last executing test programs:

12.911087491s ago: executing program 2 (id=144):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101"], 0x0)
syz_emit_ethernet(0x72, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB='time_offset=0x00000000000000c7,keep_last_dots,fmask=00000000000000000077777,utf8,errors=remount-ro,time_offset=0x0000000000000000,fmask=00000000000000000002001,errors=remount-ro,sys_tz,gid=', @ANYRESHEX=0x0, @ANYBLOB='?\x00'], 0x1, 0x1548, &(0x7f0000000380)="$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")
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8201, 0x0)
ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000080))
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_disconnect(r0)

9.565583396s ago: executing program 2 (id=154):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, 0x0, 0x80)

8.503894259s ago: executing program 2 (id=157):
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDENABIO(r0, 0x4b36)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x100000}])
write(0xffffffffffffffff, &(0x7f0000000680)="e2c701ca999fb40615", 0x9)
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x7fffffffffffffff}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0xa800, 0x2b8, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x118, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x101, 0x9, 0x1, 0x0, "d87e709b44cf6ef1cc06060a0f3012050454b2e03739f2d07bd3badb87414e15086ba93902589b7a35b6bdad7ea0bb7e65ae52218fe9fc43f7902cc301488dc4"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
openat$cgroup_type(r1, &(0x7f00000003c0), 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x10})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008000000010000008000332200001ac5dbd3a79113069b2b21303c53bce9c446229781", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000200)=0x2, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2", @ANYRESDEC=r5, @ANYRES16=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

8.465232358s ago: executing program 4 (id=159):
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000280)={0x1, 0x0, 0x0, 0xffff, 0x1, "8703000000b8c64a903184033c5f00", 0x0, 0x100})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000001c00)=0x84)
fsopen(0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00.\x00\x00\x002['], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x3, 0x61, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x6, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xc, {{0x9, 0x24, 0x6, 0x0, 0x0, "1da9293e"}, {0x5, 0x24, 0x0, 0x7c6b}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x2, 0xba}, [@acm={0x4, 0x24, 0x2, 0x3}, @obex={0x5, 0x24, 0x15, 0xb}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0xf2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x4, 0xbb}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "a854a3ef22107d871f9d51670a0389dd"}]}})
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)}], 0x1, 0x0, 0x0)

7.298223698s ago: executing program 3 (id=163):
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

6.519193051s ago: executing program 3 (id=165):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], &(0x7f0000000380)=""/2, 0x46, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x28)
socket(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='ext4_es_shrink_scan_exit\x00', r0, 0x0, 0x7}, 0x18)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

6.265544167s ago: executing program 3 (id=166):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38)
timer_create(0xfffffffd, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x9)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r5, &(0x7f0000002840), 0x0, 0x20044000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001"], 0x84}}, 0x20000000)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r2, r3+10000000}}, 0x0)

5.960834328s ago: executing program 2 (id=167):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, 0x0, 0x80)

5.817869833s ago: executing program 4 (id=169):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)

5.22623058s ago: executing program 2 (id=171):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
sendmmsg$inet(r4, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$netlink(r5, 0x10e, 0x4, &(0x7f0000000100)=""/78, &(0x7f00000000c0)=0xffffff0f)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x10013, 0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

4.972348597s ago: executing program 1 (id=172):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/104], 0xfc}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffea9}}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)

4.791909403s ago: executing program 0 (id=173):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xe0)

4.739998019s ago: executing program 3 (id=174):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
writev(r1, &(0x7f0000001600)=[{&(0x7f0000000000)="02dec93f0af8f0192a044b9e0e55", 0xe}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001680)="deb1e207c7412fdbdbaf7abdb2a59943c10bdaf44f93c7308e704a18641deefa8a7cdd444d1aaf824eb322c004b696d5d14452b9bc9602376592512dcd0d644b777cd4228c5d39c5df1f3d353a467a18d11aa29a214278f2585ca2b361ef818826054e6653c8ed54143bbd5b5ebbb397654b199606b4e81155ff5e695120cc4fb8952dc7da98b2bb5881cdd39fc656d63e3ef0feb938364499218d59084dd015eca772a1e16b936924e5435ec9429dea9d46f1ec1dc9e67a26241e0a0ea0f91194aaa6881cf3bd55", 0xc8}], 0x5)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
copy_file_range(r3, &(0x7f0000000080), r2, &(0x7f0000000100), 0xfffffffffffffff8, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000002c0))

4.475891294s ago: executing program 0 (id=175):
socket(0x10, 0x3, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

4.475455616s ago: executing program 3 (id=176):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000050000c7dd628c7c18d6eb136dc292234fd7e7c229ddc73f72a647fcc105a202d7ecd11bf8e0539a21c56d31f4a47fbc3c41798b4a9ff84d2e9e1e336b6ffac2f1aa8612e9dbb8dc663055510f6e64cb48b3ffbc9ef4ba2b3879c46c5e7324"], 0x0, 0x0})
bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(0xffffffffffffffff, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000000000000000007000000071717"], 0x48}, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="f408797dd53b71622ab702cf1a6e4175076da54553f1f1c4448cb5559e5eb078a74ceffd969430201c2f1f53b31d53c02dadde28e089a7826b3a70019a94c3904e886e9db630c31da4cd334add90a591a69918218a1cd15350d65dedd5f6f52adf57614c62eccb0054b456b28339cbacc915527d1d7690ae0690e7e53a1e8591f30d82b121285daeef50ac7e8a8ca3ce4bfa581c3e16c3ccf2c873f33552f0a20f0b372b02964a6c60d29b7c0863bf39f698cd64fcd9a15c0040e35909a1a5e3f5433f1ab771a630f0fff3ce1101f2c36f7a7f49dc9cf4d5398fdf00598216dad8df5e00816d7cf52c3a8ae6c112c289a18a97dca3c47be92b91544d9c6e8bc947de075c5b4378701f73aaec03dcab35979fefab31ff8ea47576a974e81045b2e5f9397dedd3fe70a5094a73f1a833b5720ed3065762508a4dee9ad42e48ef93cf03c6c80a64bccff5b3a52a9a718f87e5037bd7a9cc30e911e46049b35852fc55d79f8c5ab21ac345f06127bfe434197eca6b762c13967f105508bf0da040240d81e90a4f94a2", 0x187}], 0x1}, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0)
r4 = getpid()
syz_pidfd_open(r4, 0x0)
sched_setscheduler(r4, 0x3, &(0x7f0000000080)=0x400)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="d2", 0x1}], 0x1}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.187552292s ago: executing program 4 (id=177):
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDENABIO(r0, 0x4b36)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x100000}])
write(0xffffffffffffffff, &(0x7f0000000680)="e2c701ca999fb40615", 0x9)
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x7fffffffffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0xa800, 0x2b8, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x118, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0x101, 0x9, 0x1, 0x0, "d87e709b44cf6ef1cc06060a0f3012050454b2e03739f2d07bd3badb87414e15086ba93902589b7a35b6bdad7ea0bb7e65ae52218fe9fc43f7902cc301488dc4"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x10})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008000000010000008000332200001ac5dbd3a79113069b2b21303c53bce9c446229781", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000200)=0x2, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2", @ANYRESDEC=r4, @ANYRES16=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.032053652s ago: executing program 0 (id=178):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x6, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000000000000000007000000071717"], 0x48}, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x187}], 0x1}, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0)
r4 = getpid()
syz_pidfd_open(r4, 0x0)
sched_setscheduler(r4, 0x3, &(0x7f0000000080)=0x400)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="d2", 0x1}], 0x1}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.985720472s ago: executing program 1 (id=179):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x800}, &(0x7f0000000080)=0x8)

