last executing test programs:

44.769189614s ago: executing program 0 (id=129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)

44.668091218s ago: executing program 0 (id=131):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)

44.471078107s ago: executing program 0 (id=133):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

44.301088885s ago: executing program 0 (id=136):
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="48010000040a0500000000000000000002000008680004801400030076657468315f6d6163767461700000000800014000000000140003"], 0x148}, 0x1, 0x0, 0x0, 0x24001005}, 0x2c77edc509eea7a8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)

44.005956818s ago: executing program 0 (id=138):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = syz_open_dev$vcsn(0x0, 0x1, 0x400000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, 0x0, 0x4040084)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

43.70414423s ago: executing program 0 (id=139):
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000740)={0x262e0000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58)

28.603204484s ago: executing program 32 (id=139):
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000740)={0x262e0000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58)

6.478817935s ago: executing program 4 (id=359):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xd)

6.153261879s ago: executing program 4 (id=363):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)

5.838255083s ago: executing program 4 (id=364):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x6, 0x4, 0x61706, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xb}, 0x50)
socket$key(0xf, 0x3, 0x2)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
setresgid(0x0, 0xee01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@errors_remount}, {@oldalloc}, {@usrquota}, {@barrier}, {@auto_da_alloc}, {@grpquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")

5.299958517s ago: executing program 4 (id=369):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
mlock(&(0x7f0000656000/0x3000)=nil, 0x3000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18)
io_setup(0x8, 0x0)
syncfs(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x8000000000000001}, 0x18)
epoll_create1(0x0)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ")
pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000)

5.204066661s ago: executing program 1 (id=370):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000340a1e0aa53f3e3e86026062ebf2a39d1c133cb2e5d067be6841565d0483ced727ef37c1f8e3a5690e770c084aeae203b13dcfbfad0cafd9e42400a84018a1bfe02e5a7e16dbb1811b6864f89ca52aa7bd2ebeb2412a97e67aa3225e206f1716f44e3753"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x0, 0x4da, &(0x7f0000000a00)="$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")

4.836604718s ago: executing program 3 (id=371):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r2, 0xee01, 0x0)

3.928651687s ago: executing program 3 (id=373):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}})
readv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1)
read(r0, &(0x7f00000002c0)=""/200, 0x39)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0xacdcef1456e46bc5, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x0, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x1, &(0x7f0000000000)=@raw=[@generic={0xfb, 0x9, 0x5, 0xfff9, 0x7ff}], &(0x7f0000000040)='syzkaller\x00', 0x400000, 0x91, &(0x7f0000000100)=""/145, 0x41000, 0x8, '\x00', r5, @fallback=0x6, r6, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x401, 0x8}, 0x10, r7, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000240)=[{0x5, 0x2, 0x1, 0xb}, {0x4, 0x2, 0xd, 0x5}], 0x10, 0x3}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)

3.925831797s ago: executing program 1 (id=374):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)

3.699765137s ago: executing program 1 (id=376):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})

3.474381687s ago: executing program 4 (id=377):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

3.158710261s ago: executing program 4 (id=379):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5, 0x0, 0x1}, 0x18)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x23, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
open(0x0, 0x64042, 0x1e9)
io_uring_enter(0xffffffffffffffff, 0x46f3, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0xd, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xfffe, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x896, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x4, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x84000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x40000200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62c8, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x4000008d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0x1, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0)

3.038367246s ago: executing program 2 (id=381):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x6, 0x4, 0x61706, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xb}, 0x50)
socket$key(0xf, 0x3, 0x2)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
setresgid(0x0, 0xee01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@errors_remount}, {@oldalloc}, {@usrquota}, {@barrier}, {@auto_da_alloc}, {@grpquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")

2.95960537s ago: executing program 5 (id=382):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x3)

2.876187913s ago: executing program 3 (id=383):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/uts\x00')

2.756593929s ago: executing program 2 (id=384):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r1, &(0x7f0000000dc0)=""/4106, 0x100a)

2.750398089s ago: executing program 1 (id=385):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@ipv6_delrule={0x50, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x45, 0xfe, 0x0, 0x0, 0x1, 0x10012}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xdb}]}, 0x50}}, 0x20040000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@lazytime}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080), &(0x7f00000002c0)=ANY=[], 0xfe37, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)
r2 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5230f5c8780215dd)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGEFFECTS(r4, 0x80044584, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c"], 0x4c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

2.656099613s ago: executing program 3 (id=386):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)

2.426694814s ago: executing program 2 (id=387):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x200800)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18)
statfs(&(0x7f00000000c0)='./file2\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r4}, 0x10)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r6, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

2.396064874s ago: executing program 3 (id=388):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

2.215071662s ago: executing program 1 (id=389):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

1.979786763s ago: executing program 1 (id=390):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES16=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
r1 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"})
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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")
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000840)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xf, 0x12c, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd98872209ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab122c4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f0121a4929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})

1.900859287s ago: executing program 5 (id=391):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000004c0), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x20044809}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'})
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.610147909s ago: executing program 2 (id=392):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)

732.089277ms ago: executing program 3 (id=393):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}})
readv(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1)
read(r0, &(0x7f00000002c0)=""/200, 0x39)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0xacdcef1456e46bc5, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x0, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x1, &(0x7f0000000000)=@raw=[@generic={0xfb, 0x9, 0x5, 0xfff9, 0x7ff}], &(0x7f0000000040)='syzkaller\x00', 0x400000, 0x91, &(0x7f0000000100)=""/145, 0x41000, 0x8, '\x00', r5, @fallback=0x6, r6, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x401, 0x8}, 0x10, r7, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000240)=[{0x5, 0x2, 0x1, 0xb}, {0x4, 0x2, 0xd, 0x5}], 0x10, 0x3}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)

719.368148ms ago: executing program 5 (id=394):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0)

589.416744ms ago: executing program 2 (id=395):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x6, 0x4, 0x61706, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xb}, 0x50)
socket$key(0xf, 0x3, 0x2)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
setresgid(0x0, 0xee01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@errors_remount}, {@oldalloc}, {@usrquota}, {@barrier}, {@auto_da_alloc}, {@grpquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")

480.227549ms ago: executing program 5 (id=396):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

283.200437ms ago: executing program 5 (id=397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x95}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

200.671031ms ago: executing program 2 (id=398):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

