last executing test programs:

22m9.970324082s ago: executing program 3 (id=4):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}]}, 0x48}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000000000000711048422e6c10438831407e43d753000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x215, &(0x7f0000000a80)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNDSRiEv0zWWEyFFAl8NkglEc6Z8jhDIEsgW8gX8GbJkMwHjyVNucCRZsbFjJ47kxPn9Fj08/3uuztGBi7h62fz1zo3Gapaspp1Qmi+E4m+hH3YKYSEUw0g//HD/0vbt/y9f+fv3SmXpv9lhP8Yvvnl09ea9bx93Prv4YLdTCCFsLT7d+HLjq83nF67Xs1jPYqvdiWlcbrc76XKzFlfqWSOJ8d9mLc1qsd7Kamv78tVme/zUoZZlMW31YqPWi5127Kz1YnotrbdikiRxPnAq1bs7eR628jzP5/ohz/M3PUFhMvNiWk65/3zgbo0u6nH3avqs3612q4PHQf7nX5Wln+JLC+NR291udWYv/3mQx/35bPh0mC8emn8Svv9ukO9mf/xTOZCXw8rklw8AAAAAAOdSEvccen8/SY7KB9Urnw8cuH9fCl+Xxp2ZyS8FAAAAOELWW2+kzZXZtUHRrJ1ZMRf2d355OJziccN/fHL8MRMqPh8W4S3PUw4hHH1MMZz5pkynGH2PfNgZ/b7gZMNL72oa5ffk1RgV8+GwqBzWG3PT2RQAAOB8Gb/pP/GQ4kQnBAAAAAAAAAAAAAAAAAAAAB+hafyZ2VmvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgdV4EAAD//4WcVw8=")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
ftruncate(r6, 0x6000000)

22m7.614053048s ago: executing program 3 (id=9):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000300)=0x3, 0x4)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000000340))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]})
close_range(r6, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@dax_inode}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@bh}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

22m5.801199999s ago: executing program 3 (id=11):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4)
close(r3)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r6, 0x400, 0x1)
r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='osx.]'], 0x0, 0x0, 0x0)
write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

22m4.193945537s ago: executing program 3 (id=12):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000300)=0x3, 0x4)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000000340))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f00000002c0)={@id={0x2, 0x0, @d}})

22m0.621361897s ago: executing program 3 (id=16):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000300)=0x3, 0x4)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000000340))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@dax_inode}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@bh}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

21m59.199724223s ago: executing program 3 (id=17):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[])
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r1, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$packet(r4, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0)
accept$nfc_llcp(r4, 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xf, 0xffffffff, 0x40000005, 0xb, "088aefdd2000"})
r5 = dup(r2)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"1b000500", 0x100, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", '\x00', "0000000000000000001000"]})

21m42.467147252s ago: executing program 32 (id=17):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[])
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r1, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$packet(r4, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0)
accept$nfc_llcp(r4, 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xf, 0xffffffff, 0x40000005, 0xb, "088aefdd2000"})
r5 = dup(r2)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"1b000500", 0x100, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", '\x00', "0000000000000000001000"]})

20m38.043727807s ago: executing program 1 (id=113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4)
close(r3)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r6, 0x400, 0x1)
r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='osx.]'], 0x0, 0x0, 0x0)
write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb)

20m32.199396803s ago: executing program 1 (id=119):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}]}, 0x48}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000000000000711048422e6c10438831407e43d753000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x215, &(0x7f0000000a80)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
ftruncate(r6, 0x6000000)

20m30.877949898s ago: executing program 1 (id=121):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

20m26.916501573s ago: executing program 1 (id=127):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$TCFLSH(r2, 0x400455c8, 0x100000002)
ioctl$TIOCSETD(r2, 0x5412, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0)
ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6})
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
epoll_create1(0x0)

20m25.404564779s ago: executing program 1 (id=129):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0)
ftruncate(r4, 0x8800000)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
r7 = dup3(r6, r5, 0x0)
sendfile(r7, r4, 0x0, 0x1000009)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)

20m22.780138389s ago: executing program 1 (id=132):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x891a, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x3, 0x401, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0xfffc, 0x0, 0x0, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x0, 0x8000000, 0xdffffffa]})
close_range(r1, 0xffffffffffffffff, 0x0)

20m7.25391329s ago: executing program 33 (id=132):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x891a, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x3, 0x401, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x12d, 0x4, 0x3, 0xfffc, 0x0, 0x0, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0xa, 0x0, 0x8000000, 0xdffffffa]})
close_range(r1, 0xffffffffffffffff, 0x0)

13m52.469940957s ago: executing program 4 (id=566):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

13m47.450292045s ago: executing program 4 (id=572):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
epoll_create(0x7)
keyctl$clear(0x3, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"})
r4 = syz_open_pts(r3, 0x80)
utime(0x0, 0x0)
dup3(r4, r3, 0x80000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240))

13m45.809203884s ago: executing program 4 (id=573):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x8000)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43)
ftruncate(r5, 0x2007ffb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, 0x0, 0x0)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
sendto$inet(r8, 0x0, 0x0, 0x20004001, 0x0, 0x0)
getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102372, &(0x7f0000000080)=0x18fe4)

13m41.90590724s ago: executing program 4 (id=576):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x100000002)
ioctl$TIOCSETD(r2, 0x5412, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0)
ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
epoll_create1(0x0)

13m40.273192499s ago: executing program 4 (id=577):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
epoll_create(0x7)
keyctl$clear(0x3, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"})
r4 = syz_open_pts(r3, 0x80)
utime(0x0, 0x0)
dup3(r4, r3, 0x80000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240))

13m39.109913463s ago: executing program 4 (id=580):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

13m23.455822875s ago: executing program 34 (id=580):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

23.68476285s ago: executing program 0 (id=1186):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
epoll_create(0x7)
keyctl$clear(0x3, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"})
r4 = syz_open_pts(r3, 0x80)
utime(0x0, 0x0)
dup3(r4, r3, 0x80000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000040)={[], [], 0x2f})

20.789450626s ago: executing program 0 (id=1188):
socket(0x10, 0x3, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x54}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0)
prlimit64(r0, 0xc, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)

15.54973823s ago: executing program 2 (id=1193):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x6, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002)
socket(0x80000000000000a, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4)
ppoll(&(0x7f0000000240)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

15.54121134s ago: executing program 0 (id=1194):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff)
sendfile(r5, r5, 0x0, 0x9)

14.399462454s ago: executing program 7 (id=1195):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000069c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000"], &(0x7f0000006900)=""/173, 0x2e, 0xad, 0x1}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(0x0)
r3 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x20, @remote}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xf)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8000, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="d25e0d517726c0f3bc2c652c475c7399", 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcd9df251100000024000980080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48000)

12.26069092s ago: executing program 2 (id=1196):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
epoll_create(0x7)
keyctl$clear(0x3, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"})
r4 = syz_open_pts(r3, 0x80)
utime(0x0, 0x0)
dup3(r4, r3, 0x80000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000040)={[], [], 0x2f})

12.123202272s ago: executing program 7 (id=1197):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x8000)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43)
ftruncate(r5, 0x2007ffb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, 0x0, 0x0)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
sendto$inet(r8, 0x0, 0x0, 0x20004001, 0x0, 0x0)
getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102372, &(0x7f0000000080)=0x18fe4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

7.915054253s ago: executing program 2 (id=1198):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x215, &(0x7f0000000a80)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
ftruncate(r3, 0x6000000)

7.914160263s ago: executing program 7 (id=1199):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000000000000711048422e6c10438831407e43d753000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x215, &(0x7f0000000a80)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
ftruncate(r7, 0x6000000)

6.786694277s ago: executing program 2 (id=1200):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
epoll_create(0x7)
keyctl$clear(0x3, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"})
r4 = syz_open_pts(r3, 0x80)
utime(0x0, 0x0)
dup3(r4, r3, 0x80000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000040)={[], [], 0x2f})

5.457208934s ago: executing program 2 (id=1201):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0)
listen(0xffffffffffffffff, 0xfffffffc)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680))
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
preadv(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x0, 0x4, 0x5, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x9, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}})
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x10000, 0xf1}, {0x5, 0x56}, 0xea5})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x218, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vlan1\x00', {0x0, 0x6, 0x45, 0xfffffffb, 0x9, 0x100, 0x1, 0x3ff, 0x0, 0x20}, {0x3}}}, @common=@unspec=@cpu={{0x28}, {0xfff, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x9d}}}, {{@ip={@multicast2, @rand_addr=0x64010104, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x9f7ffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7)

5.452919634s ago: executing program 0 (id=1202):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}]}, 0x30}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000000000000711048422e6c10438831407e43d753000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x215, &(0x7f0000000a80)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
ftruncate(r7, 0x6000000)

5.103267818s ago: executing program 7 (id=1203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
epoll_create(0x7)
keyctl$clear(0x3, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"})
r4 = syz_open_pts(r3, 0x80)
dup3(r4, r3, 0x80000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300)=r0, 0x12)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000040)={[], [], 0x2f})

2.632864298s ago: executing program 7 (id=1204):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000069c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000"], &(0x7f0000006900)=""/173, 0x2e, 0xad, 0x1}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(0x0)
r3 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x20, @remote}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xf)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8000, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="d25e0d517726c0f3bc2c652c475c7399", 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcd9df251100000024000980080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48000)

2.564091009s ago: executing program 2 (id=1205):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x6, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r2}, 0x20)
ppoll(&(0x7f0000000240)=[{r3, 0x100}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

2.366502562s ago: executing program 0 (id=1206):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[])
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r1, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$packet(r4, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0)
accept$nfc_llcp(r4, 0x0, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xf, 0xffffffff, 0x40000005, 0xb, "088aefdd2000"})
r5 = dup(r2)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"1b000500", 0x100, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", '\x00', "0000000000000000001000"]})

220.554708ms ago: executing program 7 (id=1207):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x8000)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43)
ftruncate(r5, 0x2007ffb)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
sendto$inet(r8, 0x0, 0x0, 0x20004001, 0x0, 0x0)
getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102372, &(0x7f0000000080)=0x18fe4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

