp_rxtimer: 0xffff888054829000: abort rx timeout. Force session deactivation
[  302.011243][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  302.056563][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  302.067212][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  302.082686][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  302.469278][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  302.596393][ T7160] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  302.836109][ T7161] loop7: detected capacity change from 0 to 1024
[  302.955220][ T7161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  304.548803][ T5831] Bluetooth: hci4: command tx timeout
[  305.735238][ T6136] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.882011][ T6136] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.395145][ T5833] Bluetooth: hci4: command tx timeout
[  307.455081][  T789] IPVS: starting estimator thread 0...
[  307.563695][ T7210] IPVS: using max 22 ests per chain, 52800 per kthread
[  308.676648][ T7182] syzkaller0: entered promiscuous mode
[  310.382254][ T5833] Bluetooth: hci4: command tx timeout
[  310.462502][ T7182] syzkaller0: entered allmulticast mode
[  310.544335][ T7197] tipc: Started in network mode
[  310.549414][ T7197] tipc: Node identity aa4f3d34377b, cluster identity 4711
[  311.525806][ T7197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.012531][ T7179] tipc: Resetting bearer <eth:syzkaller0>
[  312.844215][ T7237] netlink: 104 bytes leftover after parsing attributes in process `syz.8.225'.
[  313.144454][ T7179] tipc: Disabling bearer <eth:syzkaller0>
[  313.257939][ T7243] loop7: detected capacity change from 0 to 128
[  313.384008][ T5833] Bluetooth: hci4: command tx timeout
[  313.394216][ T7243] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  313.549347][ T6136] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  313.860750][ T6136] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.911512][ T5900] tipc: Node number set to 2637446452
[  313.927425][ T7142] chnl_net:caif_netlink_parms(): no params data found
[  318.949159][ T6136] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.240835][ T6136] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.274649][ T5899] IPVS: starting estimator thread 0...
[  319.612616][ T7277] IPVS: using max 21 ests per chain, 50400 per kthread
[  319.691115][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'.
[  319.701721][ T7280] loop8: detected capacity change from 0 to 32768
[  319.712424][ T7280] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.239 (7280)
[  319.772596][ T7280] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  319.782845][ T7280] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  319.949425][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.6.240'.
[  320.421250][ T7280] BTRFS info (device loop8): rebuilding free space tree
[  320.440777][ T7280] BTRFS info (device loop8): disabling free space tree
[  320.448045][ T7280] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  320.457937][ T7280] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  320.472002][ T7280] BTRFS info (device loop8): setting nodatasum
[  320.478169][ T7280] BTRFS info (device loop8): setting nodatacow
[  320.484357][ T7280] BTRFS info (device loop8): turning off barriers
[  320.490782][ T7280] BTRFS info (device loop8): force clearing of disk cache
[  320.698851][ T6136] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.728526][ T6136] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.282080][ T7142] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.289358][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.322694][ T7142] bridge_slave_0: entered allmulticast mode
[  322.330647][ T7142] bridge_slave_0: entered promiscuous mode
[  323.097727][ T7315] random: crng reseeded on system resumption
[  323.162270][ T6819] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  323.203807][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.276469][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.287465][ T7142] bridge_slave_1: entered allmulticast mode
[  323.297144][ T7142] bridge_slave_1: entered promiscuous mode
[  324.031639][ T7321] tipc: Started in network mode
[  324.082469][ T7321] tipc: Node identity 2a3c0400f707, cluster identity 4711
[  324.111994][ T7321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.190164][ T7322] syzkaller0: entered promiscuous mode
[  324.241557][ T7322] syzkaller0: entered allmulticast mode
[  324.402572][ T7142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.800266][ T7319] tipc: Resetting bearer <eth:syzkaller0>
[  325.407598][ T7319] tipc: Disabling bearer <eth:syzkaller0>
[  325.590581][ T7142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.701710][ T5899] tipc: Node number set to 3711632384
[  325.746156][ T7349] loop0: detected capacity change from 0 to 1024
[  326.732715][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  326.739078][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  326.851651][ T6136] bridge_slave_1: left allmulticast mode
[  326.897377][ T6136] bridge_slave_1: left promiscuous mode
[  327.507647][ T7360] netlink: 60 bytes leftover after parsing attributes in process `syz.7.249'.
[  328.807264][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.977130][ T6136] bridge_slave_0: left allmulticast mode
[  329.022004][ T6136] bridge_slave_0: left promiscuous mode
[  329.056775][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.085715][ T7363] loop6: detected capacity change from 0 to 128
[  329.162524][ T7363] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  329.428019][ T7365] loop0: detected capacity change from 0 to 32768
[  329.447569][ T7365] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.250 (7365)
[  329.495006][ T7365] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  329.508612][ T7365] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  329.553381][ T7363] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  331.680277][ T7367] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum
[  331.736414][ T7365] BTRFS info (device loop0): enabling ssd optimizations
[  331.743441][ T7365] BTRFS info (device loop0): turning on async discard
[  331.750285][ T7365] BTRFS info (device loop0): enabling free space tree
[  332.871425][ T5829] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  334.274689][ T6136] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  334.920300][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.238542][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.254459][ T6136] bond0 (unregistering): Released all slaves
[  335.682075][ T7142] team0: Port device team_slave_0 added
[  336.177476][ T7142] team0: Port device team_slave_1 added
[  336.863851][ T6816] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.872226][  T789] libceph: connect (1)[c::]:6789 error -101
[  337.879318][  T789] libceph: mon0 (1)[c::]:6789 connect error
[  337.901208][  T789] libceph: connect (1)[c::]:6789 error -101
[  337.918005][  T789] libceph: mon0 (1)[c::]:6789 connect error
[  337.960275][ T7433] ceph: No mds server is up or the cluster is laggy
[  338.337652][  T789] libceph: connect (1)[c::]:6789 error -101
[  338.414420][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.421413][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  338.460847][  T789] libceph: mon0 (1)[c::]:6789 connect error
[  338.465133][ T7142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.488137][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.507990][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  338.629044][ T7142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.824644][ T7450] loop8: detected capacity change from 0 to 16
[  338.843766][ T7450] erofs (device loop8): mounted with root inode @ nid 36.