3.694304352s ago: executing program 2 (id=180):
r0 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204019, &(0x7f0000000680)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6d61703d61636f726e2c6d61703d61636f726e2c756e686964652c636865636b3d72656c617865642c6d61703d61636f726e2c7362733fbbe7e8c40c7ccc303030303030303030303030303030322c626c6f636b3d3078303030303030303030303030303430302c00842b084333955d3ee6895384c4c4a5d9f3b8a2bd7af9d3ae2b571f2ce866354d925fc4650aae341c15bedede02c1556d653ceca3e2614614119b2c9c5ca3bbe3065bfde377208c8ff35e6beaa8eccca5184312cd15595f6e1ddc"], 0xff, 0x555, &(0x7f0000001400)="$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")
r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x6441, 0xf0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xa, 0x13, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reconstruct_alloc,no_data_io,hash,\x00'], 0x1, 0x5903, &(0x7f0000010b40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r2, 0xfffffffffffffffe, 0x29)

3.254272783s ago: executing program 1 (id=181):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004841}, 0x80)

3.089015503s ago: executing program 4 (id=182):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740), 0x0)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)

2.627916051s ago: executing program 4 (id=183):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsync(r1)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801)
fchdir(r2)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000080ed41f00000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0x2e, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018310000030000000000000000000000b708000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000", @ANYRES32=r2, @ANYBLOB="0000000000000000186000000c00000000000000800000008500000041000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000f7a5a5463f680ab795680151110cd7f4ef96fa5ba0a7dc4cbe6ef116e91962c668ff9506f5af415e607ee825cb90a4ffa11e200d3756334a7d9607d89be2b19e3e146cffcce4a47582b543efcd12f63ee96121c1e851ef15ef38caf4a5b89853c02399331ef70465188cb50369f26980202e935d37cff70590a69427692b28da428be5861924f08a347c2eb90494cb669fca522ea2bf3d6a379a5dea7966e51f1cbafd9ffc96b44033b2e077b65f8b675dc747a724f42f0e038317bcd1038b55eb87d103"], 0x0, 0xdc, 0xbf, &(0x7f0000000500)=""/191, 0x41100, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x8, 0x3, 0x4}, 0x10, r3, r0, 0x5, &(0x7f0000000780)=[r0], &(0x7f00000007c0)=[{0x1, 0x1, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x5}, {0x5, 0x3, 0x7, 0xf}, {0x0, 0x4, 0x5, 0xc}, {0x2, 0x2, 0x1, 0xb}], 0x10, 0x6, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
process_madvise(r5, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000000)='v', 0x1}, {&(0x7f0000000240)='s/', 0x2}], 0x3, 0xf, 0x0)

2.495718833s ago: executing program 1 (id=184):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38)
timer_create(0xfffffffd, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x9)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r5, &(0x7f0000002840), 0x0, 0x20044000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001"], 0x84}}, 0x20000000)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r2, r3+10000000}}, 0x0)

2.035061781s ago: executing program 1 (id=185):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xc139d000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000340)={[{@discard}, {@dioread_lock}, {@noauto_da_alloc}, {@lazytime}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x100)
fcntl$setstatus(r2, 0x4, 0x6100)
write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003)

1.533084954s ago: executing program 4 (id=186):
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000940)={0x8})
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x16)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000e340746000000200000000000000010000040800000000000000020009030000000000000000000004000000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x4016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000004}, 0x50)
madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xe9, 0x800, 0xa5, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r4})
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x0, 0x3, 0x4}, 0x9}}, 0x18)
r5 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000006c0)="0800ef2b7bbefbeb1c26be342dcff387f8dfa4b919bfeb472a9e7bb2d45e5ceb30f3e3bdc98742f6f18ba3b8beacea3e34543c39cba04ab34fa8b420a79932102f47717e44eeefccb98228fda63e39c29d1c5d4678d76f88ebb200bf681091a6f7a686d61a3496ac3d0948bffb1e1b9e42703d09a4ad88326c7de4420d252a4a260f8ee220339d23746f4145531c71c09553ef9247bb6b872ac1c55320460c40a65aa8ab0bf96212062654af1b41d500"/188, 0xbc}, {&(0x7f0000000100)="cf8a6f23f340", 0x6}], 0x2}, 0x240c8814)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, &(0x7f0000000180), 0x10)
syz_usb_connect(0x3, 0x162, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)

1.472742448s ago: executing program 0 (id=187):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xe0)

1.164169467s ago: executing program 3 (id=188):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000bff000/0x3000)=nil)

693.759566ms ago: executing program 0 (id=189):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/104], 0xfc}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffea9}}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)

271.595682ms ago: executing program 1 (id=190):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r4 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
sendmmsg$inet(r4, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$netlink(r5, 0x10e, 0x4, &(0x7f0000000100)=""/78, &(0x7f00000000c0)=0xffffff0f)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x10013, 0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