0s ago: executing program 0 (id=1208):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000300)=0x3, 0x4)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000000340))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

erface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1094.926886][ T9841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1095.008096][ T9605] device veth1_macvtap entered promiscuous mode
[ 1095.047444][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1095.055012][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1095.087835][ T9603] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1095.218116][ T9841] device hsr_slave_0 entered promiscuous mode
[ 1095.237723][ T9841] device hsr_slave_1 entered promiscuous mode
[ 1095.266654][ T9841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1095.287228][ T9841] Cannot create hsr debugfs directory
[ 1095.343056][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.368205][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.433468][ T9943] futex_wake_op: syz.0.975 tries to shift op by 144; fix this program
[ 1095.520918][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.667623][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.873582][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1096.261363][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1096.312822][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1096.356987][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.382753][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.403135][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.431743][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.614115][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1096.633437][ T9951] loop2: detected capacity change from 0 to 512
[ 1096.640807][ T9951] EXT4-fs: Ignoring removed orlov option
[ 1096.646501][ T9951] EXT4-fs: Ignoring removed bh option
[ 1096.659721][ T9951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1096.674382][ T9951] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1096.682738][ T9951] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.974: bg 0: block 248: padding at end of block bitmap is not set
[ 1096.697718][ T9951] Quota error (device loop2): write_blk: dquota write failed
[ 1096.705145][ T9951] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1096.715149][ T9951] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.974: Failed to acquire dquot type 1
[ 1096.728346][ T9951] EXT4-fs (loop2): 1 truncate cleaned up
[ 1096.734467][ T9951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1097.173032][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1097.202693][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1097.323499][ T9605] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.348126][ T9605] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.367141][ T9605] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.375915][ T9605] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.874128][   T46] device hsr_slave_0 left promiscuous mode
[ 1097.929362][   T46] device hsr_slave_1 left promiscuous mode
[ 1097.936870][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1097.962073][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1098.053337][   T46] device bridge_slave_1 left promiscuous mode
[ 1098.060640][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.095075][   T46] device bridge_slave_0 left promiscuous mode
[ 1098.113688][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.425562][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1098.733405][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1098.805020][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1098.866390][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1098.943846][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1099.616267][ T9990] xt_hashlimit: size too large, truncated to 1048576
[ 1099.623315][ T9990] xt_hashlimit: invalid rate
[ 1100.439366][   T46] bond0 (unregistering): Released all slaves
[ 1101.016278][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1101.026445][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1101.035218][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1101.043882][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1101.051602][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1101.204248][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1101.396118][   T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1101.407494][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1101.415447][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1101.423812][   T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1101.433158][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1101.445696][   T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1103.294748][ T4283] Bluetooth: hci4: command 0x0409 tx timeout
[ 1104.292751][ T4283] Bluetooth: hci5: command 0x0409 tx timeout
[ 1105.347506][ T4283] Bluetooth: hci4: command 0x041b tx timeout
[ 1105.401443][ T9841] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1105.435986][ T9841] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1105.470383][ T9841] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1105.512881][ T9841] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1105.573528][ T9998] chnl_net:caif_netlink_parms(): no params data found
[ 1106.307735][ T4283] Bluetooth: hci5: command 0x041b tx timeout
[ 1106.377705][T10007] chnl_net:caif_netlink_parms(): no params data found
[ 1106.457892][T10031] loop0: detected capacity change from 0 to 128
[ 1106.496280][ T9998] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1106.519246][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.540474][ T9998] device bridge_slave_0 entered promiscuous mode
[ 1106.558038][T10031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1106.574288][T10031] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1106.689698][ T9998] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1106.696858][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.753114][ T9998] device bridge_slave_1 entered promiscuous mode
[ 1106.902073][ T9841] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1106.927696][ T9998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1106.966536][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1106.982109][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1107.015913][ T9998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1107.405163][ T9841] 8021q: adding VLAN 0 to HW filter on device team0
[ 1107.427382][ T4283] Bluetooth: hci4: command 0x040f tx timeout
[ 1107.523262][ T9998] team0: Port device team_slave_0 added
[ 1107.561508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1107.570490][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1107.580539][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1107.587732][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1107.614203][ T9998] team0: Port device team_slave_1 added
[ 1107.637651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1107.663383][T10007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1107.687162][T10007] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.695559][T10007] device bridge_slave_0 entered promiscuous mode
[ 1107.737583][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1107.744590][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1107.841057][T10062] futex_wake_op: syz.2.983 tries to shift op by 144; fix this program
[ 1108.042983][ T9998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1108.263500][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1108.344487][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1108.675724][ T9998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1108.686591][ T4283] Bluetooth: hci5: command 0x040f tx timeout
[ 1108.717348][T10007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.724514][T10007] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.747541][T10007] device bridge_slave_1 entered promiscuous mode
[ 1108.787182][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1108.796599][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1108.834785][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.841995][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1108.859980][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1108.879107][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1108.895730][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1108.922154][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1108.965570][T10068] futex_wake_op: syz.2.984 tries to shift op by 144; fix this program
[ 1109.009132][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1109.588504][ T4283] Bluetooth: hci4: command 0x0419 tx timeout
[ 1109.957734][T10007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1110.059055][T10076] futex_wake_op: syz.2.985 tries to shift op by 144; fix this program
[ 1110.351089][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1110.452643][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1110.467570][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1110.608521][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1110.704369][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1110.867761][ T4287] Bluetooth: hci5: command 0x0419 tx timeout
[ 1110.946003][T10007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1110.978550][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1110.997556][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1111.441563][T10088] futex_wake_op: syz.2.987 tries to shift op by 144; fix this program
[ 1112.209551][T10007] team0: Port device team_slave_0 added
[ 1112.279236][ T9998] device hsr_slave_0 entered promiscuous mode
[ 1112.303759][T10092] loop0: detected capacity change from 0 to 128
[ 1112.328508][ T9998] device hsr_slave_1 entered promiscuous mode
[ 1112.343985][ T9998] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1112.388737][ T9998] Cannot create hsr debugfs directory
[ 1112.432204][T10092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1112.446555][T10092] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1112.468151][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'.
[ 1112.550313][T10007] team0: Port device team_slave_1 added
[ 1112.654409][T10099] xt_hashlimit: size too large, truncated to 1048576
[ 1112.661509][T10099] xt_hashlimit: invalid rate
[ 1113.537688][T10007] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1113.571464][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1113.977969][T10007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1114.269796][T10007] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1114.304479][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1114.630331][T10007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1115.110139][   T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.380862][   T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.439081][T10007] device hsr_slave_0 entered promiscuous mode
[ 1115.456385][T10007] device hsr_slave_1 entered promiscuous mode
[ 1115.476398][T10007] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1115.496920][T10007] Cannot create hsr debugfs directory
[ 1115.572260][T10111] futex_wake_op: syz.2.989 tries to shift op by 144; fix this program
[ 1115.923482][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.942612][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.557803][   T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.590420][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1116.607481][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1116.727697][   T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.330753][ T9841] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1119.856575][ T9998] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1120.054886][ T9998] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1120.073760][ T9998] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1120.304927][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1120.467127][ T9998] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1121.706580][T10142] loop0: detected capacity change from 0 to 128
[ 1122.537866][T10142] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1122.546685][T10142] ext4 filesystem being mounted at /383/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1122.756768][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1123.083174][T10155] futex_wake_op: syz.0.994 tries to shift op by 144; fix this program
[ 1125.589196][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1125.761070][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1125.820181][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1125.882668][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1126.060001][ T9841] device veth0_vlan entered promiscuous mode
[ 1126.137711][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1126.156754][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1126.175000][ T9841] device veth1_vlan entered promiscuous mode
[ 1126.215147][ T9998] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1126.288332][T10007] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1126.402146][T10007] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1126.433575][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1126.445043][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1126.458670][T10007] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1126.552454][T10007] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1126.580008][ T9998] 8021q: adding VLAN 0 to HW filter on device team0
[ 1126.707345][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1126.728027][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1126.819576][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1126.844133][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1126.870136][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1126.877340][ T9032] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1126.887830][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1127.000655][ T9841] device veth0_macvtap entered promiscuous mode
[ 1127.020012][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1127.251629][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1127.260901][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1127.292433][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.299637][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1127.579855][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1127.608239][   T46] device hsr_slave_0 left promiscuous mode
[ 1127.618505][   T46] device hsr_slave_1 left promiscuous mode
[ 1127.650784][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1127.669685][T10184] loop0: detected capacity change from 0 to 512
[ 1127.710590][T10184] EXT4-fs: Ignoring removed orlov option
[ 1127.717289][T10184] EXT4-fs: Ignoring removed bh option
[ 1127.725277][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1127.750907][   T46] device bridge_slave_1 left promiscuous mode
[ 1127.759267][T10184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1127.797254][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1127.815701][   T46] device bridge_slave_0 left promiscuous mode
[ 1127.859309][T10184] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1127.883902][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1127.928034][   T46] device hsr_slave_0 left promiscuous mode
[ 1127.947216][   T46] device hsr_slave_1 left promiscuous mode
[ 1127.965782][T10184] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.997: bg 0: block 248: padding at end of block bitmap is not set
[ 1127.980462][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1128.001186][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1128.017586][T10184] Quota error (device loop0): write_blk: dquota write failed
[ 1128.025072][T10184] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1128.037142][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1128.044595][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1128.065072][T10184] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.997: Failed to acquire dquot type 1