0s ago: executing program 5 (id=399):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@ipv6_delrule={0x50, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x45, 0xfe, 0x0, 0x0, 0x1, 0x10012}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xdb}]}, 0x50}}, 0x20040000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@lazytime}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080), &(0x7f00000002c0)=ANY=[], 0xfe37, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)
r2 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5230f5c8780215dd)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGEFFECTS(r4, 0x80044584, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c"], 0x4c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts.
[   52.599973][ T4253] cgroup: Unknown subsys name 'net'
[   52.767935][ T4253] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   54.010488][ T4253] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   55.783356][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.792047][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.801017][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.809551][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.817263][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   55.825426][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.833599][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.838457][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.840788][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   55.848156][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.863291][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   55.864173][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.870588][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.879258][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.885848][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   55.892591][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   55.899642][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.905726][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.912988][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   55.926349][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   55.926529][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   55.934074][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.941283][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   55.948301][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.978973][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   55.991835][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   55.999561][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   56.007832][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   56.017145][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   56.024540][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   56.234220][ T4269] chnl_net:caif_netlink_parms(): no params data found
[   56.342102][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.349501][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.358617][ T4269] device bridge_slave_0 entered promiscuous mode
[   56.401212][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.408560][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.416855][ T4269] device bridge_slave_1 entered promiscuous mode
[   56.488786][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.526479][ T4268] chnl_net:caif_netlink_parms(): no params data found
[   56.539171][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.556233][ T4277] chnl_net:caif_netlink_parms(): no params data found
[   56.588452][ T4275] chnl_net:caif_netlink_parms(): no params data found
[   56.645170][ T4269] team0: Port device team_slave_0 added
[   56.675301][ T4269] team0: Port device team_slave_1 added
[   56.695117][ T4264] chnl_net:caif_netlink_parms(): no params data found
[   56.716453][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.723716][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.731307][ T4268] device bridge_slave_0 entered promiscuous mode
[   56.770056][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.777276][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.785626][ T4268] device bridge_slave_1 entered promiscuous mode
[   56.805485][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.812439][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.839033][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.866381][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.873752][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.881883][ T4277] device bridge_slave_0 entered promiscuous mode
[   56.889366][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.896543][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.922614][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.952763][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.959964][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.968111][ T4277] device bridge_slave_1 entered promiscuous mode
[   56.979527][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.987184][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.995311][ T4275] device bridge_slave_0 entered promiscuous mode
[   57.004453][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.031403][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.041312][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.048698][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.056495][ T4275] device bridge_slave_1 entered promiscuous mode
[   57.065195][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.082393][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.147606][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.155300][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.163378][ T4264] device bridge_slave_0 entered promiscuous mode
[   57.180177][ T4269] device hsr_slave_0 entered promiscuous mode
[   57.187530][ T4269] device hsr_slave_1 entered promiscuous mode
[   57.196318][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.208149][ T4268] team0: Port device team_slave_0 added
[   57.214656][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.221883][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.230078][ T4264] device bridge_slave_1 entered promiscuous mode
[   57.239005][ T4277] team0: Port device team_slave_0 added
[   57.253598][ T4268] team0: Port device team_slave_1 added
[   57.271622][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.289371][ T4277] team0: Port device team_slave_1 added
[   57.345351][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.360847][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.368142][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.394096][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.409773][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.417056][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.443139][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.456845][ T4275] team0: Port device team_slave_0 added
[   57.467783][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.477286][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.484529][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.511028][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.525802][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.532752][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.559379][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.571967][ T4275] team0: Port device team_slave_1 added
[   57.608349][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.615493][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.641851][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.677206][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.684287][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.710887][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.732289][ T4264] team0: Port device team_slave_0 added
[   57.755773][ T4268] device hsr_slave_0 entered promiscuous mode
[   57.763048][ T4268] device hsr_slave_1 entered promiscuous mode
[   57.769836][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.777783][ T4268] Cannot create hsr debugfs directory
[   57.785212][ T4264] team0: Port device team_slave_1 added
[   57.809547][ T4277] device hsr_slave_0 entered promiscuous mode
[   57.817862][ T4277] device hsr_slave_1 entered promiscuous mode
[   57.824994][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.832546][ T4277] Cannot create hsr debugfs directory
[   57.896903][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.904830][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.930969][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.945650][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.952604][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.978947][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.984403][ T4270] Bluetooth: hci2: command 0x0409 tx timeout
[   57.989591][ T4272] Bluetooth: hci0: command 0x0409 tx timeout
[   58.015258][ T4275] device hsr_slave_0 entered promiscuous mode
[   58.022546][ T4275] device hsr_slave_1 entered promiscuous mode
[   58.029243][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.037104][ T4275] Cannot create hsr debugfs directory
[   58.063099][ T4272] Bluetooth: hci4: command 0x0409 tx timeout
[   58.063138][ T4270] Bluetooth: hci3: command 0x0409 tx timeout
[   58.069292][ T4272] Bluetooth: hci1: command 0x0409 tx timeout
[   58.137197][ T4264] device hsr_slave_0 entered promiscuous mode
[   58.144341][ T4264] device hsr_slave_1 entered promiscuous mode
[   58.150722][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.158420][ T4264] Cannot create hsr debugfs directory
[   58.285626][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.313244][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.345328][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.357836][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.427483][ T4268] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   58.438127][ T4268] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   58.457495][ T4268] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   58.469494][ T4268] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   58.531688][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   58.540623][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   58.566953][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   58.576821][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   58.601659][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.642464][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[   58.651198][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.675643][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.685912][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.708585][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.718023][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.730894][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.739837][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.749041][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.756318][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.771585][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.796472][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.805236][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.815282][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.824584][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.831660][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.840280][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.849332][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.875928][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.887744][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.896674][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.908845][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.917879][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.931771][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.951758][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.964997][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.975499][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.993776][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.005641][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.017117][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.038504][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.047937][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.070051][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.079027][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.087964][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.114728][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[   59.126527][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.142486][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.156717][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.170411][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.177593][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.194306][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.216405][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.230283][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.241134][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.248322][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.285038][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.292878][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.305803][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.316739][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.326379][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.335873][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.345441][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.360496][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.383577][ T4268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   59.394876][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.408999][ T4275] 8021q: adding VLAN 0 to HW filter on device team0