[  338.888176][ T7450] erofs (device loop8): readahead error at folio 87 @ nid 36
[  338.895875][ T7450] erofs (device loop8): readahead error at folio 86 @ nid 36
[  338.904331][ T7450] erofs (device loop8): bogus lookback distance 363 @ lcn 82 of nid 36
[  338.912673][ T7450] erofs (device loop8): readahead error at folio 83 @ nid 36
[  338.920175][ T7450] erofs (device loop8): bogus lookback distance 363 @ lcn 82 of nid 36
[  338.928536][ T7450] erofs (device loop8): readahead error at folio 82 @ nid 36
[  338.937860][ T7450] erofs (device loop8): readahead error at folio 79 @ nid 36
[  338.945526][ T7450] erofs (device loop8): readahead error at folio 78 @ nid 36
[  338.953240][ T7450] erofs (device loop8): bogus lookback distance 1485 @ lcn 75 of nid 36
[  338.961643][ T7450] erofs (device loop8): readahead error at folio 76 @ nid 36
[  338.969447][ T7450] erofs (device loop8): bogus lookback distance 1485 @ lcn 75 of nid 36
[  338.978044][ T7450] erofs (device loop8): readahead error at folio 75 @ nid 36
[  338.985892][ T7450] erofs (device loop8): readahead error at folio 74 @ nid 36
[  338.993605][ T7450] erofs (device loop8): readahead error at folio 72 @ nid 36
[  339.001053][ T7450] erofs (device loop8): readahead error at folio 71 @ nid 36
[  339.008679][ T7450] erofs (device loop8): readahead error at folio 70 @ nid 36
[  339.022183][ T7450] erofs (device loop8): readahead error at folio 63 @ nid 36
[  339.030177][ T7450] erofs (device loop8): readahead error at folio 61 @ nid 36
[  339.037901][ T7450] erofs (device loop8): bogus lookback distance 1024 @ lcn 58 of nid 36
[  339.046350][ T7450] erofs (device loop8): readahead error at folio 59 @ nid 36
[  339.053839][ T7450] erofs (device loop8): bogus lookback distance 1024 @ lcn 58 of nid 36
[  339.062264][ T7450] erofs (device loop8): readahead error at folio 58 @ nid 36
[  339.070045][ T7450] erofs (device loop8): readahead error at folio 56 @ nid 36
[  339.077866][ T7450] erofs (device loop8): readahead error at folio 54 @ nid 36
[  339.085978][ T7450] erofs (device loop8): readahead error at folio 50 @ nid 36
[  339.093764][ T7450] erofs (device loop8): bogus lookback distance 1586 @ lcn 46 of nid 36
[  339.102263][ T7450] erofs (device loop8): readahead error at folio 47 @ nid 36
[  339.109713][ T7450] erofs (device loop8): bogus lookback distance 1586 @ lcn 46 of nid 36
[  339.118161][ T7450] erofs (device loop8): readahead error at folio 46 @ nid 36
[  339.125765][ T7450] erofs (device loop8): readahead error at folio 45 @ nid 36
[  339.133458][ T7450] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36
[  339.141920][ T7450] erofs (device loop8): readahead error at folio 43 @ nid 36
[  339.149375][ T7450] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36
[  339.157800][ T7450] erofs (device loop8): readahead error at folio 42 @ nid 36
[  339.165550][ T7450] erofs (device loop8): bogus lookback distance 774 @ lcn 40 of nid 36
[  339.174238][ T7450] erofs (device loop8): readahead error at folio 41 @ nid 36
[  339.181962][ T7450] erofs (device loop8): bogus lookback distance 774 @ lcn 40 of nid 36
[  339.190405][ T7450] erofs (device loop8): readahead error at folio 40 @ nid 36
[  339.198071][ T7450] erofs (device loop8): readahead error at folio 39 @ nid 36
[  339.205586][ T7450] erofs (device loop8): readahead error at folio 38 @ nid 36
[  339.213777][ T7450] erofs (device loop8): readahead error at folio 36 @ nid 36
[  339.222887][ T7450] erofs (device loop8): bogus lookback distance 1468 @ lcn 31 of nid 36
[  339.231301][ T7450] erofs (device loop8): readahead error at folio 31 @ nid 36
[  339.240420][ T7450] erofs (device loop8): readahead error at folio 25 @ nid 36
[  339.248016][ T7450] erofs (device loop8): readahead error at folio 24 @ nid 36
[  339.257103][ T7450] erofs (device loop8): readahead error at folio 19 @ nid 36
[  339.267341][ T7450] syz.8.267: attempt to access beyond end of device
[  339.267341][ T7450] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16
[  339.282658][ T7450] syz.8.267: attempt to access beyond end of device
[  339.282658][ T7450] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  339.298294][ T7450] syz.8.267: attempt to access beyond end of device
[  339.298294][ T7450] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  339.313981][ T7450] syz.8.267: attempt to access beyond end of device
[  339.313981][ T7450] loop8: rw=524288, sector=32, nr_sectors = 64 limit=16
[  339.328337][ T7450] syz.8.267: attempt to access beyond end of device
[  339.328337][ T7450] loop8: rw=524288, sector=8, nr_sectors = 24 limit=16
[  339.343458][ T7450] syz.8.267: attempt to access beyond end of device
[  339.343458][ T7450] loop8: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  340.073389][ T7451] loop3: detected capacity change from 0 to 32768
[  340.082525][ T7451] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.268 (7451)
[  340.121055][ T7451] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  340.132367][ T7451] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  342.102802][ T7451] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  342.104945][ T7451] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  342.113992][ T7451] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  342.123664][ T7451] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  342.133567][ T7451] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  342.194105][ T7451] BTRFS error (device loop3): open_ctree failed: -12
[  345.312550][ T6136] hsr_slave_0: left promiscuous mode
[  345.640174][ T6136] hsr_slave_1: left promiscuous mode
[  345.796221][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.921975][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.002941][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.010360][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.683700][ T6136] veth1_macvtap: left promiscuous mode
[  346.689242][ T6136] veth0_macvtap: left promiscuous mode
[  346.732242][ T6136] veth1_vlan: left promiscuous mode
[  346.749792][ T6136] veth0_vlan: left promiscuous mode
[  347.002935][ T7496] loop6: detected capacity change from 0 to 128
[  347.036563][ T7496] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  349.646200][   T31] audit: type=1326 audit(1766792786.246:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.8.282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f511a18f749 code=0x0
[  351.322614][ T6136] team0 (unregistering): Port device team_slave_1 removed
[  351.377559][  T789] libceph: connect (1)[c::]:6789 error -101
[  353.666262][  T789] libceph: mon0 (1)[c::]:6789 connect error
[  353.740908][ T7533] ceph: No mds server is up or the cluster is laggy
[  354.128637][ T6136] team0 (unregistering): Port device team_slave_0 removed
[  354.239875][ T5810] libceph: connect (1)[c::]:6789 error -101
[  354.294959][ T5810] libceph: mon0 (1)[c::]:6789 connect error
[  355.553086][ T5833] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  355.562062][ T5833] Bluetooth: hci3: Injecting HCI hardware error event
[  355.570938][ T5833] Bluetooth: hci3: hardware error 0x00
[  358.065266][ T5833] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  359.643532][ T7142] hsr_slave_0: entered promiscuous mode
[  359.662403][ T7142] hsr_slave_1: entered promiscuous mode
[  365.327784][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.338425][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.346377][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.362075][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.369878][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  366.569943][ T7577] loop8: detected capacity change from 0 to 8192
[  366.895296][ T7599] loop6: detected capacity change from 0 to 8
[  367.127332][ T7601] Invalid logical block size (2046)
[  367.423930][ T5831] Bluetooth: hci1: command tx timeout
[  367.703980][   T62] bridge_slave_1: left allmulticast mode
[  367.709672][   T62] bridge_slave_1: left promiscuous mode
[  367.732935][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.824163][   T62] bridge_slave_0: left allmulticast mode
[  367.829849][   T62] bridge_slave_0: left promiscuous mode
[  367.841544][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.133005][ T5846] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  371.143567][ T5846] Bluetooth: hci0: Injecting HCI hardware error event
[  371.153034][ T5833] Bluetooth: hci0: hardware error 0x00
[  371.159344][ T5831] Bluetooth: hci1: command tx timeout
[  371.578000][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.624557][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.694149][   T62] bond0 (unregistering): Released all slaves
[  372.006982][   T62] hsr_slave_0: left promiscuous mode
[  372.254389][ T7629] loop6: detected capacity change from 0 to 128
[  372.942560][   T62] hsr_slave_1: left promiscuous mode
[  372.949285][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.970886][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.182043][ T5831] Bluetooth: hci1: command tx timeout
[  373.435520][ T5833] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  373.659477][   T62] team0 (unregistering): Port device team_slave_1 removed
[  373.760429][   T62] team0 (unregistering): Port device team_slave_0 removed
[  374.124347][ T7640] loop0: detected capacity change from 0 to 32768
[  374.880265][ T7640] JBD2: Ignoring recovery information on journal
[  375.005264][ T7640] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  375.110820][ T7640] OCFS2: ERROR (device loop0): ocfs2_validate_gd_parent: Group descriptor #32 has bit count of 1024
[  375.123255][ T7640] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  375.133486][ T7640] OCFS2: File system is now read-only.
