last executing test programs:

5m52.25760426s ago: executing program 1 (id=132):
r0 = socket(0x10, 0x3, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9101)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000000c0)=0x60)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r8 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x6, 0x0, 0x0, 0x0)
close(r8)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
userfaultfd(0x801)

5m50.209542037s ago: executing program 1 (id=134):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0xb25, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

5m49.353524216s ago: executing program 1 (id=135):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
close_range(r3, 0xffffffffffffffff, 0x0)

5m48.348955712s ago: executing program 1 (id=139):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
close_range(r4, 0xffffffffffffffff, 0x0)

5m45.473616885s ago: executing program 1 (id=143):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r2=>0x0})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9101)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000000c0)=0x60)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r10 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x6, 0x0, 0x0, 0x0)
close(r10)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
userfaultfd(0x801)

5m43.00969609s ago: executing program 1 (id=149):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r2=>0x0})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9101)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000000c0)=0x60)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x8000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r9 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x6, 0x0, 0x0, 0x0)
close(r9)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
userfaultfd(0x801)

5m26.105996477s ago: executing program 32 (id=149):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r2=>0x0})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9101)
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000000c0)=0x60)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x8000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r9 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x6, 0x0, 0x0, 0x0)
close(r9)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
userfaultfd(0x801)

5m18.240193427s ago: executing program 4 (id=192):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000024c0)=[{{&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/48}, {&(0x7f0000000540)=""/201}], 0x0, &(0x7f0000000780)=""/21}, 0xffff}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/139}, {&(0x7f00000022c0)=""/165}, {&(0x7f0000000940)=""/240}], 0x0, &(0x7f0000000b40)=""/206, 0xf}, 0x9}, {{&(0x7f0000000c40)=@caif=@rfm, 0x0, &(0x7f0000002140)=[{&(0x7f0000000cc0)=""/4096}, {&(0x7f0000001cc0)=""/50}, {&(0x7f0000001d00)=""/201}, {&(0x7f00000037c0)=""/4096}, {&(0x7f0000001e00)=""/9}, {&(0x7f0000001e40)=""/83}, {&(0x7f0000001ec0)=""/246}, {&(0x7f0000000000)=""/77}, {&(0x7f0000002040)=""/27}, {&(0x7f0000002080)=""/164}], 0x0, &(0x7f0000002200)=""/47, 0xfffffffffffffd6f}}, {{&(0x7f0000002240)=@caif, 0xc, &(0x7f0000002380), 0x0, &(0x7f00000023c0)=""/197}}], 0x9be4, 0x40004022, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00')
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140), 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x2}]}, @func={0x7}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

5m17.143382874s ago: executing program 4 (id=194):
socket(0x10, 0x3, 0x0)
syz_open_dev$video4linux(&(0x7f00000000c0), 0x7, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x12)
read$char_usb(r0, &(0x7f0000001980)=""/179, 0xb3)
socket$kcm(0x10, 0x400000002, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000)
write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'net_cls'}, {0x2b, 'blkio'}]}, 0x10)

5m14.637559414s ago: executing program 4 (id=199):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x21, 0x4, 0x4000)
r7 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r7, 0xb)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
r9 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

5m13.559139449s ago: executing program 4 (id=202):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0xfffff443, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000740)=['\x00'], 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)=ANY=[], 0x10}], 0x1}, 0x0)
mount$afs(&(0x7f00000001c0)=ANY=[@ANYBLOB="7570397d68c1d50a3cabdc07998465d6e4ae0c0a1c5726e65a121f85f95b589aeb25f330a16f614a5f355e5b09752b1af071dc4387f13bd3011d"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400))
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x1, 0xa, 0x0, 0x700}})
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)

5m6.915364308s ago: executing program 3 (id=209):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x21, 0x4, 0x4000)
r7 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r7, 0xb)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

5m4.014660043s ago: executing program 3 (id=212):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, 0x0, 0x1, 0x0, 0x0, {0x2}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}]}, 0x24}}, 0x0)

5m3.928718454s ago: executing program 3 (id=215):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
socket(0x21, 0x4, 0x4000)
r5 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r5, 0xb)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

5m1.914274587s ago: executing program 3 (id=220):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
socket(0x21, 0x4, 0x4000)
r5 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r5, 0xb)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

5m1.869067462s ago: executing program 4 (id=222):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0xfffff443, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000740)=['\x00'], 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)=ANY=[], 0x10}], 0x1}, 0x0)
mount$afs(&(0x7f00000001c0)=ANY=[@ANYBLOB="7570397d68c1d50a3cabdc07998465d6e4ae0c0a1c5726e65a121f85f95b589aeb25f330a16f614a5f355e5b09752b1af071dc4387f13bd3011d"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400))
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)
ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x1, 0xa, 0x0, 0x700}})
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)

4m58.245451081s ago: executing program 4 (id=228):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
socket$inet6(0xa, 0x6, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

4m55.346113457s ago: executing program 3 (id=232):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
socket(0x21, 0x4, 0x4000)
r5 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r5, 0xb)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

4m51.440845659s ago: executing program 3 (id=235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5010}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4m42.680790172s ago: executing program 33 (id=228):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
socket$inet6(0xa, 0x6, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

4m35.831496375s ago: executing program 34 (id=235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5010}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m30.958063668s ago: executing program 7 (id=465):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)

2m29.658389118s ago: executing program 7 (id=466):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

2m26.960448051s ago: executing program 7 (id=474):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
socket$netlink(0x10, 0x3, 0x14)
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
gettid()
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r5, &(0x7f00000018c0), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800ea11c21d0005000000", 0x29}], 0x1)

2m25.945766228s ago: executing program 7 (id=476):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = dup(r4)
write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)

2m24.494724506s ago: executing program 7 (id=480):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r2=>0x0})
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000000c0)=0x60)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r9 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x6, 0x0, 0x0, 0x0)
close(r9)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
userfaultfd(0x801)

2m22.381257121s ago: executing program 7 (id=485):
setresgid(0xee01, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
syz_pidfd_open(0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00')

2m6.640171293s ago: executing program 35 (id=485):
setresgid(0xee01, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
syz_pidfd_open(0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00')

14.577511423s ago: executing program 6 (id=722):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000e8ffffffffbfff0900020073797a310000000008004100727865001400330073797a6b616c6c657230"], 0x38}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010003e3132308"], 0x0)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x300, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)

14.533260017s ago: executing program 8 (id=723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x34, r1, 0x16d35d4799791a7b, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0x2103, @l2={'eth', 0x3a, 'bond0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x404c050)

14.334626111s ago: executing program 8 (id=728):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x48}, 0x4, 0x700000000000000}, 0x0)

14.157542662s ago: executing program 8 (id=732):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080))
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000600)=0x2, 0x4)
recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000006c0), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0xceb5, 0xfffc}, 0x90)

12.139890175s ago: executing program 2 (id=751):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000640)=""/4096, 0xc5, 0x1000, 0x0, 0x6a31513, 0x0, @void, @value}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x1c}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)

11.953133126s ago: executing program 8 (id=753):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

10.996486067s ago: executing program 6 (id=755):
r0 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9101)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000000c0)=0x60)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r8 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x6, 0x0, 0x0, 0x0)
close(r8)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
userfaultfd(0x801)

10.991771378s ago: executing program 5 (id=756):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
socket(0x21, 0x4, 0x4000)
r6 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r6, 0xb)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

10.755731015s ago: executing program 2 (id=757):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

9.377493655s ago: executing program 8 (id=758):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
r6 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r6, 0xb)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

7.988081975s ago: executing program 6 (id=759):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x21, 0x4, 0x4000)
r7 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r7, 0xb)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

7.907918765s ago: executing program 8 (id=760):
setresgid(0xee01, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
syz_pidfd_open(0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00')

7.671488762s ago: executing program 5 (id=761):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639"})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = dup(r0)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)

6.82334083s ago: executing program 6 (id=764):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x21, 0x4, 0x4000)
r7 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r7, 0xb)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

5.101813479s ago: executing program 5 (id=765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x4)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
socket(0x21, 0x4, 0x4000)
r6 = shmget$private(0x0, 0x1000, 0x80, &(0x7f00002e7000/0x1000)=nil)
shmctl$SHM_LOCK(r6, 0xb)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}})

4.856325878s ago: executing program 6 (id=766):
setresgid(0xee01, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x3, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x4, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x6, 0x8, 0x2, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x1, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x9, 0x5, 0xcff, 0x0, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x7, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x1fffc000, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x7, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0xa, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x9, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0x1, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x100, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x9, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x4, 0x3, 0x2, 0x80000001, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x6, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x0, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x4, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x5, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x9, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x6, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0x5, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0xffffff12, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x9, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]})
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
syz_pidfd_open(r3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00')

2.877001747s ago: executing program 6 (id=767):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0xfffff443, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000740)=['\x00'], 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)

2.829065472s ago: executing program 2 (id=768):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0xfffff443, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000740)=['\x00'], 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)=ANY=[], 0x10}], 0x1}, 0x0)
mount$afs(&(0x7f00000001c0)=ANY=[@ANYBLOB="7570397d68c1d50a3cabdc07998465d6e4ae0c0a1c5726e65a121f85f95b589aeb25f330a16f614a5f355e5b09752b1af071dc4387f13bd3011d"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400))
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000340)=0x400000001, 0x4)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x1, 0xa, 0x0, 0x700}})
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)

2.822744073s ago: executing program 0 (id=769):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0xfffff443, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000740)=['\x00'], 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
mount$afs(&(0x7f00000001c0)=ANY=[@ANYBLOB="7570397d68c1d50a3cabdc07998465d6e4ae0c0a1c5726e65a121f85f95b589aeb25f330a16f614a5f355e5b09752b1af071dc4387f13bd3011d"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400))
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000340)=0x400000001, 0x4)
syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)

1.565215029s ago: executing program 0 (id=770):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0xfffff443, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000740)=['\x00'], 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)=ANY=[], 0x10}], 0x1}, 0x0)
mount$afs(&(0x7f00000001c0)=ANY=[@ANYBLOB="7570397d68c1d50a3cabdc07998465d6e4ae0c0a1c5726e65a121f85f95b589aeb25f330a16f614a5f355e5b09752b1af071dc4387f13bd3011d"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400))
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000340)=0x400000001, 0x4)
syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800)

1.564280039s ago: executing program 2 (id=771):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000640)=""/4096, 0xc5, 0x1000, 0x0, 0x6a31513, 0x0, @void, @value}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)

551.774536ms ago: executing program 5 (id=772):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

505.395771ms ago: executing program 0 (id=773):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x800)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="8000f2000a000200aa"], 0x28}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

402.145553ms ago: executing program 0 (id=774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

335.412871ms ago: executing program 5 (id=775):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x34, 0x0, 0x16d35d4799791a7b, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0x2103, @l2={'eth', 0x3a, 'bond0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x404c050)

267.408819ms ago: executing program 0 (id=776):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080)

237.425313ms ago: executing program 5 (id=777):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

174.49638ms ago: executing program 2 (id=778):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0xceb5, 0xfffc}, 0x90)