[   59.421289][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.431757][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.441279][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.450494][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.459132][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.468135][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.476732][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.485342][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.492392][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.500165][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.508472][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.535488][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.546389][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.557278][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.564401][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.601465][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.614572][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.622544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.630515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.641950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.651469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.661305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.677925][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.701263][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.708976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.718291][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.728760][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.738180][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.747483][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.760485][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.769216][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.782571][ T4264] 8021q: adding VLAN 0 to HW filter on device team0
[   59.801992][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.817642][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.829312][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.836488][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.851457][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.860094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.868707][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.877537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.886354][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.916099][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   59.931131][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.940076][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.948903][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.956028][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.965384][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.975883][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.985364][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.000702][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.032082][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.040987][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.051264][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.061007][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.063470][ T4272] Bluetooth: hci2: command 0x041b tx timeout
[   60.070454][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.075084][ T4270] Bluetooth: hci0: command 0x041b tx timeout
[   60.090297][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.097464][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.105962][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.115043][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.123553][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.130647][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.140567][ T4269] device veth0_vlan entered promiscuous mode
[   60.143333][ T4270] Bluetooth: hci1: command 0x041b tx timeout
[   60.152731][ T4270] Bluetooth: hci3: command 0x041b tx timeout
[   60.158967][ T4274] Bluetooth: hci4: command 0x041b tx timeout
[   60.175394][ T4269] device veth1_vlan entered promiscuous mode
[   60.182583][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.199090][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.210892][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.219340][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.228455][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.239643][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.248670][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.256948][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.276526][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.287046][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.311361][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.320030][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.328432][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.337573][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.347147][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.356047][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.365057][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.373885][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.413620][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.421510][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.446021][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.478408][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.488826][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.505490][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.540445][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.548732][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.558170][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.567022][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.576713][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.586221][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.593786][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.601182][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.610028][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.622503][ T4269] device veth0_macvtap entered promiscuous mode
[   60.636984][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.656439][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.666325][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.679074][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.694520][ T4269] device veth1_macvtap entered promiscuous mode
[   60.742088][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.769224][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.788736][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.815995][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.859945][ T4268] device veth0_vlan entered promiscuous mode
[   60.883228][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.891855][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.908446][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.929308][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.940769][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.951806][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.963749][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.980696][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.988691][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.999166][ T4268] device veth1_vlan entered promiscuous mode
[   61.009101][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.022906][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.054414][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.062717][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   61.077959][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.090481][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.121612][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.131701][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.140756][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.150907][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.163320][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.172335][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.190599][ T4268] device veth0_macvtap entered promiscuous mode
[   61.214862][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.234228][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.253632][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.275326][ T4268] device veth1_macvtap entered promiscuous mode
[   61.322048][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.334683][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.347211][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.362914][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.371457][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.382237][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.391978][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.402274][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.411157][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.419675][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.430900][ T4264] device veth0_vlan entered promiscuous mode
[   61.469112][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.481019][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.494272][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.502730][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.513776][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.522683][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.531335][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.555738][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.565003][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.574196][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.582892][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.601334][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.613314][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.624348][ T4264] device veth1_vlan entered promiscuous mode
[   61.632483][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.641865][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.671445][ T4275] device veth0_vlan entered promiscuous mode
[   61.685641][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.694746][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.710715][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.723614][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.732429][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.741949][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.751322][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.774996][ T4275] device veth1_vlan entered promiscuous mode
[   61.797427][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.808270][ T4264] device veth0_macvtap entered promiscuous mode
[   61.818138][ T4264] device veth1_macvtap entered promiscuous mode
[   61.847910][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.872254][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.872436][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.884823][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.900759][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.912049][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.925226][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.932613][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.941021][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   61.949282][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.957533][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.965889][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.973975][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.982435][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.992276][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.001035][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.021045][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.030282][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.049130][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.062242][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.072839][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.083972][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.096111][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.112124][ T4275] device veth0_macvtap entered promiscuous mode
[   62.124962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.136737][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.143801][ T4270] Bluetooth: hci0: command 0x040f tx timeout
[   62.149024][ T4274] Bluetooth: hci2: command 0x040f tx timeout
[   62.151846][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.176804][ T4275] device veth1_macvtap entered promiscuous mode
[   62.183571][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.191563][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.201322][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.218175][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.230736][ T4270] Bluetooth: hci3: command 0x040f tx timeout
[   62.237189][ T4272] Bluetooth: hci4: command 0x040f tx timeout
[   62.243180][ T4274] Bluetooth: hci1: command 0x040f tx timeout