[  375.138999][ T7640] (syz.0.314,7640,0):ocfs2_search_chain:1818 ERROR: status = -30
[  375.147220][ T7640] (syz.0.314,7640,0):ocfs2_search_chain:1941 ERROR: status = -30
[  375.156349][ T7640] (syz.0.314,7640,0):ocfs2_claim_suballoc_bits:2021 ERROR: status = -30
[  375.164768][ T7640] (syz.0.314,7640,0):ocfs2_claim_suballoc_bits:2074 ERROR: status = -30
[  375.173252][ T7640] (syz.0.314,7640,0):__ocfs2_claim_clusters:2449 ERROR: status = -30
[  375.181371][ T7640] (syz.0.314,7640,0):__ocfs2_claim_clusters:2457 ERROR: status = -30
[  375.189671][ T7640] (syz.0.314,7640,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[  375.198361][ T7640] (syz.0.314,7640,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[  375.207009][ T7640] (syz.0.314,7640,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[  375.216353][ T7640] (syz.0.314,7640,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  375.225339][ T7640] (syz.0.314,7640,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  375.234041][ T7640] (syz.0.314,7640,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  375.242847][ T7640] (syz.0.314,7640,0):ocfs2_reserve_clusters_with_limit:1173 ERROR: status = -30
[  375.251971][ T7640] (syz.0.314,7640,0):ocfs2_reserve_clusters_with_limit:1222 ERROR: status = -30
[  375.261036][ T7640] (syz.0.314,7640,0):ocfs2_lock_allocators:2786 ERROR: status = -30
[  375.269086][ T7640] (syz.0.314,7640,0):ocfs2_write_begin_nolock:1723 ERROR: status = -30
[  375.271949][ T5833] Bluetooth: hci1: command tx timeout
[  375.277397][ T7640] (syz.0.314,7640,0):ocfs2_write_begin:1887 ERROR: status = -30
[  377.388458][ T7584] chnl_net:caif_netlink_parms(): no params data found
[  377.480389][ T5829] ocfs2: Unmounting device (7,0) on (node local)
[  378.580176][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.451835][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.459199][ T7584] bridge_slave_0: entered allmulticast mode
[  380.509878][ T7584] bridge_slave_0: entered promiscuous mode
[  380.538825][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.562001][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.614813][ T7584] bridge_slave_1: entered allmulticast mode
[  380.623390][ T7584] bridge_slave_1: entered promiscuous mode
[  383.316221][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.818217][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.755597][ T7584] team0: Port device team_slave_0 added
[  387.836246][ T7584] team0: Port device team_slave_1 added
[  388.168949][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  388.178994][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  388.188962][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.641430][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.763399][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.796225][   T31] audit: type=1326 audit(1766792825.396:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1eb858f749 code=0x0
[  388.812142][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  388.892101][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.020399][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.223689][ T5831] Bluetooth: hci6: command 0x0406 tx timeout
[  393.765244][ T7584] hsr_slave_0: entered promiscuous mode
[  393.784263][ T7584] hsr_slave_1: entered promiscuous mode
[  396.382569][ T7736] Invalid source name
[  396.386573][ T7736] UBIFS error (pid: 7736): cannot open "./file0", error -22
[  396.947808][ T7584] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  397.238068][ T7584] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  397.462118][ T7584] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  399.785945][ T7584] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  401.462497][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.580887][ T7584] 8021q: adding VLAN 0 to HW filter on device team0
[  401.676466][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.683694][ T6137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.828768][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.835967][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.425113][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.867952][ T7807] loop7: detected capacity change from 0 to 8192
[  409.610198][ T7814] loop3: detected capacity change from 0 to 128
[  409.785231][ T7814] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  409.813376][ T7814] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  412.435509][ T7827] loop0: detected capacity change from 0 to 16
[  412.499308][ T7827] erofs (device loop0): mounted with root inode @ nid 36.