[ 1128.098382][   T46] device bridge_slave_1 left promiscuous mode
[ 1128.104648][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1128.123682][   T46] device bridge_slave_0 left promiscuous mode
[ 1128.135684][T10184] EXT4-fs (loop0): 1 truncate cleaned up
[ 1128.145262][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1128.161410][T10184] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1128.242281][   T46] device veth1_macvtap left promiscuous mode
[ 1128.257250][   T46] device veth0_macvtap left promiscuous mode
[ 1128.263488][   T46] device veth1_vlan left promiscuous mode
[ 1128.270086][   T46] device veth0_vlan left promiscuous mode
[ 1128.624937][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1128.817570][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1128.856722][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1128.931422][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1129.837973][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1130.028992][T10194] xt_hashlimit: size too large, truncated to 1048576
[ 1130.035876][T10194] xt_hashlimit: invalid rate
[ 1132.920828][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1132.991477][T10206] futex_wake_op: syz.2.1002 tries to shift op by 144; fix this program
[ 1133.103247][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1133.202314][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1133.215017][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1133.327328][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1133.336226][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1133.770722][   T46] bond0 (unregistering): Released all slaves
[ 1134.092287][T10210] futex_wake_op: syz.2.1003 tries to shift op by 144; fix this program
[ 1135.488383][ T4287] Bluetooth: hci0: command 0x0409 tx timeout
[ 1136.010410][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1136.067469][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1136.203720][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1136.634447][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1138.088439][ T4283] Bluetooth: hci0: command 0x041b tx timeout
[ 1138.442832][   T46] bond0 (unregistering): Released all slaves
[ 1138.536047][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1138.639433][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1138.656412][T10229] loop2: detected capacity change from 0 to 512
[ 1138.663239][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1138.665350][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1138.688776][T10229] EXT4-fs: Ignoring removed orlov option
[ 1138.694478][T10229] EXT4-fs: Ignoring removed bh option
[ 1138.728372][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1138.737808][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1138.755726][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1138.762992][T10229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1138.774931][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1138.823057][T10229] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1138.895040][T10229] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1007: bg 0: block 248: padding at end of block bitmap is not set
[ 1138.910388][T10229] Quota error (device loop2): write_blk: dquota write failed
[ 1138.921388][T10229] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1138.931723][T10229] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1007: Failed to acquire dquot type 1
[ 1138.944525][T10229] EXT4-fs (loop2): 1 truncate cleaned up
[ 1138.951284][T10229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1138.989161][ T9998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1139.052559][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1139.154204][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1139.196174][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1139.213068][T10234] xt_hashlimit: size too large, truncated to 1048576
[ 1139.220089][T10234] xt_hashlimit: invalid rate
[ 1139.338067][T10007] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1139.898234][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1139.963777][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1140.147103][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[ 1140.153027][T10007] 8021q: adding VLAN 0 to HW filter on device team0
[ 1140.646347][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1140.717300][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1140.814097][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1140.821306][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1141.050907][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1141.842629][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1141.930251][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1142.040813][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1142.048043][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1142.227099][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[ 1142.266684][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1142.432969][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1142.508196][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1142.553006][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1142.588328][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1142.618867][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1142.677890][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1142.747492][T10203] chnl_net:caif_netlink_parms(): no params data found
[ 1143.096916][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1143.177387][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1143.241857][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1143.254819][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1143.334890][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1143.758186][T10203] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1143.765464][T10203] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1143.801158][T10203] device bridge_slave_0 entered promiscuous mode
[ 1143.846567][T10203] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1143.993846][T10203] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.024322][T10203] device bridge_slave_1 entered promiscuous mode
[ 1144.036243][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1144.157537][T10203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1144.201486][T10253] loop0: detected capacity change from 0 to 128
[ 1144.378014][T10203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1144.398699][T10253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1144.408858][T10253] ext4 filesystem being mounted at /391/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1144.817306][ T9998] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1144.938467][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1144.940785][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1144.946554][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1145.223211][T10260] xt_hashlimit: size too large, truncated to 1048576
[ 1145.230203][T10260] xt_hashlimit: invalid rate
[ 1146.153918][T10203] team0: Port device team_slave_0 added
[ 1147.061486][T10203] team0: Port device team_slave_1 added
[ 1147.125940][T10203] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1147.133348][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1147.163785][T10203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1147.319297][T10203] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1147.340312][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1147.526089][T10203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1147.615637][T10274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1014'.
[ 1147.729635][T10275] futex_wake_op: syz.0.1013 tries to shift op by 144; fix this program
[ 1147.936886][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1147.974920][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1148.206174][T10203] device hsr_slave_0 entered promiscuous mode
[ 1148.213425][T10203] device hsr_slave_1 entered promiscuous mode
[ 1148.220300][T10203] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1148.228111][T10203] Cannot create hsr debugfs directory
[ 1148.262449][T10007] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1151.657224][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1151.668690][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1151.794687][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1151.828265][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1151.847494][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1151.870725][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1151.917453][T10296] futex_wake_op: syz.2.1016 tries to shift op by 144; fix this program
[ 1152.333346][ T9998] device veth0_vlan entered promiscuous mode
[ 1152.359791][T10203] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1152.780715][   T46] device hsr_slave_0 left promiscuous mode
[ 1152.797798][   T46] device hsr_slave_1 left promiscuous mode
[ 1152.829937][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1152.869141][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1152.887893][   T46] device bridge_slave_1 left promiscuous mode
[ 1152.894177][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1152.911235][   T46] device bridge_slave_0 left promiscuous mode
[ 1152.933885][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1153.061586][   T46] device veth0_macvtap left promiscuous mode
[ 1153.092320][   T46] device veth1_vlan left promiscuous mode
[ 1153.127737][   T46] device veth0_vlan left promiscuous mode
[ 1153.179650][T10300] xt_hashlimit: size too large, truncated to 1048576
[ 1153.186465][T10300] xt_hashlimit: invalid rate
[ 1156.897511][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1156.959706][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1157.017890][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1157.077691][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1157.447625][   T46] bond0 (unregistering): Released all slaves
[ 1157.554439][ T9998] device veth1_vlan entered promiscuous mode
[ 1157.563028][T10203] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1157.619513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1157.641187][T10203] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1158.108860][T10321] loop0: detected capacity change from 0 to 128
[ 1159.308114][T10203] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1159.412595][T10319] syz.0.1021: attempt to access beyond end of device
[ 1159.412595][T10319] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1159.502051][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1159.538288][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1159.570613][ T9998] device veth0_macvtap entered promiscuous mode
[ 1159.618794][ T9998] device veth1_macvtap entered promiscuous mode
[ 1159.733543][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1159.767057][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1159.776934][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1159.804315][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1159.830421][ T9998] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1159.852011][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1159.867357][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1159.893681][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1159.968062][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1159.994603][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.004542][ T9998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.015943][ T9998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.030821][ T9998] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1160.056622][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1160.082405][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1160.150665][ T9998] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.164108][ T9998] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.173502][ T9998] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.187280][ T9998] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.203140][T10203] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1160.235957][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1160.244251][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1160.278201][T10203] 8021q: adding VLAN 0 to HW filter on device team0
[ 1160.335873][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1160.346071][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1160.355187][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1160.362405][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1160.386714][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1160.393579][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1160.404397][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1160.412048][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1160.412712][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1160.413196][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1160.413259][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1160.414530][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1160.484660][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1160.492686][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1160.503186][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1160.512601][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1160.522643][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1160.531680][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1160.540463][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1160.573969][ T4687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1160.575813][T10203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1160.593932][ T4687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1160.608977][T10203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1160.624140][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1160.633534][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1160.642388][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1160.651557][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1160.660260][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1160.670620][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1161.164305][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1161.176351][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1161.323454][T10203] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1161.827838][T10347] loop0: detected capacity change from 0 to 128
[ 1162.453595][T10345] syz.0.1023: attempt to access beyond end of device
[ 1162.453595][T10345] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1163.675125][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1163.697832][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1163.708173][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1163.721450][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1163.729227][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1163.742977][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1163.963599][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1163.974536][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1163.989875][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1163.998478][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1164.006844][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1164.014229][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1164.333991][T10370] futex_wake_op: syz.2.1027 tries to shift op by 144; fix this program
[ 1165.837546][ T4287] Bluetooth: hci3: command 0x0409 tx timeout
[ 1165.975854][   T46] device hsr_slave_0 left promiscuous mode
[ 1166.005129][   T46] device hsr_slave_1 left promiscuous mode
[ 1166.067347][ T4287] Bluetooth: hci4: command 0x0409 tx timeout
[ 1166.075161][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1166.107982][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1166.116523][   T46] device bridge_slave_1 left promiscuous mode