148.038213ms ago: executing program 0 (id=779):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x64000600)

0s ago: executing program 2 (id=780):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f00000003c0))
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
unshare(0x64000600)

kernel console output (not intermixed with test programs):

m.
[  190.673499][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.704035][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.705484][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.710974][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.768920][ T5630] device hsr_slave_0 entered promiscuous mode
[  190.836373][ T5630] device hsr_slave_1 entered promiscuous mode
[  190.866099][ T5630] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.867768][ T5630] Cannot create hsr debugfs directory
[  191.698992][ T4613] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.732458][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.735403][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.784389][ T4317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.792017][ T4317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.795084][ T4317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.801069][ T4307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.803261][ T4307] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  191.810064][ T4307] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.993699][ T4613] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.160438][ T5764] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  192.556902][ T2058] ieee802154 phy0 wpan0: encryption failed: -22
[  192.558624][ T2058] ieee802154 phy1 wpan1: encryption failed: -22
[  193.914502][ T4317] Bluetooth: hci1: command tx timeout
[  194.580156][ T4613] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.591314][ T5588] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  194.681557][ T4613] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.718120][ T5588] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  194.748052][ T5588] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  194.837548][ T4613] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.840998][ T5588] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  194.928404][ T4613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.959110][ T5630] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  195.017512][ T5630] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  195.158053][ T5630] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  196.267690][ T4319] Bluetooth: hci1: command tx timeout
[  196.486408][ T5630] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  196.808690][ T5757] chnl_net:caif_netlink_parms(): no params data found
[  197.209316][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.210971][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.213323][ T5757] device bridge_slave_0 entered promiscuous mode
[  197.230829][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.232364][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.234490][ T5757] device bridge_slave_1 entered promiscuous mode
[  197.252623][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.365600][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.371122][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.471567][ T5757] team0: Port device team_slave_0 added
[  197.474547][ T5757] team0: Port device team_slave_1 added
[  197.506576][ T5588] 8021q: adding VLAN 0 to HW filter on device team0
[  197.515214][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.517723][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.519218][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.524463][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.538427][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  197.540374][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  197.543830][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.545278][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.563361][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.772147][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  197.774461][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.776692][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.778223][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.789778][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  197.953606][ T5858] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  198.337410][ T4319] Bluetooth: hci1: command tx timeout
[  198.574788][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'.
[  198.783325][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  198.785556][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  198.787700][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  198.790377][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  198.793003][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.794575][ T4439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.636610][ T5757] device hsr_slave_0 entered promiscuous mode
[  199.808892][ T5757] device hsr_slave_1 entered promiscuous mode
[  199.826068][ T5757] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.827782][ T5757] Cannot create hsr debugfs directory
[  200.568339][ T4319] Bluetooth: hci1: command tx timeout
[  201.304265][ T5630] 8021q: adding VLAN 0 to HW filter on device team0
[  201.364626][ T5588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  201.367359][ T5588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.662394][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  201.690596][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  201.890570][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  202.025907][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  202.089356][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  202.157498][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  202.241688][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  202.412884][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  202.415313][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  202.417509][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.419675][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  202.421822][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.423956][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.425450][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.428148][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  202.430406][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  202.432344][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.433854][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.435745][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.474258][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.486452][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  202.498859][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.669275][ T4292] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  202.870495][ T5912] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  203.026478][ T4292] usb 1-1: Using ep0 maxpacket: 8
[  203.156257][ T4292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.159147][ T4292] usb 1-1: config 0 has no interfaces?
[  203.643292][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.677833][ T4292] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  203.680840][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.682519][ T4292] usb 1-1: Product: syz
[  203.683489][ T4292] usb 1-1: Manufacturer: syz
[  203.684487][ T4292] usb 1-1: SerialNumber: syz
[  203.711324][ T4292] usb 1-1: config 0 descriptor??
[  203.715185][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.719792][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.722299][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.615216][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  204.617797][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  204.829588][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.831392][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.833018][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.835130][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.842264][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.849971][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  204.904621][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.923931][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.787732][ T4292] usb 1-1: USB disconnect, device number 3
[  206.181679][ T5955] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  208.382588][    C1] net_ratelimit: 12 callbacks suppressed
[  208.382601][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  209.830765][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  209.832461][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  209.849779][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.968962][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  214.771215][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  214.773512][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  214.837738][ T6035] nbd2: detected capacity change from 0 to 22
[  214.883514][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  214.923105][ T6039] block nbd2: shutting down sockets
[  214.938938][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.940832][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.945337][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.947392][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.949759][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.951656][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.953364][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.955319][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.957746][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.959688][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.961450][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.963226][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.965010][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.966972][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.969347][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.971203][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.972878][ T5637] ldm_validate_partition_table(): Disk read failed.
[  214.974533][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.976457][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.979725][   T51] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.981604][   T51] Buffer I/O error on dev nbd2, logical block 0, async page read
[  214.983526][ T5637] Dev nbd2: unable to read RDB block 0
[  214.985020][ T5637]  nbd2: unable to read partition table
[  214.987292][ T5637] nbd2: partition table beyond EOD, truncated
[  215.258535][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  215.261007][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  215.263730][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  215.271937][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  215.297310][ T5637] ldm_validate_partition_table(): Disk read failed.
[  215.300129][ T5637] Dev nbd2: unable to read RDB block 0
[  215.302976][ T5588] device veth0_vlan entered promiscuous mode
[  215.304609][ T5637]  nbd2: unable to read partition table
[  215.313514][ T5637] nbd2: partition table beyond EOD, truncated
[  215.314691][ T5588] device veth1_vlan entered promiscuous mode
[  215.393249][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  215.395608][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  215.400583][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  215.404768][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  215.711654][ T4613] device hsr_slave_0 left promiscuous mode
[  215.758747][ T4613] device hsr_slave_1 left promiscuous mode
[  215.949887][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.951637][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.954535][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.956180][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.167571][ T4613] device bridge_slave_1 left promiscuous mode
[  216.193054][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.687262][ T4613] device bridge_slave_0 left promiscuous mode
[  216.689655][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.728425][ T4613] device hsr_slave_0 left promiscuous mode
[  216.873031][ T4613] device hsr_slave_1 left promiscuous mode
[  216.921859][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  216.996839][ T4613] batman_adv: batadv0: Interface deactivated: dummy0
[  217.006010][ T4613] batman_adv: batadv0: Removing interface: dummy0
[  217.009134][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.010745][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.012969][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.014537][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.030338][ T4613] device bridge_slave_1 left promiscuous mode
[  217.031841][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.082255][ T4613] device bridge_slave_0 left promiscuous mode
[  217.085479][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.246144][ T4613] device veth1_macvtap left promiscuous mode
[  217.247658][ T4613] device veth0_macvtap left promiscuous mode
[  217.249123][ T4613] device veth1_vlan left promiscuous mode
[  217.250490][ T4613] device veth0_vlan left promiscuous mode
[  217.339488][ T4613] device veth1_macvtap left promiscuous mode
[  217.340942][ T4613] device veth0_macvtap left promiscuous mode
[  217.342309][ T4613] device veth1_vlan left promiscuous mode
[  217.343920][ T4613] device veth0_vlan left promiscuous mode
[  217.989217][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  218.726760][ T6077] nbd0: detected capacity change from 0 to 22
[  218.739249][ T6052] syz.2.307 (6052): drop_caches: 2
[  218.781874][ T6079] block nbd0: shutting down sockets
[  218.807985][ T6078] ldm_validate_partition_table(): Disk read failed.
[  218.811016][ T6078] Dev nbd0: unable to read RDB block 0
[  218.812625][ T6078]  nbd0: unable to read partition table
[  218.813851][ T6078] nbd0: partition table beyond EOD, truncated
[  218.818418][ T6078] ldm_validate_partition_table(): Disk read failed.
[  218.828218][ T6078] Dev nbd0: unable to read RDB block 0
[  218.830761][ T6078]  nbd0: unable to read partition table
[  218.833184][ T6078] nbd0: partition table beyond EOD, truncated
[  218.996920][ T6082] nbd2: detected capacity change from 0 to 22
[  219.048698][ T6083] block nbd2: shutting down sockets
[  219.052135][ T6078] ldm_validate_partition_table(): Disk read failed.
[  219.053873][ T6078] Dev nbd2: unable to read RDB block 0
[  219.055343][ T6078]  nbd2: unable to read partition table
[  219.056987][ T6078] nbd2: partition table beyond EOD, truncated
[  219.060098][ T6078] ldm_validate_partition_table(): Disk read failed.
[  219.061912][ T6078] Dev nbd2: unable to read RDB block 0
[  219.063349][ T6078]  nbd2: unable to read partition table
[  219.064648][ T6078] nbd2: partition table beyond EOD, truncated
[  220.557400][ T6094] nbd0: detected capacity change from 0 to 22
[  221.251292][ T6096] syz.2.315 (6096): drop_caches: 2
[  221.255342][ T6096] syz.2.315 (6096): drop_caches: 2
[  221.278360][ T6098] block nbd0: shutting down sockets
[  221.296559][    C1] blk_print_req_error: 95 callbacks suppressed
[  221.296576][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.299726][    C1] buffer_io_error: 95 callbacks suppressed