[   62.258955][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.269501][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.296765][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   62.458936][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.468144][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.477434][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.487808][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.496858][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.504737][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.522347][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.533802][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.544993][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.556814][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.567309][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.577959][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.590318][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.600987][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.611602][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.622001][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.634634][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.644712][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.655380][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.670813][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.690912][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.700178][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.709929][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.718651][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.733239][ T4277] device veth0_vlan entered promiscuous mode
[   62.744482][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.753182][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.767587][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.776788][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.786257][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.795939][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.813561][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.834603][ T4277] device veth1_vlan entered promiscuous mode
[   62.919838][ T4277] device veth0_macvtap entered promiscuous mode
[   62.932473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.959230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.990989][ T4277] device veth1_macvtap entered promiscuous mode
[   63.007282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.017318][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.034819][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.043184][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.067065][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.103419][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.111452][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.122282][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.147490][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.164863][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.177568][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.187659][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.198341][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.208894][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.219503][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.230984][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.242256][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.250876][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.261285][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.262932][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.282182][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.291926][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.301014][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.318475][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.328607][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.344913][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.356164][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.367747][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.382430][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.393502][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.405201][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.433142][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.442206][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.472729][ T4375] syz.1.2 (4375) used greatest stack depth: 20384 bytes left
[   63.474993][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.510575][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.526588][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.535766][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.606229][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.633433][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.650192][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.719529][ T4387] loop3: detected capacity change from 0 to 512
[   63.738784][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.759454][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.781208][ T4391] loop1: detected capacity change from 0 to 1024
[   63.783996][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.842883][ T4387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   63.860424][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.884676][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.933067][ T4387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   63.944461][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.074471][ T4391] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   64.096099][ T4391] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9'.
[   64.105708][ T4387] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   64.106274][ T4387] EXT4-fs (loop3): 1 truncate cleaned up
[   64.106304][ T4387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   64.142846][ T4391] device hsr_slave_0 left promiscuous mode
[   64.174112][ T4391] device hsr_slave_1 left promiscuous mode
[   64.223491][ T4265] Bluetooth: hci0: command 0x0419 tx timeout
[   64.233519][ T4272] Bluetooth: hci2: command 0x0419 tx timeout
[   64.307111][ T4265] Bluetooth: hci3: command 0x0419 tx timeout
[   64.307148][ T4265] Bluetooth: hci1: command 0x0419 tx timeout
[   64.313296][ T4272] Bluetooth: hci4: command 0x0419 tx timeout
[   64.429803][ T4269] EXT4-fs (loop1): unmounting filesystem.
[   64.698825][   T27] audit: type=1326 audit(1764024432.452:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   64.772363][   T27] audit: type=1326 audit(1764024432.452:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   64.825829][   T27] audit: type=1326 audit(1764024432.472:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   64.873067][   T27] audit: type=1326 audit(1764024432.472:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   64.932244][   T27] audit: type=1326 audit(1764024432.482:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   64.979492][   T27] audit: type=1326 audit(1764024432.482:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   64.992641][ T4414] loop4: detected capacity change from 0 to 1024
[   65.023764][   T27] audit: type=1326 audit(1764024432.482:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   65.063581][   T27] audit: type=1326 audit(1764024432.482:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   65.087062][ T4414] =======================================================
[   65.087062][ T4414] WARNING: The mand mount option has been deprecated and
[   65.087062][ T4414]          and is ignored by this kernel. Remove the mand
[   65.087062][ T4414]          option from the mount to silence this warning.
[   65.087062][ T4414] =======================================================
[   65.113410][   T27] audit: type=1326 audit(1764024432.482:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   65.175870][   T27] audit: type=1326 audit(1764024432.482:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   65.253123][ T4414] EXT4-fs: Ignoring removed oldalloc option
[   65.340470][ T4414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   65.361861][ T4414] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.590328][ T4275] EXT4-fs (loop4): unmounting filesystem.
[   65.880521][ T4432] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16'.
[   66.062559][ T4268] EXT4-fs (loop3): unmounting filesystem.
[   66.151547][ T4436] loop2: detected capacity change from 0 to 128
[   66.337352][ T4438] 9pnet_fd: Insufficient options for proto=fd
[   66.437575][ T4436] syz.2.18: attempt to access beyond end of device
[   66.437575][ T4436] loop2: rw=2049, sector=185, nr_sectors = 856 limit=128
[   66.586884][   T63] kworker/u4:4: attempt to access beyond end of device
[   66.586884][   T63] loop2: rw=1, sector=145, nr_sectors = 40 limit=128
[   66.607679][ T4447] device ip6gretap0 entered promiscuous mode
[   66.616014][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   66.700504][ T4447] device ip6gretap0 left promiscuous mode
[   66.786483][ T4272] Bluetooth: hci5: command 0x1003 tx timeout
[   66.793493][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   66.925438][ T4451] loop4: detected capacity change from 0 to 128
[   66.977098][ T4453] loop0: detected capacity change from 0 to 512
[   67.077830][ T4458] syz.4.23: attempt to access beyond end of device
[   67.077830][ T4458] loop4: rw=2049, sector=145, nr_sectors = 560 limit=128
[   67.114753][ T4453] EXT4-fs (loop0): 1 orphan inode deleted
[   67.120535][ T4453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   67.121734][ T4457] lo speed is unknown, defaulting to 1000
[   67.143098][ T4457] lo speed is unknown, defaulting to 1000
[   67.149882][ T4381] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 1
[   67.151136][ T4457] lo speed is unknown, defaulting to 1000
[   67.169589][ T4460] netlink: 'syz.2.25': attribute type 4 has an invalid length.
[   67.204020][ T4453] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.382910][ T4264] EXT4-fs (loop0): unmounting filesystem.
[   67.391082][ T4350] kworker/u4:5: attempt to access beyond end of device
[   67.391082][ T4350] loop4: rw=1, sector=705, nr_sectors = 336 limit=128
[   67.590405][ T4457] infiniband syz1: set down
[   67.596336][  T129] lo speed is unknown, defaulting to 1000
[   67.638082][ T4457] infiniband syz1: added lo
[   67.755449][ T4457] RDS/IB: syz1: added
[   67.764187][ T4457] smc: adding ib device syz1 with port count 1
[   67.788382][ T4457] smc:    ib device syz1 port 1 has pnetid 
[   67.837168][ T4338] lo speed is unknown, defaulting to 1000
[   67.860599][ T4457] lo speed is unknown, defaulting to 1000
[   68.265667][ T4457] lo speed is unknown, defaulting to 1000
[   68.302654][ T4481] netlink: 14 bytes leftover after parsing attributes in process `syz.0.30'.
[   68.583745][ T4481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.618796][ T4481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.651203][ T4487] syz.1.31 uses obsolete (PF_INET,SOCK_PACKET)
[   68.656659][ T4481] bond0 (unregistering): Released all slaves
[   68.705040][ T4457] lo speed is unknown, defaulting to 1000
[   68.726866][ T4487] device netdevsim0 entered promiscuous mode
[   68.817183][ T4487] loop1: detected capacity change from 0 to 512
[   68.885666][ T4487] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   68.939993][ T4487] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   69.092886][ T4487] EXT4-fs error (device loop1): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.1.31: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   69.125514][   T14] cfg80211: failed to load regulatory.db
[   69.132060][ T4457] lo speed is unknown, defaulting to 1000
[   69.171097][ T4487] EXT4-fs error (device loop1): ext4_get_first_dir_block:3594: inode #12: comm syz.1.31: directory missing '.'
[   69.314095][ T4457] lo speed is unknown, defaulting to 1000
[   69.464510][ T4485] smc: removing ib device syz1
[   69.470443][ T4488] wg1 speed is unknown, defaulting to 1000
[   69.493943][ T4488] wg1 speed is unknown, defaulting to 1000
[   69.532429][ T4488] wg1 speed is unknown, defaulting to 1000
[   69.612203][ T4488] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   69.672277][ T4488] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   69.771756][ T4488] wg1 speed is unknown, defaulting to 1000
[   70.526381][ T4488] wg1 speed is unknown, defaulting to 1000
[   70.560870][ T4505] wg1 speed is unknown, defaulting to 1000
[   70.618696][ T4488] wg1 speed is unknown, defaulting to 1000
[   70.700562][ T4488] wg1 speed is unknown, defaulting to 1000
[   70.831419][ T4488] wg1 speed is unknown, defaulting to 1000
[   71.268692][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[   71.275628][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[   73.592002][ T4553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.49'.
[   73.746663][ T4553] wg1 speed is unknown, defaulting to 1000
[   74.308699][   T27] kauditd_printk_skb: 196 callbacks suppressed
[   74.308712][   T27] audit: type=1326 audit(1764024442.062:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   74.326848][ T4556] loop4: detected capacity change from 0 to 512
[   74.391302][   T27] audit: type=1326 audit(1764024442.102:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   74.436838][ T4269] EXT4-fs (loop1): unmounting filesystem.
[   74.442768][ T4556] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   74.539137][   T27] audit: type=1326 audit(1764024442.122:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   74.595085][ T4562] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98
[   74.667334][   T27] audit: type=1326 audit(1764024442.122:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   74.698148][ T4556] EXT4-fs (loop4): invalid journal inode
[   74.755669][ T4556] EXT4-fs (loop4): can't get journal size
[   74.809176][ T4566] device syzkaller0 entered promiscuous mode
[   74.911808][ T4556] EXT4-fs (loop4): 1 truncate cleaned up
[   74.949773][   T27] audit: type=1326 audit(1764024442.122:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   74.966294][ T4556] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   75.024217][ T4559] device syzkaller0 left promiscuous mode