[ 1166.129523][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1166.155415][   T46] device bridge_slave_0 left promiscuous mode
[ 1166.174822][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1167.131284][T10395] xt_hashlimit: size too large, truncated to 1048576
[ 1167.138280][T10395] xt_hashlimit: invalid rate
[ 1167.747657][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1167.907589][ T4287] Bluetooth: hci3: command 0x041b tx timeout
[ 1168.147361][ T4287] Bluetooth: hci4: command 0x041b tx timeout
[ 1168.288471][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1168.639614][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1168.766670][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1169.198439][T10408] xt_hashlimit: size too large, truncated to 1048576
[ 1169.205295][T10408] xt_hashlimit: invalid rate
[ 1169.987091][ T4287] Bluetooth: hci3: command 0x040f tx timeout
[ 1170.227264][ T4287] Bluetooth: hci4: command 0x040f tx timeout
[ 1170.441664][   T46] bond0 (unregistering): Released all slaves
[ 1170.612093][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1170.688907][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1170.812856][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1170.823620][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1170.842149][T10203] device veth0_vlan entered promiscuous mode
[ 1170.859570][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1170.875742][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1170.890560][T10203] device veth1_vlan entered promiscuous mode
[ 1170.938130][T10361] chnl_net:caif_netlink_parms(): no params data found
[ 1172.759218][ T4287] Bluetooth: hci3: command 0x0419 tx timeout
[ 1172.765428][ T4287] Bluetooth: hci4: command 0x0419 tx timeout
[ 1173.032590][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1173.074485][T10432] futex_wake_op: syz.0.1034 tries to shift op by 144; fix this program
[ 1173.260066][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1173.468959][T10358] chnl_net:caif_netlink_parms(): no params data found
[ 1174.001015][T10203] device veth0_macvtap entered promiscuous mode
[ 1174.042404][T10437] loop2: detected capacity change from 0 to 512
[ 1174.049671][T10437] EXT4-fs: Ignoring removed orlov option
[ 1174.055398][T10437] EXT4-fs: Ignoring removed bh option
[ 1174.062509][T10437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1174.074225][T10437] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1174.092316][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1174.101450][T10437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1033: bg 0: block 248: padding at end of block bitmap is not set
[ 1174.116423][T10437] Quota error (device loop2): write_blk: dquota write failed
[ 1174.124127][T10437] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1174.134224][T10437] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1033: Failed to acquire dquot type 1
[ 1174.148522][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1174.159310][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1174.167751][T10437] EXT4-fs (loop2): 1 truncate cleaned up
[ 1174.174006][T10437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1174.186783][T10203] device veth1_macvtap entered promiscuous mode
[ 1174.353508][T10437] EXT4-fs (loop2): shut down requested (2)
[ 1174.395766][T10361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.183384][T10361] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1175.219984][T10361] device bridge_slave_0 entered promiscuous mode
[ 1175.349460][T10361] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1175.363071][T10361] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1175.567162][T10361] device bridge_slave_1 entered promiscuous mode
[ 1175.612693][T10358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.714115][T10358] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1175.751969][T10358] device bridge_slave_0 entered promiscuous mode
[ 1175.793190][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.866469][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1175.947063][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.977048][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.011084][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1176.057121][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.099787][T10203] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1176.136185][T10358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1176.147277][T10358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.171773][T10358] device bridge_slave_1 entered promiscuous mode
[ 1176.207136][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1176.215967][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1176.285433][T10358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1176.309847][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1176.345437][T10358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1176.370302][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1176.393515][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.420309][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1176.477178][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.527147][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1176.558045][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.587202][T10203] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1176.596840][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1176.731427][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1176.740628][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1177.236202][T10358] team0: Port device team_slave_0 added
[ 1177.252823][T10203] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.277298][T10203] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.350847][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.357671][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.367335][T10203] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.376081][T10203] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.602644][   T46] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.620509][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1177.632587][T10358] team0: Port device team_slave_1 added
[ 1177.779778][T10361] team0: Port device team_slave_0 added
[ 1177.791495][T10361] team0: Port device team_slave_1 added
[ 1177.932645][   T46] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1178.091530][T10469] loop0: detected capacity change from 0 to 128
[ 1178.240407][T10468] futex_wake_op: syz.2.1039 tries to shift op by 144; fix this program
[ 1181.155934][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1181.184525][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1181.223991][T10469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1181.232900][T10469] ext4 filesystem being mounted at /406/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1181.280607][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1181.293553][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1181.300739][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1181.334993][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1181.449074][T10358] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1181.456220][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1181.464452][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1181.499927][T10358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1182.518547][   T46] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.562470][T10358] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1182.596642][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1183.400248][T10486] xt_hashlimit: size too large, truncated to 1048576
[ 1183.407326][T10486] xt_hashlimit: invalid rate
[ 1184.883669][T10358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1185.135052][   T46] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.236133][T10361] device hsr_slave_0 entered promiscuous mode
[ 1185.246795][T10361] device hsr_slave_1 entered promiscuous mode
[ 1185.268116][T10361] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1185.277232][T10361] Cannot create hsr debugfs directory
[ 1185.304380][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1185.324092][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1185.394491][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1185.485462][T10358] device hsr_slave_0 entered promiscuous mode
[ 1185.549904][T10358] device hsr_slave_1 entered promiscuous mode
[ 1185.599287][T10358] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1186.454477][T10358] Cannot create hsr debugfs directory
[ 1189.316950][ T6299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1189.324919][ T6299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1189.684243][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1192.336076][T10358] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1192.374020][T10358] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1192.419569][T10358] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1192.676809][T10553] loop0: detected capacity change from 0 to 512
[ 1192.684319][T10553] EXT4-fs: Ignoring removed orlov option
[ 1192.690085][T10553] EXT4-fs: Ignoring removed bh option
[ 1192.696677][T10553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1192.784533][T10553] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1192.792840][T10553] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1046: bg 0: block 248: padding at end of block bitmap is not set
[ 1192.808408][T10553] Quota error (device loop0): write_blk: dquota write failed
[ 1192.815897][T10553] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1192.826014][T10553] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1046: Failed to acquire dquot type 1
[ 1192.839221][T10553] EXT4-fs (loop0): 1 truncate cleaned up
[ 1192.849114][T10553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1192.860839][T10553] EXT4-fs (loop0): shut down requested (2)
[ 1193.038331][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1193.086201][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1193.102047][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1193.111793][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1193.120672][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1193.128364][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1193.135655][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1193.167908][T10358] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1193.484739][T10574] loop2: detected capacity change from 0 to 128
[ 1193.948674][T10574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1194.623595][T10574] ext4 filesystem being mounted at /417/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1194.862095][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1194.913678][T10570] xt_hashlimit: size too large, truncated to 1048576
[ 1194.920593][T10570] xt_hashlimit: invalid rate
[ 1195.032216][   T46] device hsr_slave_0 left promiscuous mode
[ 1195.039649][   T46] device hsr_slave_1 left promiscuous mode
[ 1195.046345][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1195.054215][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1195.201988][   T48] Bluetooth: hci0: command 0x0409 tx timeout
[ 1195.217309][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1195.241662][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1196.183905][   T46] device bridge_slave_1 left promiscuous mode
[ 1196.200466][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1196.293478][   T46] device bridge_slave_0 left promiscuous mode
[ 1196.332827][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1196.596348][   T46] device veth1_macvtap left promiscuous mode
[ 1196.623218][   T46] device veth0_macvtap left promiscuous mode
[ 1196.646621][   T46] device veth1_vlan left promiscuous mode
[ 1197.277144][   T48] Bluetooth: hci0: command 0x041b tx timeout
[ 1197.627628][T10586] futex_wake_op: syz.2.1050 tries to shift op by 144; fix this program
[ 1199.357147][   T48] Bluetooth: hci0: command 0x040f tx timeout
[ 1200.429422][   T46] device veth0_vlan left promiscuous mode
[ 1201.427484][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[ 1204.199598][T10601] xt_hashlimit: size too large, truncated to 1048576
[ 1204.206397][T10601] xt_hashlimit: invalid rate
[ 1204.901680][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1204.949988][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1204.989882][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1205.034203][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1205.331554][   T46] bond0 (unregistering): Released all slaves
[ 1205.570020][T10361] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1205.629797][T10361] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1205.671335][T10361] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1205.740944][T10361] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1206.085083][T10609] xt_hashlimit: size too large, truncated to 1048576
[ 1206.092293][T10609] xt_hashlimit: invalid rate
[ 1206.431423][T10612] xt_hashlimit: size too large, truncated to 1048576
[ 1206.438413][T10612] xt_hashlimit: invalid rate
[ 1209.232104][T10358] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1209.384089][T10621] loop2: detected capacity change from 0 to 512
[ 1209.391739][T10621] EXT4-fs: Ignoring removed orlov option
[ 1209.397575][T10621] EXT4-fs: Ignoring removed bh option
[ 1209.404070][T10621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1209.527168][T10358] 8021q: adding VLAN 0 to HW filter on device team0
[ 1209.538568][T10621] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1209.546291][T10621] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1056: bg 0: block 248: padding at end of block bitmap is not set
[ 1209.561423][T10621] Quota error (device loop2): write_blk: dquota write failed
[ 1209.568976][T10621] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1209.579425][T10621] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1056: Failed to acquire dquot type 1
[ 1209.603685][T10621] EXT4-fs (loop2): 1 truncate cleaned up
[ 1209.612051][T10621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1209.623737][T10621] EXT4-fs (loop2): shut down requested (2)
[ 1209.758147][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1209.770193][T10361] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1209.794248][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1209.836283][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1210.819460][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1210.895910][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1211.078940][ T4788] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1211.086239][ T4788] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1211.430549][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1211.543679][T10561] chnl_net:caif_netlink_parms(): no params data found
[ 1211.703021][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1211.790119][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1212.172603][T10642] loop0: detected capacity change from 0 to 128
[ 1212.232768][T10642] syz.0.1059: attempt to access beyond end of device
[ 1212.232768][T10642] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1212.435460][ T4788] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1212.442720][ T4788] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1212.936601][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1213.007156][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1213.365853][T10361] 8021q: adding VLAN 0 to HW filter on device team0