[  221.299737][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.303557][   T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.305607][   T51] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.307623][ T1697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.309747][ T1697] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.311498][ T1697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.313484][ T1697] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.315324][ T1697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.318116][ T1697] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.321367][ T1697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.323294][ T1697] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.325018][ T1697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.327050][ T1697] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.329200][ T1697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.331141][ T1697] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.332772][ T6078] ldm_validate_partition_table(): Disk read failed.
[  221.334124][ T1697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.335805][ T1697] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.337824][   T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  221.339870][   T51] Buffer I/O error on dev nbd0, logical block 0, async page read
[  221.341814][ T6078] Dev nbd0: unable to read RDB block 0
[  221.343350][ T6078]  nbd0: unable to read partition table
[  221.344722][ T6078] nbd0: partition table beyond EOD, truncated
[  221.348955][ T6078] ldm_validate_partition_table(): Disk read failed.
[  221.352968][ T6078] Dev nbd0: unable to read RDB block 0
[  221.357033][ T6078]  nbd0: unable to read partition table
[  221.359724][ T6078] nbd0: partition table beyond EOD, truncated
[  222.087415][ T4613] team0 (unregistering): Port device team_slave_1 removed
[  222.657270][ T4613] team0 (unregistering): Port device team_slave_0 removed
[  222.677530][ T6107] nbd0: detected capacity change from 0 to 22
[  222.922728][ T6109] block nbd0: shutting down sockets
[  223.419065][ T6078] ldm_validate_partition_table(): Disk read failed.
[  223.421029][ T6078] Dev nbd0: unable to read RDB block 0
[  223.422536][ T6078]  nbd0: unable to read partition table
[  223.423915][ T6078] nbd0: partition table beyond EOD, truncated
[  223.433008][ T6078] ldm_validate_partition_table(): Disk read failed.
[  223.434889][ T6078] Dev nbd0: unable to read RDB block 0
[  223.439924][ T6078]  nbd0: unable to read partition table
[  223.441310][ T6078] nbd0: partition table beyond EOD, truncated
[  223.678234][ T4613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.377452][ T4613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.498258][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.646338][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.619617][ T6138] syz.2.324 (6138): drop_caches: 2
[  227.620880][ T6138] syz.2.324 (6138): drop_caches: 2
[  229.849145][ T4613] bond0 (unregistering): Released all slaves
[  230.557705][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.586234][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.907275][ T6153] syz.2.329 (6153): drop_caches: 2
[  230.910884][ T6153] syz.2.329 (6153): drop_caches: 2
[  232.870110][ T4613] team0 (unregistering): Port device team_slave_1 removed
[  233.060096][ T4613] team0 (unregistering): Port device team_slave_0 removed
[  233.198086][ T4613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.416683][ T4613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.596880][ T4317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  234.603057][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.606393][ T4317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  234.614796][ T4317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  234.617415][ T4317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  234.619575][ T4317] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  234.621358][ T4317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  234.635077][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.656020][ T4317] Bluetooth: hci3: command tx timeout
[  236.768625][ T4613] bond0 (unregistering): Released all slaves
[  237.022065][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  237.024421][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  237.145676][ T6177] syz.0.333 uses obsolete (PF_INET,SOCK_PACKET)
[  237.150534][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  237.152962][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  237.155518][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  237.160956][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  237.192136][ T5630] device veth0_vlan entered promiscuous mode
[  237.268944][ T5630] device veth1_vlan entered promiscuous mode
[  237.287705][ T5757] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  237.318084][ T5757] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  238.260215][ T5757] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  238.432753][ T5757] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  238.539500][ T6202] usb usb8: usbfs: process 6202 (syz.2.335) did not claim interface 0 before use
[  239.188730][ T4317] Bluetooth: hci3: command tx timeout
[  239.227541][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  239.230261][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  239.250158][ T6200] usb usb8: usbfs: process 6200 (syz.0.336) did not claim interface 0 before use
[  239.283662][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  239.285815][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  239.304463][ T5630] device veth0_macvtap entered promiscuous mode
[  239.452626][ T5630] device veth1_macvtap entered promiscuous mode
[  239.504976][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.507594][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.509815][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.511911][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.515789][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.518809][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  239.521184][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  239.523278][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  239.526836][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  239.563033][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.565075][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.590333][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.592461][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.616671][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.620123][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  239.622453][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  239.625498][ T5630] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.632166][ T5630] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.633920][ T5630] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.635682][ T5630] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.662410][ T6162] chnl_net:caif_netlink_parms(): no params data found
[  239.849078][ T1787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.850884][ T1787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.857363][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  239.903125][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.997677][ T6212] loop0: detected capacity change from 0 to 40427
[  240.016597][ T6218] loop2: detected capacity change from 0 to 40427
[  240.037398][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.039183][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.044354][ T6218] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff
[  240.050720][ T6218] F2FS-fs (loop2): invalid crc value
[  240.053521][ T6212] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[  240.069650][ T5757] 8021q: adding VLAN 0 to HW filter on device team0
[  240.073302][ T6212] F2FS-fs (loop0): invalid crc value
[  240.075127][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  240.077506][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  240.079515][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  240.095677][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.103030][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.105264][ T6162] device bridge_slave_0 entered promiscuous mode
[  240.114902][ T6218] F2FS-fs (loop2): Found nat_bits in checkpoint
[  240.119279][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  240.124564][ T6212] F2FS-fs (loop0): Found nat_bits in checkpoint
[  240.143746][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  240.147082][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.148596][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.153532][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  240.162632][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.166748][ T6212] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  240.169456][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.171602][ T6162] device bridge_slave_1 entered promiscuous mode
[  240.179212][ T6218] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  240.197159][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  240.199802][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  240.201781][ T1787] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.203261][ T1787] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.238693][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  240.241120][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  240.244081][ T4301] syz-executor: attempt to access beyond end of device
[  240.244081][ T4301] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.271189][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  240.274875][ T1787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  240.314687][ T6162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.323473][ T4303] syz-executor: attempt to access beyond end of device
[  240.323473][ T4303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.329899][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  240.332408][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  240.334854][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  240.360655][ T6162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.551838][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  240.554117][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  240.556888][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  240.559231][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  241.273953][ T4319] Bluetooth: hci3: command tx timeout
[  241.397548][ T6244] netlink: 'syz.0.341': attribute type 12 has an invalid length.
[  241.402706][ T6162] team0: Port device team_slave_0 added
[  241.447632][ T6162] team0: Port device team_slave_1 added
[  241.685896][ T6162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.687474][ T6162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.693035][ T6162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.717782][ T6162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.719352][ T6162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.724773][ T6162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.787983][ T6266] netlink: 68 bytes leftover after parsing attributes in process `syz.0.344'.
[  242.647862][ T6162] device hsr_slave_0 entered promiscuous mode
[  242.666955][ T6162] device hsr_slave_1 entered promiscuous mode
[  242.712104][ T6162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  242.713741][ T6162] Cannot create hsr debugfs directory
[  242.748838][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  242.750602][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  242.810075][ T6255] loop7: detected capacity change from 0 to 32768
[  242.893767][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.938505][ T6255] XFS (loop7): Mounting V5 Filesystem
[  243.018824][ T6268] loop2: detected capacity change from 0 to 40427
[  243.029422][ T6268] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff
[  243.068070][ T6268] F2FS-fs (loop2): invalid crc value
[  243.076974][ T6255] XFS (loop7): Ending clean mount
[  243.082744][ T6255] XFS (loop7): Quotacheck needed: Please wait.
[  243.095142][ T6268] F2FS-fs (loop2): Found nat_bits in checkpoint
[  243.125518][ T6255] XFS (loop7): Quotacheck: Done.
[  243.174766][ T6268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  243.265269][ T4303] syz-executor: attempt to access beyond end of device
[  243.265269][ T4303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  243.278315][ T5630] XFS (loop7): Unmounting Filesystem
[  243.296792][ T4319] Bluetooth: hci3: command tx timeout
[  243.380620][ T6271] loop0: detected capacity change from 0 to 40427
[  243.439669][ T6271] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  243.441393][ T6271] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  243.445243][ T6271] F2FS-fs (loop0): invalid crc value
[  243.452118][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  243.454501][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  243.479250][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  243.505240][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  243.511307][ T6271] F2FS-fs (loop0): Found nat_bits in checkpoint
[  243.537110][ T5757] device veth0_vlan entered promiscuous mode
[  243.542811][ T5757] device veth1_vlan entered promiscuous mode
[  243.548689][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  243.550777][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  243.552191][ T6271] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  243.552816][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  243.553980][ T6271] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  243.624795][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  243.728255][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  243.803684][ T5757] device veth0_macvtap entered promiscuous mode
[  243.924249][ T5757] device veth1_macvtap entered promiscuous mode
[  244.084795][ T6317] syz.0.345: attempt to access beyond end of device
[  244.084795][ T6317] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  244.096312][ T6317] syz.0.345: attempt to access beyond end of device
[  244.096312][ T6317] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  244.527583][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.530026][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.531970][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.534296][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.600543][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.603483][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.620522][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.759183][ T4301] syz-executor: attempt to access beyond end of device
[  244.759183][ T4301] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  245.025025][ T6309] loop2: detected capacity change from 0 to 40427
[  245.044967][ T6309] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  245.046804][ T6309] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  245.052472][ T6309] F2FS-fs (loop2): invalid crc value
[  245.075958][ T6309] F2FS-fs (loop2): Found nat_bits in checkpoint
[  245.110081][ T6309] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  245.111438][ T6309] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  245.123666][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  245.126260][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  245.128449][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  245.137044][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  245.144010][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.147062][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.149098][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.151262][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.153177][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.155309][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.174796][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.189281][ T5757] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.191156][ T5757] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.192908][ T5757] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.215285][ T5757] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.327490][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  245.329850][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  247.280926][ T4303] syz-executor: attempt to access beyond end of device