0s ago: executing program 0 (id=191):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
dup2(r0, r1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts.
[  173.241719][ T5770] cgroup: Unknown subsys name 'net'
[  173.436384][ T5770] cgroup: Unknown subsys name 'cpuset'
[  173.450023][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  218.207772][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  219.088714][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  219.095570][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  223.278853][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  223.287412][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  223.305291][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  223.313855][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  223.321985][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  223.330554][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  223.339946][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  223.348776][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  223.356916][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  223.369273][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  223.378916][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  223.384123][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  223.394492][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  223.404294][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  223.404566][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  223.423981][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  223.438014][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  223.441919][ T5806] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  223.446880][ T5805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  223.456482][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  223.462550][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  223.469873][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  223.476842][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  223.483821][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  223.510211][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  223.519212][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  223.529961][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  223.531450][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  223.559808][ T5804] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  223.569736][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  224.324990][ T5797] chnl_net:caif_netlink_parms(): no params data found
[  225.081232][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.090858][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.098679][ T5797] bridge_slave_0: entered allmulticast mode
[  225.107864][ T5797] bridge_slave_0: entered promiscuous mode
[  225.258572][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.266490][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.274371][ T5797] bridge_slave_1: entered allmulticast mode
[  225.283279][ T5797] bridge_slave_1: entered promiscuous mode
[  225.357682][ T5788] chnl_net:caif_netlink_parms(): no params data found
[  225.411205][ T5786] chnl_net:caif_netlink_parms(): no params data found
[  225.538180][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.554396][   T51] Bluetooth: hci1: command tx timeout
[  225.560038][   T51] Bluetooth: hci2: command tx timeout
[  225.560265][ T5787] chnl_net:caif_netlink_parms(): no params data found
[  225.633049][ T5796] Bluetooth: hci3: command tx timeout
[  225.633100][   T51] Bluetooth: hci0: command tx timeout
[  225.713548][ T5796] Bluetooth: hci4: command tx timeout
[  225.729520][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.745261][ T5801] chnl_net:caif_netlink_parms(): no params data found
[  226.004706][ T5797] team0: Port device team_slave_0 added
[  226.132515][ T5797] team0: Port device team_slave_1 added
[  226.384947][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.392138][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.418753][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.525721][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.534409][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.561767][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.638153][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.646201][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.654132][ T5788] bridge_slave_0: entered allmulticast mode
[  226.662121][ T5788] bridge_slave_0: entered promiscuous mode
[  226.689268][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.697363][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.705354][ T5788] bridge_slave_1: entered allmulticast mode
[  226.714279][ T5788] bridge_slave_1: entered promiscuous mode
[  226.723726][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.731366][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.739378][ T5787] bridge_slave_0: entered allmulticast mode
[  226.750937][ T5787] bridge_slave_0: entered promiscuous mode
[  226.796353][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.804163][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.811858][ T5786] bridge_slave_0: entered allmulticast mode
[  226.821087][ T5786] bridge_slave_0: entered promiscuous mode
[  226.909972][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.917903][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.927651][ T5787] bridge_slave_1: entered allmulticast mode
[  226.935672][ T5787] bridge_slave_1: entered promiscuous mode
[  226.945142][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.953051][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.960623][ T5786] bridge_slave_1: entered allmulticast mode
[  226.969201][ T5786] bridge_slave_1: entered promiscuous mode
[  227.166491][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.286635][ T5797] hsr_slave_0: entered promiscuous mode
[  227.297572][ T5797] hsr_slave_1: entered promiscuous mode
[  227.312555][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.413427][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.421093][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.431595][ T5801] bridge_slave_0: entered allmulticast mode
[  227.440821][ T5801] bridge_slave_0: entered promiscuous mode
[  227.455694][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.465847][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.473768][ T5801] bridge_slave_1: entered allmulticast mode
[  227.482610][ T5801] bridge_slave_1: entered promiscuous mode
[  227.527687][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.547647][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.566659][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.633662][ T5796] Bluetooth: hci2: command tx timeout
[  227.634406][   T51] Bluetooth: hci1: command tx timeout
[  227.686147][ T5788] team0: Port device team_slave_0 added
[  227.702044][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.717902][ T5788] team0: Port device team_slave_1 added
[  227.725681][   T51] Bluetooth: hci3: command tx timeout
[  227.731834][   T51] Bluetooth: hci0: command tx timeout
[  227.797899][ T5796] Bluetooth: hci4: command tx timeout
[  227.806239][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.913912][ T5787] team0: Port device team_slave_0 added
[  227.930105][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.047972][ T5787] team0: Port device team_slave_1 added
[  228.109565][ T5801] team0: Port device team_slave_0 added
[  228.119366][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.127534][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.153887][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.172944][ T5786] team0: Port device team_slave_0 added
[  228.182053][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.190611][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.217753][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.272593][ T5801] team0: Port device team_slave_1 added
[  228.287651][ T5786] team0: Port device team_slave_1 added
[  228.351675][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.359052][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.385902][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.504910][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.512069][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.538478][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.578524][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.585879][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.612314][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.650842][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.658128][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.685673][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.773411][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.780579][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.807076][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.847026][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.854347][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.880836][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.082407][ T5788] hsr_slave_0: entered promiscuous mode