[  413.586707][ T7584] veth0_vlan: entered promiscuous mode
[  413.673847][ T7584] veth1_vlan: entered promiscuous mode
[  413.754778][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  413.765741][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  413.804257][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  413.836632][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  413.854677][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  414.080249][ T7584] veth0_macvtap: entered promiscuous mode
[  414.182385][ T7584] veth1_macvtap: entered promiscuous mode
[  414.197293][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  415.582131][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.689265][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.912026][ T5831] Bluetooth: hci4: command tx timeout
[  417.881923][ T6014] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.043392][ T5831] Bluetooth: hci4: command tx timeout
[  418.586211][   T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.646444][   T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.682880][   T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.803327][ T5831] Bluetooth: hci4: command tx timeout
[  422.952122][ T5831] Bluetooth: hci4: command tx timeout
[  424.764423][ T7833] chnl_net:caif_netlink_parms(): no params data found
[  426.122767][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  426.134770][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  426.143481][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  426.174316][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  426.182290][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  426.292308][ T7887] loop3: detected capacity change from 0 to 512
[  426.644040][ T7887] EXT4-fs (loop3): #blocks per group too big: 466944
[  429.479851][ T5831] Bluetooth: hci7: command tx timeout
[  430.702666][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.709908][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.742272][ T7833] bridge_slave_0: entered allmulticast mode
[  430.761968][ T7833] bridge_slave_0: entered promiscuous mode
[  430.781029][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.834250][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.897546][ T7833] bridge_slave_1: entered allmulticast mode
[  430.942024][ T7833] bridge_slave_1: entered promiscuous mode
[  432.271457][ T5831] Bluetooth: hci7: command tx timeout
[  434.397579][ T5831] Bluetooth: hci7: command tx timeout
[  436.582030][ T5831] Bluetooth: hci7: command tx timeout
[  437.493099][ T7833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.576020][ T7833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.715661][ T7925] loop8: detected capacity change from 0 to 256
[  438.844607][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  438.854177][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  438.885029][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  438.902656][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  438.913497][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  440.946940][ T5831] Bluetooth: hci0: command tx timeout
[  441.137640][ T6128] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.287003][ T7833] team0: Port device team_slave_0 added
[  441.398992][ T7833] team0: Port device team_slave_1 added
[  441.753721][ T6128] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.114139][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  442.131962][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.222356][ T7833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  442.263555][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  442.270514][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.333386][ T7833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.428089][ T6128] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.062118][ T5831] Bluetooth: hci0: command tx timeout
[  443.603824][ T6128] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.102243][ T5831] Bluetooth: hci0: command tx timeout
[  445.234352][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  445.243694][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  445.251440][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  445.262851][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  445.270938][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  445.564167][ T7833] hsr_slave_0: entered promiscuous mode
[  445.583849][ T7833] hsr_slave_1: entered promiscuous mode
[  445.612602][ T7833] debugfs: 'hsr0' already exists in 'hsr'
[  445.618356][ T7833] Cannot create hsr debugfs directory
[  447.182287][ T5833] Bluetooth: hci0: command tx timeout
[  447.350365][ T5833] Bluetooth: hci1: command tx timeout
[  449.462010][ T5833] Bluetooth: hci1: command tx timeout
[  449.590219][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  449.596596][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  449.666992][ T7886] chnl_net:caif_netlink_parms(): no params data found
[  449.857413][ T6128] bridge_slave_1: left allmulticast mode
[  449.863763][ T6128] bridge_slave_1: left promiscuous mode
[  449.874922][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.886617][ T6128] bridge_slave_0: left allmulticast mode
[  449.900198][ T6128] bridge_slave_0: left promiscuous mode
[  449.909860][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.308102][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  450.320268][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  450.331359][ T6128] bond0 (unregistering): Released all slaves
[  451.443201][ T7928] chnl_net:caif_netlink_parms(): no params data found
[  451.503791][ T5833] Bluetooth: hci1: command tx timeout
[  451.659371][ T6128] hsr_slave_0: left promiscuous mode
[  451.665900][ T6128] hsr_slave_1: left promiscuous mode
[  451.673463][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.680853][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.704528][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.721924][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.833069][ T6128] veth1_macvtap: left promiscuous mode
[  451.838622][ T6128] veth0_macvtap: left promiscuous mode
[  451.844404][ T6128] veth1_vlan: left promiscuous mode
[  451.862279][ T6128] veth0_vlan: left promiscuous mode
[  452.345015][ T6128] team0 (unregistering): Port device team_slave_1 removed
[  452.376822][ T6128] team0 (unregistering): Port device team_slave_0 removed
[  452.878507][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.885787][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.894896][ T7886] bridge_slave_0: entered allmulticast mode
[  452.902555][ T7886] bridge_slave_0: entered promiscuous mode
[  452.936661][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.944114][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.951335][ T7886] bridge_slave_1: entered allmulticast mode
[  452.959513][ T7886] bridge_slave_1: entered promiscuous mode
[  453.088971][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.096382][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.103632][ T7928] bridge_slave_0: entered allmulticast mode
[  453.111149][ T7928] bridge_slave_0: entered promiscuous mode
[  453.120683][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.128101][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.136913][ T7928] bridge_slave_1: entered allmulticast mode
[  453.146234][ T7928] bridge_slave_1: entered promiscuous mode
[  453.172637][ T7886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.187401][ T7886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.309060][ T7886] team0: Port device team_slave_0 added
[  453.318611][ T7928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.357861][ T7886] team0: Port device team_slave_1 added
[  453.366424][ T7928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.393550][ T7954] chnl_net:caif_netlink_parms(): no params data found
[  453.465833][ T7928] team0: Port device team_slave_0 added
[  453.472402][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.479346][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.507179][ T7886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.553657][ T7928] team0: Port device team_slave_1 added
[  453.560033][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.567781][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.595045][ T5833] Bluetooth: hci1: command tx timeout
[  453.600562][ T7886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.687250][ T6128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.735443][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.749423][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.778619][ T7928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.864606][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.871565][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.897667][ T7928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.937745][ T6128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.955180][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.964384][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.971664][ T7954] bridge_slave_0: entered allmulticast mode
[  453.979718][ T7954] bridge_slave_0: entered promiscuous mode
[  454.006454][ T7886] hsr_slave_0: entered promiscuous mode
[  454.013251][ T7886] hsr_slave_1: entered promiscuous mode
[  454.029119][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.036517][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.044222][ T7954] bridge_slave_1: entered allmulticast mode
[  454.051731][ T7954] bridge_slave_1: entered promiscuous mode
[  454.129339][ T6128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.158805][ T7833] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  454.176828][ T7954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.212374][ T7833] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  454.227409][ T7954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.244767][ T7928] hsr_slave_0: entered promiscuous mode
[  454.251246][ T7928] hsr_slave_1: entered promiscuous mode
[  454.257861][ T7928] debugfs: 'hsr0' already exists in 'hsr'
[  454.263824][ T7928] Cannot create hsr debugfs directory
[  454.286362][ T7833] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  454.323337][ T6128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.349146][ T7833] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  454.417738][ T7954] team0: Port device team_slave_0 added
[  454.448597][ T7954] team0: Port device team_slave_1 added
[  454.530787][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.537963][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.564557][ T7954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.578771][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.585840][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.611999][ T7954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.835031][ T7954] hsr_slave_0: entered promiscuous mode
[  454.841563][ T7954] hsr_slave_1: entered promiscuous mode
[  454.848193][ T7954] debugfs: 'hsr0' already exists in 'hsr'
[  454.854118][ T7954] Cannot create hsr debugfs directory