[  247.280926][ T4303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  247.359239][ T6323] loop7: detected capacity change from 0 to 40427
[  247.372137][ T6323] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  247.373831][ T6323] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  247.387919][ T6323] F2FS-fs (loop7): invalid crc value
[  247.553939][ T6323] F2FS-fs (loop7): Found nat_bits in checkpoint
[  250.443616][ T1787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.445518][ T1787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.502139][ T4610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.504155][ T4610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.595564][ T6355] loop0: detected capacity change from 0 to 40427
[  250.633469][ T6355] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  250.635032][ T6355] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  250.647377][ T6355] F2FS-fs (loop0): invalid crc value
[  250.697748][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  250.700053][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  250.724627][ T6355] F2FS-fs (loop0): Found nat_bits in checkpoint
[  250.841146][ T6355] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  250.842889][ T6355] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  251.303914][ T6387] syz.0.352: attempt to access beyond end of device
[  251.303914][ T6387] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  251.343213][ T6387] syz.0.352: attempt to access beyond end of device
[  251.343213][ T6387] loop0: rw=34817, sector=77824, nr_sectors = 56 limit=40427
[  251.874282][ T4301] syz-executor: attempt to access beyond end of device
[  251.874282][ T4301] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  252.001261][ T6370] loop2: detected capacity change from 0 to 40427
[  252.031914][ T6370] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  252.038595][ T6370] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  252.044124][ T6370] F2FS-fs (loop2): invalid crc value
[  252.082076][ T6370] F2FS-fs (loop2): Found nat_bits in checkpoint
[  252.107707][ T6370] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  252.109588][ T6370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  252.191618][ T6162] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  253.019100][ T6162] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  253.068901][ T6162] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  253.105359][ T6391] loop7: detected capacity change from 0 to 40427
[  253.132933][ T4303] syz-executor: attempt to access beyond end of device
[  253.132933][ T4303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  253.164999][ T6391] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  253.175925][ T6391] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  253.186728][ T6391] F2FS-fs (loop7): invalid crc value
[  253.227984][ T6391] F2FS-fs (loop7): Found nat_bits in checkpoint
[  253.284729][ T6162] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  253.307466][ T6391] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  253.308908][ T6391] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  253.660910][ T6424] syz.7.357: attempt to access beyond end of device
[  253.660910][ T6424] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  253.939626][ T2058] ieee802154 phy0 wpan0: encryption failed: -22
[  253.941143][ T2058] ieee802154 phy1 wpan1: encryption failed: -22
[  254.052302][ T6410] loop5: detected capacity change from 0 to 40427
[  254.109517][ T4613] device hsr_slave_0 left promiscuous mode
[  254.114670][ T6410] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  254.143834][ T6410] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  254.180374][ T6410] F2FS-fs (loop5): invalid crc value
[  254.186333][ T4613] device hsr_slave_1 left promiscuous mode
[  254.219720][ T6413] loop0: detected capacity change from 0 to 40427
[  254.230348][ T5630] syz-executor: attempt to access beyond end of device
[  254.230348][ T5630] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  254.276818][ T6413] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  254.280052][ T6413] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  254.297635][ T6410] F2FS-fs (loop5): Found nat_bits in checkpoint
[  254.311817][ T6413] F2FS-fs (loop0): invalid crc value
[  254.316192][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.322633][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.324862][ T4613] device bridge_slave_1 left promiscuous mode
[  254.330837][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.364264][ T6413] F2FS-fs (loop0): Found nat_bits in checkpoint
[  254.374518][ T6410] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  254.378345][ T6410] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  254.395169][ T4613] device bridge_slave_0 left promiscuous mode
[  254.396779][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.430428][ T6413] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  254.431935][ T6413] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  254.479387][ T4613] device hsr_slave_0 left promiscuous mode
[  255.730413][ T6445] syz.0.358: attempt to access beyond end of device
[  255.730413][ T6445] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  255.738791][ T6445] syz.0.358: attempt to access beyond end of device
[  255.738791][ T6445] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  255.775986][ T6440] syz.5.359: attempt to access beyond end of device
[  255.775986][ T6440] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  255.779444][ T6440] syz.5.359: attempt to access beyond end of device
[  255.779444][ T6440] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  255.836545][ T6445] syz.0.358: attempt to access beyond end of device
[  255.836545][ T6445] loop0: rw=34817, sector=45096, nr_sectors = 8 limit=40427
[  256.554370][ T4613] device hsr_slave_1 left promiscuous mode
[  256.587571][ T5757] syz-executor: attempt to access beyond end of device
[  256.587571][ T5757] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  256.598785][ T4301] syz-executor: attempt to access beyond end of device
[  256.598785][ T4301] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  256.837418][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.848036][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.850147][ T4613] device bridge_slave_1 left promiscuous mode
[  256.851620][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.158050][ T4613] device bridge_slave_0 left promiscuous mode
[  257.160384][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.644492][ T4613] device veth1_vlan left promiscuous mode
[  257.687103][ T4613] device veth0_vlan left promiscuous mode
[  257.717708][ T4613] device veth1_vlan left promiscuous mode
[  257.719071][ T4613] device veth0_vlan left promiscuous mode
[  258.239728][ T6454] loop7: detected capacity change from 0 to 40427
[  258.270535][ T6454] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  258.283056][ T6454] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  258.309642][ T6454] F2FS-fs (loop7): invalid crc value
[  258.340502][ T6454] F2FS-fs (loop7): Found nat_bits in checkpoint
[  258.382764][ T6454] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  258.384295][ T6454] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  258.544846][ T6460] loop2: detected capacity change from 0 to 40427
[  258.622304][ T6462] loop5: detected capacity change from 0 to 40427
[  258.624812][ T6462] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  258.624834][ T6460] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  258.633108][ T6460] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  258.636031][ T6462] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  258.642362][ T6462] F2FS-fs (loop5): invalid crc value
[  258.878704][ T6472] syz.7.361: attempt to access beyond end of device
[  258.878704][ T6472] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  258.883811][ T6472] syz.7.361: attempt to access beyond end of device
[  258.883811][ T6472] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  259.026502][ T6460] F2FS-fs (loop2): invalid crc value
[  259.257830][ T6460] F2FS-fs (loop2): Found nat_bits in checkpoint
[  259.264266][ T6462] F2FS-fs (loop5): Found nat_bits in checkpoint
[  259.366112][ T6462] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  259.367712][ T6462] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  259.374327][ T5630] syz-executor: attempt to access beyond end of device
[  259.374327][ T5630] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  259.397103][ T6460] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  259.398479][ T6460] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  259.610611][ T6464] loop0: detected capacity change from 0 to 40427
[  259.630135][ T6464] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  259.631819][ T6464] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  261.734937][ T6489] syz.2.365: attempt to access beyond end of device
[  261.734937][ T6489] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  261.738562][ T6486] syz.5.363: attempt to access beyond end of device
[  261.738562][ T6486] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  261.819999][ T6464] F2FS-fs (loop0): invalid crc value
[  261.821739][ T6464] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12)
[  261.854458][ T5757] syz-executor: attempt to access beyond end of device
[  261.854458][ T5757] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  261.860117][ T4303] syz-executor: attempt to access beyond end of device
[  261.860117][ T4303] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  264.198236][ T6492] loop0: detected capacity change from 0 to 40427
[  264.210615][ T6492] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  264.214574][ T6492] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  264.226979][ T6492] F2FS-fs (loop0): invalid crc value
[  264.238661][ T6502] loop7: detected capacity change from 0 to 40427
[  264.255261][ T6502] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  264.259892][ T6492] F2FS-fs (loop0): Found nat_bits in checkpoint
[  264.267426][ T6502] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  264.277845][ T6502] F2FS-fs (loop7): invalid crc value
[  264.298118][ T6502] F2FS-fs (loop7): Found nat_bits in checkpoint
[  264.314645][ T6492] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  264.316410][ T6492] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  264.332467][ T6502] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  264.334181][ T6502] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  264.470569][ T6506] loop5: detected capacity change from 0 to 40427
[  264.508686][ T6506] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  264.511714][ T6506] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  264.530161][ T6506] F2FS-fs (loop5): invalid crc value
[  264.802436][ T6524] syz.0.369: attempt to access beyond end of device
[  264.802436][ T6524] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  264.806156][ T6524] syz.0.369: attempt to access beyond end of device
[  264.806156][ T6524] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  265.106067][ T6506] F2FS-fs (loop5): Found nat_bits in checkpoint
[  265.191840][ T4613] team0 (unregistering): Port device team_slave_1 removed
[  265.226011][ T6506] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  265.227625][ T6506] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  265.332004][ T4301] syz-executor: attempt to access beyond end of device
[  265.332004][ T4301] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  265.715432][ T6529] syz.5.367: attempt to access beyond end of device
[  265.715432][ T6529] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  265.720969][ T6529] syz.5.367: attempt to access beyond end of device
[  265.720969][ T6529] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  265.848492][ T4613] team0 (unregistering): Port device team_slave_0 removed
[  266.165419][ T6530] syz.7.370: attempt to access beyond end of device
[  266.165419][ T6530] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  266.204133][ T6530] syz.7.370: attempt to access beyond end of device
[  266.204133][ T6530] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  266.208419][ T5757] syz-executor: attempt to access beyond end of device
[  266.208419][ T5757] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  266.307007][ T4613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.541090][ T4613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.810727][ T6542] netlink: 'syz.5.375': attribute type 29 has an invalid length.
[  268.514353][ T5630] syz-executor: attempt to access beyond end of device
[  268.514353][ T5630] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  269.454001][ T6552] netlink: 'syz.0.378': attribute type 29 has an invalid length.
[  269.522857][ T6554] loop7: detected capacity change from 0 to 2048
[  269.555316][ T6554] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  269.598159][ T5630] EXT4-fs (loop7): unmounting filesystem.
[  271.966605][ T4613] bond0 (unregistering): Released all slaves
[  272.026266][ T4317] Bluetooth: hci3: command tx timeout
[  273.448902][ T4613] team0 (unregistering): Port device team_slave_1 removed
[  273.648815][ T4613] team0 (unregistering): Port device team_slave_0 removed
[  273.867387][ T4613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  274.126795][ T4613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.594976][ T4613] bond0 (unregistering): Released all slaves
[  276.847390][ T6542] netlink: 'syz.5.375': attribute type 29 has an invalid length.
[  276.849131][ T6552] netlink: 'syz.0.378': attribute type 29 has an invalid length.
[  278.738341][ T6583] mkiss: ax0: crc mode is auto.
[  280.716158][    T7] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  280.762572][ T6162] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.236138][    T7] usb 1-1: device descriptor read/64, error -71
[  281.635342][    T7] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  281.799500][ T6586] loop5: detected capacity change from 0 to 32768
[  281.862867][ T6162] 8021q: adding VLAN 0 to HW filter on device team0
[  281.886341][ T6162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  281.888656][ T6162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  282.338204][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  282.455525][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  282.725042][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  282.729969][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  282.735493][ T4610] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.737074][ T4610] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.753857][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  282.759386][ T6586] JBD2: Ignoring recovery information on journal
[  282.778612][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  282.793346][ T4610] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.794887][ T4610] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.803631][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  282.813288][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  282.822069][ T6611] loop2: detected capacity change from 0 to 64