[  229.093431][ T5788] hsr_slave_1: entered promiscuous mode
[  229.102705][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.110592][ T5788] Cannot create hsr debugfs directory
[  229.186861][ T5787] hsr_slave_0: entered promiscuous mode
[  229.197729][ T5787] hsr_slave_1: entered promiscuous mode
[  229.207555][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.215597][ T5787] Cannot create hsr debugfs directory
[  229.241657][ T5786] hsr_slave_0: entered promiscuous mode
[  229.250923][ T5786] hsr_slave_1: entered promiscuous mode
[  229.260315][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.268257][ T5786] Cannot create hsr debugfs directory
[  229.408881][ T5801] hsr_slave_0: entered promiscuous mode
[  229.418463][ T5801] hsr_slave_1: entered promiscuous mode
[  229.428195][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.436158][ T5801] Cannot create hsr debugfs directory
[  229.714477][ T5796] Bluetooth: hci1: command tx timeout
[  229.720221][ T5796] Bluetooth: hci2: command tx timeout
[  229.793135][   T51] Bluetooth: hci0: command tx timeout
[  229.798891][ T5796] Bluetooth: hci3: command tx timeout
[  229.821460][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  229.851298][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  229.884721][ T5796] Bluetooth: hci4: command tx timeout
[  229.887674][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  229.989362][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  230.695672][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  230.718345][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  230.742529][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  230.839083][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  230.914363][ T5788] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  230.986419][ T5788] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  231.035285][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  231.099130][ T5788] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  231.138613][ T5788] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  231.176634][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  231.206724][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  231.238232][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  231.265380][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  231.333053][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  231.391656][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  231.485003][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  231.797103][ T5796] Bluetooth: hci2: command tx timeout
[  231.805037][ T5796] Bluetooth: hci1: command tx timeout
[  231.859215][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.873527][   T51] Bluetooth: hci3: command tx timeout
[  231.879208][   T51] Bluetooth: hci0: command tx timeout
[  231.953490][ T5796] Bluetooth: hci4: command tx timeout
[  232.198592][ T5797] 8021q: adding VLAN 0 to HW filter on device team0
[  232.239378][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.349358][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.357252][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.399413][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.426745][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[  232.550281][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.558093][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.579477][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.587252][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.619895][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.645042][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[  232.706549][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.714257][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.882058][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.889906][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.961520][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.969294][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.053063][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[  233.147399][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.203830][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.211483][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.325819][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.333569][ T3854] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.379706][ T5801] 8021q: adding VLAN 0 to HW filter on device team0
[  233.618028][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.625832][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.655120][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.662979][ T3854] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.758377][ T5787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  233.770466][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.059259][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.338388][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.507461][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.789050][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.907054][ T5797] veth0_vlan: entered promiscuous mode
[  236.028225][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.127923][ T5797] veth1_vlan: entered promiscuous mode
[  236.180315][ T5786] veth0_vlan: entered promiscuous mode
[  236.298511][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.314323][ T5786] veth1_vlan: entered promiscuous mode
[  236.593864][ T5797] veth0_macvtap: entered promiscuous mode
[  236.612204][ T5787] veth0_vlan: entered promiscuous mode
[  236.711272][ T5797] veth1_macvtap: entered promiscuous mode
[  236.751203][ T5786] veth0_macvtap: entered promiscuous mode
[  236.802242][ T5787] veth1_vlan: entered promiscuous mode
[  236.868199][ T5801] veth0_vlan: entered promiscuous mode
[  236.900875][ T5786] veth1_macvtap: entered promiscuous mode
[  236.925761][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.024483][ T5801] veth1_vlan: entered promiscuous mode
[  237.045521][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.118689][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.127893][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.137165][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.146283][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.223824][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.235949][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.250409][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.281638][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.292571][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.307250][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.388789][ T5787] veth0_macvtap: entered promiscuous mode
[  237.407379][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.418914][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.428351][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.437583][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.492592][ T5787] veth1_macvtap: entered promiscuous mode
[  237.528937][ T5801] veth0_macvtap: entered promiscuous mode
[  237.599228][ T5801] veth1_macvtap: entered promiscuous mode
[  237.709955][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.720975][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.731240][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.742073][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.756371][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.840826][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.854193][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.864510][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.875360][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.885615][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.896410][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.911100][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.924199][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.935024][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.945216][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.957448][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.972572][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.052155][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.063983][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.074245][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.085065][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.095293][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.106206][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.120665][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.216955][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.226334][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.237935][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.248366][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.320727][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.329984][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.339248][ T5801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.348732][ T5801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.886824][ T5788] veth0_vlan: entered promiscuous mode