[  454.922594][ T6128] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.026183][ T6128] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.125216][ T6128] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.197854][ T6128] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.299879][ T7833] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.375239][ T7833] 8021q: adding VLAN 0 to HW filter on device team0
[  455.420109][ T6128] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.446886][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.454033][ T6143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.489201][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.496403][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.529540][ T6128] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.619270][ T6128] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.690623][ T6128] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.837184][ T6128] bridge_slave_1: left allmulticast mode
[  455.843936][ T6128] bridge_slave_1: left promiscuous mode
[  455.849732][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.860995][ T6128] bridge_slave_0: left allmulticast mode
[  455.866796][ T6128] bridge_slave_0: left promiscuous mode
[  455.874925][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.886815][ T6128] bridge_slave_1: left allmulticast mode
[  455.892675][ T6128] bridge_slave_1: left promiscuous mode
[  455.898417][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.914382][ T6128] bridge_slave_0: left allmulticast mode
[  455.920020][ T6128] bridge_slave_0: left promiscuous mode
[  455.925913][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.938813][ T6128] bridge_slave_1: left allmulticast mode
[  455.944842][ T6128] bridge_slave_1: left promiscuous mode
[  455.950529][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.960081][ T6128] bridge_slave_0: left allmulticast mode
[  455.966763][ T6128] bridge_slave_0: left promiscuous mode
[  455.973852][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.321312][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.332921][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.343438][ T6128] bond0 (unregistering): Released all slaves
[  456.572241][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.583584][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.593670][ T6128] bond0 (unregistering): Released all slaves
[  456.791490][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.803515][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.814829][ T6128] bond0 (unregistering): Released all slaves
[  457.013478][ T6128] tipc: Left network mode
[  457.072003][ T6128] tipc: Left network mode
[  457.078412][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.145877][ T7886] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  457.163731][ T7886] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  457.178398][ T7886] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  457.231739][ T7886] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  457.388434][ T7928] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  457.401149][ T7928] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  457.419107][ T7928] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  457.469276][ T7928] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  457.689447][ T7954] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  457.703091][ T7954] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  457.719808][ T7954] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  457.730776][ T7954] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  457.766551][ T6128] hsr_slave_0: left promiscuous mode
[  457.774641][ T6128] hsr_slave_1: left promiscuous mode
[  457.780553][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.789618][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.798111][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.805853][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.817632][ T6128] hsr_slave_0: left promiscuous mode
[  457.824451][ T6128] hsr_slave_1: left promiscuous mode
[  457.830331][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.838008][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.845952][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.854962][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.867987][ T6128] hsr_slave_0: left promiscuous mode
[  457.874664][ T6128] hsr_slave_1: left promiscuous mode
[  457.880596][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.889245][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.897657][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.906495][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.949554][ T6128] veth1_macvtap: left promiscuous mode
[  457.956134][ T6128] veth0_macvtap: left promiscuous mode
[  457.961726][ T6128] veth1_vlan: left promiscuous mode
[  457.967469][ T6128] veth0_vlan: left promiscuous mode
[  457.974088][ T6128] veth1_macvtap: left promiscuous mode
[  457.979589][ T6128] veth0_macvtap: left promiscuous mode
[  457.986090][ T6128] veth1_vlan: left promiscuous mode
[  457.992868][ T6128] veth0_vlan: left promiscuous mode
[  458.000296][ T6128] veth1_macvtap: left promiscuous mode
[  458.005874][ T6128] veth0_macvtap: left promiscuous mode
[  458.011478][ T6128] veth1_vlan: left promiscuous mode
[  458.017129][ T6128] veth0_vlan: left promiscuous mode
[  458.552286][ T6128] team0 (unregistering): Port device team_slave_1 removed
[  458.585220][ T6128] team0 (unregistering): Port device team_slave_0 removed
[  459.091333][ T6128] team0 (unregistering): Port device team_slave_1 removed
[  459.125152][ T6128] team0 (unregistering): Port device team_slave_0 removed
[  459.638809][ T6128] team0 (unregistering): Port device team_slave_1 removed
[  459.668889][ T6128] team0 (unregistering): Port device team_slave_0 removed
[  460.072366][ T7886] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.102965][ T7833] veth0_vlan: entered promiscuous mode
[  460.143771][ T7886] 8021q: adding VLAN 0 to HW filter on device team0
[  460.163718][ T7833] veth1_vlan: entered promiscuous mode
[  460.187627][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.194775][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.226726][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.233917][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.251262][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.349817][ T7928] 8021q: adding VLAN 0 to HW filter on device team0
[  460.365867][ T7833] veth0_macvtap: entered promiscuous mode
[  460.401195][ T7833] veth1_macvtap: entered promiscuous mode
[  460.436759][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.443932][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.458350][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.465519][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.478808][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.511013][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.568526][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.605917][ T7954] 8021q: adding VLAN 0 to HW filter on device team0
[  460.620125][ T2953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.636502][ T2953] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.664658][ T3411] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.671825][ T3411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.687195][ T2953] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.705202][ T2953] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.745440][ T3411] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.752640][ T3411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.991716][ T4787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.031344][ T4787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.122998][ T6128] IPVS: stop unused estimator thread 0...
[  461.132716][ T3411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.144218][ T3411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.169663][ T6128] IPVS: stop unused estimator thread 0...
[  461.217488][ T7886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.359424][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.455358][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.482687][ T7928] veth0_vlan: entered promiscuous mode
[  464.762453][ T7928] veth1_vlan: entered promiscuous mode
[  467.302267][ T7928] veth0_macvtap: entered promiscuous mode
[  467.324028][ T7954] veth0_vlan: entered promiscuous mode
[  467.393466][ T7928] veth1_macvtap: entered promiscuous mode
[  467.480367][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_0
[  467.523382][ T7954] veth1_vlan: entered promiscuous mode
[  468.552707][ T7954] veth0_macvtap: entered promiscuous mode
[  468.635977][ T7954] veth1_macvtap: entered promiscuous mode
[  468.675201][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.725011][ T6140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.752158][ T6140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.798703][ T6140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.813674][ T6140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.887270][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.911616][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.126902][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.155331][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.227043][ T6137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.254146][ T6137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.335477][ T6137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.833940][ T6137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.897100][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.931917][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.134257][ T7886] veth0_vlan: entered promiscuous mode
[  470.900315][ T6137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.023730][ T6137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.075832][ T7886] veth1_vlan: entered promiscuous mode
[  471.139062][ T6113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.176377][ T6113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.211640][ T8089] loop4: detected capacity change from 0 to 164
[  471.250163][ T7886] veth0_macvtap: entered promiscuous mode
[  471.317898][ T8089] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  471.519698][ T7886] veth1_macvtap: entered promiscuous mode
[  473.105987][ T8094] mmap: syz.8.396 (8094) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  473.184442][ T8089] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  473.195238][ T8089] Symlink component flag not implemented
[  473.200869][ T8089] Symlink component flag not implemented
[  473.253759][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.434858][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.482715][   T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.540133][   T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.783515][   T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.876473][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.382'.