[  282.823853][ T6611] =======================================================
[  282.823853][ T6611] WARNING: The mand mount option has been deprecated and
[  282.823853][ T6611]          and is ignored by this kernel. Remove the mand
[  282.823853][ T6611]          option from the mount to silence this warning.
[  282.823853][ T6611] =======================================================
[  282.832742][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  282.834092][ T6586] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  282.837836][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  282.841051][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  282.854265][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  282.870884][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  282.874386][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  282.893853][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  282.902352][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  282.964600][ T6605] mkiss: ax0: crc mode is auto.
[  283.207441][ T6616] loop0: detected capacity change from 0 to 256
[  283.228878][ T5757] ocfs2: Unmounting device (7,5) on (node local)
[  283.248959][ T6616] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  283.362602][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  283.364869][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  283.367728][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  284.470410][ T6162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.472574][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  284.474457][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  284.645458][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.735726][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.997498][ T6162] device veth0_vlan entered promiscuous mode
[  287.007080][ T6162] device veth1_vlan entered promiscuous mode
[  287.027606][ T6676] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  287.100404][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  287.102823][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  287.110012][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  287.112972][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  287.125174][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  287.174172][ T6680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  287.178213][ T6680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  287.179749][ T6680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  287.194767][ T6680] device bridge_slave_0 left promiscuous mode
[  287.205085][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.270256][ T6680] device bridge_slave_1 left promiscuous mode
[  287.271778][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.308286][ T6680] bond0: (slave bond_slave_0): Releasing backup interface
[  287.355350][ T6680] bond0: (slave bond_slave_1): Releasing backup interface
[  287.440741][ T6680] team0: Port device team_slave_0 removed
[  287.459316][ T6680] team0: Port device team_slave_1 removed
[  287.462398][ T6680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.472211][ T6680] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.478006][ T6680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.479761][ T6680] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.510660][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  287.512792][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  287.543835][ T6676] netlink: 'syz.0.405': attribute type 4 has an invalid length.
[  287.592592][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  287.595032][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  287.624771][ T6162] device veth0_macvtap entered promiscuous mode
[  287.640046][ T6162] device veth1_macvtap entered promiscuous mode
[  287.672955][ T6162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.675361][ T6162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.705902][ T6162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.708089][ T6162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.710111][ T6162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.712077][ T6162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.715554][ T6162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.792121][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  287.794392][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  287.802912][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  287.806956][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  287.824662][ T6162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.830058][ T6162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.832068][ T6162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.834151][ T6162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.861089][ T6162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.863264][ T6162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.874038][ T6162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.938174][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  287.940450][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  287.974743][ T6693] netlink: 'syz.0.408': attribute type 4 has an invalid length.
[  287.992356][ T6162] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.994233][ T6162] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.996496][ T6162] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.998224][ T6162] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.156504][  T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.158190][  T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.176186][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  288.195441][ T4610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.198066][ T4610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.202263][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  288.259514][ T6702] netlink: 'syz.0.409': attribute type 4 has an invalid length.
[  289.740236][ T6727] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  289.776660][ T4317] Bluetooth: hci4: command 0x1003 tx timeout
[  289.779185][ T4319] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  289.800625][ T6706] loop0: detected capacity change from 0 to 32768
[  289.833463][ T6706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.410 (6706)
[  289.911072][ T6706] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  289.913615][ T6706] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  289.915387][ T6706] BTRFS info (device loop0): using free space tree
[  289.973549][ T6734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.016674][ T6717] loop7: detected capacity change from 0 to 32768
[  290.020969][ T6717] BTRFS warning: duplicate device /dev/loop7 devid 1 generation 8 scanned by syz.7.411 (6717)
[  290.027132][ T6734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.175255][ T6731] infiniband syz1: set down
[  290.177104][ T6731] infiniband syz1: added syzkaller0
[  290.383842][ T6706] BTRFS info (device loop0): enabling ssd optimizations
[  291.117695][ T6731] RDS/IB: syz1: added
[  291.120104][ T6731] smc: adding ib device syz1 with port count 1
[  291.121721][ T6731] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  293.064473][ T6796] netlink: 'syz.6.427': attribute type 10 has an invalid length.
[  293.074079][ T6796] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  293.080677][ T6803] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(88418921822020) <= P.seqno(0) <= S.SWH(88418921822094)) and (P.ackno exists or LAWL(256033690549158) <= P.ackno(256033690549159) <= S.AWH(256033690549159), sending SYNC...
[  293.217855][ T4301] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  293.423191][ T6771] wlan0 speed is unknown, defaulting to 1000
[  293.424631][ T6771] wlan0 speed is unknown, defaulting to 1000
[  293.444570][ T6771] wlan0 speed is unknown, defaulting to 1000
[  293.451814][ T6771] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  293.811895][ T6771] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  294.423050][ T6771] wlan0 speed is unknown, defaulting to 1000
[  294.441797][ T6771] wlan0 speed is unknown, defaulting to 1000
[  294.443666][ T6771] wlan0 speed is unknown, defaulting to 1000
[  294.449250][ T6771] wlan0 speed is unknown, defaulting to 1000
[  294.468756][ T6771] wlan0 speed is unknown, defaulting to 1000
[  294.470872][ T4645] smc: removing ib device syz1
[  294.629859][ T6830] netlink: 'syz.0.429': attribute type 10 has an invalid length.
[  295.496625][ T6841] batman_adv: batadv0: Adding interface: dummy0
[  295.498061][ T6841] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.544336][ T6841] batman_adv: batadv0: Interface activated: dummy0
[  295.753072][ T6842] batadv0: mtu less than device minimum
[  295.774192][ T6842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  295.779538][ T6842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  295.784672][ T6842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  295.789975][ T6842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  295.795184][ T6842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  295.800658][ T6842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  295.806136][ T6842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  295.811156][ T6842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  296.187670][ T6851] rtc-efi rtc-efi.0: write status is 3
[  296.848027][ T6854] tipc: Started in network mode
[  296.849493][ T6854] tipc: Node identity aaaaaaaaaa17, cluster identity 4711
[  296.851509][ T6854] tipc: Enabled bearer <eth:bond0>, priority 28
[  296.874470][ T6854] tipc: Resetting bearer <eth:bond0>
[  296.898009][ T6854] tipc: Resetting bearer <eth:bond0>
[  296.905276][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.457095][ T6880] kAFS: unparsable volume name
[  298.032224][ T4353] tipc: Node number set to 12429994
[  298.077249][ T6869] netlink: 'syz.5.441': attribute type 12 has an invalid length.
[  298.923297][ T6890] rtc-efi rtc-efi.0: write status is 3
[  299.148315][ T6884] rtc-efi rtc-efi.0: write status is 3
[  299.845416][ T6911] rtc-efi rtc-efi.0: write status is 3
[  300.363721][ T6906] bridge0: port 3(syz_tun) entered blocking state
[  300.365468][ T6906] bridge0: port 3(syz_tun) entered disabled state
[  300.500928][ T6906] device syz_tun entered promiscuous mode
[  300.613017][ T6906] bridge0: port 3(syz_tun) entered blocking state
[  300.614715][ T6906] bridge0: port 3(syz_tun) entered forwarding state
[  300.697870][ T6916] kAFS: unparsable volume name
[  300.710883][ T6917] device syz_tun left promiscuous mode
[  300.712374][ T6917] bridge0: port 3(syz_tun) entered disabled state
[  301.546910][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  301.549356][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  301.551508][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  301.563672][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  301.574409][ T6917] device bridge_slave_0 left promiscuous mode
[  301.580807][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.746296][ T6917] device bridge_slave_1 left promiscuous mode
[  301.747707][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.789675][ T6917] bond0: (slave bond_slave_0): Releasing backup interface
[  302.526251][ T6917] bond0: (slave bond_slave_1): Releasing backup interface
[  302.534563][ T6907] loop2: detected capacity change from 0 to 32768
[  302.615191][ T6575] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (6575)
[  302.642552][ T6917] team0: Port device team_slave_0 removed
[  302.677388][ T6917] team0: Port device team_slave_1 removed
[  302.679259][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.680784][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.700776][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.702595][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.746868][ T6927] wlan0 speed is unknown, defaulting to 1000
[  302.751367][ T6939] wlan0 speed is unknown, defaulting to 1000
[  302.866059][ T6952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.176481][ T6967] loop5: detected capacity change from 0 to 8192
[  303.243441][ T6969] wlan0 speed is unknown, defaulting to 1000
[  304.538968][ T6967] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  304.542012][ T6967] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  304.544536][ T6967] REISERFS (device loop5): using writeback data mode
[  304.545911][ T6967] reiserfs: using flush barriers
[  304.549669][ T6967] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  304.553302][ T6967] REISERFS (device loop5): checking transaction log (loop5)
[  304.559713][ T6967] REISERFS (device loop5): Using r5 hash to sort names
[  304.563146][ T6967] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  304.566371][ T6967] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  304.580904][ T6967] netlink: 'syz.5.458': attribute type 8 has an invalid length.
[  305.649561][ T6993] rtc-efi rtc-efi.0: write status is 3
[  306.406290][ T7002] netlink: 'syz.2.464': attribute type 8 has an invalid length.
[  307.492954][ T4307] Bluetooth: hci6: command 0x0406 tx timeout
[  307.852591][ T6982] loop0: detected capacity change from 0 to 40427
[  307.871532][ T6982] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  307.881644][ T6982] F2FS-fs (loop0): invalid crc value
[  307.902485][ T6982] F2FS-fs (loop0): Found nat_bits in checkpoint
[  307.942106][ T6982] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  308.923018][ T4301] syz-executor: attempt to access beyond end of device
[  308.923018][ T4301] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  310.418667][ T7053] netlink: 'syz.7.474': attribute type 8 has an invalid length.
[  311.222359][ T7057] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  311.435052][ T7061] netlink: 'syz.5.471': attribute type 4 has an invalid length.
[  312.049376][ T7074] wlan0 speed is unknown, defaulting to 1000
[  312.665199][ T7050] loop6: detected capacity change from 0 to 40427
[  312.730726][ T7050] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff
[  312.794245][ T7050] F2FS-fs (loop6): invalid crc value
[  312.899352][ T7050] F2FS-fs (loop6): Found nat_bits in checkpoint
[  315.387346][ T2058] ieee802154 phy0 wpan0: encryption failed: -22
[  315.393434][ T2058] ieee802154 phy1 wpan1: encryption failed: -22
[  315.426131][ T7110] wlan0 speed is unknown, defaulting to 1000
[  317.075908][ T7127] wlan0 speed is unknown, defaulting to 1000
[  317.455976][ T4319] Bluetooth: hci1: command 0x0406 tx timeout
[  317.688080][ T7130] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  317.933096][ T7130] netlink: 'syz.2.488': attribute type 4 has an invalid length.
[  318.018687][ T7133] netlink: 'syz.6.489': attribute type 10 has an invalid length.
[  319.161185][ T7166] wlan0 speed is unknown, defaulting to 1000
[  324.806333][ T7239] netlink: 40 bytes leftover after parsing attributes in process `syz.2.506'.
[  325.983847][ T4307] Bluetooth: hci3: link tx timeout
[  325.985096][ T4307] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  328.486370][ T4307] Bluetooth: hci3: command 0x0406 tx timeout
[  334.833673][ T4307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  334.837227][ T4307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  334.839465][ T4307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  334.842406][ T4307] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  334.844356][ T4307] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  334.848219][ T4307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  337.062258][ T4307] Bluetooth: hci4: command tx timeout
[  339.862424][ T4307] Bluetooth: hci4: command tx timeout
[  340.919701][ T7341] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  342.216529][ T4317] Bluetooth: hci4: command tx timeout