[  238.963175][ T5788] veth1_vlan: entered promiscuous mode
[  239.308973][ T5788] veth0_macvtap: entered promiscuous mode
[  239.418296][ T5788] veth1_macvtap: entered promiscuous mode
[  239.600035][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.610941][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.621263][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.632124][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.645089][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.659047][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.669255][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.680134][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.694526][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.915142][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.925991][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.936223][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.947012][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.958516][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.970150][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.980383][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.991221][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.005341][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.154467][ T5788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.164196][ T5788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.173383][ T5788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.182403][ T5788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.671535][ T4485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.679982][ T4485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.961128][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.970322][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.008641][ T3854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.017855][ T3854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.175473][ T3854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.183890][ T3854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.389916][ T5797] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  244.853999][ T4485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.862232][ T4485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.085701][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.094459][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.202994][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.211107][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.335794][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.344146][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.703914][ T5845] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  246.606324][ T5982] loop0: detected capacity change from 0 to 32768
[  246.618415][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  246.628607][ T5845] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  246.638722][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  246.649381][ T5845] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  246.659664][ T5845] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  246.669155][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.680534][ T5982] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5982)
[  246.711940][ T5982] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  246.722893][ T5982] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  246.734376][ T5982] BTRFS info (device loop0): using free-space-tree
[  246.775753][ T5845] usb 2-1: config 0 descriptor??
[  247.163482][ T5845] hdpvr 2-1:0.0: firmware version 0x5b dated 
[  247.169942][ T5845] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  247.488169][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.489754][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.496419][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.521128][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.775245][ T5845] hdpvr 2-1:0.0: device init failed
[  247.780930][ T5845] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  247.923238][ T5845] usb 2-1: USB disconnect, device number 2
[  247.976390][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.984655][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.107030][ T5982] BTRFS info (device loop0): rebuilding free space tree
[  249.458608][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  250.137374][ T6025] syz.2.16 (6025): drop_caches: 2
[  252.229872][ T6054] loop2: detected capacity change from 0 to 32768
[  252.268114][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  252.311638][ T6054] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.27 (6054)
[  252.424435][ T6054] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  252.435191][ T6054] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[  252.446710][ T6054] BTRFS info (device loop2): using free-space-tree
[  253.354988][ T6052] syz.0.25 (6052): drop_caches: 2
[  253.383382][ T5843] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  253.394738][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  253.405344][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  253.415486][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  253.426838][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  253.437086][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  253.452620][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.564563][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  253.574862][ T5843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  253.585006][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  253.595705][ T5843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  253.606025][ T5843] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  253.615662][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.622024][   T10] usb 4-1: config 0 descriptor??
[  253.767873][ T6054] BTRFS info (device loop2): rebuilding free space tree
[  253.848468][ T5843] usb 2-1: config 0 descriptor??
[  253.894161][   T10] hdpvr 4-1:0.0: firmware version 0x5b dated 
[  253.900595][   T10] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[  254.071510][ T5843] hdpvr 2-1:0.0: firmware version 0x5b dated 
[  254.078069][ T5843] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  254.133972][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.144885][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.239871][   T10] hdpvr 4-1:0.0: device init failed
[  254.245655][   T10] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  254.344940][   T10] usb 4-1: USB disconnect, device number 2
[  254.535873][ T6055] [U] „
[  254.595385][ T5843] hdpvr 2-1:0.0: Could not setup controls
[  254.604168][ T5843] hdpvr 2-1:0.0: registering videodev failed
[  254.650081][ T5843] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71
[  254.780221][ T5843] usb 2-1: USB disconnect, device number 3
[  254.810378][ T5801] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  257.121794][ T6085] syz.1.33 (6085): drop_caches: 2
[  258.287509][ T6106] loop3: detected capacity change from 0 to 32768
[  258.531370][ T6106] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.39 (6106)
[  258.556256][ T6106] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  258.573631][ T6106] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[  258.587371][ T6106] BTRFS info (device loop3): using free-space-tree
[  259.043760][ T6106] BTRFS info (device loop3): rebuilding free space tree
[  259.164088][ T5843] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  259.273117][ T5845] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  259.421236][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  259.432342][ T5843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  259.442604][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  259.453242][ T5843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  259.463523][ T5843] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  259.473119][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.543640][ T5845] usb 2-1: Using ep0 maxpacket: 16
[  259.606229][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.617190][ T5845] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  259.626737][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.766163][ T5845] usb 2-1: config 0 descriptor??
[  259.854176][ T5845] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7