[   75.031499][   T27] audit: type=1326 audit(1764024442.122:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   75.226849][   T27] audit: type=1326 audit(1764024442.122:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   75.249209][   T27] audit: type=1326 audit(1764024442.122:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   75.444809][   T27] audit: type=1326 audit(1764024442.132:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   75.757007][   T27] audit: type=1326 audit(1764024442.132:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4557 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   75.819454][ T4275] EXT4-fs (loop4): unmounting filesystem.
[   75.952549][ T4584] syz.3.63[4584] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.952647][ T4584] syz.3.63[4584] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   77.830965][ T4600] wg1 speed is unknown, defaulting to 1000
[   78.186906][ T4599] netlink: 'syz.4.67': attribute type 13 has an invalid length.
[   78.194638][ T4599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'.
[   78.209584][ T4599] loop4: detected capacity change from 0 to 512
[   78.216662][ T4599] EXT4-fs: Ignoring removed nobh option
[   78.410299][ T4599] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #3: comm syz.4.67: corrupted inode contents
[   78.427062][ T4599] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #3: comm syz.4.67: mark_inode_dirty error
[   78.443193][ T4599] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #3: comm syz.4.67: corrupted inode contents
[   78.455414][ T4599] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.67: mark_inode_dirty error
[   78.470223][ T4599] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.67: Failed to acquire dquot type 0
[   78.486991][ T4599] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.67: corrupted inode contents
[   78.517879][ T4599] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #16: comm syz.4.67: mark_inode_dirty error
[   78.529643][ T4599] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.67: corrupted inode contents
[   78.542054][ T4599] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.67: mark_inode_dirty error
[   78.553668][ T4599] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.67: corrupted inode contents
[   78.567654][ T4599] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[   78.577177][ T4599] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.67: corrupted inode contents
[   78.589537][ T4599] EXT4-fs error (device loop4): ext4_truncate:4318: inode #16: comm syz.4.67: mark_inode_dirty error
[   78.602264][ T4599] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[   78.618869][ T4599] EXT4-fs (loop4): 1 truncate cleaned up
[   78.625150][ T4599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   78.634192][ T4599] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.535506][ T4275] EXT4-fs (loop4): unmounting filesystem.
[   79.701491][   T27] kauditd_printk_skb: 2 callbacks suppressed
[   79.701504][   T27] audit: type=1326 audit(1764024447.452:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4623 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   79.817654][   T27] audit: type=1326 audit(1764024447.492:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4623 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   79.881908][   T27] audit: type=1326 audit(1764024447.512:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4623 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   79.994048][   T27] audit: type=1326 audit(1764024447.752:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4623 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   80.113880][   T27] audit: type=1326 audit(1764024447.752:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4623 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1518f749 code=0x7ffc0000
[   80.208110][   T27] audit: type=1326 audit(1764024447.842:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4631 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   80.360130][   T27] audit: type=1326 audit(1764024447.852:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4631 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   80.394277][   T27] audit: type=1326 audit(1764024447.862:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4631 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   81.203215][   T27] audit: type=1326 audit(1764024447.862:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4631 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   81.237790][   T27] audit: type=1326 audit(1764024447.862:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4631 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   81.558308][ T4660] loop3: detected capacity change from 0 to 512
[   82.313744][ T4660] EXT4-fs: Ignoring removed i_version option
[   82.319798][ T4660] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.459296][ T4660] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   82.498874][ T4660] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   82.771073][ T4268] EXT4-fs (loop3): unmounting filesystem.
[   84.001871][ T4693] loop3: detected capacity change from 0 to 512
[   84.065192][ T4693] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.104828][ T4693] EXT4-fs (loop3): 1 truncate cleaned up
[   84.110530][ T4693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   84.324913][ T4699] device bridge0 entered promiscuous mode
[   84.621658][ T4699] device bridge0 left promiscuous mode
[   84.909202][   T27] kauditd_printk_skb: 6 callbacks suppressed
[   84.909214][   T27] audit: type=1326 audit(1764024452.662:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   84.992848][ T4708] loop1: detected capacity change from 0 to 128
[   85.013335][   T27] audit: type=1326 audit(1764024452.692:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   85.039166][ T4268] EXT4-fs (loop3): unmounting filesystem.
[   85.084403][ T4708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   85.125971][ T4708] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.143023][   T27] audit: type=1326 audit(1764024452.722:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   85.244225][   T27] audit: type=1326 audit(1764024452.722:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   85.323303][   T27] audit: type=1326 audit(1764024452.722:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   85.323336][   T27] audit: type=1326 audit(1764024452.732:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   85.323363][   T27] audit: type=1326 audit(1764024452.732:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   85.323390][   T27] audit: type=1326 audit(1764024452.732:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   85.323416][   T27] audit: type=1326 audit(1764024452.732:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   85.323450][   T27] audit: type=1326 audit(1764024452.732:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8f9798f749 code=0x7ffc0000
[   85.989556][ T4738] loop4: detected capacity change from 0 to 512
[   86.040376][ T4738] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   86.067990][ T4738] EXT4-fs (loop4): 1 truncate cleaned up
[   86.101948][ T4738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   86.216266][ T4745] capability: warning: `syz.2.115' uses deprecated v2 capabilities in a way that may be insecure
[   86.292937][ T4747] lo speed is unknown, defaulting to 1000
[   86.294495][ T4275] EXT4-fs (loop4): unmounting filesystem.
[   86.314381][ T4747] lo speed is unknown, defaulting to 1000
[   86.354752][ T4747] lo speed is unknown, defaulting to 1000
[   86.362390][ T4749] netlink: 'syz.2.118': attribute type 4 has an invalid length.
[   86.615877][ T4758] rdma_rxe: rxe_register_device failed with error -23
[   86.643337][ T4758] rdma_rxe: failed to add lo
[   86.649538][ T4758] netlink: 'syz.0.121': attribute type 4 has an invalid length.
[   86.816426][ T4747] infiniband syz1: set down
[   86.821071][ T4315] lo speed is unknown, defaulting to 1000
[   86.853346][ T4747] infiniband syz1: added lo
[   86.930512][ T4766] netlink: 59 bytes leftover after parsing attributes in process `syz.0.124'.
[   86.954630][ T4747] RDS/IB: syz1: added
[   86.969848][ T4747] smc: adding ib device syz1 with port count 1
[   86.988345][ T4747] smc:    ib device syz1 port 1 has pnetid 
[   87.010387][ T4315] lo speed is unknown, defaulting to 1000
[   87.037367][ T4747] lo speed is unknown, defaulting to 1000
[   87.097174][ T4269] EXT4-fs (loop1): unmounting filesystem.
[   87.226781][ T4771] loop4: detected capacity change from 0 to 512
[   87.256262][ T4771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   87.295983][ T4771] EXT4-fs (loop4): 1 truncate cleaned up
[   87.381498][ T4747] lo speed is unknown, defaulting to 1000
[   87.386165][ T4771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   87.623573][ T4747] lo speed is unknown, defaulting to 1000
[   87.892931][ T4792] netlink: 'syz.0.136': attribute type 1 has an invalid length.
[   87.900897][ T4787] 9pnet: Could not find request transport: t
[   87.921060][ T4792] netlink: 'syz.0.136': attribute type 6 has an invalid length.
[   87.934082][ T4792] netlink: 'syz.0.136': attribute type 3 has an invalid length.
[   87.942794][ T4792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'.
[   87.953785][ T4747] lo speed is unknown, defaulting to 1000
[   88.031676][ T4796] loop1: detected capacity change from 0 to 128
[   88.074583][ T4796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   88.191637][ T4796] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.374397][ T4747] lo speed is unknown, defaulting to 1000
[   88.498230][ T4275] EXT4-fs (loop4): unmounting filesystem.
[   89.205804][ T4811] siw: device registration error -23
[   90.209577][ T4826] loop4: detected capacity change from 0 to 512
[   90.362410][   T27] kauditd_printk_skb: 87 callbacks suppressed
[   90.362443][   T27] audit: type=1326 audit(1764024458.102:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   90.513387][ T4826] EXT4-fs error (device loop4): __ext4_iget:5091: inode #3: block 127754: comm syz.4.145: invalid block
[   90.527471][ T4826] EXT4-fs error (device loop4): ext4_quota_enable:7020: comm syz.4.145: Bad quota inode: 3, type: 0
[   90.542099][ T4826] EXT4-fs warning (device loop4): ext4_enable_quotas:7061: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   90.563998][ T4826] EXT4-fs (loop4): mount failed
[   90.609464][   T27] audit: type=1326 audit(1764024458.162:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   90.657356][   T27] audit: type=1326 audit(1764024458.182:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   90.742027][   T27] audit: type=1326 audit(1764024458.192:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   90.803641][   T27] audit: type=1326 audit(1764024458.212:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   90.850183][   T27] audit: type=1326 audit(1764024458.222:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   90.880945][   T27] audit: type=1326 audit(1764024458.242:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   90.910133][   T27] audit: type=1326 audit(1764024458.252:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   90.973076][   T27] audit: type=1326 audit(1764024458.362:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   91.043140][   T27] audit: type=1326 audit(1764024458.362:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[   91.122453][ T4823] loop2: detected capacity change from 0 to 8192
[   91.186639][ T4823]  loop2: p1 < > p2 p3 < p5 p6 > p4
[   91.201800][ T4823] loop2: partition table partially beyond EOD, truncated
[   91.237042][ T4823] loop2: p1 start 100663296 is beyond EOD, truncated
[   91.258844][ T4838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'.
[   91.277961][ T4823] loop2: p2 size 134217732 extends beyond EOD, truncated
[   91.297815][ T4838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.150'.
[   91.311739][ T4823] loop2: p4 size 14876672 extends beyond EOD, truncated
[   91.333046][ T4838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.150'.
[   91.345998][ T4823] loop2: p5 size 134217732 extends beyond EOD, truncated
[   91.378025][ T4823] loop2: p6 size 14876672 extends beyond EOD, truncated
[   91.706286][ T4269] EXT4-fs (loop1): unmounting filesystem.
[   92.286651][ T4857] wg1 speed is unknown, defaulting to 1000
[   92.303572][ T4857] lo speed is unknown, defaulting to 1000
[   93.288889][ T4281] udevd[4281]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   93.355788][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   93.365980][ T4862] loop1: detected capacity change from 0 to 512
[   93.375486][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   93.385645][ T4862] ext4: Unknown parameter 'fowner'
[   93.422102][ T4869] udevd[4869]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[   93.453479][ T4281] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   93.465835][ T4872] udevd[4872]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   93.475506][ T4874] siw: device registration error -23
[   93.583489][ T4874] device syzkaller0 entered promiscuous mode
[   93.594828][ T4870] device syzkaller0 left promiscuous mode
[   93.785213][ T4880] loop1: detected capacity change from 0 to 128
[   93.862772][ T4880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   93.879269][ T4880] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.247086][ T4891] syz.3.169[4891] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.247180][ T4891] syz.3.169[4891] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.838548][ T4904] loop3: detected capacity change from 0 to 512
[   95.016771][ T4904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   95.418276][ T4904] EXT4-fs (loop3): 1 truncate cleaned up
[   95.572547][ T4904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   95.718277][ T4268] EXT4-fs (loop3): unmounting filesystem.
[   95.880557][ T4916] siw: device registration error -23
[   95.890391][ T4917] loop2: detected capacity change from 0 to 1024
[   95.914350][ T4916] device syzkaller0 entered promiscuous mode
[   95.921271][ T4917] EXT4-fs: Ignoring removed oldalloc option