[  473.895549][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.382'.
[  474.581846][   T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.149349][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.205861][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.583150][ T8154] input: syz1 as /devices/virtual/input/input6
[  482.171810][ T4787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.190169][ T4787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.659562][ T8169] loop4: detected capacity change from 0 to 131072
[  485.739760][ T8169] F2FS-fs (loop4): Test dummy encryption mode enabled
[  485.750588][ T8169] F2FS-fs (loop4): invalid crc value
[  485.945834][ T8169] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  485.962723][ T8169] F2FS-fs (loop4): Start checkpoint disabled!
[  485.981513][ T8169] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  486.007420][ T8169] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  486.055770][ T8169] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  487.285544][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  487.299028][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  487.306759][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  487.317420][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  487.336901][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  491.009297][ T5833] Bluetooth: hci3: command tx timeout
[  491.286991][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  491.332320][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  491.342780][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  491.350765][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  491.358740][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  491.798241][ T8199] loop0: detected capacity change from 0 to 512
[  491.805834][ T8199] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  491.838712][ T8199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[  491.846906][ T8199] System zones: 1-12
[  491.863892][ T8199] EXT4-fs (loop0): 1 truncate cleaned up
[  491.871539][ T8199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.893651][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  491.905482][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  491.913256][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  491.921306][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  491.955417][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  491.964965][   T31] audit: type=1800 audit(1766792928.566:6): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.425" name="file1" dev="loop0" ino=15 res=0 errno=0
[  492.114078][   T31] audit: type=1800 audit(1766792928.716:7): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.425" name="file1" dev="loop0" ino=15 res=0 errno=0
[  492.487242][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.969141][ T8180] chnl_net:caif_netlink_parms(): no params data found
[  493.032409][ T5833] Bluetooth: hci3: command tx timeout
[  493.423138][ T5833] Bluetooth: hci5: command tx timeout
[  493.524517][ T6139] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.887242][ T8215] loop0: detected capacity change from 0 to 512
[  493.920897][ T8215] EXT4-fs: Ignoring removed i_version option
[  493.949430][ T8215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  494.058088][ T6139] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.018257][ T5833] Bluetooth: hci7: command tx timeout
[  495.082728][ T8224] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  495.091664][ T8224] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  495.103073][ T5833] Bluetooth: hci3: command tx timeout
[  495.969485][ T5833] Bluetooth: hci5: command tx timeout
[  497.083770][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.124220][ T5833] Bluetooth: hci7: command tx timeout
[  497.412031][ T5833] Bluetooth: hci3: command tx timeout
[  497.585299][ T8235] loop4: detected capacity change from 0 to 256
[  497.599531][ T8235] exfat: Unknown parameter 'f00000000080000006'
[  497.639557][ T8235] overlayfs: option "workdir=./file1/file0" is useless in a non-upper mount, ignore
[  497.649218][ T8235] overlayfs: missing 'lowerdir'
[  498.109505][ T5833] Bluetooth: hci5: command tx timeout
[  498.722859][ T6139] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.183065][ T5833] Bluetooth: hci7: command tx timeout
[  499.517679][ T8250] loop0: detected capacity change from 0 to 1024
[  499.704045][ T6139] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.928770][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.936440][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.948119][ T8180] bridge_slave_0: entered allmulticast mode
[  500.239654][ T5833] Bluetooth: hci5: command tx timeout
[  500.922031][ T8225] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  500.929953][ T8180] bridge_slave_0: entered promiscuous mode
[  500.946580][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.957955][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.969343][ T8180] bridge_slave_1: entered allmulticast mode
[  501.902453][ T5833] Bluetooth: hci7: command tx timeout
[  501.985534][ T8225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  501.997795][ T8225] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  502.007242][ T8225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.132126][ T8180] bridge_slave_1: entered promiscuous mode
[  502.144727][ T6065] hfsplus: b-tree write err: -5, ino 4
[  502.156844][ T8225] usb 5-1: config 0 descriptor??
[  502.184876][ T8225] pwc: Askey VC010 type 2 USB webcam detected.
[  504.226510][ T8194] chnl_net:caif_netlink_parms(): no params data found
[  504.298703][ T8225] pwc: send_video_command error -71
[  504.352818][ T8225] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  504.375260][ T8225] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  504.678571][ T8225] usb 5-1: USB disconnect, device number 2
[  504.858701][ T8180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.937619][ T8180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.129229][ T8269] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  505.197431][ T8180] team0: Port device team_slave_0 added
[  505.306692][ T8180] team0: Port device team_slave_1 added
[  505.357422][ T6139] bridge_slave_1: left allmulticast mode
[  505.373713][ T6139] bridge_slave_1: left promiscuous mode
[  505.385149][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.407663][ T6139] bridge_slave_0: left allmulticast mode
[  505.419232][ T6139] bridge_slave_0: left promiscuous mode
[  505.425554][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.978020][   T31] audit: type=1800 audit(1766792942.566:8): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.438" name="bus" dev="ramfs" ino=22277 res=0 errno=0
[  506.149945][ T6139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.213373][ T6139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  506.234786][ T6139] bond0 (unregistering): Released all slaves
[  506.512633][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.519885][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.527589][ T8194] bridge_slave_0: entered allmulticast mode
[  506.535708][ T8194] bridge_slave_0: entered promiscuous mode
[  506.545349][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.552738][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.559963][ T8194] bridge_slave_1: entered allmulticast mode
[  506.568646][ T8194] bridge_slave_1: entered promiscuous mode
[  507.672860][ T8180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.680503][ T8180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.738494][ T8180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.758196][ T8200] chnl_net:caif_netlink_parms(): no params data found
[  507.985481][ T8291] loop0: detected capacity change from 0 to 40427
[  508.003577][ T8291] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  508.011329][ T8291] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  508.022111][ T8291] F2FS-fs (loop0): invalid crc value
[  508.091845][ T8291] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  508.120524][ T8291] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  508.127623][ T8291] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  508.159089][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  508.167843][ T8180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.392041][ T8180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.402649][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.428604][ T8180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.199373][   T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  509.212417][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.227609][   T24] usb 5-1: config 0 descriptor??