[  259.869481][ T5843] usb 5-1: config 0 descriptor??
[  259.946404][ T5797] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.101813][ T5843] hdpvr 5-1:0.0: firmware version 0x5b dated 
[  260.110175][ T5843] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  260.311345][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.321372][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.383919][ T5843] hdpvr 5-1:0.0: device init failed
[  260.389875][ T5843] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  260.507149][ T5843] usb 5-1: USB disconnect, device number 2
[  260.690898][ T6129] input: syz0 as /devices/virtual/input/input8
[  260.859686][ T5130] bcm5974 2-1:0.0: could not read from device
[  260.881797][ T5130] bcm5974 2-1:0.0: could not read from device
[  260.970674][ T5130] bcm5974 2-1:0.0: could not read from device
[  260.979014][ T5845] usb 2-1: USB disconnect, device number 4
[  260.994600][ T5130] bcm5974 2-1:0.0: could not read from device
[  263.092867][ T6153] loop0: detected capacity change from 0 to 32768
[  263.117326][ T6153] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.53 (6153)
[  263.162909][ T6153] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  263.183299][ T6153] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  263.194694][ T6153] BTRFS info (device loop0): using free-space-tree
[  264.137349][ T6153] BTRFS info (device loop0): rebuilding free space tree
[  264.223225][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  264.431415][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  264.441943][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  264.452060][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  264.462223][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  264.472608][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  264.482082][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.783078][   T10] usb 2-1: config 0 descriptor??
[  265.020275][   T10] hdpvr 2-1:0.0: firmware version 0x5b dated 
[  265.026868][   T10] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  265.221719][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.232275][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.288953][   T10] hdpvr 2-1:0.0: device init failed
[  265.294855][   T10] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  265.385315][   T10] usb 2-1: USB disconnect, device number 5
[  266.285622][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  266.369795][ T6165] loop3: detected capacity change from 0 to 32768
[  268.407835][ T6223] syz.3.71 (6223): drop_caches: 2
[  268.430312][ T6215] syz.2.70 (6215): drop_caches: 2
[  268.773946][ T5845] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  268.838634][ T6229] syz.1.73 (6229): drop_caches: 2
[  269.062681][ T5845] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  269.073746][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.082034][ T5845] usb 5-1: Product: syz
[  269.086778][ T5845] usb 5-1: Manufacturer: syz
[  269.091629][ T5845] usb 5-1: SerialNumber: syz
[  269.296105][ T5845] usb 5-1: config 0 descriptor??
[  269.405268][ T5845] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  269.640645][ T6221] loop4: detected capacity change from 0 to 256
[  269.692978][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  269.873375][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  269.883526][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  269.893776][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  269.904046][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  269.914277][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  269.923820][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.941799][ T5845] gspca_sunplus: reg_r err -110
[  270.100353][   T10] usb 4-1: config 0 descriptor??
[  270.317051][   T10] hdpvr 4-1:0.0: firmware version 0x5b dated 
[  270.323587][   T10] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[  270.523091][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.533806][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.626216][   T10] hdpvr 4-1:0.0: device init failed
[  270.631893][   T10] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  270.773656][   T10] usb 4-1: USB disconnect, device number 3
[  270.876057][ T6249] syz.0.82 (6249): drop_caches: 2
[  271.743639][ T5845] usb 5-1: USB disconnect, device number 3
[  272.308219][ T6257] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  273.012017][ T6274] syz.4.87 (6274): drop_caches: 2
[  274.103637][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  274.136496][ T5145] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  274.337546][ T5145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  274.347877][ T5145] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  274.358387][ T5145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  274.368674][ T5145] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  274.379061][ T5145] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  274.388699][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.460020][   T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  274.469778][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.478336][   T10] usb 1-1: Product: syz
[  274.482833][   T10] usb 1-1: Manufacturer: syz
[  274.487686][   T10] usb 1-1: SerialNumber: syz
[  274.611829][   T10] usb 1-1: config 0 descriptor??
[  274.721202][   T10] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  274.752028][ T5145] usb 4-1: config 0 descriptor??
[  275.002109][ T6286] loop0: detected capacity change from 0 to 256
[  275.113732][ T5145] hdpvr 4-1:0.0: firmware version 0x5b dated 
[  275.120391][ T5145] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[  275.188034][   T10] gspca_sunplus: reg_r err -71
[  275.207950][   T10] usb 1-1: USB disconnect, device number 2
[  275.233551][ T5961] udevd[5961]: setting mode of /dev/bus/usb/001/002 to 020664 failed: No such file or directory
[  275.269932][ T6311] syz.4.104 (6311): drop_caches: 2
[  275.310967][ T5961] udevd[5961]: setting owner of /dev/bus/usb/001/002 to uid=0, gid=0 failed: No such file or directory
[  275.346965][ T6292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.366428][ T6292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.573256][ T5145] hdpvr 4-1:0.0: device init failed
[  275.578937][ T5145] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  276.045516][ T6321] syz.2.108 (6321): drop_caches: 2
[  276.192607][ T5145] usb 4-1: USB disconnect, device number 4
[  277.410922][ T6341] syz.0.116 (6341): drop_caches: 2
[  278.655149][ T5145] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  278.824120][ T5145] usb 2-1: Using ep0 maxpacket: 8
[  278.885628][ T5145] usb 2-1: no configurations
[  278.890550][ T5145] usb 2-1: can't read configurations, error -22
[  278.997428][ T6362] loop2: detected capacity change from 0 to 164
[  279.047902][ T6362] iso9660: Unknown parameter 'sbs?»çèÄ|Ì0000000000000002'
[  279.085549][ T5145] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  279.252562][ T5145] usb 2-1: Using ep0 maxpacket: 8
[  279.258784][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  279.281010][ T5145] usb 2-1: no configurations
[  279.286317][ T5145] usb 2-1: can't read configurations, error -22
[  279.309146][ T5145] usb usb2-port1: attempt power cycle
[  279.442921][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  279.459233][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  279.471400][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  279.481635][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  279.491894][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  279.501437][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.599771][   T10] usb 1-1: config 0 descriptor??
[  279.684045][ T5145] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  279.743508][ T5145] usb 2-1: Using ep0 maxpacket: 8
[  279.752411][ T5145] usb 2-1: no configurations
[  279.763832][ T5145] usb 2-1: can't read configurations, error -22
[  279.814651][   T10] hdpvr 1-1:0.0: firmware version 0x5b dated 
[  279.821161][   T10] hdpvr 1-1:0.0: untested firmware, the driver might not work.
[  279.924079][ T5145] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  279.970909][ T5145] usb 2-1: Using ep0 maxpacket: 8
[  279.983114][ T5145] usb 2-1: no configurations
[  279.988249][ T5145] usb 2-1: can't read configurations, error -22
[  280.005494][ T5145] usb usb2-port1: unable to enumerate USB device
[  280.021777][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.032648][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.056377][   T10] hdpvr 1-1:0.0: device init failed
[  280.062178][   T10] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  280.127645][   T10] usb 1-1: USB disconnect, device number 3
[  280.590569][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  280.597535][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  281.745122][ T6362] loop2: detected capacity change from 0 to 32768