[  345.233863][ T7298] wlan0 speed is unknown, defaulting to 1000
[  345.497903][ T4307] Bluetooth: hci4: command tx timeout
[  347.844186][ T4317] Bluetooth: hci4: command tx timeout
[  348.253656][ T7399] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  349.543312][ T7410] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  351.021516][ T4610] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.041671][ T7426] netlink: 'syz.6.540': attribute type 10 has an invalid length.
[  351.044000][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.045757][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.102820][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.104305][ T7426] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.105903][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.107422][ T7426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.119098][ T7426] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  351.124893][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.540'.
[  351.127187][ T7429] device bridge_slave_1 left promiscuous mode
[  351.134093][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.188058][ T7429] device bridge_slave_0 left promiscuous mode
[  351.189389][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.454521][ T7429] bond0: (slave bridge0): Releasing backup interface
[  352.501092][ T7298] chnl_net:caif_netlink_parms(): no params data found
[  353.728562][ T4610] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.655583][ T7456] netlink: 48 bytes leftover after parsing attributes in process `syz.5.545'.
[  354.667881][ T7462] netlink: 'syz.5.545': attribute type 10 has an invalid length.
[  354.689946][ T7462] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  354.771670][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.545'.
[  356.045669][ T7466] bond0: (slave bridge0): Releasing backup interface
[  357.728640][ T7500] nbd6: detected capacity change from 0 to 22
[  357.760264][ T4610] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.774060][ T7505] block nbd6: shutting down sockets
[  357.776434][    C0] blk_print_req_error: 60 callbacks suppressed
[  357.776447][    C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.780129][    C0] buffer_io_error: 60 callbacks suppressed
[  357.780139][    C0] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.814523][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.816692][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.818565][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.820504][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.822336][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.824380][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.826840][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.828801][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.830501][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.832382][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.834015][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.836074][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.838312][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.840146][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.841750][ T6575] ldm_validate_partition_table(): Disk read failed.
[  357.843160][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.845196][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.848890][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  357.850790][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  357.873885][ T6575] Dev nbd6: unable to read RDB block 0
[  357.880503][ T6575]  nbd6: unable to read partition table
[  357.881835][ T6575] nbd6: partition table beyond EOD, truncated
[  357.901986][ T6575] ldm_validate_partition_table(): Disk read failed.
[  357.916291][ T6575] Dev nbd6: unable to read RDB block 0
[  357.921446][ T6575]  nbd6: unable to read partition table
[  357.922715][ T6575] nbd6: partition table beyond EOD, truncated
[  358.111673][ T4610] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.567185][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.570986][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.575399][ T7298] device bridge_slave_0 entered promiscuous mode
[  358.582223][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.583982][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.590128][ T7298] device bridge_slave_1 entered promiscuous mode
[  358.614602][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.633202][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.713395][ T7298] team0: Port device team_slave_0 added
[  358.746705][ T7526] nbd6: detected capacity change from 0 to 22
[  358.811420][ T7523] block nbd6: shutting down sockets
[  358.863726][ T7298] team0: Port device team_slave_1 added
[  358.874692][ T6572] ldm_validate_partition_table(): Disk read failed.
[  359.111991][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.113722][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.324190][ T6572] Dev nbd6: unable to read RDB block 0
[  359.377591][ T6572]  nbd6: unable to read partition table
[  359.483795][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.491761][ T6572] nbd6: partition table beyond EOD, truncated
[  359.808278][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.810169][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.869489][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.918933][ T6572] ldm_validate_partition_table(): Disk read failed.
[  359.926884][ T6572] Dev nbd6: unable to read RDB block 0
[  359.930387][ T6572]  nbd6: unable to read partition table
[  359.931640][ T6572] nbd6: partition table beyond EOD, truncated
[  360.103186][ T7547] nbd5: detected capacity change from 0 to 22
[  360.138172][ T7546] block nbd5: shutting down sockets
[  361.047794][ T7298] device hsr_slave_0 entered promiscuous mode
[  361.186447][ T7298] device hsr_slave_1 entered promiscuous mode
[  361.197631][ T7559] nbd0: detected capacity change from 0 to 22
[  361.233507][ T7557] block nbd0: shutting down sockets
[  361.237225][ T7539] ldm_validate_partition_table(): Disk read failed.
[  361.238990][ T7539] Dev nbd0: unable to read RDB block 0
[  361.241475][ T7539]  nbd0: unable to read partition table
[  361.242749][ T7539] nbd0: partition table beyond EOD, truncated
[  361.253474][ T7539] ldm_validate_partition_table(): Disk read failed.
[  361.255637][ T7539] Dev nbd0: unable to read RDB block 0
[  361.258440][ T7298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.260038][ T7298] Cannot create hsr debugfs directory
[  361.282848][ T7539]  nbd0: unable to read partition table
[  361.442715][ T7539] nbd0: partition table beyond EOD, truncated
[  362.113768][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.180569][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.222145][ T7573] syz.0.564 (7573): drop_caches: 2
[  363.229292][ T7573] syz.0.564 (7573): drop_caches: 2
[  363.330610][ T7572] syz.5.563 (7572): drop_caches: 2
[  363.332096][ T7572] syz.5.563 (7572): drop_caches: 2
[  364.335704][ T7298] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  364.388078][ T7298] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  364.516009][    T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  364.580841][ T7298] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  364.650901][ T7595] nbd6: detected capacity change from 0 to 22
[  365.407419][ T7298] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  365.409342][ T7598] block nbd6: shutting down sockets
[  365.499224][    C0] blk_print_req_error: 95 callbacks suppressed
[  365.499239][    C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.502582][    C0] buffer_io_error: 95 callbacks suppressed
[  365.502594][    C0] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.525393][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.527786][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.534130][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.536823][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.538680][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.540757][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.542788][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.544710][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.555394][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.557517][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.559382][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.561302][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.563324][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.565224][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.568792][ T7539] ldm_validate_partition_table(): Disk read failed.
[  365.570237][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.572121][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.576052][   T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  365.577944][   T51] Buffer I/O error on dev nbd6, logical block 0, async page read
[  365.579884][ T7539] Dev nbd6: unable to read RDB block 0
[  365.584419][ T7539]  nbd6: unable to read partition table
[  365.588586][ T7539] nbd6: partition table beyond EOD, truncated
[  365.614333][ T7539] ldm_validate_partition_table(): Disk read failed.
[  365.626702][ T7539] Dev nbd6: unable to read RDB block 0
[  365.628250][ T7539]  nbd6: unable to read partition table
[  365.629493][ T7539] nbd6: partition table beyond EOD, truncated
[  366.023143][ T7609] usb usb8: usbfs: process 7609 (syz.5.568) did not claim interface 0 before use
[  366.416280][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.418663][    T7] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  366.696020][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  366.698239][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.699976][    T7] usb 1-1: Product: syz
[  366.700815][    T7] usb 1-1: Manufacturer: syz
[  366.701872][    T7] usb 1-1: SerialNumber: syz
[  366.702781][ T4307] Bluetooth: hci3: link tx timeout
[  366.703954][ T4307] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  367.866117][    T7] usb 1-1: can't set config #1, error -71
[  367.868949][    T7] usb 1-1: USB disconnect, device number 6
[  368.149472][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.159997][ T7298] 8021q: adding VLAN 0 to HW filter on device team0
[  368.182380][ T7298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  368.184796][ T7298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  368.990867][ T7657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.027324][ T7657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.394422][ T7663] syz.2.576 (7663): drop_caches: 2
[  369.399344][ T7663] syz.2.576 (7663): drop_caches: 2
[  369.963590][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  369.965687][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  369.972407][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  369.974601][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  369.976894][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.978407][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.980407][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  369.982647][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  369.984838][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.986475][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.990775][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  369.993301][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  369.995787][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  369.999576][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  370.001967][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  370.004450][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  370.007437][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  370.009784][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  370.012346][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  370.014710][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  370.041139][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  370.049573][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  370.062577][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  370.181545][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.279746][ T7672] binder: BINDER_SET_CONTEXT_MGR already set
[  370.281393][ T7672] binder: 7661:7672 ioctl 4018620d 200001c0 returned -16
[  370.285174][ T7672] binder: 7661:7672 got transaction to invalid handle, 1
[  370.287428][ T7672] binder: 7672:7661 cannot find target node
[  370.288939][ T7672] binder: 7661:7672 transaction call to 0:0 failed 5/29201/-22, size 0-0 line 3054
[  370.436553][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.733426][ T7674] syz.5.579 (7674): drop_caches: 2
[  370.737482][ T7674] syz.5.579 (7674): drop_caches: 2
[  372.480448][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.501449][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.764885][ T7689] syz.2.582 (7689): drop_caches: 2
[  373.776266][ T7689] syz.2.582 (7689): drop_caches: 2
[  374.574547][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.102268][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.161992][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.283106][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  376.284833][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  376.309070][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.323690][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.484831][ T7717] syz.6.585 (7717): drop_caches: 2
[  376.486401][ T7717] syz.6.585 (7717): drop_caches: 2
[  377.877330][ T7721] syz.2.586 (7721): drop_caches: 2
[  377.879374][ T7721] syz.2.586 (7721): drop_caches: 2
[  379.567906][ T2058] ieee802154 phy0 wpan0: encryption failed: -22
[  379.569371][ T2058] ieee802154 phy1 wpan1: encryption failed: -22
[  382.177302][ T7734] usb usb8: usbfs: process 7734 (syz.6.590) did not claim interface 0 before use
[  382.187524][ T7737] usb usb8: usbfs: process 7737 (syz.5.589) did not claim interface 0 before use
[  383.673963][ T7755] netlink: 68 bytes leftover after parsing attributes in process `syz.6.592'.
[  384.456176][ T4610] device hsr_slave_0 left promiscuous mode
[  384.536045][ T4610] device hsr_slave_1 left promiscuous mode
[  384.746101][ T4610] device veth1_macvtap left promiscuous mode
[  384.747512][ T4610] device veth0_macvtap left promiscuous mode
[  384.748848][ T4610] device veth1_vlan left promiscuous mode
[  384.750071][ T4610] device veth0_vlan left promiscuous mode
[  384.902949][ T7760] loop2: detected capacity change from 0 to 40427
[  384.926402][ T7760] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  384.928011][ T7760] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  384.944854][ T7760] F2FS-fs (loop2): invalid crc value
[  384.973965][ T7760] F2FS-fs (loop2): Found nat_bits in checkpoint
[  385.037000][ T7760] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  385.038692][ T7760] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  385.105236][ T7765] loop6: detected capacity change from 0 to 40427
[  385.120251][ T7765] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  385.122964][ T7765] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  385.299244][ T7765] F2FS-fs (loop6): invalid crc value
[  385.303998][ T7771] loop5: detected capacity change from 0 to 40427
[  385.308273][ T7771] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  385.309846][ T7771] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  385.316906][ T7771] F2FS-fs (loop5): invalid crc value
[  385.342507][ T7771] F2FS-fs (loop5): Found nat_bits in checkpoint
[  385.703278][ T7769] loop0: detected capacity change from 0 to 40427