[  509.257523][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  509.290890][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.474624][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.641477][ T6139] hsr_slave_0: left promiscuous mode
[  509.652955][ T6139] hsr_slave_1: left promiscuous mode
[  509.669620][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  509.674972][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  509.692623][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.692846][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  509.727497][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  509.727717][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  509.735893][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  509.754931][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  509.771753][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.791965][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  509.812007][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  509.829386][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  509.830227][ T6139] veth1_macvtap: left promiscuous mode
[  509.837676][   T24] pwc: recv_control_msg error -32 req 04 val 1500
[  509.862865][   T24] pwc: recv_control_msg error -32 req 02 val 2500
[  509.872846][   T24] pwc: recv_control_msg error -32 req 02 val 2400
[  509.882076][ T6139] veth0_macvtap: left promiscuous mode
[  509.887748][ T6139] veth1_vlan: left promiscuous mode
[  509.890568][   T24] pwc: recv_control_msg error -32 req 02 val 2600
[  509.912129][ T6139] veth0_vlan: left promiscuous mode
[  510.282376][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  510.290573][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  510.298705][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  510.307833][   T24] pwc: Registered as video103.
[  510.323167][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[  510.344293][   T24] usb 5-1: USB disconnect, device number 3
[  511.040765][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  511.047642][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  511.129537][ T8308] loop0: detected capacity change from 0 to 512
[  511.179295][ T8308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  511.218646][ T8308] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  512.263908][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.505291][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'.
[  514.446468][ T6139] team0 (unregistering): Port device team_slave_1 removed
[  514.631760][ T6139] team0 (unregistering): Port device team_slave_0 removed
[  515.702155][ T8344] ptrace attach of "./syz-executor exec"[5829] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  516.373036][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.451'.
[  516.953709][ T8347] loop0: detected capacity change from 0 to 1024
[  517.037181][ T8347] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  517.083828][ T8347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.100137][ T8343] ------------[ cut here ]------------
[  517.105925][ T8343] WARNING: block/blk-wbt.c:741 at wbt_init_enable_default+0x4e/0x60, CPU#1: syz.4.451/8343
[  517.115968][ T8343] Modules linked in:
[  517.119967][ T8343] CPU: 1 UID: 0 PID: 8343 Comm: syz.4.451 Not tainted syzkaller #0 PREEMPT(full) 
[  517.129217][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  517.139356][ T8343] RIP: 0010:wbt_init_enable_default+0x4e/0x60
[  517.147663][ T8343] Code: 07 5b 5d e9 94 1f 22 fd e8 8f 1f 22 fd 48 89 ef e8 77 fa ff ff 31 ff 89 c3 89 c6 e8 1c 1a 22 fd 85 db 74 dd e8 73 1f 22 fd 90 <0f> 0b 90 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90
[  517.168910][ T8343] RSP: 0018:ffffc90003f5f1b8 EFLAGS: 00010283
[  517.175160][ T8343] RAX: 0000000000053510 RBX: 00000000fffffff4 RCX: ffffc90018e07000
[  517.183402][ T8343] RDX: 0000000000080000 RSI: ffffffff849cb69d RDI: 0000000000000005
[  517.191394][ T8343] RBP: ffff8880263f6000 R08: 0000000000000005 R09: 0000000000000000
[  517.199588][ T8343] R10: 00000000fffffff4 R11: ffff888026d80b30 R12: ffff888029bfdf50
[  517.207652][ T8343] R13: ffff8880263f6390 R14: ffff888029bfdf60 R15: ffff8880263f6090
[  517.215852][ T8343] FS:  00007f8969aab6c0(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000
[  517.224921][ T8343] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  517.231525][ T8343] CR2: 00007fd417e7f000 CR3: 00000000807fa000 CR4: 0000000000350ef0
[  517.239559][ T8343] Call Trace:
[  517.242954][ T8343]  <TASK>
[  517.246821][ T8343]  blk_register_queue+0x39e/0x4e0
[  517.252681][ T8343]  __add_disk+0x74a/0xf00
[  517.257064][ T8343]  add_disk_fwnode+0x13f/0x5d0
[  517.262003][ T8343]  nbd_dev_add+0x783/0xbb0
[  517.266452][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.272153][ T8343]  ? __pfx_nbd_dev_add+0x10/0x10
[  517.277168][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.282920][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.288595][ T8343]  ? __radix_tree_lookup+0x21f/0x2c0
[  517.293990][ T8343]  nbd_genl_connect+0x8b0/0x1c60
[  517.298966][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.304720][ T8343]  ? __pfx_nbd_genl_connect+0x10/0x10
[  517.310133][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.315863][ T8343]  ? __nla_parse+0x40/0x60
[  517.320326][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.326056][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.331724][ T8343]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  517.339200][ T8343]  genl_family_rcv_msg_doit+0x209/0x2f0
[  517.344838][ T8343]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  517.351910][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.357575][ T8343]  ? genl_get_cmd+0x194/0x580
[  517.363130][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.368810][ T8343]  ? __radix_tree_lookup+0x21f/0x2c0
[  517.374238][ T8343]  genl_rcv_msg+0x55c/0x800
[  517.378772][ T8343]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.383882][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.389549][ T8343]  ? __pfx_nbd_genl_connect+0x10/0x10
[  517.395025][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.400702][ T8343]  netlink_rcv_skb+0x158/0x420
[  517.405594][ T8343]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.410648][ T8343]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  517.416058][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.421726][ T8343]  ? netlink_deliver_tap+0x1ae/0xd30
[  517.428205][ T8343]  genl_rcv+0x28/0x40
[  517.432939][ T8343]  netlink_unicast+0x5aa/0x870
[  517.437761][ T8343]  ? __pfx_netlink_unicast+0x10/0x10
[  517.443167][ T8343]  netlink_sendmsg+0x8c8/0xdd0
[  517.447988][ T8343]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.454377][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.460052][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.466564][ T8343]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  517.472727][ T8343]  ____sys_sendmsg+0xa5d/0xc30
[  517.477544][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.483254][ T8343]  ? copy_msghdr_from_user+0x10a/0x160
[  517.488750][ T8343]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.494128][ T8343]  ? __pfx_futex_wake_mark+0x10/0x10