[   95.940139][ T4915] device syzkaller0 left promiscuous mode
[   95.979585][ T4917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   96.015184][ T4917] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.088250][   T27] kauditd_printk_skb: 41 callbacks suppressed
[   96.088264][   T27] audit: type=1326 audit(1764024463.842:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   96.127708][ T4277] EXT4-fs (loop2): unmounting filesystem.
[   96.230124][   T27] audit: type=1326 audit(1764024463.842:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   96.322670][   T27] audit: type=1326 audit(1764024463.842:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   96.403318][   T27] audit: type=1326 audit(1764024463.842:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   96.496279][   T27] audit: type=1326 audit(1764024463.842:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   96.563097][   T27] audit: type=1326 audit(1764024463.842:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   96.582509][ T4930] loop2: detected capacity change from 0 to 2048
[   96.632133][   T27] audit: type=1326 audit(1764024463.842:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   96.700856][ T4935] loop3: detected capacity change from 0 to 164
[   96.718111][ T4930] Alternate GPT is invalid, using primary GPT.
[   96.719989][   T27] audit: type=1326 audit(1764024463.842:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   96.749486][ T4930]  loop2: p2 p3 p7
[   96.811047][   T27] audit: type=1326 audit(1764024463.842:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   96.838285][ T4935] iso9660: Corrupted directory entry in block 4 of inode 1792
[   96.892936][ T4935] binfmt_misc: register: failed to install interpreter file ./file2
[   96.965068][   T27] audit: type=1326 audit(1764024463.842:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[   97.004694][ T4269] EXT4-fs (loop1): unmounting filesystem.
[   97.190561][ T4941] netlink: 'syz.1.187': attribute type 1 has an invalid length.
[   97.214869][ T4941] netlink: 'syz.1.187': attribute type 6 has an invalid length.
[   97.222715][ T4941] netlink: 'syz.1.187': attribute type 3 has an invalid length.
[   97.239844][ T4941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.187'.
[   97.262284][ T4875] udevd[4875]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[   97.262565][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   97.286648][ T4946] netlink: 'syz.4.189': attribute type 30 has an invalid length.
[   97.298542][ T4872] udevd[4872]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   97.367689][ T4946] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.376892][ T4946] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.385907][ T4946] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.394663][ T4946] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.504129][ T4951] loop3: detected capacity change from 0 to 512
[   97.531968][ T4951] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   97.560347][ T4953] siw: device registration error -23
[   97.568363][ T4946] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.577594][ T4946] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.586624][ T4946] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.595548][ T4946] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.615548][ T4951] EXT4-fs (loop3): 1 truncate cleaned up
[   97.621318][ T4951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   97.846555][ T4946] Zero length message leads to an empty skb
[   97.885551][ T4268] EXT4-fs (loop3): unmounting filesystem.
[   98.068035][ T4965] loop3: detected capacity change from 0 to 1024
[   98.125566][ T4965] EXT4-fs: Ignoring removed oldalloc option
[   98.165435][ T4969] loop1: detected capacity change from 0 to 1024
[   98.213617][ T4969] EXT4-fs: Ignoring removed orlov option
[   98.234798][ T4965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   98.333206][ T4965] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.799559][ T4969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   99.234780][ T4268] EXT4-fs (loop3): unmounting filesystem.
[   99.242117][ T4985] loop4: detected capacity change from 0 to 128
[   99.282560][ T4269] EXT4-fs (loop1): unmounting filesystem.
[   99.355154][ T4985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   99.476830][ T4985] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.545208][ T4993] netlink: 'syz.3.199': attribute type 1 has an invalid length.
[   99.741039][ T4997] netlink: 68 bytes leftover after parsing attributes in process `syz.2.200'.
[  100.021542][ T4993] device bond1 entered promiscuous mode
[  100.275294][ T4993] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.866436][ T5008] siw: device registration error -23
[  100.932388][ T5008] device syzkaller0 entered promiscuous mode
[  100.973792][ T5007] device syzkaller0 left promiscuous mode
[  101.069256][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  101.228016][   T27] kauditd_printk_skb: 50 callbacks suppressed
[  101.228029][   T27] audit: type=1326 audit(1764024468.982:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  101.240412][ T5014] process 'syz.3.207' launched '/dev/fd/5' with NULL argv: empty string added
[  101.339446][   T27] audit: type=1326 audit(1764024469.022:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  101.450166][   T27] audit: type=1326 audit(1764024469.022:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  101.507661][   T27] audit: type=1326 audit(1764024469.022:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  101.530998][   T27] audit: type=1326 audit(1764024469.022:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  101.554925][   T27] audit: type=1326 audit(1764024469.022:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  101.579810][   T27] audit: type=1326 audit(1764024469.022:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  101.602176][   T27] audit: type=1326 audit(1764024469.022:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  101.624857][   T27] audit: type=1326 audit(1764024469.022:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  101.647917][   T27] audit: type=1326 audit(1764024469.022:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  102.510681][ T5035] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  102.608652][ T5038] netlink: 'syz.2.214': attribute type 1 has an invalid length.
[  102.657931][ T5040] loop3: detected capacity change from 0 to 128
[  102.675496][ T5038] device bond1 entered promiscuous mode
[  102.687152][ T5038] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.739439][ T5040] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  102.756168][ T5040] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.554309][ T5048] siw: device registration error -23
[  103.887106][ T5056] loop2: detected capacity change from 0 to 512
[  103.919935][ T5056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  103.952664][ T5054] sd 0:0:1:0: device reset
[  104.032142][ T5056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  104.058849][ T5056] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.073288][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  104.355396][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  104.386619][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  104.396311][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  104.409960][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  104.535042][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  104.546279][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  104.839415][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  104.896296][ T4350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.052541][ T5071] netlink: 'syz.2.225': attribute type 1 has an invalid length.
[  105.093275][ T5071] netlink: 'syz.2.225': attribute type 6 has an invalid length.
[  105.113111][ T5071] netlink: 'syz.2.225': attribute type 3 has an invalid length.
[  105.132740][ T5071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'.
[  105.161488][ T5064] wg1 speed is unknown, defaulting to 1000
[  105.208411][ T4350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.288965][ T5064] lo speed is unknown, defaulting to 1000
[  105.296773][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  105.378205][ T4350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.506117][ T4350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.573383][ T5085] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[  105.604437][ T5085] device bond1 entered promiscuous mode
[  105.611086][ T5085] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.921456][ T5094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.230'.
[  106.703619][ T4265] Bluetooth: hci0: command 0x0409 tx timeout
[  106.731250][   T27] kauditd_printk_skb: 71 callbacks suppressed
[  106.731263][   T27] audit: type=1326 audit(1764024474.482:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  106.817722][   T27] audit: type=1326 audit(1764024474.482:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  106.842849][   T27] audit: type=1326 audit(1764024474.482:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  106.891017][   T27] audit: type=1326 audit(1764024474.482:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  106.927250][   T27] audit: type=1326 audit(1764024474.482:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  107.003688][ T5110] loop1: detected capacity change from 0 to 512
[  107.025639][   T27] audit: type=1326 audit(1764024474.482:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  107.049909][   T27] audit: type=1326 audit(1764024474.492:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  107.054423][ T5110] EXT4-fs error (device loop1): __ext4_iget:5091: inode #3: block 127754: comm syz.1.237: invalid block
[  107.073745][   T27] audit: type=1326 audit(1764024474.492:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  107.108222][   T27] audit: type=1326 audit(1764024474.492:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  107.152373][   T27] audit: type=1326 audit(1764024474.492:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fb0eb58f749 code=0x7ffc0000
[  107.180430][ T5115] netlink: 'syz.4.238': attribute type 1 has an invalid length.
[  107.215781][ T5110] EXT4-fs error (device loop1): ext4_quota_enable:7020: comm syz.1.237: Bad quota inode: 3, type: 0
[  107.234178][ T5115] netlink: 'syz.4.238': attribute type 6 has an invalid length.
[  107.241866][ T5115] netlink: 'syz.4.238': attribute type 3 has an invalid length.
[  107.303273][ T5110] EXT4-fs warning (device loop1): ext4_enable_quotas:7061: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  107.320759][ T5115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.238'.
[  107.364017][ T5110] EXT4-fs (loop1): mount failed
[  107.427501][ T5064] chnl_net:caif_netlink_parms(): no params data found
[  107.825670][ T5138] netlink: 'syz.1.243': attribute type 1 has an invalid length.
[  107.922868][ T5138] device bond3 entered promiscuous mode
[  107.948079][ T5138] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.979066][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.998943][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.024280][ T5064] device bridge_slave_0 entered promiscuous mode
[  108.156684][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.168686][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.211160][ T5064] device bridge_slave_1 entered promiscuous mode
[  108.400264][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.583960][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.723184][ T5064] team0: Port device team_slave_0 added
[  108.752672][ T5064] team0: Port device team_slave_1 added
[  108.783267][ T4265] Bluetooth: hci0: command 0x041b tx timeout
[  109.182699][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.222998][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.260608][ T5189] loop1: detected capacity change from 0 to 512
[  109.327002][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.331907][ T5189] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.438741][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.446095][ T5189] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.253: invalid indirect mapped block 4294967295 (level 0)
[  109.465520][ T5178] loop4: detected capacity change from 0 to 8192
[  109.483126][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.514886][ T5178]  loop4: p1 < > p2 p3 < p5 p6 > p4
[  109.520760][ T5178] loop4: partition table partially beyond EOD, truncated
[  109.536137][ T5178] loop4: p1 start 100663296 is beyond EOD, truncated
[  109.553369][ T5189] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.253: invalid indirect mapped block 4294967295 (level 1)
[  109.581774][ T5178] loop4: p2 size 134217732 extends beyond EOD, truncated
[  109.616992][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.637804][ T5189] EXT4-fs (loop1): 1 orphan inode deleted
[  109.642139][ T5178] loop4: p4 size 14876672 extends beyond EOD, truncated
[  109.653058][ T5189] EXT4-fs (loop1): 1 truncate cleaned up
[  109.666896][ T5189] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  109.711745][ T5178] loop4: p5 size 134217732 extends beyond EOD, truncated
[  109.779526][ T5178] loop4: p6 size 14876672 extends beyond EOD, truncated
[  109.908024][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  110.078029][ T5064] device hsr_slave_0 entered promiscuous mode
[  110.124561][ T5064] device hsr_slave_1 entered promiscuous mode
[  110.491703][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  110.492845][ T4872] udevd[4872]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  110.552911][ T4875] udevd[4875]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  110.570858][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  110.585927][ T4869] udevd[4869]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  110.672468][ T4350] device hsr_slave_0 left promiscuous mode