[ 1213.435203][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1213.508071][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1213.819397][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1213.891007][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1214.086634][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1214.102456][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1215.144319][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1215.151591][ T9032] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1215.197386][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1215.206510][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1215.238224][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1215.261460][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1215.442746][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1215.449966][ T9032] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1215.464587][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1215.474949][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1216.328931][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1216.365842][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1216.463046][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1216.477717][T10666] xt_hashlimit: size too large, truncated to 1048576
[ 1216.484548][T10666] xt_hashlimit: invalid rate
[ 1216.533963][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1216.589684][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1217.953333][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1218.042213][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1218.186914][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1218.324896][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1218.432880][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1218.534910][T10358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1218.840183][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1218.878899][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1219.079768][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1219.399786][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1219.454558][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1219.471482][T10361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1219.558325][   T46] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1219.740469][T10679] loop2: detected capacity change from 0 to 512
[ 1219.747746][T10679] EXT4-fs: Ignoring removed orlov option
[ 1219.753450][T10679] EXT4-fs: Ignoring removed bh option
[ 1219.760911][T10679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1219.798254][T10561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1219.816461][T10561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1219.825261][T10679] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1219.844419][T10679] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1065: bg 0: block 248: padding at end of block bitmap is not set
[ 1219.860091][T10679] Quota error (device loop2): write_blk: dquota write failed
[ 1219.867647][T10679] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1219.877722][T10679] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1065: Failed to acquire dquot type 1
[ 1219.890798][T10679] EXT4-fs (loop2): 1 truncate cleaned up
[ 1219.897061][T10679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1219.908883][T10679] EXT4-fs (loop2): shut down requested (2)
[ 1220.000903][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1220.018527][T10561] device bridge_slave_0 entered promiscuous mode
[ 1220.140040][   T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.177855][T10561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1220.195206][T10561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1220.226810][T10561] device bridge_slave_1 entered promiscuous mode
[ 1220.459972][T10688] xt_hashlimit: size too large, truncated to 1048576
[ 1220.466790][T10688] xt_hashlimit: invalid rate
[ 1223.009151][   T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.065514][T10561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1223.216514][   T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.272236][T10561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1223.431734][T10561] team0: Port device team_slave_0 added
[ 1223.554843][T10561] team0: Port device team_slave_1 added
[ 1223.581315][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1223.597289][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1223.688612][T10358] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1223.737659][T10561] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1223.744680][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1223.835882][T10561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1224.015768][T10561] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1224.033660][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1224.069631][T10561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1224.313684][T10561] device hsr_slave_0 entered promiscuous mode
[ 1224.344651][T10561] device hsr_slave_1 entered promiscuous mode
[ 1224.366338][T10561] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1224.374496][T10561] Cannot create hsr debugfs directory
[ 1224.648231][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1224.658016][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1224.708504][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1224.718004][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1224.728509][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1224.736603][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1224.785862][T10358] device veth0_vlan entered promiscuous mode
[ 1224.874780][T10358] device veth1_vlan entered promiscuous mode
[ 1225.241224][T10737] loop0: detected capacity change from 0 to 128
[ 1225.846379][T10737] syz.0.1068: attempt to access beyond end of device
[ 1225.846379][T10737] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1225.926662][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1225.938888][T10734] xt_hashlimit: size too large, truncated to 1048576
[ 1225.945819][T10734] xt_hashlimit: invalid rate
[ 1226.348138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1226.740940][T10744] loop0: detected capacity change from 0 to 128
[ 1227.569007][T10744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1227.577985][T10744] ext4 filesystem being mounted at /418/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1227.836323][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1231.591606][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1231.684995][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1231.693592][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1231.715408][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1231.722795][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1231.732656][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1231.741478][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1231.749858][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1231.757586][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1231.766278][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1231.777092][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1231.788321][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1231.848460][T10774] loop0: detected capacity change from 0 to 512
[ 1231.855693][T10774] EXT4-fs: Ignoring removed orlov option
[ 1231.861466][T10774] EXT4-fs: Ignoring removed bh option
[ 1231.870413][T10774] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1232.002616][T10774] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1232.014122][T10774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1073: bg 0: block 248: padding at end of block bitmap is not set
[ 1232.032737][T10774] Quota error (device loop0): write_blk: dquota write failed
[ 1232.040551][T10774] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1232.050708][T10774] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1073: Failed to acquire dquot type 1
[ 1232.067039][T10774] EXT4-fs (loop0): 1 truncate cleaned up
[ 1232.166918][T10774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1232.180297][T10774] EXT4-fs (loop0): shut down requested (2)
[ 1232.364821][T10772] xt_hashlimit: size too large, truncated to 1048576
[ 1232.371811][T10772] xt_hashlimit: invalid rate
[ 1233.022117][   T46] device hsr_slave_0 left promiscuous mode
[ 1233.037919][   T46] device hsr_slave_1 left promiscuous mode
[ 1233.058341][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1233.076396][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1233.127567][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1233.135055][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1233.167303][   T46] device bridge_slave_1 left promiscuous mode
[ 1233.183881][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1233.205472][   T46] device bridge_slave_0 left promiscuous mode
[ 1233.373938][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1234.148065][T10771] Bluetooth: hci3: command 0x0409 tx timeout
[ 1234.154804][T10771] Bluetooth: hci4: command 0x0409 tx timeout
[ 1234.200529][   T46] device veth1_macvtap left promiscuous mode
[ 1234.206662][   T46] device veth0_macvtap left promiscuous mode
[ 1234.389348][   T46] device veth1_vlan left promiscuous mode
[ 1234.405472][   T46] device veth0_vlan left promiscuous mode
[ 1235.616664][T10802] xt_hashlimit: size too large, truncated to 1048576
[ 1235.623699][T10802] xt_hashlimit: invalid rate
[ 1236.228931][T10771] Bluetooth: hci4: command 0x041b tx timeout
[ 1236.235019][T10771] Bluetooth: hci3: command 0x041b tx timeout
[ 1236.383480][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1238.307346][T10771] Bluetooth: hci3: command 0x040f tx timeout
[ 1238.313654][ T4283] Bluetooth: hci4: command 0x040f tx timeout
[ 1238.699843][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1238.789840][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.796607][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.927381][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1239.122138][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1239.330230][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1239.906202][T10814] loop0: detected capacity change from 0 to 128
[ 1240.417309][T10771] Bluetooth: hci4: command 0x0419 tx timeout
[ 1240.424752][T10771] Bluetooth: hci3: command 0x0419 tx timeout
[ 1240.756674][T10814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1240.767614][T10814] ext4 filesystem being mounted at /422/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1240.832985][   T46] bond0 (unregistering): Released all slaves
[ 1240.970260][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1241.065414][T10561] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1241.142549][T10561] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1241.187905][T10561] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1241.274587][T10561] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1242.000996][T10826] xt_hashlimit: size too large, truncated to 1048576
[ 1242.007881][T10826] xt_hashlimit: invalid rate
[ 1243.070176][T10839] loop2: detected capacity change from 0 to 128
[ 1243.945881][T10838] syz.2.1083: attempt to access beyond end of device
[ 1243.945881][T10838] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1244.123117][T10561] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1244.153085][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1244.172418][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1244.362955][T10561] 8021q: adding VLAN 0 to HW filter on device team0
[ 1244.645913][T10769] chnl_net:caif_netlink_parms(): no params data found
[ 1244.663741][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1244.678946][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1246.327457][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1246.334630][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1246.374268][T10765] chnl_net:caif_netlink_parms(): no params data found
[ 1246.494761][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1246.503115][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1246.546366][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1246.653565][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1246.660784][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1246.668753][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1247.066920][T10866] loop2: detected capacity change from 0 to 128
[ 1248.677427][T10866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1248.686235][T10866] ext4 filesystem being mounted at /440/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1248.715410][T10561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1248.726040][T10561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1248.746016][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'.
[ 1248.773002][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1248.803524][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1248.854720][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1248.889380][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1248.898673][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1248.907479][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1248.916118][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1248.925415][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1248.934448][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1249.019876][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1249.207896][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1249.237908][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1249.415703][T10883] futex_wake_op: syz.2.1087 tries to shift op by 144; fix this program
[ 1249.922412][T10769] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1249.992057][T10769] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1250.376748][T10769] device bridge_slave_0 entered promiscuous mode
[ 1250.505503][T10881] xt_hashlimit: size too large, truncated to 1048576
[ 1250.512703][T10881] xt_hashlimit: invalid rate
[ 1250.614112][T10769] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1250.650322][T10769] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1250.787210][T10769] device bridge_slave_1 entered promiscuous mode
[ 1251.192422][T10765] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1251.219307][T10765] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1251.270975][T10765] device bridge_slave_0 entered promiscuous mode
[ 1251.395759][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1251.447412][T10765] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1251.465865][T10765] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1251.682788][T10765] device bridge_slave_1 entered promiscuous mode
[ 1251.723865][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1255.414398][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1255.430195][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1255.473854][T10769] team0: Port device team_slave_0 added
[ 1255.514781][T10765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1255.554573][T10769] team0: Port device team_slave_1 added
[ 1255.664832][T10765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1255.784136][T10769] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1255.794463][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1255.837534][T10769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1255.861969][T10765] team0: Port device team_slave_0 added
[ 1255.888290][T10769] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1255.895302][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1255.985118][T10769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1256.155467][T10765] team0: Port device team_slave_1 added
[ 1256.289457][T10765] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1256.296584][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1256.332958][T10765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1256.369864][T10769] device hsr_slave_0 entered promiscuous mode
[ 1256.381522][T10769] device hsr_slave_1 entered promiscuous mode
[ 1256.429346][T10769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1256.442671][T10769] Cannot create hsr debugfs directory
[ 1256.449180][T10765] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1256.456174][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1256.502783][T10765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1256.750316][T10765] device hsr_slave_0 entered promiscuous mode
[ 1256.759762][T10765] device hsr_slave_1 entered promiscuous mode