[  385.712243][ T7769] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  385.722369][ T7769] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  385.735422][ T7765] F2FS-fs (loop6): Found nat_bits in checkpoint
[  385.747926][ T7769] F2FS-fs (loop0): invalid crc value
[  385.755572][ T7771] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  385.765153][ T7771] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  385.790479][ T7769] F2FS-fs (loop0): Found nat_bits in checkpoint
[  385.803172][ T7765] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  385.804619][ T7765] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  385.848863][ T7769] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  385.850504][ T7769] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  386.171376][ T4303] syz-executor: attempt to access beyond end of device
[  386.171376][ T4303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  387.551475][ T7790] syz.0.598: attempt to access beyond end of device
[  387.551475][ T7790] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  387.852950][ T7790] syz.0.598: attempt to access beyond end of device
[  387.852950][ T7790] loop0: rw=34817, sector=77824, nr_sectors = 56 limit=40427
[  388.176639][ T6162] syz-executor: attempt to access beyond end of device
[  388.176639][ T6162] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  388.182134][ T4301] syz-executor: attempt to access beyond end of device
[  388.182134][ T4301] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  388.190435][ T5757] syz-executor: attempt to access beyond end of device
[  388.190435][ T5757] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  393.024373][ T4307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  393.056950][ T4319] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  393.059232][ T4319] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  393.061899][ T4319] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  393.065504][ T4319] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  393.086316][ T4319] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  394.153535][ T7831] loop0: detected capacity change from 0 to 40427
[  394.162523][ T7831] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  394.164810][ T7831] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  394.168682][ T7831] F2FS-fs (loop0): invalid crc value
[  394.196025][ T7831] F2FS-fs (loop0): Found nat_bits in checkpoint
[  394.208917][ T7834] loop2: detected capacity change from 0 to 40427
[  394.228035][ T7834] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  394.229732][ T7834] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  394.236871][ T7831] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  394.238421][ T7831] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  394.253591][ T7834] F2FS-fs (loop2): invalid crc value
[  394.365087][ T7840] loop6: detected capacity change from 0 to 40427
[  394.383051][ T7840] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  394.391728][ T7840] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  394.424879][ T7840] F2FS-fs (loop6): invalid crc value
[  394.437998][ T7834] F2FS-fs (loop2): Found nat_bits in checkpoint
[  394.464615][ T7847] loop5: detected capacity change from 0 to 40427
[  394.467810][ T7840] F2FS-fs (loop6): Found nat_bits in checkpoint
[  394.473058][ T7847] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  394.474848][ T7847] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  394.701911][ T7860] syz.0.608: attempt to access beyond end of device
[  394.701911][ T7860] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  394.708016][ T7860] syz.0.608: attempt to access beyond end of device
[  394.708016][ T7860] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  395.031752][ T7847] F2FS-fs (loop5): invalid crc value
[  395.074771][ T7840] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  395.084181][ T7840] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  395.152331][ T7847] F2FS-fs (loop5): Found nat_bits in checkpoint
[  395.156133][ T4317] Bluetooth: hci5: command tx timeout
[  395.205410][ T7847] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  395.207111][ T7847] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  395.344411][ T4301] syz-executor: attempt to access beyond end of device
[  395.344411][ T4301] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  396.446775][ T7874] syz.5.613: attempt to access beyond end of device
[  396.446775][ T7874] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  396.552602][ T7874] syz.5.613: attempt to access beyond end of device
[  396.552602][ T7874] loop5: rw=34817, sector=77824, nr_sectors = 56 limit=40427
[  396.857541][ T7870] syz.6.612: attempt to access beyond end of device
[  396.857541][ T7870] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  396.963841][ T6162] syz-executor: attempt to access beyond end of device
[  396.963841][ T6162] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  396.972768][ T5757] syz-executor: attempt to access beyond end of device
[  396.972768][ T5757] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  397.216786][ T4319] Bluetooth: hci5: command tx timeout
[  398.278952][ T7876] loop2: detected capacity change from 0 to 40427
[  398.324180][ T7876] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  398.332923][ T7876] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  398.335673][ T7876] F2FS-fs (loop2): invalid crc value
[  399.097783][ T7876] F2FS-fs (loop2): Found nat_bits in checkpoint
[  399.236116][ T7876] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  399.237681][ T7876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  399.296084][ T4317] Bluetooth: hci5: command tx timeout
[  400.167192][ T7900] syz.2.615: attempt to access beyond end of device
[  400.167192][ T7900] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  400.172426][ T7900] syz.2.615: attempt to access beyond end of device
[  400.172426][ T7900] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  400.631524][ T7884] loop0: detected capacity change from 0 to 40427
[  400.647524][ T7902] loop6: detected capacity change from 0 to 2048
[  400.671451][ T7884] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  400.673845][ T7884] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  400.674699][ T7902] UDF-fs: bad mount option "gid=18446744073709551615.gid=forget" or missing value
[  400.699086][ T4303] syz-executor: attempt to access beyond end of device
[  400.699086][ T4303] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  400.700517][ T7886] loop5: detected capacity change from 0 to 40427
[  400.704909][ T7884] F2FS-fs (loop0): invalid crc value
[  400.708712][ T7886] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  400.710245][ T7886] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  400.714082][ T7886] F2FS-fs (loop5): invalid crc value
[  400.764015][ T7886] F2FS-fs (loop5): Found nat_bits in checkpoint
[  400.768519][ T7884] F2FS-fs (loop0): Found nat_bits in checkpoint
[  400.884467][ T7884] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  400.886144][ T7884] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  400.939436][ T7886] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  400.940985][ T7886] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  403.146255][ T7921] syz.5.617: attempt to access beyond end of device
[  403.146255][ T7921] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  403.146252][ T7919] syz.0.618: attempt to access beyond end of device
[  403.146252][ T7919] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  403.149414][ T7921] syz.5.617: attempt to access beyond end of device
[  403.149414][ T7921] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  403.303063][ T4319] Bluetooth: hci5: command tx timeout
[  403.446799][ T4301] syz-executor: attempt to access beyond end of device
[  403.446799][ T4301] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  403.531912][ T5757] syz-executor: attempt to access beyond end of device
[  403.531912][ T5757] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  403.670985][ T7926] loop2: detected capacity change from 0 to 40427
[  403.687405][ T7926] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  403.689088][ T7926] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  403.717537][ T7926] F2FS-fs (loop2): invalid crc value
[  403.765322][ T7926] F2FS-fs (loop2): Found nat_bits in checkpoint
[  403.874190][ T7926] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  403.875643][ T7926] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  404.832576][ T7940] syz.2.621: attempt to access beyond end of device
[  404.832576][ T7940] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  404.837783][ T7940] syz.2.621: attempt to access beyond end of device
[  404.837783][ T7940] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  405.306704][ T7942] loop5: detected capacity change from 0 to 2048
[  405.326516][ T7942] UDF-fs: bad mount option "gid=18446744073709551615.gid=forget" or missing value
[  405.387051][ T4303] bio_check_eod: 1 callbacks suppressed
[  405.387065][ T4303] syz-executor: attempt to access beyond end of device
[  405.387065][ T4303] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  406.323537][ T7934] loop0: detected capacity change from 0 to 40427
[  406.341011][ T7934] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  406.342552][ T7934] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  406.376107][ T7934] F2FS-fs (loop0): invalid crc value
[  406.394031][ T7934] F2FS-fs (loop0): Found nat_bits in checkpoint
[  406.407981][ T7934] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  406.409473][ T7934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  406.873446][ T7954] syz.0.622: attempt to access beyond end of device
[  406.873446][ T7954] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  406.879304][ T7954] syz.0.622: attempt to access beyond end of device
[  406.879304][ T7954] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  407.372767][ T4301] syz-executor: attempt to access beyond end of device
[  407.372767][ T4301] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  407.388856][ T7951] loop2: detected capacity change from 0 to 40427
[  407.392037][ T7951] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  407.393569][ T7951] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  407.397319][ T7951] F2FS-fs (loop2): invalid crc value
[  407.437768][ T7951] F2FS-fs (loop2): Found nat_bits in checkpoint
[  407.488025][ T7951] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  407.489607][ T7951] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  408.314562][ T7960] loop0: detected capacity change from 0 to 40427
[  408.318267][ T7960] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  408.320150][ T7960] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  408.323199][ T7960] F2FS-fs (loop0): invalid crc value
[  408.330875][ T7960] F2FS-fs (loop0): Found nat_bits in checkpoint
[  408.350665][ T4303] syz-executor: attempt to access beyond end of device
[  408.350665][ T4303] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  408.385309][ T7960] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  408.387527][ T7960] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  408.592375][ T7969] loop2: detected capacity change from 0 to 2048
[  408.594302][ T7969] UDF-fs: bad mount option "gid=18446744073709551615.gid=forget" or missing value
[  409.322910][ T7729] blk_print_req_error: 25 callbacks suppressed
[  409.322925][ T7729] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  409.341954][ T4301] syz-executor: attempt to access beyond end of device
[  409.341954][ T4301] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  411.359244][ T4610] bond0 (unregistering): Released all slaves
[  411.411129][ T7980] loop0: detected capacity change from 0 to 40427
[  411.419237][ T7980] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  411.420940][ T7980] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  411.433316][ T7980] F2FS-fs (loop0): invalid crc value
[  411.443310][ T7980] F2FS-fs (loop0): Found nat_bits in checkpoint
[  411.457867][ T7980] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  411.459458][ T7980] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  412.467755][ T4301] syz-executor: attempt to access beyond end of device
[  412.467755][ T4301] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  412.582048][ T7841] wlan0 speed is unknown, defaulting to 1000
[  413.456166][ T4319] Bluetooth: hci3: command 0x0406 tx timeout
[  413.817311][ T7989] loop6: detected capacity change from 0 to 40427
[  413.828723][ T7989] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  413.830519][ T7989] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  413.850826][ T7989] F2FS-fs (loop6): invalid crc value
[  413.923514][ T7841] chnl_net:caif_netlink_parms(): no params data found
[  415.588559][ T7989] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-4)
[  415.627693][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.649750][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.664059][ T7841] device bridge_slave_0 entered promiscuous mode
[  415.680632][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.693839][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.706559][ T7841] device bridge_slave_1 entered promiscuous mode
[  416.816693][ T7841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.840252][ T7841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.899490][ T7841] team0: Port device team_slave_0 added
[  416.902146][ T7841] team0: Port device team_slave_1 added
[  416.955660][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  416.965713][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  416.983257][ T7841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.998929][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.000607][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.018363][ T7841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.137999][ T7841] device hsr_slave_0 entered promiscuous mode
[  417.245923][ T6311] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  417.297614][ T7841] device hsr_slave_1 entered promiscuous mode
[  417.329192][ T7841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  417.331874][ T7841] Cannot create hsr debugfs directory
[  418.120523][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.124664][ T8051] mkiss: ax0: crc mode is auto.
[  418.178260][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.185966][ T6311] usb 1-1: device descriptor read/64, error -71
[  418.200034][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.267049][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.586976][ T6311] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  418.828739][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.127641][ T6311] usb 1-1: device descriptor read/64, error -71
[  419.132067][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.278040][ T6311] usb usb1-port1: attempt power cycle
[  419.536168][ T4319] Bluetooth: hci5: command tx timeout
[  420.003196][ T8062] loop0: detected capacity change from 0 to 32768
[  420.012754][ T8062] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.642 (8062)
[  420.021886][ T8062] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  420.032603][ T8062] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  420.043622][ T8062] BTRFS info (device loop0): using free space tree
[  420.308968][ T8062] BTRFS info (device loop0): enabling ssd optimizations
[  420.561059][ T4301] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  420.667320][ T7841] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  421.107367][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.556794][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.560168][ T7841] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  421.794754][ T7841] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  422.596528][ T7841] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  422.645173][ T8106] loop2: detected capacity change from 0 to 32768