[  517.499428][ T8343]  ___sys_sendmsg+0x134/0x1d0
[  517.504172][ T8343]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.509380][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.515066][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.520738][ T8343]  __sys_sendmsg+0x16d/0x220
[  517.525390][ T8343]  ? __pfx___sys_sendmsg+0x10/0x10
[  517.530509][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.536213][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.541981][ T8343]  do_syscall_64+0xcd/0xf80
[  517.546508][ T8343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.553147][ T8343] RIP: 0033:0x7f8968b8f749
[  517.557567][ T8343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.577960][ T8343] RSP: 002b:00007f8969aab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.586431][ T8343] RAX: ffffffffffffffda RBX: 00007f8968de6090 RCX: 00007f8968b8f749
[  517.594446][ T8343] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000005
[  517.602443][ T8343] RBP: 00007f8968c13f91 R08: 0000000000000000 R09: 0000000000000000
[  517.610410][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  517.618430][ T8343] R13: 00007f8968de6128 R14: 00007f8968de6090 R15: 00007ffcc4c6db48
[  517.626460][ T8343]  </TASK>
[  517.629478][ T8343] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  517.636748][ T8343] CPU: 1 UID: 0 PID: 8343 Comm: syz.4.451 Not tainted syzkaller #0 PREEMPT(full) 
[  517.645943][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  517.655992][ T8343] Call Trace:
[  517.659261][ T8343]  <TASK>
[  517.662183][ T8343]  dump_stack_lvl+0x3d/0x1f0
[  517.666792][ T8343]  vpanic+0x640/0x6f0
[  517.670785][ T8343]  ? wbt_init_enable_default+0x4e/0x60
[  517.676246][ T8343]  panic+0xca/0xd0
[  517.679971][ T8343]  ? __pfx_panic+0x10/0x10
[  517.684407][ T8343]  check_panic_on_warn+0xab/0xb0
[  517.689350][ T8343]  __warn+0x108/0x3c0
[  517.693363][ T8343]  __report_bug+0x2a0/0x520
[  517.697874][ T8343]  ? wbt_init_enable_default+0x4e/0x60
[  517.703343][ T8343]  ? __pfx___report_bug+0x10/0x10
[  517.708397][ T8343]  ? wbt_init_enable_default+0x4e/0x60
[  517.713857][ T8343]  report_bug+0xb2/0x220
[  517.718114][ T8343]  ? wbt_init_enable_default+0x4e/0x60
[  517.723578][ T8343]  handle_bug+0x127/0x260
[  517.727910][ T8343]  exc_invalid_op+0x17/0x50
[  517.732417][ T8343]  asm_exc_invalid_op+0x1a/0x20
[  517.737265][ T8343] RIP: 0010:wbt_init_enable_default+0x4e/0x60
[  517.743332][ T8343] Code: 07 5b 5d e9 94 1f 22 fd e8 8f 1f 22 fd 48 89 ef e8 77 fa ff ff 31 ff 89 c3 89 c6 e8 1c 1a 22 fd 85 db 74 dd e8 73 1f 22 fd 90 <0f> 0b 90 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90
[  517.762948][ T8343] RSP: 0018:ffffc90003f5f1b8 EFLAGS: 00010283
[  517.769020][ T8343] RAX: 0000000000053510 RBX: 00000000fffffff4 RCX: ffffc90018e07000
[  517.777033][ T8343] RDX: 0000000000080000 RSI: ffffffff849cb69d RDI: 0000000000000005
[  517.785000][ T8343] RBP: ffff8880263f6000 R08: 0000000000000005 R09: 0000000000000000
[  517.792964][ T8343] R10: 00000000fffffff4 R11: ffff888026d80b30 R12: ffff888029bfdf50
[  517.800934][ T8343] R13: ffff8880263f6390 R14: ffff888029bfdf60 R15: ffff8880263f6090
[  517.808925][ T8343]  ? wbt_init_enable_default+0x4d/0x60
[  517.814395][ T8343]  ? wbt_init_enable_default+0x4d/0x60
[  517.819854][ T8343]  blk_register_queue+0x39e/0x4e0
[  517.824902][ T8343]  __add_disk+0x74a/0xf00
[  517.829253][ T8343]  add_disk_fwnode+0x13f/0x5d0
[  517.834036][ T8343]  nbd_dev_add+0x783/0xbb0
[  517.838460][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.844099][ T8343]  ? __pfx_nbd_dev_add+0x10/0x10
[  517.849063][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.854796][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.860435][ T8343]  ? __radix_tree_lookup+0x21f/0x2c0
[  517.865743][ T8343]  nbd_genl_connect+0x8b0/0x1c60
[  517.870696][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.876348][ T8343]  ? __pfx_nbd_genl_connect+0x10/0x10
[  517.881729][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.887365][ T8343]  ? __nla_parse+0x40/0x60
[  517.891797][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.897435][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.903071][ T8343]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  517.910450][ T8343]  genl_family_rcv_msg_doit+0x209/0x2f0
[  517.915999][ T8343]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  517.922066][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.927706][ T8343]  ? genl_get_cmd+0x194/0x580
[  517.932412][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.938052][ T8343]  ? __radix_tree_lookup+0x21f/0x2c0
[  517.943353][ T8343]  genl_rcv_msg+0x55c/0x800
[  517.947869][ T8343]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.952894][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.958532][ T8343]  ? __pfx_nbd_genl_connect+0x10/0x10
[  517.963922][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.969566][ T8343]  netlink_rcv_skb+0x158/0x420
[  517.974344][ T8343]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.979368][ T8343]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  517.984690][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.990334][ T8343]  ? netlink_deliver_tap+0x1ae/0xd30
[  517.995634][ T8343]  genl_rcv+0x28/0x40
[  517.999643][ T8343]  netlink_unicast+0x5aa/0x870
[  518.004438][ T8343]  ? __pfx_netlink_unicast+0x10/0x10
[  518.009750][ T8343]  netlink_sendmsg+0x8c8/0xdd0
[  518.014532][ T8343]  ? __pfx_netlink_sendmsg+0x10/0x10
[  518.019826][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.025467][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.031101][ T8343]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  518.037197][ T8343]  ____sys_sendmsg+0xa5d/0xc30
[  518.041980][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.047617][ T8343]  ? copy_msghdr_from_user+0x10a/0x160
[  518.053091][ T8343]  ? __pfx_____sys_sendmsg+0x10/0x10
[  518.058399][ T8343]  ? __pfx_futex_wake_mark+0x10/0x10
[  518.063697][ T8343]  ___sys_sendmsg+0x134/0x1d0
[  518.068406][ T8343]  ? __pfx____sys_sendmsg+0x10/0x10
[  518.073620][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.079281][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.084953][ T8343]  __sys_sendmsg+0x16d/0x220
[  518.089554][ T8343]  ? __pfx___sys_sendmsg+0x10/0x10
[  518.094674][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.100328][ T8343]  ? srso_alias_return_thunk+0x5/0xfbef5
[  518.105993][ T8343]  do_syscall_64+0xcd/0xf80
[  518.110519][ T8343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.116413][ T8343] RIP: 0033:0x7f8968b8f749
[  518.120823][ T8343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  518.140433][ T8343] RSP: 002b:00007f8969aab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  518.148847][ T8343] RAX: ffffffffffffffda RBX: 00007f8968de6090 RCX: 00007f8968b8f749
[  518.156814][ T8343] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000005
[  518.164777][ T8343] RBP: 00007f8968c13f91 R08: 0000000000000000 R09: 0000000000000000
[  518.172742][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  518.180708][ T8343] R13: 00007f8968de6128 R14: 00007f8968de6090 R15: 00007ffcc4c6db48
[  518.188708][ T8343]  </TASK>
[  518.192012][ T8343] Kernel Offset: disabled
[  518.196338][ T8343] Rebooting in 86400 seconds..