[  281.954388][ T6362] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_io": -EINTR
[  281.955474][ T6362] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  282.024256][ T6362] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc
[  283.532952][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  283.778187][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  283.788475][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  283.798882][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  283.810036][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  283.820288][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  283.829830][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.089201][   T10] usb 1-1: config 0 descriptor??
[  284.307586][   T10] hdpvr 1-1:0.0: firmware version 0x5b dated 
[  284.314188][   T10] hdpvr 1-1:0.0: untested firmware, the driver might not work.
[  284.566438][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  284.625259][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.635737][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.737983][   T10] hdpvr 1-1:0.0: device init failed
[  284.744262][   T10] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  284.793264][ T5845] usb 3-1: Using ep0 maxpacket: 8
[  284.801251][ T5845] usb 3-1: no configurations
[  284.807205][ T5845] usb 3-1: can't read configurations, error -22
[  284.886651][   T10] usb 1-1: USB disconnect, device number 4
[  284.953165][ T5845] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  285.134209][ T5845] usb 3-1: Using ep0 maxpacket: 8
[  285.166426][ T5845] usb 3-1: no configurations
[  285.171306][ T5845] usb 3-1: can't read configurations, error -22
[  285.220670][ T5845] usb usb3-port1: attempt power cycle
[  285.552438][ T6430] loop1: detected capacity change from 0 to 164
[  285.574453][ T6430] iso9660: Unknown parameter 'sbs?»çèÄ|Ì0000000000000002'
[  285.654242][ T5845] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  285.709297][ T5845] usb 3-1: Using ep0 maxpacket: 8
[  285.727537][ T5845] usb 3-1: no configurations
[  285.732403][ T5845] usb 3-1: can't read configurations, error -22
[  285.913207][ T5845] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  285.984906][ T5845] usb 3-1: Using ep0 maxpacket: 8
[  286.008279][ T5845] usb 3-1: no configurations
[  286.013362][ T5845] usb 3-1: can't read configurations, error -22
[  286.067143][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'.
[  286.083418][ T5845] usb usb3-port1: unable to enumerate USB device
[  287.672949][ T6430] loop1: detected capacity change from 0 to 32768
[  288.313197][ T6430] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  288.335448][ T6430] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  288.345139][ T6430] bcachefs (loop1): Version upgrade required:
[  288.345139][ T6430] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  288.345139][ T6430] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  288.345139][ T6430]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  288.859438][ T6430] bcachefs (loop1): dropping and reconstructing all alloc info
[  288.901682][ T6430] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  288.913184][ T6430] bcachefs (loop1): bch2_fs_recovery(): error EINTR
[  288.920024][ T6430] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR
[  288.928694][ T6430] bcachefs (loop1): shutting down
[  289.085641][ T6430] bcachefs (loop1): shutdown complete
[  289.154659][ T5843] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  289.391648][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  289.402016][ T5843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  289.412491][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  289.422653][ T5843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  289.433140][ T5843] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  289.442493][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.548191][ T5843] usb 5-1: config 0 descriptor??
[  289.765909][ T5843] hdpvr 5-1:0.0: firmware version 0x5b dated 
[  289.772246][ T5843] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  289.970479][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.981134][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.027922][ T6478] syz.3.163 (6478): drop_caches: 2
[  290.075293][ T5843] hdpvr 5-1:0.0: device init failed
[  290.080967][ T5843] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  290.393759][ T5843] usb 5-1: USB disconnect, device number 4
[  290.500322][ T6487] syz.3.165 (6487): drop_caches: 2
[  290.699318][ T6430] bcachefs: bch2_fs_get_tree() error: EINTR
[  291.097355][ T6489] netlink: 88 bytes leftover after parsing attributes in process `syz.3.166'.
[  292.623181][ T6514] syz.0.175 (6514): drop_caches: 2
[  292.877989][ T5843] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  293.539130][ T6526] loop2: detected capacity change from 0 to 164
[  293.551873][ T6526] iso9660: Unknown parameter 'sbs?»çèÄ|Ì0000000000000002'
[  293.595683][ T5845] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  293.616346][ T5843] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  293.625507][ T5843] usb 4-1: config 0 has no interface number 0
[  293.975298][ T5843] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  293.985542][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.995597][ T5843] usb 4-1: Product: syz
[  294.000630][ T5843] usb 4-1: Manufacturer: syz
[  294.005955][ T5843] usb 4-1: SerialNumber: syz
[  294.053020][ T5843] usb 4-1: config 0 descriptor??
[  294.100232][ T5845] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  294.108864][ T5845] usb 1-1: config 0 has no interface number 0
[  294.137479][ T5845] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  294.147197][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.155873][ T5845] usb 1-1: Product: syz
[  294.160467][ T5845] usb 1-1: Manufacturer: syz
[  294.165577][ T5845] usb 1-1: SerialNumber: syz
[  294.188799][ T5845] usb 1-1: config 0 descriptor??
[  294.486141][ T5843] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  294.496629][ T5845] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  294.545166][ T5845] usb 1-1: USB disconnect, device number 5
[  294.568147][ T6532] netlink: 88 bytes leftover after parsing attributes in process `syz.1.184'.
[  294.646989][ T5843] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  294.658768][ T5843] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  295.296820][ T6526] loop2: detected capacity change from 0 to 32768
[  295.384895][ T6538] loop1: detected capacity change from 0 to 512
[  295.552000][ T6538] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  295.566005][ T6538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  295.965747][ T6538] EXT4-fs (loop1): 1 truncate cleaned up
[  295.973608][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.020283][ T6526] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  296.044654][ T6526] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  296.054923][ T6526] bcachefs (loop2): Version upgrade required:
[  296.054923][ T6526] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  296.054923][ T6526] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  296.054923][ T6526]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  296.113490][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  296.179081][ T6526] bcachefs (loop2): dropping and reconstructing all alloc info
[  296.456887][   T10] usb 5-1: Using ep0 maxpacket: 16
[  296.482955][   T10] usb 5-1: config 0 has an invalid interface number: 38 but max is 0
[  296.491626][   T10] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[  296.502234][   T10] usb 5-1: config 0 has no interface number 0
[  296.574723][   T10] usb 5-1: New USB device found, idVendor=185b, idProduct=d001, bcdDevice= 3.dc
[  296.584458][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.593312][   T10] usb 5-1: Product: syz
[  296.597716][   T10] usb 5-1: Manufacturer: syz
[  296.602561][   T10] usb 5-1: SerialNumber: syz
[  296.623134][   T10] usb 5-1: config 0 descriptor??
[  296.650837][ T6526] bcachefs (loop2): check_topology... done
[  296.663972][ T6526] bcachefs (loop2): accounting_read...
[  296.670263][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.689738][ T6526]  done
[  296.693234][ T6526] bcachefs (loop2): alloc_read... done
[  296.699677][ T6526] bcachefs (loop2): stripes_read... done
[  296.718565][ T6526] bcachefs (loop2): snapshots_read... done
[  296.787733][ T6526] bcachefs (loop2): check_allocations...
[  296.880705][   T10] dvb-usb: found a 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' in warm state.
[  296.898537][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  296.975278][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  297.045433][   T10] dvbdev: DVB: registering new adapter (Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb))
[  297.058506][   T10] usb 5-1: media controller created
[  297.214093][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  297.290270][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  297.296486][   T10] =====================================================
[  297.303952][   T10] BUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0
[  297.311756][   T10]  dib3000mb_attach+0x2d8/0x3c0
[  297.317047][   T10]  dibusb_dib3000mb_frontend_attach+0x155/0x2f0
[  297.323614][   T10]  dvb_usb_adapter_frontend_init+0xed/0x9a0
[  297.329739][   T10]  dvb_usb_device_init+0x25a8/0x3760
[  297.335397][   T10]  dibusb_probe+0x46/0x250
[  297.340091][   T10]  usb_probe_interface+0xd33/0x12e0
[  297.346398][   T10]  really_probe+0x4db/0xd90
[  297.351114][   T10]  __driver_probe_device+0x2ab/0x5d0
[  297.356715][   T10]  driver_probe_device+0x72/0x890
[  297.362046][   T10]  __device_attach_driver+0x568/0x9e0
[  297.367711][   T10]  bus_for_each_drv+0x403/0x620
[  297.382688][   T10]  __device_attach+0x3c1/0x650
[  297.390187][   T10]  device_initial_probe+0x32/0x40
[  297.395527][   T10]  bus_probe_device+0x3dc/0x5c0
[  297.400563][   T10]  device_add+0x13aa/0x1ba0
[  297.405420][   T10]  usb_set_configuration+0x31c9/0x38d0
[  297.411096][   T10]  usb_generic_driver_probe+0x109/0x2a0
[  297.416986][   T10]  usb_probe_device+0x3a7/0x690
[  297.422047][   T10]  really_probe+0x4db/0xd90
[  297.426832][   T10]  __driver_probe_device+0x2ab/0x5d0
[  297.432321][   T10]  driver_probe_device+0x72/0x890
[  297.437774][   T10]  __device_attach_driver+0x568/0x9e0
[  297.443556][   T10]  bus_for_each_drv+0x403/0x620
[  297.448579][   T10]  __device_attach+0x3c1/0x650
[  297.453687][   T10]  device_initial_probe+0x32/0x40
[  297.458925][   T10]  bus_probe_device+0x3dc/0x5c0
[  297.464168][   T10]  device_add+0x13aa/0x1ba0
[  297.468856][   T10]  usb_new_device+0x15f4/0x2470
[  297.483755][   T10]  hub_event+0x4ffb/0x72d0
[  297.488396][   T10]  process_scheduled_works+0xae0/0x1c40
[  297.496839][   T10]  worker_thread+0xea7/0x14f0
[  297.501770][   T10]  kthread+0x3e2/0x540
[  297.506196][   T10]  ret_from_fork+0x6d/0x90
[  297.510808][   T10]  ret_from_fork_asm+0x1a/0x30
[  297.515915][   T10] 
[  297.518344][   T10] Local variable rb created at:
[  297.523451][   T10]  dib3000_read_reg+0x86/0x4e0
[  297.528430][   T10]  dib3000mb_attach+0x123/0x3c0
[  297.533638][   T10] 
[  297.536098][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0
[  297.547028][   T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  297.557629][   T10] Workqueue: usb_hub_wq hub_event
[  297.563039][   T10] =====================================================
[  297.570097][   T10] Disabling lock debugging due to kernel taint
[  297.586312][   T10] Kernel panic - not syncing: kmsan.panic set ...
[  297.592909][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G    B              6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0
[  297.605212][   T10] Tainted: [B]=BAD_PAGE
[  297.609491][   T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  297.619727][   T10] Workqueue: usb_hub_wq hub_event
[  297.625000][   T10] Call Trace:
[  297.628418][   T10]  <TASK>
[  297.631465][   T10]  dump_stack_lvl+0x216/0x2d0
[  297.636373][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  297.642393][   T10]  dump_stack+0x1e/0x24
[  297.646765][   T10]  panic+0x4e2/0xcf0
[  297.650876][   T10]  ? kmsan_get_metadata+0xc1/0x1c0
[  297.656212][   T10]  kmsan_report+0x2c7/0x2d0
[  297.660922][   T10]  ? __msan_warning+0x95/0x120
[  297.665924][   T10]  ? dib3000mb_attach+0x2d8/0x3c0
[  297.671169][   T10]  ? dibusb_dib3000mb_frontend_attach+0x155/0x2f0
[  297.677807][   T10]  ? dvb_usb_adapter_frontend_init+0xed/0x9a0
[  297.684120][   T10]  ? dvb_usb_device_init+0x25a8/0x3760
[  297.689787][   T10]  ? dibusb_probe+0x46/0x250
[  297.694576][   T10]  ? usb_probe_interface+0xd33/0x12e0
[  297.700159][   T10]  ? really_probe+0x4db/0xd90
[  297.705041][   T10]  ? __driver_probe_device+0x2ab/0x5d0
[  297.710712][   T10]  ? driver_probe_device+0x72/0x890
[  297.716131][   T10]  ? __device_attach_driver+0x568/0x9e0
[  297.721903][   T10]  ? bus_for_each_drv+0x403/0x620
[  297.727111][   T10]  ? __device_attach+0x3c1/0x650
[  297.732255][   T10]  ? device_initial_probe+0x32/0x40
[  297.737665][   T10]  ? bus_probe_device+0x3dc/0x5c0
[  297.742885][   T10]  ? device_add+0x13aa/0x1ba0
[  297.747759][   T10]  ? usb_set_configuration+0x31c9/0x38d0
[  297.753608][   T10]  ? usb_generic_driver_probe+0x109/0x2a0
[  297.759528][   T10]  ? usb_probe_device+0x3a7/0x690
[  297.764764][   T10]  ? really_probe+0x4db/0xd90
[  297.769657][   T10]  ? __driver_probe_device+0x2ab/0x5d0
[  297.775334][   T10]  ? driver_probe_device+0x72/0x890
[  297.780748][   T10]  ? __device_attach_driver+0x568/0x9e0
[  297.786527][   T10]  ? bus_for_each_drv+0x403/0x620
[  297.791741][   T10]  ? __device_attach+0x3c1/0x650
[  297.796898][   T10]  ? device_initial_probe+0x32/0x40
[  297.802312][   T10]  ? bus_probe_device+0x3dc/0x5c0
[  297.807519][   T10]  ? device_add+0x13aa/0x1ba0
[  297.812391][   T10]  ? usb_new_device+0x15f4/0x2470
[  297.817599][   T10]  ? hub_event+0x4ffb/0x72d0
[  297.822375][   T10]  ? process_scheduled_works+0xae0/0x1c40
[  297.828829][   T10]  ? worker_thread+0xea7/0x14f0
[  297.833921][   T10]  ? kthread+0x3e2/0x540
[  297.838349][   T10]  ? ret_from_fork+0x6d/0x90
[  297.843124][   T10]  ? ret_from_fork_asm+0x1a/0x30
[  297.848333][   T10]  ? rt_mutex_unlock+0x2a/0x50
[  297.853289][   T10]  ? kmsan_get_metadata+0x13e/0x1c0
[  297.858690][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  297.864911][   T10]  ? dib3000_read_reg+0x32b/0x4e0
[  297.870176][   T10]  __msan_warning+0x95/0x120
[  297.875016][   T10]  dib3000mb_attach+0x2d8/0x3c0
[  297.880105][   T10]  ? __pfx_dib3000mb_attach+0x10/0x10
[  297.885718][   T10]  dibusb_dib3000mb_frontend_attach+0x155/0x2f0
[  297.892213][   T10]  ? __pfx_dibusb_dib3000mb_frontend_attach+0x10/0x10
[  297.899228][   T10]  dvb_usb_adapter_frontend_init+0xed/0x9a0
[  297.905387][   T10]  dvb_usb_device_init+0x25a8/0x3760
[  297.910945][   T10]  ? __pfx_dibusb_probe+0x10/0x10
[  297.916180][   T10]  dibusb_probe+0x46/0x250
[  297.920805][   T10]  ? __pfx_dibusb_probe+0x10/0x10
[  297.926048][   T10]  usb_probe_interface+0xd33/0x12e0
[  297.931495][   T10]  ? __pfx_usb_probe_interface+0x10/0x10
[  297.937350][   T10]  really_probe+0x4db/0xd90
[  297.942081][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  297.948102][   T10]  __driver_probe_device+0x2ab/0x5d0
[  297.953606][   T10]  driver_probe_device+0x72/0x890
[  297.958823][   T10]  ? kmsan_get_metadata+0x13e/0x1c0
[  297.964204][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  297.970193][   T10]  __device_attach_driver+0x568/0x9e0
[  297.975781][   T10]  bus_for_each_drv+0x403/0x620
[  297.980809][   T10]  ? __pfx___device_attach_driver+0x10/0x10
[  297.986938][   T10]  __device_attach+0x3c1/0x650
[  297.991908][   T10]  device_initial_probe+0x32/0x40
[  297.997119][   T10]  bus_probe_device+0x3dc/0x5c0
[  298.002141][   T10]  device_add+0x13aa/0x1ba0
[  298.006833][   T10]  usb_set_configuration+0x31c9/0x38d0
[  298.012500][   T10]  ? usb_set_configuration+0x921/0x38d0
[  298.018274][   T10]  usb_generic_driver_probe+0x109/0x2a0
[  298.024004][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  298.030016][   T10]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  298.036301][   T10]  usb_probe_device+0x3a7/0x690
[  298.041366][   T10]  ? __pfx_usb_probe_device+0x10/0x10
[  298.046928][   T10]  really_probe+0x4db/0xd90
[  298.051631][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  298.057624][   T10]  __driver_probe_device+0x2ab/0x5d0
[  298.063124][   T10]  driver_probe_device+0x72/0x890
[  298.068342][   T10]  ? kmsan_get_metadata+0x13e/0x1c0
[  298.073715][   T10]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  298.079700][   T10]  __device_attach_driver+0x568/0x9e0
[  298.085284][   T10]  bus_for_each_drv+0x403/0x620
[  298.090296][   T10]  ? __pfx___device_attach_driver+0x10/0x10
[  298.096409][   T10]  __device_attach+0x3c1/0x650
[  298.101372][   T10]  device_initial_probe+0x32/0x40
[  298.106584][   T10]  bus_probe_device+0x3dc/0x5c0
[  298.111608][   T10]  device_add+0x13aa/0x1ba0
[  298.116302][   T10]  usb_new_device+0x15f4/0x2470
[  298.121346][   T10]  hub_event+0x4ffb/0x72d0
[  298.126001][   T10]  ? __pfx_hub_event+0x10/0x10
[  298.131011][   T10]  process_scheduled_works+0xae0/0x1c40
[  298.136815][   T10]  worker_thread+0xea7/0x14f0
[  298.141720][   T10]  kthread+0x3e2/0x540
[  298.145954][   T10]  ? __pfx_worker_thread+0x10/0x10
[  298.151295][   T10]  ? __pfx_kthread+0x10/0x10
[  298.156057][   T10]  ret_from_fork+0x6d/0x90
[  298.160651][   T10]  ? __pfx_kthread+0x10/0x10
[  298.165435][   T10]  ret_from_fork_asm+0x1a/0x30
[  298.170422][   T10]  </TASK>
[  298.173848][   T10] Kernel Offset: disabled
[  298.178249][   T10] Rebooting in 86400 seconds..