[  422.729669][ T8106] XFS (loop2): Mounting V5 Filesystem
[  422.782150][ T8106] XFS (loop2): Ending clean mount
[  423.802411][ T4303] XFS (loop2): Unmounting Filesystem
[  424.011284][ T4610] device hsr_slave_0 left promiscuous mode
[  424.025386][ T8141] loop6: detected capacity change from 0 to 32768
[  424.036529][ T4610] device hsr_slave_1 left promiscuous mode
[  424.063369][ T8141] XFS (loop6): Mounting V5 Filesystem
[  424.106972][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.109234][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.111489][ T4610] device bridge_slave_1 left promiscuous mode
[  424.113030][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.136857][ T4610] device bridge_slave_0 left promiscuous mode
[  424.138349][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.233293][ T8141] XFS (loop6): Ending clean mount
[  424.271550][ T8145] loop5: detected capacity change from 0 to 32768
[  424.385291][ T8145] XFS (loop5): Mounting V5 Filesystem
[  424.439069][ T6162] XFS (loop6): Unmounting Filesystem
[  424.473256][ T8145] XFS (loop5): Ending clean mount
[  424.560568][ T5757] XFS (loop5): Unmounting Filesystem
[  425.680358][ T4610] team0 (unregistering): Port device team_slave_1 removed
[  426.407092][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  426.458006][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.782687][ T4610] team0 (unregistering): Port device team_slave_0 removed
[  426.988762][ T4610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  427.234953][ T4610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.626070][ T4610] bond0 (unregistering): Released all slaves
[  429.858419][ T8180] tipc: Started in network mode
[  429.859726][ T8180] tipc: Node identity aaaaaaaaaa17, cluster identity 4711
[  429.861283][ T8180] tipc: Enabled bearer <eth:bond0>, priority 28
[  429.938608][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  429.941715][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  429.943371][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  429.983490][ T8194] mkiss: ax0: crc mode is auto.
[  430.333959][ T7841] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.389674][ T8223] batman_adv: batadv0: Adding interface: dummy0
[  430.391195][ T8223] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.413038][ T8223] batman_adv: batadv0: Interface activated: dummy0
[  431.169526][ T8118] tipc: Node number set to 12429994
[  431.214170][ T8228] net_ratelimit: 12 callbacks suppressed
[  431.214185][ T8228] batadv0: mtu less than device minimum
[  431.235209][ T8228] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  431.240615][ T8228] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  431.245809][ T8228] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  431.251328][ T8228] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  431.256567][ T8228] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  431.261683][ T8228] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  431.267070][ T8228] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  431.272415][ T8228] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  431.277628][ T8228] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  431.368511][ T8234] loop0: detected capacity change from 0 to 32768
[  431.376778][ T8234] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.660 (8234)
[  431.393710][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  431.398893][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  431.403109][ T8234] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  431.410042][ T7841] 8021q: adding VLAN 0 to HW filter on device team0
[  431.416455][ T8234] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  431.422037][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  431.424332][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  431.441196][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.442797][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.520942][ T8234] BTRFS info (device loop0): using free space tree
[  431.613722][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  431.616713][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  431.623671][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  431.628014][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.629626][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.640251][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  431.663805][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  433.462812][ T8269] loop6: detected capacity change from 0 to 64
[  433.497411][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  433.519923][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  433.532362][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  433.588279][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  433.606960][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  433.609078][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  433.623561][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  433.803775][ T7841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  433.817584][ T8234] BTRFS error (device loop0): open_ctree failed
[  434.634006][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  434.637926][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  435.111099][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  435.112954][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  435.869897][ T8317] mkiss: ax0: crc mode is auto.
[  436.061747][ T7841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.307588][ T8285] loop5: detected capacity change from 0 to 32768
[  436.379474][ T8285] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  436.519673][ T8350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.582862][ T5757] ocfs2: Unmounting device (7,5) on (node local)
[  436.641802][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  436.643950][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  436.669641][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  436.671969][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  436.674546][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  436.679779][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  436.693386][ T7841] device veth0_vlan entered promiscuous mode
[  436.713529][ T7841] device veth1_vlan entered promiscuous mode
[  436.758774][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  436.760963][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  436.763547][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  436.772883][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  436.781729][ T7841] device veth0_macvtap entered promiscuous mode
[  436.793833][ T7841] device veth1_macvtap entered promiscuous mode
[  436.818351][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.820530][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.822466][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  436.842414][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.847023][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.851000][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  436.853041][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  436.855024][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  436.859050][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  436.870771][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.872958][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.874994][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.884048][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.887030][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  436.889147][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  436.892186][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.896743][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  436.898848][  T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  436.914946][ T7841] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.917111][ T7841] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.918795][ T7841] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.920664][ T7841] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.056353][  T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.058173][  T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.068797][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  437.085496][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.087628][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.098185][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  439.200114][ T8385] wlan0 speed is unknown, defaulting to 1000
[  441.043696][ T8404] mkiss: ax0: crc mode is auto.
[  441.120995][ T8382] wlan0 speed is unknown, defaulting to 1000
[  441.521510][ T8428] batman_adv: batadv0: Adding interface: dummy0
[  441.522802][ T8428] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.537471][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.539651][ T8428] batman_adv: batadv0: Interface activated: dummy0
[  441.561655][ T8428] net_ratelimit: 10 callbacks suppressed
[  441.561669][ T8428] batadv0: mtu less than device minimum
[  441.567249][ T8428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.572579][ T8428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.577759][ T8428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.583035][ T8428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.588649][ T8428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.593949][ T8428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.599142][ T8428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.604514][ T8428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.609761][ T8428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.659608][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.671369][ T8433] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  442.034178][ T8450] tipc: Started in network mode
[  442.037107][ T8450] tipc: Node identity aaaaaaaaaa17, cluster identity 4711
[  442.046304][ T8450] tipc: Enabled bearer <eth:bond0>, priority 28
[  442.075255][ T8450] tipc: Resetting bearer <eth:bond0>
[  442.080700][ T8450] tipc: Resetting bearer <eth:bond0>
[  442.341295][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.710'.
[  442.440029][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.715'.
[  442.532142][ T8479] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  442.702678][ T8489] syzkaller0 speed is unknown, defaulting to 1000
[  442.704988][ T8489] syzkaller0 speed is unknown, defaulting to 1000
[  442.711155][ T8491] tipc: Started in network mode
[  442.712281][ T8491] tipc: Node identity aaaaaaaaaa17, cluster identity 4711
[  442.713923][ T8491] tipc: Enabled bearer <eth:bond0>, priority 28
[  442.718529][ T8496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.736461][ T8489] syzkaller0 speed is unknown, defaulting to 1000
[  442.771406][ T8496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.954065][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'.
[  442.960431][ T8489] infiniband syz1: set down
[  442.964243][ T8489] infiniband syz1: added syzkaller0
[  442.989360][ T8117] syzkaller0 speed is unknown, defaulting to 1000
[  443.063392][ T8489] RDS/IB: syz1: added
[  443.064400][ T8489] smc: adding ib device syz1 with port count 1
[  443.075405][   T14] tipc: Node number set to 12429994
[  443.106917][ T8489] smc:    ib device syz1 port 1 has pnetid 
[  443.123248][ T8117] syzkaller0 speed is unknown, defaulting to 1000
[  443.125233][ T8489] syzkaller0 speed is unknown, defaulting to 1000
[  443.377507][ T2058] ieee802154 phy0 wpan0: encryption failed: -22
[  443.379086][ T2058] ieee802154 phy1 wpan1: encryption failed: -22
[  443.514021][ T8489] syzkaller0 speed is unknown, defaulting to 1000
[  443.715335][ T8489] syzkaller0 speed is unknown, defaulting to 1000
[  443.826016][   T14] tipc: Node number set to 12429994
[  443.863109][ T8518] loop8: detected capacity change from 0 to 40427
[  443.928511][ T8518] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x3ffff
[  443.965264][ T8489] syzkaller0 speed is unknown, defaulting to 1000
[  443.973438][ T8518] F2FS-fs (loop8): invalid crc value
[  444.745972][ T8518] F2FS-fs (loop8): Found nat_bits in checkpoint
[  444.871800][ T8518] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  444.887761][ T8489] syzkaller0 speed is unknown, defaulting to 1000
[  445.079120][ T8489] syzkaller0 speed is unknown, defaulting to 1000
[  445.265632][ T7841] syz-executor: attempt to access beyond end of device
[  445.265632][ T7841] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  449.151314][ T8616] rtc-efi rtc-efi.0: write status is 3
[  449.918434][ T8628] rtc-efi rtc-efi.0: write status is 3
[  453.998092][ T8649] rtc-efi rtc-efi.0: write status is 3
[  454.710762][ T8656] kAFS: unparsable volume name
[  454.965891][ T8665] kAFS: unparsable volume name
[  456.016806][ T8675] kAFS: unparsable volume name
[  456.728790][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'.
[  457.238336][ T8701] 
[  457.239159][ T8701] =============================
[  457.240168][ T8701] WARNING: suspicious RCU usage
[  457.241393][ T8701] 6.1.114-syzkaller #0 Not tainted
[  457.242584][ T8701] -----------------------------
[  457.243831][ T8701] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage!
[  457.245743][ T8701] 
[  457.245743][ T8701] other info that might help us debug this:
[  457.245743][ T8701] 
[  457.247987][ T8701] 
[  457.247987][ T8701] rcu_scheduler_active = 2, debug_locks = 1
[  457.249669][ T8701] 3 locks held by syz.5.777/8701:
[  457.250768][ T8701]  #0: ffff80001804f270 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50
[  457.252577][ T8701]  #1: ffff0000d2c907c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x484/0x764
[  457.254610][ T8701]  #2: ffff0000f0d50d40 (&wdev->mtx){+.+.}-{3:3}, at: nl80211_new_station+0x1434/0x1c64
[  457.256761][ T8701] 
[  457.256761][ T8701] stack backtrace:
[  457.257949][ T8701] CPU: 0 PID: 8701 Comm: syz.5.777 Not tainted 6.1.114-syzkaller #0
[  457.259603][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  457.261736][ T8701] Call trace:
[  457.262418][ T8701]  dump_backtrace+0x1c8/0x1f4
[  457.263409][ T8701]  show_stack+0x2c/0x3c
[  457.264293][ T8701]  dump_stack_lvl+0x108/0x170
[  457.265244][ T8701]  dump_stack+0x1c/0x58
[  457.266164][ T8701]  lockdep_rcu_suspicious+0x260/0x464
[  457.267288][ T8701]  sta_remove_link+0x38c/0x474
[  457.268309][ T8701]  sta_info_free+0x68/0x2ec
[  457.269296][ T8701]  ieee80211_add_station+0x308/0x4e4
[  457.270370][ T8701]  rdev_add_station+0x158/0x3e0
[  457.271389][ T8701]  nl80211_new_station+0x1500/0x1c64
[  457.272578][ T8701]  genl_rcv_msg+0x948/0xc2c
[  457.273605][ T8701]  netlink_rcv_skb+0x20c/0x3b8
[  457.274664][ T8701]  genl_rcv+0x38/0x50
[  457.275516][ T8701]  netlink_unicast+0x65c/0x898
[  457.276505][ T8701]  netlink_sendmsg+0x834/0xb18
[  457.277456][ T8701]  ____sys_sendmsg+0x55c/0x848
[  457.278431][ T8701]  __sys_sendmsg+0x26c/0x33c
[  457.279436][ T8701]  __arm64_sys_sendmsg+0x80/0x94
[  457.280454][ T8701]  invoke_syscall+0x98/0x2c0
[  457.281465][ T8701]  el0_svc_common+0x138/0x258
[  457.282556][ T8701]  do_el0_svc+0x64/0x218
[  457.283424][ T8701]  el0_svc+0x58/0x168
[  457.284308][ T8701]  el0t_64_sync_handler+0x84/0xf0
[  457.285411][ T8701]  el0t_64_sync+0x18c/0x190
[  457.416749][ T8705] wlan0 speed is unknown, defaulting to 1000
[  457.423964][ T8705] syzkaller0 speed is unknown, defaulting to 1000
[  458.413120][ T8719] wlan0 speed is unknown, defaulting to 1000
[  458.414939][ T8719] syzkaller0 speed is unknown, defaulting to 1000