[  110.697391][ T4350] device hsr_slave_1 left promiscuous mode
[  110.743583][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.786455][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.805103][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.812567][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.863256][ T4265] Bluetooth: hci0: command 0x040f tx timeout
[  110.899079][ T4350] device bridge_slave_1 left promiscuous mode
[  110.936063][ T4272] Bluetooth: hci5: sending frame failed (-49)
[  110.937038][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.943379][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  110.996864][ T5233] loop1: detected capacity change from 0 to 1024
[  111.035945][ T5235] loop4: detected capacity change from 0 to 1024
[  111.043564][ T5235] EXT4-fs: Ignoring removed orlov option
[  111.058442][ T4350] device bridge_slave_0 left promiscuous mode
[  111.069003][ T5235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  111.082215][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.087317][ T5233] EXT4-fs: Ignoring removed oldalloc option
[  111.159955][ T5233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  111.200313][ T5233] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.220105][ T4350] device veth1_macvtap left promiscuous mode
[  111.242121][ T4350] device veth0_macvtap left promiscuous mode
[  111.262316][ T4350] device veth1_vlan left promiscuous mode
[  111.264717][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  111.269889][ T4350] device veth0_vlan left promiscuous mode
[  112.020015][ T5263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.277'.
[  112.793164][ T5193] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  112.816982][ T5193] EXT4-fs (loop1): Remounting filesystem read-only
[  112.938899][ T4350] team0 (unregistering): Port device team_slave_1 removed
[  112.946626][ T4265] Bluetooth: hci0: command 0x0419 tx timeout
[  113.010491][ T4350] team0 (unregistering): Port device team_slave_0 removed
[  113.623204][   T14] bridge0 speed is unknown, defaulting to 1000
[  113.641303][ T5263] wg1 speed is unknown, defaulting to 1000
[  113.648480][ T5263] lo speed is unknown, defaulting to 1000
[  113.803993][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  114.039571][ T5064] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  114.089715][ T5064] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  114.190543][ T5064] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  114.262509][ T5064] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  114.465750][ T5297] loop4: detected capacity change from 0 to 128
[  114.541564][   T27] kauditd_printk_skb: 74 callbacks suppressed
[  114.541577][   T27] audit: type=1326 audit(1764024482.292:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  114.663840][   T27] audit: type=1326 audit(1764024482.332:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  114.673643][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.730876][ T5304] loop2: detected capacity change from 0 to 128
[  114.777017][   T27] audit: type=1326 audit(1764024482.332:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  114.797693][ T5064] 8021q: adding VLAN 0 to HW filter on device team0
[  114.838312][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.854242][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.886622][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  114.905175][   T27] audit: type=1326 audit(1764024482.332:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  114.931768][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.958091][ T5315] syz.2.290: attempt to access beyond end of device
[  114.958091][ T5315] loop2: rw=2049, sector=145, nr_sectors = 136 limit=128
[  114.972656][ T4688] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.979828][ T4688] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.985320][ T5314] loop4: detected capacity change from 0 to 1024
[  114.987517][   T27] audit: type=1326 audit(1764024482.332:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  115.024771][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  115.029841][ T5314] EXT4-fs: Ignoring removed oldalloc option
[  115.051332][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  115.132568][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  115.171474][   T27] audit: type=1326 audit(1764024482.332:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  115.211423][ T4688] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.218680][ T4688] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.222516][   T27] audit: type=1326 audit(1764024482.332:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  115.245120][ T5314] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  115.299518][ T5314] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.303094][   T27] audit: type=1326 audit(1764024482.332:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  115.324954][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  115.445456][   T27] audit: type=1326 audit(1764024482.332:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  115.455046][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  115.545504][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  115.578080][   T27] audit: type=1326 audit(1764024482.332:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  115.598095][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  115.638519][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  115.716487][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  115.766233][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  115.785774][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  115.840094][ T5064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  115.879511][ T5064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  115.932784][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  115.962309][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.002270][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  116.029739][ T5340] 9pnet_fd: Insufficient options for proto=fd
[  116.048380][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.082734][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  116.303251][ T4272] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  116.303570][ T4265] Bluetooth: hci5: command 0x1003 tx timeout
[  116.688055][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.718754][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.760015][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.615379][ T5380] loop3: detected capacity change from 0 to 512
[  117.719243][ T5380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  117.750680][ T5380] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.869420][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  117.966907][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  118.004452][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  118.054625][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  118.079906][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  118.099061][ T5064] device veth0_vlan entered promiscuous mode
[  118.142264][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  118.152333][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  118.178188][ T5064] device veth1_vlan entered promiscuous mode
[  118.251873][ T5387] loop3: detected capacity change from 0 to 1024
[  118.294921][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  118.313749][ T5387] EXT4-fs: Ignoring removed oldalloc option
[  118.320772][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  118.338464][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  118.359398][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  118.370921][ T5387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  118.390306][ T5387] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.398554][ T5399] loop4: detected capacity change from 0 to 512
[  118.405075][ T5064] device veth0_macvtap entered promiscuous mode
[  118.417343][ T5064] device veth1_macvtap entered promiscuous mode
[  118.437765][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.449569][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.459623][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.470336][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.480300][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.490990][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.501802][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.512601][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.520976][ T5395] 9pnet_fd: Insufficient options for proto=fd
[  118.546442][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.573940][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  118.584305][ T5399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  118.595601][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  118.604893][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  118.614639][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  118.624434][ T5399] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.636444][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  118.667655][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.696011][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.724933][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.746582][ T5399] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #4: comm syz.4.308: corrupted inode contents
[  118.779014][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.797060][ T5399] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #4: comm syz.4.308: mark_inode_dirty error
[  118.809632][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.831764][ T5399] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #4: comm syz.4.308: corrupted inode contents
[  118.851512][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.861705][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.895346][ T5399] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.308: mark_inode_dirty error
[  118.909573][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.915289][ T5399] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.308: Failed to acquire dquot type 1
[  118.927040][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.954488][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  118.964219][ T5411] loop1: detected capacity change from 0 to 512
[  118.975017][ T5411] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.986001][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  119.012328][ T5064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.035675][ T5411] EXT4-fs (loop1): 1 truncate cleaned up
[  119.039035][ T5064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.041583][ T5411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  119.061132][ T5064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.070129][ T5064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.082226][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  119.203401][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  119.309522][ T4688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.345742][ T4688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.384549][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  119.422304][ T4541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.432889][ T4541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.491393][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.668173][   T27] kauditd_printk_skb: 115 callbacks suppressed
[  119.668186][   T27] audit: type=1326 audit(1764024487.422:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  119.747508][   T27] audit: type=1326 audit(1764024487.462:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  119.858782][   T27] audit: type=1326 audit(1764024487.462:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  119.899819][ T5441] netlink: 'syz.5.322': attribute type 4 has an invalid length.
[  119.918149][   T27] audit: type=1326 audit(1764024487.462:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  119.944764][   T27] audit: type=1326 audit(1764024487.462:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  119.986010][   T27] audit: type=1326 audit(1764024487.462:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  120.010331][ T5434] netlink: 14 bytes leftover after parsing attributes in process `syz.1.320'.
[  120.070059][   T27] audit: type=1326 audit(1764024487.462:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  120.122468][   T27] audit: type=1326 audit(1764024487.462:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  120.164910][   T27] audit: type=1326 audit(1764024487.462:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  120.197004][   T27] audit: type=1326 audit(1764024487.462:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5430 comm="syz.5.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0348f8f749 code=0x7ffc0000
[  120.456417][ T5434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.488545][ T5434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.512798][ T5434] bond0 (unregistering): Released all slaves
[  120.762136][ T5457] loop5: detected capacity change from 0 to 512
[  120.791717][ T5434] syz.1.320 (5434) used greatest stack depth: 18176 bytes left
[  120.792931][ T5457] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  120.863608][ T4272] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  120.863965][ T4265] Bluetooth: hci5: command 0x1003 tx timeout
[  120.933929][ T5457] EXT4-fs (loop5): 1 truncate cleaned up
[  120.943893][ T5457] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  121.235773][ T5471] loop1: detected capacity change from 0 to 512
[  121.261090][ T5471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  121.350278][ T5471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  121.390109][ T5471] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.750064][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  121.894569][ T5488] device bridge0 entered promiscuous mode