[ 1256.766421][T10765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1256.774915][T10765] Cannot create hsr debugfs directory
[ 1258.957802][T10952] xt_hashlimit: size too large, truncated to 1048576
[ 1258.964745][T10952] xt_hashlimit: invalid rate
[ 1262.669420][T10958] futex_wake_op: syz.2.1094 tries to shift op by 144; fix this program
[ 1263.999874][T10965] loop2: detected capacity change from 0 to 128
[ 1264.778800][T10965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1264.787604][T10965] ext4 filesystem being mounted at /446/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1264.836668][T10962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'.
[ 1264.867416][T10771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1264.903104][T10771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1264.912950][T10771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1264.927120][T10771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1264.938887][T10771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1265.062572][T10771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1266.481550][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1267.107329][ T4283] Bluetooth: hci0: command 0x0409 tx timeout
[ 1267.955435][T10995] xt_hashlimit: size too large, truncated to 1048576
[ 1267.962384][T10995] xt_hashlimit: invalid rate
[ 1269.370109][ T4283] Bluetooth: hci0: command 0x041b tx timeout
[ 1269.522760][   T46] device hsr_slave_0 left promiscuous mode
[ 1269.819352][   T46] device hsr_slave_1 left promiscuous mode
[ 1269.874174][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1269.885968][T11006] xt_hashlimit: size too large, truncated to 1048576
[ 1269.892991][T11006] xt_hashlimit: invalid rate
[ 1269.924491][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1269.983527][   T46] device bridge_slave_1 left promiscuous mode
[ 1270.026216][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1270.098538][   T46] device bridge_slave_0 left promiscuous mode
[ 1270.139906][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1270.300686][   T46] device hsr_slave_0 left promiscuous mode
[ 1270.345948][   T46] device hsr_slave_1 left promiscuous mode
[ 1270.401841][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1271.437251][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[ 1271.567866][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1271.592769][   T46] device bridge_slave_1 left promiscuous mode
[ 1271.613663][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1271.640736][   T46] device bridge_slave_0 left promiscuous mode
[ 1272.891050][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1273.122366][   T46] device veth1_vlan left promiscuous mode
[ 1273.152809][   T46] device veth0_vlan left promiscuous mode
[ 1273.507093][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[ 1274.383172][T11017] xt_hashlimit: size too large, truncated to 1048576
[ 1274.390265][T11017] xt_hashlimit: invalid rate
[ 1275.369457][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1275.410878][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1275.453793][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1275.495987][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1275.756030][   T46] bond0 (unregistering): Released all slaves
[ 1275.996673][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1276.044082][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1276.098155][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1276.142343][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1276.344940][   T46] bond0 (unregistering): Released all slaves
[ 1276.671220][T11024] futex_wake_op: syz.0.1103 tries to shift op by 144; fix this program
[ 1277.027124][T10765] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1277.780695][T10765] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1277.886174][T11028] xt_hashlimit: size too large, truncated to 1048576
[ 1277.893079][T11028] xt_hashlimit: invalid rate
[ 1278.156259][T10765] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1278.773667][T10765] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1279.075913][T10968] chnl_net:caif_netlink_parms(): no params data found
[ 1279.351273][T10769] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1279.448328][T11038] xt_hashlimit: size too large, truncated to 1048576
[ 1279.455161][T11038] xt_hashlimit: invalid rate
[ 1279.825082][T11048] futex_wake_op: syz.2.1107 tries to shift op by 144; fix this program
[ 1281.955554][T10769] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1282.686270][T10769] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1282.841772][T10769] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1282.922753][T10968] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1282.930582][T10968] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1282.938899][T10968] device bridge_slave_0 entered promiscuous mode
[ 1282.948213][T10968] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1282.955342][T10968] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1282.963824][T10968] device bridge_slave_1 entered promiscuous mode
[ 1283.058136][T11060] loop2: detected capacity change from 0 to 128
[ 1283.400768][T11064] futex_wake_op: syz.0.1109 tries to shift op by 144; fix this program
[ 1285.609405][T11060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1285.637642][T11060] ext4 filesystem being mounted at /452/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1285.929195][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1285.935583][T10765] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1286.010391][T10968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1286.040424][T10968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1286.081234][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1286.096031][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1286.120164][T10765] 8021q: adding VLAN 0 to HW filter on device team0
[ 1286.195418][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1286.207906][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1286.227445][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1286.234631][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1286.257646][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1286.277627][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1286.297702][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1286.304921][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1286.327842][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1286.350906][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1286.381588][T10968] team0: Port device team_slave_0 added
[ 1286.461047][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1286.477864][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1286.488693][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1286.497946][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1286.520998][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1286.537996][T10968] team0: Port device team_slave_1 added
[ 1286.563129][T10765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1286.591378][T10765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1286.619714][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1286.634005][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1286.644236][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1286.661910][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1286.675341][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1286.834094][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1286.859939][T10968] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1286.886350][T10968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1286.923147][T10968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1286.936534][T10968] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1286.957059][T10968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1286.989160][T10968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1287.082623][T10968] device hsr_slave_0 entered promiscuous mode
[ 1287.092893][T10968] device hsr_slave_1 entered promiscuous mode
[ 1287.109231][T10968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1287.116858][T10968] Cannot create hsr debugfs directory
[ 1287.366122][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1287.374312][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1287.410928][T10765] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1288.531207][T11106] xt_hashlimit: size too large, truncated to 1048576
[ 1288.538359][T11106] xt_hashlimit: invalid rate
[ 1291.564046][T11105] xt_hashlimit: size too large, truncated to 1048576
[ 1291.571024][T11105] xt_hashlimit: invalid rate
[ 1292.833346][T11117] futex_wake_op: syz.0.1112 tries to shift op by 144; fix this program
[ 1293.897228][   T46] device hsr_slave_0 left promiscuous mode
[ 1293.915765][   T46] device hsr_slave_1 left promiscuous mode
[ 1294.557337][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1294.567882][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1294.637780][   T46] device bridge_slave_1 left promiscuous mode
[ 1294.665144][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1294.674547][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1294.684603][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1294.707244][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1294.727798][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1294.735373][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1294.742919][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1294.764064][   T46] device bridge_slave_0 left promiscuous mode
[ 1294.834319][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1294.904883][T10771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1294.917253][T10771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1294.924905][T10771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1294.933400][T10771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1294.958405][T10771] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1294.966412][T10771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1296.432903][T11149] xt_hashlimit: size too large, truncated to 1048576
[ 1296.439802][T11149] xt_hashlimit: invalid rate
[ 1296.788412][T10771] Bluetooth: hci3: command 0x0409 tx timeout
[ 1297.027404][T10771] Bluetooth: hci4: command 0x0409 tx timeout
[ 1298.187852][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1298.515991][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1298.721302][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1298.930140][T10771] Bluetooth: hci3: command 0x041b tx timeout
[ 1298.936829][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1299.726097][T10771] Bluetooth: hci4: command 0x041b tx timeout
[ 1300.231069][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.237882][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.889182][   T46] bond0 (unregistering): Released all slaves
[ 1300.947295][T10771] Bluetooth: hci3: command 0x040f tx timeout
[ 1300.993496][T10968] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1301.111038][T10968] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1301.363704][T10968] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1301.596501][T10968] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1301.818685][T10771] Bluetooth: hci4: command 0x040f tx timeout
[ 1303.027690][T10771] Bluetooth: hci3: command 0x0419 tx timeout
[ 1303.038395][T11130] chnl_net:caif_netlink_parms(): no params data found
[ 1303.167390][T10968] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1303.915542][T11183] loop2: detected capacity change from 0 to 128
[ 1305.731683][T10771] Bluetooth: hci4: command 0x0419 tx timeout
[ 1305.779587][T11183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1305.788391][T11183] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1305.837403][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'.
[ 1305.873714][T11126] chnl_net:caif_netlink_parms(): no params data found
[ 1305.922252][T10968] 8021q: adding VLAN 0 to HW filter on device team0
[ 1306.063826][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1306.172571][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1306.189684][ T9032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1306.584759][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1306.743782][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1306.858936][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1306.866103][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1306.877666][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1306.916832][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1306.937296][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1306.944446][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1306.995923][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1307.035660][T11130] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1307.052166][T11130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1307.062090][T11130] device bridge_slave_0 entered promiscuous mode
[ 1307.071483][T11130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1307.078881][T11130] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1307.087345][T11130] device bridge_slave_1 entered promiscuous mode
[ 1307.115390][T11130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1307.128287][T11130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1307.158908][T11130] team0: Port device team_slave_0 added
[ 1307.239796][T11198] futex_wake_op: syz.0.1125 tries to shift op by 144; fix this program
[ 1308.158304][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1308.176452][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1308.311807][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1308.394758][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1308.581894][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1308.845893][T11206] loop0: detected capacity change from 0 to 128
[ 1309.544866][T11206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1309.554631][T11206] ext4 filesystem being mounted at /445/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1309.635208][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1309.788860][ T4273] EXT4-fs (loop0): unmounting filesystem.
[ 1309.795981][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1309.870741][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1309.902555][T11130] team0: Port device team_slave_1 added
[ 1309.981099][T11214] futex_wake_op: syz.2.1129 tries to shift op by 144; fix this program
[ 1310.833337][T10968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1310.903505][T10968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1310.963847][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1311.021566][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1311.221422][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1311.235692][T11212] xt_hashlimit: size too large, truncated to 1048576
[ 1311.242635][T11212] xt_hashlimit: invalid rate
[ 1313.205054][T11130] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1313.269943][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1313.436911][T11130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1313.651910][T11130] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1313.880344][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1313.906953][T11130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1313.950131][T11130] device hsr_slave_0 entered promiscuous mode
[ 1315.046901][T11130] device hsr_slave_1 entered promiscuous mode
[ 1315.054314][T11130] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1315.062018][T11130] Cannot create hsr debugfs directory
[ 1315.100512][T11126] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1315.127157][T11126] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1315.554700][T11126] device bridge_slave_0 entered promiscuous mode
[ 1315.710907][T11126] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1315.820048][T11126] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1315.828943][T11126] device bridge_slave_1 entered promiscuous mode