[  121.900692][ T5488] device macsec1 entered promiscuous mode
[  121.912759][ T5488] bridge0: port 3(macsec1) entered blocking state
[  121.919664][ T5488] bridge0: port 3(macsec1) entered disabled state
[  122.215640][ T5488] device bridge0 left promiscuous mode
[  122.449436][ T5492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'.
[  122.463505][ T5492] netlink: 108 bytes leftover after parsing attributes in process `syz.1.335'.
[  122.576905][ T5492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'.
[  122.591807][ T5492] netlink: 108 bytes leftover after parsing attributes in process `syz.1.335'.
[  122.601920][ T5492] netlink: 84 bytes leftover after parsing attributes in process `syz.1.335'.
[  122.820607][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'.
[  122.983309][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'.
[  123.201149][ T5512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.338'.
[  123.339442][ T5512] wg1 speed is unknown, defaulting to 1000
[  123.357913][ T5512] lo speed is unknown, defaulting to 1000
[  124.200671][ T5064] EXT4-fs (loop5): unmounting filesystem.
[  124.273818][ T5505] loop3: detected capacity change from 0 to 512
[  124.281059][ T5527] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[  124.302766][ T5527] netlink: 'syz.2.344': attribute type 6 has an invalid length.
[  124.351843][ T5505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  124.360984][ T5527] netlink: 'syz.2.344': attribute type 3 has an invalid length.
[  124.413538][ T5527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.344'.
[  124.458013][ T5505] EXT4-fs (loop3): 1 truncate cleaned up
[  124.484052][ T5505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  124.571967][ T5535] loop1: detected capacity change from 0 to 1024
[  124.643904][ T5535] EXT4-fs: Ignoring removed oldalloc option
[  124.714761][ T5535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  124.729303][ T5544] loop4: detected capacity change from 0 to 512
[  124.770013][ T5535] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.898417][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  124.985168][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  124.993841][ T5544] EXT4-fs error (device loop4): __ext4_iget:5091: inode #3: block 127754: comm syz.4.349: invalid block
[  125.199653][ T5544] EXT4-fs error (device loop4): ext4_quota_enable:7020: comm syz.4.349: Bad quota inode: 3, type: 0
[  125.279127][ T5544] EXT4-fs warning (device loop4): ext4_enable_quotas:7061: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  125.370966][ T5544] EXT4-fs (loop4): mount failed
[  125.886280][ T5580] device bridge0 entered promiscuous mode
[  125.973243][ T5580] device macsec1 entered promiscuous mode
[  125.995972][ T5580] bridge0: port 3(macsec1) entered blocking state
[  126.009393][ T5580] bridge0: port 3(macsec1) entered disabled state
[  126.042853][ T5580] device bridge0 left promiscuous mode
[  126.128007][ T5588] netlink: 'syz.3.362': attribute type 1 has an invalid length.
[  126.153109][ T5588] netlink: 'syz.3.362': attribute type 6 has an invalid length.
[  126.187739][ T5588] netlink: 'syz.3.362': attribute type 3 has an invalid length.
[  126.208811][ T5588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'.
[  126.414292][ T5593] loop4: detected capacity change from 0 to 1024
[  126.447668][ T5593] EXT4-fs: Ignoring removed oldalloc option
[  126.519803][ T5593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  126.578038][ T5593] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.787058][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  127.124260][   T27] kauditd_printk_skb: 62 callbacks suppressed
[  127.124273][   T27] audit: type=1326 audit(1764024494.882:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  127.183110][   T27] audit: type=1326 audit(1764024494.922:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  127.259756][ T5614] loop1: detected capacity change from 0 to 512
[  127.612754][ T5614] EXT4-fs error (device loop1): __ext4_iget:5091: inode #3: block 127754: comm syz.1.370: invalid block
[  127.628936][ T5614] EXT4-fs error (device loop1): ext4_quota_enable:7020: comm syz.1.370: Bad quota inode: 3, type: 0
[  127.643446][ T5614] EXT4-fs warning (device loop1): ext4_enable_quotas:7061: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  127.662931][ T5614] EXT4-fs (loop1): mount failed
[  127.764858][   T27] audit: type=1326 audit(1764024494.922:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  127.793814][   T27] audit: type=1326 audit(1764024494.922:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  127.892775][   T27] audit: type=1326 audit(1764024494.922:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  128.002707][   T27] audit: type=1326 audit(1764024494.922:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  128.204388][   T27] audit: type=1326 audit(1764024494.922:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  128.287448][   T27] audit: type=1326 audit(1764024494.922:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  128.315204][   T27] audit: type=1326 audit(1764024494.922:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  128.371577][   T27] audit: type=1326 audit(1764024494.922:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.4.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbe9458f749 code=0x7ffc0000
[  128.450513][ T5635] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  128.452911][ T5628] wg1 speed is unknown, defaulting to 1000
[  128.466394][ T5628] lo speed is unknown, defaulting to 1000
[  128.519548][ T5635] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  128.553477][ T5635] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  129.451603][ T5668] loop1: detected capacity change from 0 to 512
[  129.492626][ T5668] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  129.589255][ T5668] EXT4-fs (loop1): 1 truncate cleaned up
[  129.614918][ T5668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  129.688581][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'.
[  129.869306][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  130.198928][ T5683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.390'.
[  130.555297][ T5691] netlink: 60 bytes leftover after parsing attributes in process `syz.5.391'.
[  130.713474][ T5691] wg1 speed is unknown, defaulting to 1000
[  130.725251][ T5691] lo speed is unknown, defaulting to 1000
[  131.806660][ T5674] loop4: detected capacity change from 0 to 1024
[  131.831572][ T5674] EXT4-fs: Ignoring removed nomblk_io_submit option
[  131.891566][ T5674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  131.953881][ T5687] mmap: syz.1.390 (5687) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  131.986719][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'.
[  132.056928][ T5687] 
[  132.059321][ T5687] ======================================================
[  132.066605][ T5687] WARNING: possible circular locking dependency detected
[  132.073818][ T5687] syzkaller #0 Not tainted
[  132.078239][ T5687] ------------------------------------------------------
[  132.085351][ T5687] syz.1.390/5687 is trying to acquire lock:
[  132.087604][ T5723] loop5: detected capacity change from 0 to 512
[  132.091229][ T5687] ffff888074b208e0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10
[  132.108220][ T5687] 
[  132.108220][ T5687] but task is already holding lock:
[  132.109693][ T5723] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  132.115622][ T5687] ffff88802f9bf958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770
[  132.115672][ T5687] 
[  132.115672][ T5687] which lock already depends on the new lock.
[  132.115672][ T5687] 
[  132.115678][ T5687] 
[  132.115678][ T5687] the existing dependency chain (in reverse order) is:
[  132.115682][ T5687] 
[  132.115682][ T5687] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[  132.115704][ T5687]        down_read_killable+0x4c/0x340
[  132.115722][ T5687]        mmap_read_lock_killable+0x1d/0x60
[  132.115734][ T5687]        lock_mm_and_find_vma+0x2b1/0x2f0
[  132.115752][ T5687]        do_user_addr_fault+0x2db/0xb10
[  132.115768][ T5687]        exc_page_fault+0x60/0x100
[  132.115787][ T5687]        asm_exc_page_fault+0x22/0x30
[  132.115802][ T5687]        fault_in_readable+0x13e/0x1f0
[  132.115817][ T5687]        fault_in_iov_iter_readable+0xbb/0x2e0
[  132.115836][ T5687]        generic_perform_write+0x1d2/0x560
[  132.115854][ T5687]        __generic_file_write_iter+0x172/0x430
[  132.115871][ T5687]        generic_file_write_iter+0xab/0x2e0
[  132.115887][ T5687]        vfs_write+0x44c/0x960
[  132.115902][ T5687]        ksys_write+0x143/0x240
[  132.115916][ T5687]        do_syscall_64+0x4c/0xa0
[  132.115929][ T5687]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.115943][ T5687] 
[  132.115943][ T5687] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}:
[  132.254286][ T5687]        __lock_acquire+0x2cf8/0x7c50
[  132.259657][ T5687]        lock_acquire+0x1b4/0x490
[  132.264665][ T5687]        down_write+0x36/0x60
[  132.269330][ T5687]        process_measurement+0x33c/0x1a10
[  132.275034][ T5687]        ima_file_mmap+0x104/0x150
[  132.280131][ T5687]        __se_sys_remap_file_pages+0x53e/0x770
[  132.286271][ T5687]        do_syscall_64+0x4c/0xa0
[  132.291203][ T5687]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.297599][ T5687] 
[  132.297599][ T5687] other info that might help us debug this:
[  132.297599][ T5687] 
[  132.307805][ T5687]  Possible unsafe locking scenario:
[  132.307805][ T5687] 
[  132.315235][ T5687]        CPU0                    CPU1
[  132.320578][ T5687]        ----                    ----
[  132.325920][ T5687]   lock(&mm->mmap_lock);
[  132.330233][ T5687]                                lock(&sb->s_type->i_mutex_key#12);
[  132.338229][ T5687]                                lock(&mm->mmap_lock);
[  132.345058][ T5687]   lock(&sb->s_type->i_mutex_key#12);
[  132.350521][ T5687] 
[  132.350521][ T5687]  *** DEADLOCK ***
[  132.350521][ T5687] 
[  132.358659][ T5687] 1 lock held by syz.1.390/5687:
[  132.363581][ T5687]  #0: ffff88802f9bf958 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770
[  132.374112][ T5687] 
[  132.374112][ T5687] stack backtrace:
[  132.379990][ T5687] CPU: 0 PID: 5687 Comm: syz.1.390 Not tainted syzkaller #0
[  132.387255][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  132.397318][ T5687] Call Trace:
[  132.400587][ T5687]  <TASK>
[  132.403504][ T5687]  dump_stack_lvl+0x168/0x22e
[  132.408169][ T5687]  ? load_image+0x3b0/0x3b0
[  132.412658][ T5687]  ? show_regs_print_info+0x12/0x12
[  132.417861][ T5687]  ? print_circular_bug+0x12b/0x1a0
[  132.423062][ T5687]  check_noncircular+0x274/0x310
[  132.427999][ T5687]  ? add_chain_block+0x940/0x940
[  132.432944][ T5687]  ? lockdep_lock+0xdc/0x1e0
[  132.437537][ T5687]  ? _find_first_zero_bit+0xcf/0x100
[  132.442819][ T5687]  __lock_acquire+0x2cf8/0x7c50
[  132.447665][ T5687]  ? ima_match_policy+0x104/0x2100
[  132.452761][ T5687]  ? verify_lock_unused+0x140/0x140
[  132.457954][ T5687]  ? ima_match_policy+0x207a/0x2100
[  132.463399][ T5687]  lock_acquire+0x1b4/0x490
[  132.467888][ T5687]  ? process_measurement+0x33c/0x1a10
[  132.473250][ T5687]  ? __might_sleep+0xd0/0xd0
[  132.477826][ T5687]  ? read_lock_is_recursive+0x10/0x10
[  132.483182][ T5687]  ? ima_get_action+0x71/0xa0
[  132.487846][ T5687]  down_write+0x36/0x60
[  132.491987][ T5687]  ? process_measurement+0x33c/0x1a10
[  132.497349][ T5687]  process_measurement+0x33c/0x1a10
[  132.502538][ T5687]  ? ima_file_mmap+0x150/0x150
[  132.507288][ T5687]  ? aa_file_perm+0x117/0xec0
[  132.511952][ T5687]  ? mtree_load+0xeb/0xa40
[  132.516381][ T5687]  ? mtree_load+0x90a/0xa40
[  132.520879][ T5687]  ? aa_get_current_label+0x110/0x1d0
[  132.526325][ T5687]  ? apparmor_current_getsecid_subj+0xb1/0x110
[  132.532468][ T5687]  ima_file_mmap+0x104/0x150
[  132.537049][ T5687]  ? ima_file_free+0x3e0/0x3e0
[  132.541795][ T5687]  ? common_file_perm+0x171/0x1c0
[  132.546807][ T5687]  ? bpf_lsm_mmap_file+0x5/0x10
[  132.551643][ T5687]  ? security_mmap_file+0x11b/0x180
[  132.556825][ T5687]  __se_sys_remap_file_pages+0x53e/0x770
[  132.562445][ T5687]  ? __se_sys_futex+0x14a/0x440
[  132.567285][ T5687]  ? __x64_sys_remap_file_pages+0xc0/0xc0
[  132.572989][ T5687]  ? lock_chain_count+0x20/0x20
[  132.577827][ T5687]  ? lockdep_hardirqs_on+0x94/0x140
[  132.583185][ T5687]  ? __x64_sys_remap_file_pages+0x1c/0xc0
[  132.588885][ T5687]  do_syscall_64+0x4c/0xa0
[  132.593288][ T5687]  ? clear_bhb_loop+0x60/0xb0
[  132.597945][ T5687]  ? clear_bhb_loop+0x60/0xb0
[  132.602603][ T5687]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  132.608485][ T5687] RIP: 0033:0x7f594278f749
[  132.612893][ T5687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.632499][ T5687] RSP: 002b:00007f5943687038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  132.640894][ T5687] RAX: ffffffffffffffda RBX: 00007f59429e6090 RCX: 00007f594278f749
[  132.648849][ T5687] RDX: 0000000000000000 RSI: 0000000000400d00 RDI: 000020000051c000
[  132.656807][ T5687] RBP: 00007f5942813f91 R08: 0000000000000000 R09: 0000000000000000
[  132.664759][ T5687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.672712][ T5687] R13: 00007f59429e6128 R14: 00007f59429e6090 R15: 00007ffd6b41ec18
[  132.680675][ T5687]  </TASK>
[  132.705117][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  132.705153][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  132.733878][ T5723] EXT4-fs (loop5): 1 truncate cleaned up
[  132.733905][ T5723] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  132.786263][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  132.870080][ T5683] loop1: detected capacity change from 0 to 1024
[  132.884320][ T5683] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  132.896238][ T5064] EXT4-fs (loop5): unmounting filesystem.