[ 1315.864428][T11235] xt_hashlimit: size too large, truncated to 1048576
[ 1315.871300][T11235] xt_hashlimit: invalid rate
[ 1318.061428][T11240] xt_hashlimit: size too large, truncated to 1048576
[ 1318.088518][T11240] xt_hashlimit: invalid rate
[ 1318.109814][T11126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1318.172691][T11126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1318.331263][T11126] team0: Port device team_slave_0 added
[ 1318.436529][T11126] team0: Port device team_slave_1 added
[ 1318.550454][T11126] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1318.557635][T11126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1318.584959][T11126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1318.603747][T11126] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1318.612116][T11126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1318.638716][T11126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1318.745759][T11126] device hsr_slave_0 entered promiscuous mode
[ 1318.752992][T11126] device hsr_slave_1 entered promiscuous mode
[ 1318.760229][T11126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1318.769794][T11126] Cannot create hsr debugfs directory
[ 1318.952218][T11130] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1318.983789][T11130] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1319.034548][T11130] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1319.059388][T11130] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1319.312072][T11130] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1319.346852][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1319.355423][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1319.370261][T11130] 8021q: adding VLAN 0 to HW filter on device team0
[ 1319.400534][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1319.415667][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1319.424384][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1319.431568][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1319.441677][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1319.454619][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1319.465046][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1319.474003][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1319.481191][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1319.549753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1319.572964][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1319.593333][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1319.604155][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1319.613849][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1319.625142][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1319.634551][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1319.662076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1319.672382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1319.688685][T11130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1319.700645][T11130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1319.710093][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1319.720310][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1322.335531][T11270] loop2: detected capacity change from 0 to 128
[ 1323.957865][T11270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1323.966720][T11270] ext4 filesystem being mounted at /467/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1324.031609][ T4764] device hsr_slave_0 left promiscuous mode
[ 1324.070684][ T4764] device hsr_slave_1 left promiscuous mode
[ 1324.343462][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1324.361790][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1324.365195][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1324.377683][ T4764] device bridge_slave_1 left promiscuous mode
[ 1324.383949][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1326.257707][ T4764] device bridge_slave_0 left promiscuous mode
[ 1326.264025][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1326.391300][ T4764] device hsr_slave_0 left promiscuous mode
[ 1326.527100][ T4764] device hsr_slave_1 left promiscuous mode
[ 1326.607167][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1326.637139][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1326.885069][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1326.913264][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1326.929595][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1326.949487][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1326.963513][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1326.973436][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1327.439030][ T4764] device bridge_slave_1 left promiscuous mode
[ 1327.445302][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1327.537609][ T4764] device bridge_slave_0 left promiscuous mode
[ 1327.563551][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1329.038342][T10771] Bluetooth: hci0: command 0x0409 tx timeout
[ 1331.744460][T10771] Bluetooth: hci0: command 0x041b tx timeout
[ 1333.827212][T10771] Bluetooth: hci0: command 0x040f tx timeout
[ 1334.052633][T11316] futex_wake_op: syz.2.1144 tries to shift op by 144; fix this program
[ 1334.825569][T11322] loop0: detected capacity change from 0 to 128
[ 1336.167463][T10771] Bluetooth: hci0: command 0x0419 tx timeout
[ 1336.237248][T11320] syz.0.1145: attempt to access beyond end of device
[ 1336.237248][T11320] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1336.660015][ T4764] team0 (unregistering): Port device team_slave_1 removed
[ 1336.759699][T11326] xt_hashlimit: size too large, truncated to 1048576
[ 1336.766496][T11326] xt_hashlimit: invalid rate
[ 1337.156900][ T4764] team0 (unregistering): Port device team_slave_0 removed
[ 1338.893585][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1339.124959][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1341.147543][ T4764] bond0 (unregistering): Released all slaves
[ 1342.054666][ T4764] team0 (unregistering): Port device team_slave_1 removed
[ 1342.099180][ T4764] team0 (unregistering): Port device team_slave_0 removed
[ 1342.158106][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1342.211476][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1342.328123][ T4764] bond0 (unregistering): Released all slaves
[ 1342.546079][T11130] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1343.223797][T11130] device veth0_vlan entered promiscuous mode
[ 1343.246514][T11130] device veth1_vlan entered promiscuous mode
[ 1343.296025][T11130] device veth0_macvtap entered promiscuous mode
[ 1343.320720][T11130] device veth1_macvtap entered promiscuous mode
[ 1343.344038][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1343.362559][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1343.379747][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1343.397571][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1343.416437][T11130] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1343.428355][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1343.446704][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1343.457011][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1343.475962][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1343.491190][T11130] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1343.513570][T11130] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1343.528527][T11130] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1343.543213][T11130] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1343.554501][T11130] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1343.670610][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1343.700477][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1343.750034][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1343.767044][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1344.044774][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1344.061143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1344.071320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1344.080737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1344.098009][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1344.112959][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1344.121741][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1344.130968][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1344.141564][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1344.159155][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1344.179333][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1344.196623][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1344.205720][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1344.222748][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1344.248053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1344.264062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1344.274340][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1344.292593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1344.306308][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1344.319090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1344.361036][T11126] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1344.872300][T11126] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1344.939949][T11362] loop7: detected capacity change from 0 to 128
[ 1345.931904][T11126] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1345.946801][T11362] syz.7.592: attempt to access beyond end of device
[ 1345.946801][T11362] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1346.005873][T11364] xt_hashlimit: size too large, truncated to 1048576
[ 1346.012836][T11364] xt_hashlimit: invalid rate
[ 1346.526388][T11126] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1347.063276][T11387] loop2: detected capacity change from 0 to 128
[ 1348.841840][T11375] xt_hashlimit: size too large, truncated to 1048576
[ 1348.850096][T11375] xt_hashlimit: invalid rate
[ 1350.983319][T11381] xt_hashlimit: size too large, truncated to 1048576
[ 1350.990414][T11381] xt_hashlimit: invalid rate
[ 1351.670338][T11285] chnl_net:caif_netlink_parms(): no params data found
[ 1351.872069][T11285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1351.888129][T11285] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1351.957406][T11285] device bridge_slave_0 entered promiscuous mode
[ 1351.966292][T11285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1351.978203][T11285] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1351.986467][T11285] device bridge_slave_1 entered promiscuous mode
[ 1352.034859][T11285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1352.059750][T11285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1352.118986][T11285] team0: Port device team_slave_0 added
[ 1352.164831][T11285] team0: Port device team_slave_1 added
[ 1352.245348][T11285] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1352.260873][T11285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1352.304663][T11285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1352.379439][T11285] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1352.386453][T11285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1352.416848][T11285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1352.489656][T11285] device hsr_slave_0 entered promiscuous mode
[ 1352.496600][T11285] device hsr_slave_1 entered promiscuous mode
[ 1352.503909][T11285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1352.511872][T11285] Cannot create hsr debugfs directory
[ 1355.901794][T11437] xt_hashlimit: size too large, truncated to 1048576
[ 1355.909193][T11437] xt_hashlimit: invalid rate
[ 1357.945934][T11456] loop2: detected capacity change from 0 to 128
[ 1357.976184][T11453] xt_hashlimit: size too large, truncated to 1048576
[ 1357.983000][T11453] xt_hashlimit: invalid rate
[ 1358.017714][T11456] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1358.067586][T11456] ext4 filesystem being mounted at /477/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1358.083434][T11456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'.
[ 1358.131510][T11285] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1358.317656][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1358.328273][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1358.337477][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1358.358232][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1358.367596][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1358.374908][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1358.430306][T11285] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1358.468937][T11285] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1358.729237][T11471] loop0: detected capacity change from 0 to 128
[ 1358.734234][T11285] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1358.764438][T11471] syz.0.1161: attempt to access beyond end of device
[ 1358.764438][T11471] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1358.850292][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1358.890708][ T4764] device hsr_slave_0 left promiscuous mode
[ 1359.944557][ T4764] device hsr_slave_1 left promiscuous mode
[ 1359.999469][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1360.136345][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1360.268866][ T4764] device bridge_slave_1 left promiscuous mode
[ 1360.365833][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1360.468299][ T4283] Bluetooth: hci3: command 0x0409 tx timeout
[ 1360.505111][ T4764] device bridge_slave_0 left promiscuous mode
[ 1360.591026][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1361.671737][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.678398][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.547084][ T4283] Bluetooth: hci3: command 0x041b tx timeout
[ 1364.627021][ T4283] Bluetooth: hci3: command 0x040f tx timeout
[ 1365.986469][T11513] loop2: detected capacity change from 0 to 128
[ 1366.199494][T11513] syz.2.1166: attempt to access beyond end of device
[ 1366.199494][T11513] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1366.851820][ T4283] Bluetooth: hci3: command 0x0419 tx timeout
[ 1367.045421][ T4764] team0 (unregistering): Port device team_slave_1 removed
[ 1369.194228][ T4764] team0 (unregistering): Port device team_slave_0 removed
[ 1369.912582][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1370.240728][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1371.337747][T11533] xt_hashlimit: size too large, truncated to 1048576
[ 1371.344618][T11533] xt_hashlimit: invalid rate
[ 1372.506096][ T4764] bond0 (unregistering): Released all slaves
[ 1375.502015][T11285] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1375.511215][T11551] loop7: detected capacity change from 0 to 128
[ 1375.571101][T11551] syz.7.1173: attempt to access beyond end of device
[ 1375.571101][T11551] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1376.210746][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1376.258381][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1376.418287][T11285] 8021q: adding VLAN 0 to HW filter on device team0
[ 1376.653584][T11514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1378.179325][T11514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1378.211262][T11514] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1378.218508][T11514] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1378.357436][T11514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1378.437885][T11514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1378.465844][T11514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1378.526069][T11514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1378.533326][T11514] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1379.383338][T11575] futex_wake_op: syz.2.1178 tries to shift op by 144; fix this program
[ 1381.686249][T11464] chnl_net:caif_netlink_parms(): no params data found
[ 1382.099965][T11464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1382.114902][T11464] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1382.123788][T11464] device bridge_slave_0 entered promiscuous mode
[ 1382.132755][T11464] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1382.139969][T11464] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1382.150448][T11464] device bridge_slave_1 entered promiscuous mode
[ 1382.275738][T11464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1382.306609][T11464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1382.352758][T11464] team0: Port device team_slave_0 added
[ 1382.372332][T11464] team0: Port device team_slave_1 added
[ 1382.409752][T11464] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1382.416763][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1382.451758][T11464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1382.466869][T11464] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1382.485283][T11464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1382.518544][T11464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1382.556433][T11464] device hsr_slave_0 entered promiscuous mode
[ 1382.568021][T11464] device hsr_slave_1 entered promiscuous mode
[ 1382.574846][T11464] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1382.590047][T11464] Cannot create hsr debugfs directory
[ 1383.441063][ T4764] device hsr_slave_0 left promiscuous mode
[ 1383.454400][ T4764] device hsr_slave_1 left promiscuous mode
[ 1383.462318][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1383.476241][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1383.499762][ T4764] device bridge_slave_1 left promiscuous mode
[ 1383.507070][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1383.558396][ T4764] device bridge_slave_0 left promiscuous mode
[ 1383.584666][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1383.709522][T11625] futex_wake_op: syz.0.1179 tries to shift op by 144; fix this program
[ 1388.095920][T11642] loop7: detected capacity change from 0 to 128
[ 1388.785437][T11646] futex_wake_op: syz.0.1182 tries to shift op by 144; fix this program
[ 1389.338026][T11642] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1389.352338][T11642] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1389.402283][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1183'.
[ 1389.725477][T11130] EXT4-fs (loop7): unmounting filesystem.
[ 1390.502587][T11654] futex_wake_op: syz.2.1184 tries to shift op by 144; fix this program
[ 1390.941608][T11656] futex_wake_op: syz.0.1186 tries to shift op by 144; fix this program
[ 1392.313735][T10771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1392.323734][T10771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1392.358336][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1392.590249][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1392.604132][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1392.611527][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1392.662977][T11662] loop7: detected capacity change from 0 to 128
[ 1392.687232][T11662] syz.7.1185: attempt to access beyond end of device
[ 1392.687232][T11662] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1393.114458][T11671] loop2: detected capacity change from 0 to 128
[ 1393.232548][T11671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1393.248402][T11671] ext4 filesystem being mounted at /487/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1393.310837][T11671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1187'.
[ 1393.989321][ T4272] EXT4-fs (loop2): unmounting filesystem.
[ 1394.293791][ T4764] team0 (unregistering): Port device team_slave_1 removed
[ 1394.627089][ T4287] Bluetooth: hci0: command 0x0409 tx timeout
[ 1394.667476][ T4764] team0 (unregistering): Port device team_slave_0 removed
[ 1394.845074][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1396.458108][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1396.707014][ T4287] Bluetooth: hci0: command 0x041b tx timeout
[ 1397.845631][ T4764] bond0 (unregistering): Released all slaves
[ 1398.385819][T11696] loop7: detected capacity change from 0 to 128
[ 1398.497827][T11696] syz.7.1192: attempt to access beyond end of device
[ 1398.497827][T11696] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1398.807810][ T4287] Bluetooth: hci0: command 0x040f tx timeout
[ 1399.187904][T11464] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1399.390984][T11464] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1399.464198][T11715] loop7: detected capacity change from 0 to 128
[ 1400.897440][ T4287] Bluetooth: hci0: command 0x0419 tx timeout
[ 1400.950297][T11464] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1400.958264][T11715] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1400.967758][T11715] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1401.007369][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1195'.
[ 1401.069302][T11464] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1401.231411][T11130] EXT4-fs (loop7): unmounting filesystem.
[ 1401.600807][T11726] futex_wake_op: syz.2.1196 tries to shift op by 144; fix this program
[ 1405.478260][T11658] chnl_net:caif_netlink_parms(): no params data found
[ 1405.816494][T11743] loop2: detected capacity change from 0 to 128
[ 1405.888698][T11743] syz.2.1198: attempt to access beyond end of device
[ 1405.888698][T11743] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1405.925697][T11464] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1405.991084][T11744] loop7: detected capacity change from 0 to 128
[ 1406.253160][T11742] syz.7.1199: attempt to access beyond end of device
[ 1406.253160][T11742] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1406.304721][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1406.329689][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1406.400392][T11464] 8021q: adding VLAN 0 to HW filter on device team0
[ 1406.795611][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1406.846787][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1406.897572][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1406.904815][ T4687] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1406.946176][T11753] futex_wake_op: syz.2.1200 tries to shift op by 144; fix this program
[ 1407.837920][T11658] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1407.845101][T11658] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1408.114190][T11658] device bridge_slave_0 entered promiscuous mode
[ 1408.304500][T11760] xt_hashlimit: size too large, truncated to 1048576
[ 1408.311608][T11760] xt_hashlimit: invalid rate
[ 1408.649537][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1408.954250][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1409.421638][T11766] loop0: detected capacity change from 0 to 128
[ 1409.493339][T11765] syz.0.1202: attempt to access beyond end of device
[ 1409.493339][T11765] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1409.575140][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1409.654503][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1409.661748][ T4687] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1409.671499][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1409.694298][T11658] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1409.701575][T11658] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1409.710102][T11658] device bridge_slave_1 entered promiscuous mode
[ 1409.775507][T11772] futex_wake_op: syz.7.1203 tries to shift op by 144; fix this program
[ 1410.286690][T11658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1410.656269][T11658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1410.844262][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1410.961158][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1410.988663][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1411.013223][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1411.218204][T11785] loop7: detected capacity change from 0 to 128
[ 1412.786692][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1412.814305][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1412.839135][T11785] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1412.848138][T11785] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1412.892100][T11784] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1204'.
[ 1413.122631][T11130] EXT4-fs (loop7): unmounting filesystem.
[ 1413.130290][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1413.141031][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1413.150517][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1413.159580][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1413.329927][T11658] team0: Port device team_slave_0 added
[ 1413.537892][T11658] team0: Port device team_slave_1 added
[ 1417.056038][T11658] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1417.089236][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1417.187906][T11658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1417.277831][T11658] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1417.284861][T11658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1417.381407][T11658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1417.605329][T11658] device hsr_slave_0 entered promiscuous mode
[ 1417.651237][T11658] device hsr_slave_1 entered promiscuous mode
[ 1417.658582][T11658] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1417.666277][T11658] Cannot create hsr debugfs directory
SYZFAIL: repeatedly failed to execute the program
proc=5 req=37 state=1 status=9 (errno 11: Resource temporarily unavailable)
[ 1419.391258][ T4764] device hsr_slave_0 left promiscuous mode
[ 1419.401512][ T4764] device hsr_slave_1 left promiscuous mode
[ 1419.410875][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1419.427959][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1419.467819][ T4764] device bridge_slave_1 left promiscuous mode
[ 1419.474204][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1419.503388][ T4764] device bridge_slave_0 left promiscuous mode
[ 1419.522091][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1419.886770][ T4764] team0 (unregistering): Port device team_slave_1 removed
[ 1419.936685][ T4764] team0 (unregistering): Port device team_slave_0 removed
[ 1419.985589][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1420.026856][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1420.334882][ T4764] bond0 (unregistering): Released all slaves
[ 1421.100592][ T4764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.171784][ T4764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.254169][ T4764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.340711][ T4764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.609130][ T4764] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.705622][ T4764] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.774760][ T4764] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.875778][ T4764] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1422.073880][ T4764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1422.170235][ T4764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1422.267925][ T4764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1422.335072][ T4764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1423.109435][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.115787][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.819803][ T4764] device hsr_slave_0 left promiscuous mode
[ 1424.827414][ T4764] device hsr_slave_1 left promiscuous mode
[ 1424.833959][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1424.842054][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1424.851781][ T4764] device bridge_slave_1 left promiscuous mode
[ 1424.858305][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1424.866742][ T4764] device bridge_slave_0 left promiscuous mode
[ 1424.873707][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1424.897280][ T4764] device hsr_slave_0 left promiscuous mode
[ 1424.903905][ T4764] device hsr_slave_1 left promiscuous mode
[ 1424.917297][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1424.924757][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1424.952835][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1424.960647][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1424.968736][ T4764] device bridge_slave_1 left promiscuous mode
[ 1424.975018][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1424.985132][ T4764] device bridge_slave_0 left promiscuous mode
[ 1424.991457][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1425.004702][ T4764] device hsr_slave_0 left promiscuous mode
[ 1425.012393][ T4764] device hsr_slave_1 left promiscuous mode
[ 1425.019450][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1425.032567][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1425.041117][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1425.048939][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1425.056728][ T4764] device bridge_slave_1 left promiscuous mode
[ 1425.066175][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1425.075577][ T4764] device bridge_slave_0 left promiscuous mode
[ 1425.082350][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1425.096266][ T4764] device hsr_slave_0 left promiscuous mode
[ 1425.102944][ T4764] device hsr_slave_1 left promiscuous mode
[ 1425.112125][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1425.122019][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1425.133962][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1425.143713][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1425.155853][ T4764] device bridge_slave_1 left promiscuous mode
[ 1425.164414][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1425.176372][ T4764] device bridge_slave_0 left promiscuous mode
[ 1425.185098][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1425.204692][ T4764] device hsr_slave_0 left promiscuous mode
[ 1425.214606][ T4764] device hsr_slave_1 left promiscuous mode
[ 1425.221787][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1425.230224][ T4764] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1425.240453][ T4764] device bridge_slave_1 left promiscuous mode
[ 1425.246704][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1425.256050][ T4764] device bridge_slave_0 left promiscuous mode
[ 1425.264872][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1425.345861][ T4764] device veth1_macvtap left promiscuous mode
[ 1425.352102][ T4764] device veth0_macvtap left promiscuous mode
[ 1425.358671][ T4764] device veth1_vlan left promiscuous mode
[ 1425.364514][ T4764] device veth0_vlan left promiscuous mode
[ 1425.377994][ T4764] device veth1_macvtap left promiscuous mode
[ 1425.385291][ T4764] device veth0_macvtap left promiscuous mode
[ 1425.397402][ T4764] device veth1_vlan left promiscuous mode
[ 1425.403287][ T4764] device veth0_vlan left promiscuous mode
[ 1425.422486][ T4764] device veth1_macvtap left promiscuous mode
[ 1425.428863][ T4764] device veth0_macvtap left promiscuous mode
[ 1425.435004][ T4764] device veth1_vlan left promiscuous mode
[ 1425.441402][ T4764] device veth0_vlan left promiscuous mode
[ 1426.033036][ T4764] team0 (unregistering): Port device team_slave_1 removed
[ 1426.082000][ T4764] team0 (unregistering): Port device team_slave_0 removed
[ 1426.124795][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1426.169680][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1426.321330][ T4764] bond0 (unregistering): Released all slaves
[ 1426.956731][ T4764] team0 (unregistering): Port device team_slave_1 removed
[ 1427.021804][ T4764] team0 (unregistering): Port device team_slave_0 removed
[ 1427.082338][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1427.132700][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1427.418931][ T4764] bond0 (unregistering): Released all slaves
[ 1427.935937][ T4764] team0 (unregistering): Port device team_slave_1 removed
[ 1427.975980][ T4764] team0 (unregistering): Port device team_slave_0 removed
[ 1428.014312][ T4764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1428.055099][ T4764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface