last executing test programs:

1m31.13975612s ago: executing program 3 (id=1050):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7, 0x4, 0x4})
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580))
r2 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)}, 0x10)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/firmware/fdt', 0x148c1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6100330080000000ffffffffffff080211000000505050505050200000000000000000006400011003010c"], 0x80}}, 0x0)

1m29.86851132s ago: executing program 3 (id=1058):
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0)

1m29.294818808s ago: executing program 3 (id=1060):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1d})

1m27.257359903s ago: executing program 3 (id=1071):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r9, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
r11 = dup(r3)
ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000000)={0x1, 0x0, 0x27f})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x3, '\x00', @c})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0xc22, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x157c, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xfffe, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x400002, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
unshare(0x22020600)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000540)={[{@fat=@discard}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@nfs_nostale_ro}, {@fat=@nfs}]}, 0x0, 0x274, &(0x7f0000000280)="$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")

1m24.994008259s ago: executing program 3 (id=1079):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)
r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0)

1m23.936580182s ago: executing program 3 (id=1084):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f0000000240), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m8.338933536s ago: executing program 32 (id=1084):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f0000000240), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

59.92616985s ago: executing program 1 (id=1137):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r6, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
r8 = dup(r3)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x3, '\x00', @c})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0xc22, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x157c, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xfffe, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x400002, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
unshare(0x22020600)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000540)={[{@fat=@discard}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@nfs_nostale_ro}, {@fat=@nfs}]}, 0x0, 0x274, &(0x7f0000000280)="$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")

59.673687236s ago: executing program 4 (id=1138):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
process_vm_writev(r1, 0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000640)=""/224, 0xe0}, {&(0x7f0000000740)=""/82, 0x52}, {0x0}], 0x4, 0x0)
setsockopt$sock_int(r4, 0x1, 0x12, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto(r4, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @local})

58.560206598s ago: executing program 4 (id=1141):
epoll_create1(0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "410100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0xff7f, @val=0xff7f0000}, "2775a7399c79"}}}}}}}, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x2, 0xb4, 0x1d, 0x3f, 0x1, [], [{{0x9, 0x5, 0xe, 0x3, 0x5ff, 0x2, 0x7, 0x1}}, {{0x9, 0x5, 0x85, 0x3, 0x20, 0xff, 0xa, 0x40}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10, 0x0}, 0x4000010)

58.216362077s ago: executing program 1 (id=1142):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xfe7c, 0x800}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0xa})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@iv={0x18}], 0x18, 0x40880}, 0x108d1)

57.944829473s ago: executing program 1 (id=1143):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @remote, 0x1}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r1, &(0x7f0000000d40)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x46, &(0x7f00000020c0)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x0)

57.898311748s ago: executing program 4 (id=1144):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
process_vm_writev(r1, 0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000740)=""/82, 0x52}, {0x0}], 0x3, 0x0)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto(r4, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @local})

56.635723321s ago: executing program 4 (id=1149):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4004801)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r0, 0x4010744d, 0x0)

55.960892912s ago: executing program 1 (id=1152):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

54.525612276s ago: executing program 2 (id=1155):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r1, 0x0, 0x0)

53.761591609s ago: executing program 2 (id=1158):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0xd768}], 0x1, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

53.623560769s ago: executing program 2 (id=1159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x26})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000200), 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r2, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101500)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
getsockname(r5, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffff5f5}]}}]}, 0x38}}, 0x4044040)

53.377536781s ago: executing program 0 (id=1160):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r0, 0x0, 0x4000)

53.077401601s ago: executing program 0 (id=1161):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r6, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
r8 = dup(r3)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x3, '\x00', @c})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0xc22, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x157c, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xfffe, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x400002, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
unshare(0x22020600)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000540)={[{@fat=@discard}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@nfs_nostale_ro}, {@fat=@nfs}]}, 0x0, 0x274, &(0x7f0000000280)="$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")

51.348574327s ago: executing program 2 (id=1162):
r0 = socket(0x10, 0x80002, 0x0)
socket(0x11, 0x800000003, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c0073fc000000000000000007000003", @ANYRES32, @ANYBLOB="520044000a0002"], 0x28}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

51.123734777s ago: executing program 1 (id=1163):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r6, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
r8 = dup(r3)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x3, '\x00', @c})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0xc22, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x157c, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xfffe, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x400002, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
unshare(0x22020600)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000540)={[{@fat=@discard}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@nfs_nostale_ro}, {@fat=@nfs}]}, 0x0, 0x274, &(0x7f0000000280)="$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")

51.115093304s ago: executing program 4 (id=1164):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000001c40), 0x0, 0x8c0, 0x0, 0x0)

50.909881369s ago: executing program 0 (id=1165):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0xd768}], 0x1, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

50.767113725s ago: executing program 2 (id=1166):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

50.698971288s ago: executing program 4 (id=1167):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x10, 0x0, 0x0, 0x200, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0)

45.732403233s ago: executing program 0 (id=1168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x7f, 0xc, 0x41, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x80, 0x800000, 0x7}})
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0)

44.00985124s ago: executing program 2 (id=1169):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xfffffffd, @local, 0x8}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x70}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

41.539783009s ago: executing program 1 (id=1170):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000640)=""/150, 0x96, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, 0xffffffffffffffff, 0x1f4d2000)
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "63f1cfe88f81b5ef"}}}}}, 0x22)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000007400)={0x1}, 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006e40)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="b58a0b402a732ca04929e0556164c2bcd7368eb352453540cd40b0b355b090e41124c9cd26704266c1857a51fd89cc491c6445071ae0cbb9327f71329f7a6e744fa929d771bf7b71db202c635824537c5bec765cbf59c8eaca8b5137acec2ba704ba1c8ea7a5c79564a5645deca3c1798003d1324e9d9726ccf066eeb35ccef044781c7afc0fb7c1d6816521638cac5fe9b90e1d98d7066454c4154d8fe659a1042f0e3563f2bb2bff2b7f4639a24e662e5d4feac037e07035222eb5b0872ff43c1f510f6fe94d752ffc8547e8a9655421ba0f4d1daec526f3af628bad6194ee31fc83e584d0543fd5201ba310ef9ff5ab6e27188ad23a3c4b9205d0cb877636b5336af465238c4e4733a2de00259260243d28535f2167dd111e6ec3f56d074863fbcccdde9311149d4cb1729435eeabd0066950dc78693cb114db144b5a6119127e0df6e37b5a37f90d3e98af252932e989d053c826012dbf3c281dab83956dde8eeef6d90f4bc9cf7028e97b866da51416f48c3b00d9f7fe0ad0b4a4174c7a9ffc7ee045df817546e25739d93c4faaec49c0971bd042fb2005ecb3160c91425032e213f2a7de7c05ef5b66d948a5ff0f0cfab21233de7856006537de127b58a9b8c955dd873e86adb3ca6742f58eae3f7d542fb7040fbc8c0b43693a7cc48672c92fc72875ff2be72ebdc16537474f5e3f5f013e0194aa0fa890522a7cc3711653c586284170807626b0458cb2f034210241a05292a8bbb9bbb8b989a1645b0effbd75a93ca92585a23a461df4af1786d80853dd517c0c0584bcd13fa459ce2298bb9c7c0487220dd3a0a6ea1e05e46c7656f8c4ca1c1365c2a30b881d75dfbcf5c9fbc7f5c64a569f928a816d3f6ca36c42403c0e50180a80247d9a0c6b7fcadee31bfd7d679a7c795ccd3e716069dfe50398c11098b3f4b714f6b347b09f541520315796411e1b4d6845d86a88ec2fc78fa26cbb92a8075726075305efa9ba2c9aa257dac9421dbb5e52da9f8bfb5b7bea18f375ae0b7614a27dc311e5d2265bf8503f6ec6e63df22da7f5e6dcad3f80e6c89e2ed953effd7c4da8bed84c7f6d75c2f3f92d94d68eefc9f579e3f2ce663d85bd09b2a6a3a4dc60cdbca72c547311b189a008d7b83e02a162eff585151d4cdb246f639cd5e72de7a7b1e2e0140abd8c243290512d2128cdc0de99043c4ab1466eb640d2b412a46b2d6054ba17d66abc1c5019644608a0a4301b7d991ce548291c2ed2d868c46287f788b6a3686f3a20d34d23ed65bbf2b9b388b83b86342ec09367ba18af588ea7289f8a73e7ecdbe7141b4892c03350c41cdd7a9a282469e95758c4005a446a14c86dd7667a1dbe68b1b78461193040a28ec0ab04c0aeb9d6a331d2c74dee70036927192af7da5c2ff774ebf4edcd4e7bba13bcd21be7f31421816ae6eb29a544b386292de02193d9707cabdf434a6456954dbde758791f87f5d17284953cc5cddb70d18daa98bb1b0dfc8f60596d0c1f565b6ae7aaa9a2c8b6995c94e3fca83d1d2775684f45e47550239b4bcb92a9931fef014120730bfc8eb9dd9ffabd73524a844fb05701d1da88de37b6f86457301e1e9576bc5977bd4fc40cd31fffc2294695768c99da5af266c654587ba30b807ba7a03d7b71c3177150592972228d315d0c57dad441d0abc41a89c7ec4ffe79c52d84f6e93ee4a0b1312fae54643ed8e192bc378ff21f30de1ea31aa0edceeb8207da7bd3bc5efa7701d08ee13eaddbaef94075e2a4c9b7540acb4f41a9bbae74ca91f810fb731d409028e0ac01c402c36bb310e73c194aab629f8634546e7eae3c7259f46fc400940225b3366952b75b84f77714f31b7762be139040f38ea06c676c2d0994b0af90bb070574fcead0303b2e9142a3fae2377c7f9a8610a39e23f9d5b4e8350d83a329778a4847df5151f73c80ae9535fef6bb4db32ee98769cb2d761e1694878ee33a85da5bd5c525edc64aeae9ce0b015d579cc41221a025183c1b8ca9e6b57f62c962293fa98bb3325e87b44739fee84a02a2874a9aef4e0ff711932585883f6105ec3dda90bb2bd91ae79bcd53fa00f1cb9576b6f5096ff35f2cd91cd81c3c5eb1f70cdf0374c57438aa42ea0ddd32489aef364ad3f761646634c6aa11645c1e0f227ba7d050e34efe3d78e4ebe288398822e813fcc6e1df3d06db34502671a36f63faca9f6836ec86a2ed76b3d775b719633ee3770be0770689b725cecabfa83486607eb0f6f7c88592630865c4a8237bb0f4d3c377a5e3ec0e4a7836b71b63a2636bc42c5557254d27b5d67c0f7d004e09bad5ac9e749f0edf95facd1d2bd0683fe2eff3b662d99dbb20b6d2af948a729ade4867f41b8057adf5948c97c29abaeb7fc0ba5ebd4d8ea46ad28e5b05a2fd152ebce93caaa233a0a82753368ca127a29c45beed3ad25fa76995f65f101e99bce5a132c1d94a6f90a4f544114ac5fd9eb475791e4f056aebc5b377cb8202b30a72afeb83f06c157626b3ae254f82a1c36158d804546dbb4108087abc2877a7d70ecaa5491611d2f426b7c98b94b96836764d51d5a7749b7596ce5481058f468a03e7988bea3ec60176aad4ad4e7788a7457d9052bad9b87c6b5bee851fc97483c80a3a5f6bc1597ea25e7b8305384b5b5cf698c53a1097fdf6869281627e032898bf32aa039397a61b259a7ca47f25013f232863f9f99785f389164580e9e3f87fd67e9423ca45cbc4b56781404f91770fdb33372557afe9f0988e6ece3f1a547290645882b722428ca0df11ff2f19875d759b3a8da1dfb44f3e5d512c48efdbd086cc27b868497dbdfd1c84424aa37417bb6657aea095597a7301456ea162c1b0d6159e378b20f795ab68f72d4c65dd491c3a9eb54ff4c9bd60b1966f5124290efc4826144c7f4f668e90b91e2d64e5b19f85d12330f96ec17ab2ca7c604edeed6b56c1c906a074926eea91dfb6875369075c5eff23e909eb848706f5e967bef21974f2b7200e7f267cc04ba42eecef2a985a1ead69ffd2638e4103bc8d5a346e58bc79a47817723247ad0324d2e1fef2372869968936851dcffd1034bde364e5b62f09db00824fabc253d5edb470447730cd765da85ca9d3297a0fa4bb00864bd252d81b1265f9622650aad270a385189ee5bc7dd0ded81908b05d124e38d45d0a1310da9c8174ae1d5c88219488d2cbc43c2f00562369348fadb10fb4e582bc7eaf82d8064d8aed070ac4df288de1826a34d3ebc5308bc923076e9a2a6193993258e541e9f09df110963e3897f3c16ecce982f973f3e8e55deda0d7b7ea4986e4605f1b92c19e64068bfc907afe0354668aa5c634f166270a396c9393c0f902558a4dcb149910bd9aa9d78997adc917ca1dc95f72611787a138e8c24b06fbbad0e2712f7f5e268a2d1ad6bc25c4d181c02e63ee3feead4186c8b2936b5ce5e58bc213a85d8aad2ff27d4b87bc6529e27609e9e2937deeab9a47739f6238384eb18f3838b727fe084eac7f47f0165c7ce3978de9b20f5b80f4a7b328d6993b454b49e94f1577fafdb48554dd385078f8856e0d0a722275fdc562dc72058d08a849585ff94621e71f9b10ed01a12cf45df0b6d4d987ef3d237c76d903f97cff72e7c3b78b0e08bc2ba935069db3b2bf08356de686209d3fdb4f62c2862772c3473af3a2ea42f0b1e602e230eb7b2c0104ed3b0fffb0eb3c11654bfa9df23bafd96904c231e72b8612900166b8f8700a153df3409dc0de57706e311928adc1bbc55ff13215dfc2c8a5185a57162631b79a3fa105a128ee20a03cf897360b04b13dd782f76a8eb4801b2b17a7691abec6ec42eac13791667631b7f97335ef7b58425668c00af113a36b6be5eba28b5263d1a9cf3da237898b8d4952690da22485b5385d3b06002541a22df8cc850ad48c726eb5e073869a94c9fbc4b912c19c352f278f4a0e8dc1cd37519a5091e34a043875bfb50855eff51199aab5a9012778c6b0c9d1e63e8052637426484aa67f959e58a340876ae722c5dc064754d6880fca1c46488307944c5c38d784570ef93d888469f3f80eac244193b3f1e4d0fde97fb47013154c3bd9431c292b232ad4be1a0e3df0886172f4aa19fe9b901a8c0a3d6e2234298d5ed06807ad69b01c6f2f87aee2eaa509c7a72592b9320f0070b89bfb9ebc9763c652262c388811350f5817c87d492b5cf4dc8b5597ab3b2a14c11b778fb6d6d1a22310db8e820be2b892226020c8336c089b45a454a837a8860c33b31afebd015d13b8a7200e8ed174a646e39c4b7bf5ae66c76adf8b38e2f0ba1734815d3efd33ca8647464c7678ea7eab381171dd8b7b6c677ec439b2ca1b99b5c8aef86c3054f743be19f2a5c05da45b5d3eb384f59a00460b274f1ee3e1c4e0e842f256fe64e5d64b30e47fa54e8095382a50baa57c9111be144a89e417a287e0e4633a1af6cbc05281b59311c45ad93689499b05895e56b9f52c25a02947a5ddc6c8ff911e9e9ddf209c4f43d9953fab55a954c6cc3a1fcbca349123e0b66a7b51cd2d96baada907c2a4ad3b0275a5d70b9e6d839fd8b77227d57a4de4e9c21c8aaf3056e2076c8cbc50a4ab3429ff0eb72c76b529129242f4b730cc9e7df2149236a7f535adb3a0fb6bcf6860214bd4b8bc27ab21fe4fb03e561a9283b17dc8da06da2f76ca91df1248a6f7a9ddfc02f6b9efa47465827fba7c3bf1d02cd513f91c63f12fe7d84d6a66c5052dec428505512ff6bbe14195282694ca4513ddb89944b3a9373c2d3fd8ad59f36f533295c9b579f1932ee09b0443a51cda7da7248238de7c73b3e2ac0fa62dd4e84f184796edb9290f08656a072bb6bb898b0ba3076f881b57edd27c023fd3a435c89f481e4d32e6b3e47aa4277572d752a4b185f3d8b1e8122972f74f21438b60683bd46e49dcd9bbfc415df9a775ab24822a16eb20eba85de3f4e19d4aff4f0bfef7ff0d1311a34b8d206b284d6a30b572982143e0bad486911a40aba5d39ffc262cd5fe383f6e9d5a406dd20a6c4020fc1dea915020edfd482a88384f8c29eb9b7afb110563cf0c011f298b4d72bab9c4548cb8cd8a91c885401102c55ff384f38cf5db2c886b8c748b2cf5a20e4c1161a05d84c3528d0a748961a4b6f809708bf6790414396110ffa70dca10904aad8788b4f307b2adbb197527e87bbc909b85b6b99660c45ae8da32a7e6c170496d9e18c63f031d0d2153c77f5dadeb145fe5e849568c65221c9ef9facc2123b56915b0e23b744c97cb8930ab89a71ac057e8dcdcd6ae7d2d7a24e78742d9055a2de7491f37a964d2a57b4ec3128db93a06feb8b35f86267407b39de90ec3ea2996b1dbbdc80ca43042e96d4007779044c5f51dedcb97a7870fa55de4743cc8b45667a17da32bcefa1c4762031180456eb5c6d32889ffd4c0c5b5bb525db39d7012adb705ab425c45d6798edc7930f9a7e3b8d30cb92f83b3a45bc734c93291fd7177071f2b8222bd193f148698c40b6e6e5c36591aab6e738b5a24c7b8bf497cbaee54d080df44b02ba1deb95670083927aa897e6de3ac27123e9930a3236c8dbc7199afd5f951f341c1289d0dabc69e36b0231e176efad9ef62e9efa6f27831273c9e828d0a359c5f4addd1a8261493089cab7997b565dfc6ab2534ef2fc4f43dff0d5f15b42af0e15cd0f72d6fadeeaa452edf0cf0d273db0be656eec94843c511a1c023e7a27d62da309f29e1681ff236fafa0bfbf25715bd8d94b67a4fe3e8777a11c57c80bab0819dad05b7c7291c913b10c77f048a", 0xffd}, {&(0x7f0000000180)="2c6af0dfdcbe4974a831a3ba96599c5d03a96e0aadc518bce6a7d3f7e4b629e460ae197cda17ec74040945bf9b72da9cd28e249e4c06576bf1bf185aade79104052b6b8b47c7a93a996cbcb6e25d1744e9351735e965d6e3ae50b14bcb6a07c82ac1fe7b37424cf87474ac52509bf50217f181496674dc5e65de68ccee1d3f1cf7d8ffd60da7e1", 0x87}, {0x0}, {&(0x7f0000000400)="e8bd1db6a296c76c459b0657a8e23870c21b91519e814a6221f83cd20db0abbf5f7af4b8a4bfd90e13cb1403b7b99eb91b8cc20c6ee32afef4c7a28a4403dadda728ae5af74c880abe1c5bd5fcc14d96d135a318356e5792bde14568173cd03aa6ccc55351c043a9fade9808df860b12f51165b073b92c52aa064421b7e965c13268a9933c456fe9b0e541a3a41c8687995a4ac876d1bcec28904038ec2eb92926a43769a5ae93fb13aea2a310afa25129f5c51cf03126650d077b5ebe68d673baf23eb4d0c77efb5f2277084011b4b5fce3cf3a94a8332985c93f27459a006f0e79d187f171cfab", 0xe8}], 0x4, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x3, 0x8000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

38.55495769s ago: executing program 0 (id=1171):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

31.499517228s ago: executing program 33 (id=1167):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x10, 0x0, 0x0, 0x200, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0)

28.809645821s ago: executing program 0 (id=1173):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

19.329776551s ago: executing program 34 (id=1169):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xfffffffd, @local, 0x8}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x70}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

7.179468276s ago: executing program 35 (id=1170):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000640)=""/150, 0x96, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, 0xffffffffffffffff, 0x1f4d2000)
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "63f1cfe88f81b5ef"}}}}}, 0x22)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000007400)={0x1}, 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006e40)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="b58a0b402a732ca04929e0556164c2bcd7368eb352453540cd40b0b355b090e41124c9cd26704266c1857a51fd89cc491c6445071ae0cbb9327f71329f7a6e744fa929d771bf7b71db202c635824537c5bec765cbf59c8eaca8b5137acec2ba704ba1c8ea7a5c79564a5645deca3c1798003d1324e9d9726ccf066eeb35ccef044781c7afc0fb7c1d6816521638cac5fe9b90e1d98d7066454c4154d8fe659a1042f0e3563f2bb2bff2b7f4639a24e662e5d4feac037e07035222eb5b0872ff43c1f510f6fe94d752ffc8547e8a9655421ba0f4d1daec526f3af628bad6194ee31fc83e584d0543fd5201ba310ef9ff5ab6e27188ad23a3c4b9205d0cb877636b5336af465238c4e4733a2de00259260243d28535f2167dd111e6ec3f56d074863fbcccdde9311149d4cb1729435eeabd0066950dc78693cb114db144b5a6119127e0df6e37b5a37f90d3e98af252932e989d053c826012dbf3c281dab83956dde8eeef6d90f4bc9cf7028e97b866da51416f48c3b00d9f7fe0ad0b4a4174c7a9ffc7ee045df817546e25739d93c4faaec49c0971bd042fb2005ecb3160c91425032e213f2a7de7c05ef5b66d948a5ff0f0cfab21233de7856006537de127b58a9b8c955dd873e86adb3ca6742f58eae3f7d542fb7040fbc8c0b43693a7cc48672c92fc72875ff2be72ebdc16537474f5e3f5f013e0194aa0fa890522a7cc3711653c586284170807626b0458cb2f034210241a05292a8bbb9bbb8b989a1645b0effbd75a93ca92585a23a461df4af1786d80853dd517c0c0584bcd13fa459ce2298bb9c7c0487220dd3a0a6ea1e05e46c7656f8c4ca1c1365c2a30b881d75dfbcf5c9fbc7f5c64a569f928a816d3f6ca36c42403c0e50180a80247d9a0c6b7fcadee31bfd7d679a7c795ccd3e716069dfe50398c11098b3f4b714f6b347b09f541520315796411e1b4d6845d86a88ec2fc78fa26cbb92a8075726075305efa9ba2c9aa257dac9421dbb5e52da9f8bfb5b7bea18f375ae0b7614a27dc311e5d2265bf8503f6ec6e63df22da7f5e6dcad3f80e6c89e2ed953effd7c4da8bed84c7f6d75c2f3f92d94d68eefc9f579e3f2ce663d85bd09b2a6a3a4dc60cdbca72c547311b189a008d7b83e02a162eff585151d4cdb246f639cd5e72de7a7b1e2e0140abd8c243290512d2128cdc0de99043c4ab1466eb640d2b412a46b2d6054ba17d66abc1c5019644608a0a4301b7d991ce548291c2ed2d868c46287f788b6a3686f3a20d34d23ed65bbf2b9b388b83b86342ec09367ba18af588ea7289f8a73e7ecdbe7141b4892c03350c41cdd7a9a282469e95758c4005a446a14c86dd7667a1dbe68b1b78461193040a28ec0ab04c0aeb9d6a331d2c74dee70036927192af7da5c2ff774ebf4edcd4e7bba13bcd21be7f31421816ae6eb29a544b386292de02193d9707cabdf434a6456954dbde758791f87f5d17284953cc5cddb70d18daa98bb1b0dfc8f60596d0c1f565b6ae7aaa9a2c8b6995c94e3fca83d1d2775684f45e47550239b4bcb92a9931fef014120730bfc8eb9dd9ffabd73524a844fb05701d1da88de37b6f86457301e1e9576bc5977bd4fc40cd31fffc2294695768c99da5af266c654587ba30b807ba7a03d7b71c3177150592972228d315d0c57dad441d0abc41a89c7ec4ffe79c52d84f6e93ee4a0b1312fae54643ed8e192bc378ff21f30de1ea31aa0edceeb8207da7bd3bc5efa7701d08ee13eaddbaef94075e2a4c9b7540acb4f41a9bbae74ca91f810fb731d409028e0ac01c402c36bb310e73c194aab629f8634546e7eae3c7259f46fc400940225b3366952b75b84f77714f31b7762be139040f38ea06c676c2d0994b0af90bb070574fcead0303b2e9142a3fae2377c7f9a8610a39e23f9d5b4e8350d83a329778a4847df5151f73c80ae9535fef6bb4db32ee98769cb2d761e1694878ee33a85da5bd5c525edc64aeae9ce0b015d579cc41221a025183c1b8ca9e6b57f62c962293fa98bb3325e87b44739fee84a02a2874a9aef4e0ff711932585883f6105ec3dda90bb2bd91ae79bcd53fa00f1cb9576b6f5096ff35f2cd91cd81c3c5eb1f70cdf0374c57438aa42ea0ddd32489aef364ad3f761646634c6aa11645c1e0f227ba7d050e34efe3d78e4ebe288398822e813fcc6e1df3d06db34502671a36f63faca9f6836ec86a2ed76b3d775b719633ee3770be0770689b725cecabfa83486607eb0f6f7c88592630865c4a8237bb0f4d3c377a5e3ec0e4a7836b71b63a2636bc42c5557254d27b5d67c0f7d004e09bad5ac9e749f0edf95facd1d2bd0683fe2eff3b662d99dbb20b6d2af948a729ade4867f41b8057adf5948c97c29abaeb7fc0ba5ebd4d8ea46ad28e5b05a2fd152ebce93caaa233a0a82753368ca127a29c45beed3ad25fa76995f65f101e99bce5a132c1d94a6f90a4f544114ac5fd9eb475791e4f056aebc5b377cb8202b30a72afeb83f06c157626b3ae254f82a1c36158d804546dbb4108087abc2877a7d70ecaa5491611d2f426b7c98b94b96836764d51d5a7749b7596ce5481058f468a03e7988bea3ec60176aad4ad4e7788a7457d9052bad9b87c6b5bee851fc97483c80a3a5f6bc1597ea25e7b8305384b5b5cf698c53a1097fdf6869281627e032898bf32aa039397a61b259a7ca47f25013f232863f9f99785f389164580e9e3f87fd67e9423ca45cbc4b56781404f91770fdb33372557afe9f0988e6ece3f1a547290645882b722428ca0df11ff2f19875d759b3a8da1dfb44f3e5d512c48efdbd086cc27b868497dbdfd1c84424aa37417bb6657aea095597a7301456ea162c1b0d6159e378b20f795ab68f72d4c65dd491c3a9eb54ff4c9bd60b1966f5124290efc4826144c7f4f668e90b91e2d64e5b19f85d12330f96ec17ab2ca7c604edeed6b56c1c906a074926eea91dfb6875369075c5eff23e909eb848706f5e967bef21974f2b7200e7f267cc04ba42eecef2a985a1ead69ffd2638e4103bc8d5a346e58bc79a47817723247ad0324d2e1fef2372869968936851dcffd1034bde364e5b62f09db00824fabc253d5edb470447730cd765da85ca9d3297a0fa4bb00864bd252d81b1265f9622650aad270a385189ee5bc7dd0ded81908b05d124e38d45d0a1310da9c8174ae1d5c88219488d2cbc43c2f00562369348fadb10fb4e582bc7eaf82d8064d8aed070ac4df288de1826a34d3ebc5308bc923076e9a2a6193993258e541e9f09df110963e3897f3c16ecce982f973f3e8e55deda0d7b7ea4986e4605f1b92c19e64068bfc907afe0354668aa5c634f166270a396c9393c0f902558a4dcb149910bd9aa9d78997adc917ca1dc95f72611787a138e8c24b06fbbad0e2712f7f5e268a2d1ad6bc25c4d181c02e63ee3feead4186c8b2936b5ce5e58bc213a85d8aad2ff27d4b87bc6529e27609e9e2937deeab9a47739f6238384eb18f3838b727fe084eac7f47f0165c7ce3978de9b20f5b80f4a7b328d6993b454b49e94f1577fafdb48554dd385078f8856e0d0a722275fdc562dc72058d08a849585ff94621e71f9b10ed01a12cf45df0b6d4d987ef3d237c76d903f97cff72e7c3b78b0e08bc2ba935069db3b2bf08356de686209d3fdb4f62c2862772c3473af3a2ea42f0b1e602e230eb7b2c0104ed3b0fffb0eb3c11654bfa9df23bafd96904c231e72b8612900166b8f8700a153df3409dc0de57706e311928adc1bbc55ff13215dfc2c8a5185a57162631b79a3fa105a128ee20a03cf897360b04b13dd782f76a8eb4801b2b17a7691abec6ec42eac13791667631b7f97335ef7b58425668c00af113a36b6be5eba28b5263d1a9cf3da237898b8d4952690da22485b5385d3b06002541a22df8cc850ad48c726eb5e073869a94c9fbc4b912c19c352f278f4a0e8dc1cd37519a5091e34a043875bfb50855eff51199aab5a9012778c6b0c9d1e63e8052637426484aa67f959e58a340876ae722c5dc064754d6880fca1c46488307944c5c38d784570ef93d888469f3f80eac244193b3f1e4d0fde97fb47013154c3bd9431c292b232ad4be1a0e3df0886172f4aa19fe9b901a8c0a3d6e2234298d5ed06807ad69b01c6f2f87aee2eaa509c7a72592b9320f0070b89bfb9ebc9763c652262c388811350f5817c87d492b5cf4dc8b5597ab3b2a14c11b778fb6d6d1a22310db8e820be2b892226020c8336c089b45a454a837a8860c33b31afebd015d13b8a7200e8ed174a646e39c4b7bf5ae66c76adf8b38e2f0ba1734815d3efd33ca8647464c7678ea7eab381171dd8b7b6c677ec439b2ca1b99b5c8aef86c3054f743be19f2a5c05da45b5d3eb384f59a00460b274f1ee3e1c4e0e842f256fe64e5d64b30e47fa54e8095382a50baa57c9111be144a89e417a287e0e4633a1af6cbc05281b59311c45ad93689499b05895e56b9f52c25a02947a5ddc6c8ff911e9e9ddf209c4f43d9953fab55a954c6cc3a1fcbca349123e0b66a7b51cd2d96baada907c2a4ad3b0275a5d70b9e6d839fd8b77227d57a4de4e9c21c8aaf3056e2076c8cbc50a4ab3429ff0eb72c76b529129242f4b730cc9e7df2149236a7f535adb3a0fb6bcf6860214bd4b8bc27ab21fe4fb03e561a9283b17dc8da06da2f76ca91df1248a6f7a9ddfc02f6b9efa47465827fba7c3bf1d02cd513f91c63f12fe7d84d6a66c5052dec428505512ff6bbe14195282694ca4513ddb89944b3a9373c2d3fd8ad59f36f533295c9b579f1932ee09b0443a51cda7da7248238de7c73b3e2ac0fa62dd4e84f184796edb9290f08656a072bb6bb898b0ba3076f881b57edd27c023fd3a435c89f481e4d32e6b3e47aa4277572d752a4b185f3d8b1e8122972f74f21438b60683bd46e49dcd9bbfc415df9a775ab24822a16eb20eba85de3f4e19d4aff4f0bfef7ff0d1311a34b8d206b284d6a30b572982143e0bad486911a40aba5d39ffc262cd5fe383f6e9d5a406dd20a6c4020fc1dea915020edfd482a88384f8c29eb9b7afb110563cf0c011f298b4d72bab9c4548cb8cd8a91c885401102c55ff384f38cf5db2c886b8c748b2cf5a20e4c1161a05d84c3528d0a748961a4b6f809708bf6790414396110ffa70dca10904aad8788b4f307b2adbb197527e87bbc909b85b6b99660c45ae8da32a7e6c170496d9e18c63f031d0d2153c77f5dadeb145fe5e849568c65221c9ef9facc2123b56915b0e23b744c97cb8930ab89a71ac057e8dcdcd6ae7d2d7a24e78742d9055a2de7491f37a964d2a57b4ec3128db93a06feb8b35f86267407b39de90ec3ea2996b1dbbdc80ca43042e96d4007779044c5f51dedcb97a7870fa55de4743cc8b45667a17da32bcefa1c4762031180456eb5c6d32889ffd4c0c5b5bb525db39d7012adb705ab425c45d6798edc7930f9a7e3b8d30cb92f83b3a45bc734c93291fd7177071f2b8222bd193f148698c40b6e6e5c36591aab6e738b5a24c7b8bf497cbaee54d080df44b02ba1deb95670083927aa897e6de3ac27123e9930a3236c8dbc7199afd5f951f341c1289d0dabc69e36b0231e176efad9ef62e9efa6f27831273c9e828d0a359c5f4addd1a8261493089cab7997b565dfc6ab2534ef2fc4f43dff0d5f15b42af0e15cd0f72d6fadeeaa452edf0cf0d273db0be656eec94843c511a1c023e7a27d62da309f29e1681ff236fafa0bfbf25715bd8d94b67a4fe3e8777a11c57c80bab0819dad05b7c7291c913b10c77f048a", 0xffd}, {&(0x7f0000000180)="2c6af0dfdcbe4974a831a3ba96599c5d03a96e0aadc518bce6a7d3f7e4b629e460ae197cda17ec74040945bf9b72da9cd28e249e4c06576bf1bf185aade79104052b6b8b47c7a93a996cbcb6e25d1744e9351735e965d6e3ae50b14bcb6a07c82ac1fe7b37424cf87474ac52509bf50217f181496674dc5e65de68ccee1d3f1cf7d8ffd60da7e1", 0x87}, {0x0}, {&(0x7f0000000400)="e8bd1db6a296c76c459b0657a8e23870c21b91519e814a6221f83cd20db0abbf5f7af4b8a4bfd90e13cb1403b7b99eb91b8cc20c6ee32afef4c7a28a4403dadda728ae5af74c880abe1c5bd5fcc14d96d135a318356e5792bde14568173cd03aa6ccc55351c043a9fade9808df860b12f51165b073b92c52aa064421b7e965c13268a9933c456fe9b0e541a3a41c8687995a4ac876d1bcec28904038ec2eb92926a43769a5ae93fb13aea2a310afa25129f5c51cf03126650d077b5ebe68d673baf23eb4d0c77efb5f2277084011b4b5fce3cf3a94a8332985c93f27459a006f0e79d187f171cfab", 0xe8}], 0x4, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x3, 0x8000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 36 (id=1173):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts.
[   34.057212][ T6430] cgroup: Unknown subsys name 'net'
[   34.301199][ T6430] cgroup: Unknown subsys name 'cpuset'
[   34.304944][ T6430] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   34.647655][ T6430] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   36.093414][ T6443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   36.096301][ T6443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   36.098516][ T6443] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   36.101539][ T6443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   36.103401][ T6443] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   36.105712][ T6443] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   36.109022][ T6443] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   36.110922][ T6443] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   36.113363][ T6446] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   36.115621][ T6446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   36.120500][ T6443] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   36.123794][ T6446] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   36.153872][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   36.156462][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   36.159264][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   36.163676][ T6442] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   36.165865][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   36.170147][ T6442] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   36.172816][ T6442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   36.174606][ T6442] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   36.179675][ T6442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   36.182128][ T6442] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   36.183428][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   36.184197][ T6442] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   36.211357][ T6443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   36.214513][ T6443] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   36.222366][ T6443] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   36.226895][ T6443] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   36.236197][ T6443] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   36.238235][ T6443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   36.373631][ T6441] chnl_net:caif_netlink_parms(): no params data found
[   36.496479][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.498490][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.501250][ T6441] bridge_slave_0: entered allmulticast mode
[   36.503354][ T6441] bridge_slave_0: entered promiscuous mode
[   36.508239][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.510490][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.512454][ T6441] bridge_slave_1: entered allmulticast mode
[   36.514573][ T6441] bridge_slave_1: entered promiscuous mode
[   36.519222][ T6450] chnl_net:caif_netlink_parms(): no params data found
[   36.524643][ T6447] chnl_net:caif_netlink_parms(): no params data found
[   36.561054][ T6441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.567149][ T6452] chnl_net:caif_netlink_parms(): no params data found
[   36.596111][ T6441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.606089][ T6440] chnl_net:caif_netlink_parms(): no params data found
[   36.649519][ T6441] team0: Port device team_slave_0 added
[   36.667101][ T6441] team0: Port device team_slave_1 added
[   36.713465][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.715389][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.717279][ T6450] bridge_slave_0: entered allmulticast mode
[   36.719860][ T6450] bridge_slave_0: entered promiscuous mode
[   36.733058][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.734832][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.741905][ T6441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.748267][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.754505][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.756303][ T6452] bridge_slave_0: entered allmulticast mode
[   36.758416][ T6452] bridge_slave_0: entered promiscuous mode
[   36.760923][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.762679][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.764522][ T6450] bridge_slave_1: entered allmulticast mode
[   36.766660][ T6450] bridge_slave_1: entered promiscuous mode
[   36.768716][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.771440][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.773260][ T6447] bridge_slave_0: entered allmulticast mode
[   36.775283][ T6447] bridge_slave_0: entered promiscuous mode
[   36.778290][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.780312][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.787025][ T6441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.806165][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.808068][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.810697][ T6452] bridge_slave_1: entered allmulticast mode
[   36.814388][ T6452] bridge_slave_1: entered promiscuous mode
[   36.825919][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.827914][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.830291][ T6447] bridge_slave_1: entered allmulticast mode
[   36.832422][ T6447] bridge_slave_1: entered promiscuous mode
[   36.857321][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.861262][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.876396][ T6447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.902717][ T6441] hsr_slave_0: entered promiscuous mode
[   36.904727][ T6441] hsr_slave_1: entered promiscuous mode
[   36.908471][ T6447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.916016][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.917901][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.920133][ T6440] bridge_slave_0: entered allmulticast mode
[   36.922285][ T6440] bridge_slave_0: entered promiscuous mode
[   36.926184][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.928733][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.930973][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.932868][ T6440] bridge_slave_1: entered allmulticast mode
[   36.934989][ T6440] bridge_slave_1: entered promiscuous mode
[   36.947905][ T6450] team0: Port device team_slave_0 added
[   36.957597][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.974079][ T6450] team0: Port device team_slave_1 added
[   36.977712][ T6447] team0: Port device team_slave_0 added
[   36.981589][ T6447] team0: Port device team_slave_1 added
[   36.998617][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.026416][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.043359][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.045196][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.052092][ T6447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.056890][ T6452] team0: Port device team_slave_0 added
[   37.060545][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.062322][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.069408][ T6447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.083136][ T6440] team0: Port device team_slave_0 added
[   37.085244][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.087210][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.094745][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.099211][ T6452] team0: Port device team_slave_1 added
[   37.113214][ T6440] team0: Port device team_slave_1 added
[   37.115315][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.117274][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.125722][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.137827][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.139768][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.146236][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.151623][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.153618][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.164558][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.177847][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.180065][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.186802][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.207291][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.210144][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.216763][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.245969][ T6450] hsr_slave_0: entered promiscuous mode
[   37.248176][ T6450] hsr_slave_1: entered promiscuous mode
[   37.251230][ T6450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.253394][ T6450] Cannot create hsr debugfs directory
[   37.257976][ T6447] hsr_slave_0: entered promiscuous mode
[   37.260688][ T6447] hsr_slave_1: entered promiscuous mode
[   37.262883][ T6447] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.265129][ T6447] Cannot create hsr debugfs directory
[   37.300950][ T6452] hsr_slave_0: entered promiscuous mode
[   37.302846][ T6452] hsr_slave_1: entered promiscuous mode
[   37.304659][ T6452] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.306621][ T6452] Cannot create hsr debugfs directory
[   37.311455][ T6440] hsr_slave_0: entered promiscuous mode
[   37.313411][ T6440] hsr_slave_1: entered promiscuous mode
[   37.315282][ T6440] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   37.317145][ T6440] Cannot create hsr debugfs directory
[   37.505945][ T6441] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.517265][ T6441] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.521284][ T6441] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.539044][ T6441] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.561241][ T6450] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.565936][ T6450] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.574343][ T6450] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.577886][ T6450] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.613008][ T6447] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.624304][ T6447] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.627726][ T6447] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.641070][ T6447] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.689774][ T6452] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.710165][ T6452] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.713594][ T6452] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.736114][ T6452] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.743164][ T6440] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.746784][ T6440] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.760309][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.766330][ T6440] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.771219][ T6440] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.784596][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.805450][ T6450] 8021q: adding VLAN 0 to HW filter on device team0
[   37.811057][ T6441] 8021q: adding VLAN 0 to HW filter on device team0
[   37.823015][  T721] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.825038][  T721] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.828214][  T721] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.830118][  T721] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.837973][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.839943][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.867050][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.868962][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.943799][ T6447] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.954338][ T6447] 8021q: adding VLAN 0 to HW filter on device team0
[   37.972640][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.974537][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.977282][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.979308][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.008326][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.035699][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.046698][ T6452] 8021q: adding VLAN 0 to HW filter on device team0
[   38.067954][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.074508][  T226] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.076637][  T226] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.086046][ T6447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.104414][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.106272][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.124106][ T6441] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.141752][ T6450] veth0_vlan: entered promiscuous mode
[   38.153992][ T6440] 8021q: adding VLAN 0 to HW filter on device team0
[   38.156341][ T6450] veth1_vlan: entered promiscuous mode
[   38.169530][ T6443] Bluetooth: hci0: command tx timeout
[   38.171073][ T6442] Bluetooth: hci1: command tx timeout
[   38.175134][  T226] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.177083][  T226] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.212926][  T590] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.215094][  T590] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.227963][ T6450] veth0_macvtap: entered promiscuous mode
[   38.249268][ T6442] Bluetooth: hci2: command tx timeout
[   38.251041][ T6443] Bluetooth: hci3: command tx timeout
[   38.270577][ T6450] veth1_macvtap: entered promiscuous mode
[   38.278506][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.300635][ T6447] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.305940][ T6441] veth0_vlan: entered promiscuous mode
[   38.312009][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.316147][ T6450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.318540][ T6450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.322685][ T6450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.325040][ T6450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.329526][ T6443] Bluetooth: hci4: command tx timeout
[   38.337127][ T6441] veth1_vlan: entered promiscuous mode
[   38.386761][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.401333][ T6441] veth0_macvtap: entered promiscuous mode
[   38.428522][ T6441] veth1_macvtap: entered promiscuous mode
[   38.453577][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.456409][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.462068][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.468118][ T6447] veth0_vlan: entered promiscuous mode
[   38.473670][ T6447] veth1_vlan: entered promiscuous mode
[   38.482772][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.485721][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.491946][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.515295][ T6441] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.517540][ T6441] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.521318][ T6441] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.523505][ T6441] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.527786][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.537412][ T6447] veth0_macvtap: entered promiscuous mode
[   38.539060][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.547399][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.575904][ T6447] veth1_macvtap: entered promiscuous mode
[   38.605398][  T630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.607580][  T630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.616255][ T6452] veth0_vlan: entered promiscuous mode
[   38.624106][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.627042][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.630861][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.633537][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.636921][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.645485][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.648186][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.651907][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.654485][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.657637][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.680634][ T6452] veth1_vlan: entered promiscuous mode
[   38.685024][ T6447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.687184][ T6447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.690900][ T6447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.693136][ T6447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.741959][ T6452] veth0_macvtap: entered promiscuous mode
[   38.761173][ T6452] veth1_macvtap: entered promiscuous mode
[   38.766623][  T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.768718][  T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.774487][ T6440] veth0_vlan: entered promiscuous mode
[   38.798369][ T6450] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.800897][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.805420][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.807983][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.816124][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.819068][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   38.821793][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.826554][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.833975][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.836644][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.839839][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.842709][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.845151][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.847784][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.852057][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.855336][ T6440] veth1_vlan: entered promiscuous mode
[   38.858011][ T6452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.861900][ T6452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.864182][ T6452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.866417][ T6452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.894523][  T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.897124][  T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.939647][ T6440] veth0_macvtap: entered promiscuous mode
[   38.963875][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.965956][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.976033][  T630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.978062][  T630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.997198][ T6440] veth1_macvtap: entered promiscuous mode
[   39.015578][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.018372][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.022404][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.028381][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.031835][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.034460][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.037030][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.040476][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.044826][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.071435][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.074173][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.076683][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.084064][  T630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.086088][  T630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.093874][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.096457][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.100326][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.102787][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.105449][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.110020][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.137264][ T6440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.140483][ T6440] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.142748][ T6440] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.145106][ T6440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.163830][  T630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.173002][  T630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.267233][ T6533] loop3: detected capacity change from 0 to 512
[   39.274113][  T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.278060][  T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.282923][ T6533] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   39.286391][ T6533] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.297379][ T6533] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   39.310309][ T6533] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   39.313972][ T6533] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   39.316107][ T6533] System zones: 0-2, 18-18, 34-35
[   39.352584][ T6533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.376675][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.402689][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.417430][ T6533] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[   39.442576][ T6447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.137547][ T6558] loop3: detected capacity change from 0 to 32768
[   40.172668][ T6555] loop2: detected capacity change from 0 to 32768
[   40.176036][ T6555] =======================================================
[   40.176036][ T6555] WARNING: The mand mount option has been deprecated and
[   40.176036][ T6555]          and is ignored by this kernel. Remove the mand
[   40.176036][ T6555]          option from the mount to silence this warning.
[   40.176036][ T6555] =======================================================
[   40.200836][ T6558] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   40.226586][ T6555] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   40.249028][ T6443] Bluetooth: hci1: command tx timeout
[   40.259305][ T6443] Bluetooth: hci0: command tx timeout
[   40.275077][ T6558] XFS (loop3): Ending clean mount
[   40.295903][ T6555] XFS (loop2): Ending clean mount
[   40.328942][ T6443] Bluetooth: hci2: command tx timeout
[   40.339451][ T6443] Bluetooth: hci3: command tx timeout
[   40.370889][ T6452] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   40.412167][ T6443] Bluetooth: hci4: command tx timeout
[   40.504991][ T6558] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   40.763853][ T6447] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   40.827316][ T6590] input: syz0 as /devices/virtual/input/input3
[   41.025774][ T6596] loop0: detected capacity change from 0 to 512
[   41.045132][ T6596] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.21: casefold flag without casefold feature
[   41.053341][ T6596] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.21: couldn't read orphan inode 15 (err -117)
[   41.076043][ T6596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.233193][ T6450] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.237046][   T30] audit: type=1326 audit(41.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6607 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   41.252528][   T30] audit: type=1326 audit(41.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6607 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   41.267638][   T30] audit: type=1326 audit(41.220:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6607 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   41.288750][   T30] audit: type=1326 audit(41.220:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6607 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   41.296782][   T30] audit: type=1326 audit(41.220:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6607 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   41.309717][   T30] audit: type=1326 audit(41.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6607 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   41.324159][   T30] audit: type=1326 audit(41.220:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6607 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   41.344432][   T30] audit: type=1326 audit(41.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6607 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   41.359324][ T6612] loop2: detected capacity change from 0 to 2048
[   41.380301][ T6612] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   41.494213][ T6625] netlink: 40 bytes leftover after parsing attributes in process `syz.2.31'.
[   42.329910][ T6443] Bluetooth: hci0: command tx timeout
[   42.332058][ T6443] Bluetooth: hci1: command tx timeout
[   42.419082][ T6442] Bluetooth: hci3: command tx timeout
[   42.420568][ T6442] Bluetooth: hci2: command tx timeout
[   42.489111][ T6443] Bluetooth: hci4: command tx timeout
[   42.977228][ T6738] loop0: detected capacity change from 0 to 65536
[   42.986901][ T6738] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   43.008000][ T6738] XFS (loop0): Ending clean mount
[   43.016485][ T6738] XFS (loop0): Quotacheck needed: Please wait.
[   43.046501][ T6738] XFS (loop0): Quotacheck: Done.
[   43.062951][ T6738] Zero length message leads to an empty skb
[   44.408960][ T6443] Bluetooth: hci1: command tx timeout
[   44.408985][ T6442] Bluetooth: hci0: command tx timeout
[   44.489015][ T6442] Bluetooth: hci2: command tx timeout
[   44.489030][ T6443] Bluetooth: hci3: command tx timeout
[   44.579001][ T6443] Bluetooth: hci4: command tx timeout
[   51.007751][ T6620] lo speed is unknown, defaulting to 1000
[   51.066079][ T6620] lo speed is unknown, defaulting to 1000
[   51.068362][ T6620] lo speed is unknown, defaulting to 1000
[   51.096949][ T6450] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   51.250422][ T6620] infiniband syz0: set active
[   51.251824][ T6620] infiniband syz0: added lo
[   51.255802][   T27] lo speed is unknown, defaulting to 1000
[   51.320278][ T6620] RDS/IB: syz0: added
[   51.323224][ T6620] smc: adding ib device syz0 with port count 1
[   51.325626][ T6620] smc:    ib device syz0 port 1 has pnetid 
[   51.328611][ T6755] lo speed is unknown, defaulting to 1000
[   51.342889][ T6620] lo speed is unknown, defaulting to 1000
[   51.381240][ T6765] process 'syz.1.45' launched './file0' with NULL argv: empty string added
[   51.473243][ T6769] loop2: detected capacity change from 0 to 256
[   51.490359][ T6620] lo speed is unknown, defaulting to 1000
[   51.617344][ T6620] lo speed is unknown, defaulting to 1000
[   51.633279][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'.
[   51.643406][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'.
[   51.810245][ T6770] lo speed is unknown, defaulting to 1000
[   52.329189][    C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82
[   52.544720][ T6620] lo speed is unknown, defaulting to 1000
[   52.688006][ T6620] lo speed is unknown, defaulting to 1000
[   52.796017][ T6792] lo speed is unknown, defaulting to 1000
[   52.901544][   T30] audit: type=1326 audit(52.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   52.906732][   T30] audit: type=1326 audit(52.880:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   52.929520][   T30] audit: type=1326 audit(52.880:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   52.934728][   T30] audit: type=1326 audit(52.880:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   52.948728][ T6803] loop3: detected capacity change from 0 to 512
[   52.956180][   T30] audit: type=1326 audit(52.880:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   52.962632][ T6803] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   52.965818][   T30] audit: type=1326 audit(52.880:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   52.974917][ T6803] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e02c, mo2=0102]
[   52.977047][ T6803] System zones: 1-12
[   52.978223][ T6803] EXT4-fs (loop3): orphan cleanup on readonly fs
[   52.980660][   T30] audit: type=1326 audit(52.880:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   52.985483][   T30] audit: type=1326 audit(52.880:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   52.991406][   T30] audit: type=1326 audit(52.890:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   52.996353][   T30] audit: type=1326 audit(52.890:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6796 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   53.028118][ T6803] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.59: invalid indirect mapped block 12 (level 1)
[   53.068047][ T6803] EXT4-fs (loop3): Remounting filesystem read-only
[   53.085589][ T6803] EXT4-fs (loop3): 1 truncate cleaned up
[   53.088447][ T6803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   53.114697][ T6803] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.59: error -117 reading directory block
[   53.149914][ T6447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   53.284481][ T6817] tmpfs: Unknown parameter 'nolazytimeun'
[   53.412261][ T6799] loop2: detected capacity change from 0 to 32768
[   53.446455][ T6799] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   53.475949][ T6833] syz0: rxe_newlink: already configured on lo
[   53.597151][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.73'.
[   53.661796][ T6799] XFS (loop2): Ending clean mount
[   53.748704][ T6799] sch_tbf: burst 3936 is lower than device lo mtu (65550) !
[   53.812170][ T6799] 
@�: renamed from bond_slave_0 (while UP)
[   53.877754][ T6452] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   54.092689][ T6864] loop4: detected capacity change from 0 to 8192
[   54.106999][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'.
[   54.274570][ T6877] loop2: detected capacity change from 0 to 1024
[   54.279178][ T6877] ext4: Unknown parameter 'noacl'
[   54.390345][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'.
[   54.467136][ T6896] loop2: detected capacity change from 0 to 764
[   54.496066][ T6897] lo speed is unknown, defaulting to 1000
[   54.552569][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.99'.
[   54.574481][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.98'.
[   54.576853][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'.
[   54.595664][ T6903] geneve2: entered allmulticast mode
[   54.614288][ T6906] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.646250][ T6908] rdma_rxe: rxe_newlink: failed to add lo
[   54.673309][ T6906] lo speed is unknown, defaulting to 1000
[   54.674864][ T6912] loop4: detected capacity change from 0 to 512
[   54.704070][ T6912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.965490][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'.
[   54.985963][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.152913][ T6935] loop4: detected capacity change from 0 to 128
[   55.193781][ T6943] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 262145, id = 0
[   55.215820][ T6933] lo speed is unknown, defaulting to 1000
[   55.511251][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'.
[   56.341284][ T7032] loop3: detected capacity change from 0 to 1024
[   56.366331][ T7032] ext4: Unknown parameter 'noacl'
[   56.778045][ T7080] loop2: detected capacity change from 0 to 1024
[   56.789549][ T7080] EXT4-fs: Ignoring removed bh option
[   56.823259][ T7080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   56.966344][ T6452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   57.055756][ T7100] __nla_validate_parse: 2 callbacks suppressed
[   57.055771][ T7100] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.159'.
[   57.187612][ T7101] loop2: detected capacity change from 0 to 1024
[   57.197167][ T7101] ext4: Unknown parameter 'noacl'
[   57.765326][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.768041][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.843153][ T7143] loop3: detected capacity change from 0 to 256
[   57.844992][ T7143] vfat: Unknown parameter '127.0.0.1'
[   57.887590][ T7143] bridge_slave_1: left allmulticast mode
[   57.895719][ T7143] bridge_slave_1: left promiscuous mode
[   57.901271][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.467940][ T7143] bridge_slave_0: left allmulticast mode
[   58.469645][ T7143] bridge_slave_0: left promiscuous mode
[   58.471303][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.292397][ T7195] syzkaller1: entered promiscuous mode
[   59.300137][ T7195] syzkaller1: entered allmulticast mode
[   59.414718][   T30] kauditd_printk_skb: 21 callbacks suppressed
[   59.414733][   T30] audit: type=1326 audit(59.400:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   59.432753][   T30] audit: type=1326 audit(59.400:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   59.452887][   T30] audit: type=1326 audit(59.400:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8295ace8 code=0x7ffc0000
[   59.606435][ T7211] syzkaller1: entered promiscuous mode
[   59.612867][ T7211] syzkaller1: entered allmulticast mode
[   59.614737][ T7209] loop3: detected capacity change from 0 to 1024
[   59.625155][ T7209] ext4: Unknown parameter 'noacl'
[   59.662049][   T30] audit: type=1326 audit(59.640:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d95ace8 code=0x7ffc0000
[   59.667434][   T30] audit: type=1326 audit(59.640:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d95ace8 code=0x7ffc0000
[   59.709221][   T30] audit: type=1326 audit(59.640:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8d95ace8 code=0x7ffc0000
[   59.714751][   T30] audit: type=1326 audit(59.640:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7204 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d95ace8 code=0x7ffc0000
[   59.973391][ T7228] loop2: detected capacity change from 0 to 1024
[   59.975603][ T7228] ext4: Unknown parameter 'noacl'
[   60.000928][   T30] audit: type=1326 audit(59.990:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7226 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   60.040904][   T30] audit: type=1326 audit(59.990:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7226 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   60.058294][   T30] audit: type=1326 audit(59.990:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7226 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   60.195812][ T7247] loop2: detected capacity change from 0 to 1024
[   60.208509][ T7251] loop3: detected capacity change from 0 to 1024
[   60.219279][ T7251] EXT4-fs: Ignoring removed bh option
[   60.221202][ T7251] EXT4-fs: Ignoring removed nomblk_io_submit option
[   60.240195][ T7247] ext4: Unknown parameter 'noacl'
[   60.290538][ T7260] capability: warning: `syz.0.220' uses deprecated v2 capabilities in a way that may be insecure
[   60.294057][ T7251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.332904][ T6447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.538624][ T7278] loop3: detected capacity change from 0 to 2048
[   60.587637][ T7278] Alternate GPT is invalid, using primary GPT.
[   60.595300][ T7278]  loop3: p1 p2 p3
[   60.650380][ T6058] Alternate GPT is invalid, using primary GPT.
[   60.652273][ T6058]  loop3: p1 p2 p3
[   60.685189][ T6837] udevd[6837]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   60.719230][ T6751] udevd[6751]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   60.726156][ T6756] udevd[6756]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   60.768128][ T6751] udevd[6751]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   60.770850][ T7288] Process accounting resumed
[   60.773136][ T6837] udevd[6837]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   60.783128][ T6756] udevd[6756]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   60.864930][ T7290] loop0: detected capacity change from 0 to 1024
[   60.873883][ T7290] ext4: Unknown parameter 'noacl'
[   60.974509][ T7299] syzkaller1: entered promiscuous mode
[   60.976190][ T7299] syzkaller1: entered allmulticast mode
[   61.245950][ T7317] netlink: 9 bytes leftover after parsing attributes in process `syz.4.241'.
[   61.253911][ T7317] gretap0: entered promiscuous mode
[   61.269312][ T7317] netlink: 5 bytes leftover after parsing attributes in process `syz.4.241'.
[   61.272149][ T7317] 0�X��D: renamed from gretap0
[   61.279410][ T7317] 0�X��D: left promiscuous mode
[   61.280695][ T7317] 0�X��D: entered allmulticast mode
[   61.292946][ T7317] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[   61.473800][ T7334] tmpfs: Bad value for 'nr_inodes'
[   61.574049][ T7341] loop3: detected capacity change from 0 to 128
[   61.582214][ T7341] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   61.591508][ T7341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   62.029728][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'.
[   62.540086][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'.
[   62.545003][ T7366] bridge_slave_1: left allmulticast mode
[   62.551245][ T7366] bridge_slave_1: left promiscuous mode
[   62.571988][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.596865][ T7366] bridge_slave_0: left allmulticast mode
[   62.608258][ T7366] bridge_slave_0: left promiscuous mode
[   62.613123][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.664579][ T7374] fuse: Bad value for 'group_id'
[   62.665952][ T7374] fuse: Bad value for 'group_id'
[   62.945211][ T7389] loop4: detected capacity change from 0 to 512
[   62.981115][ T7393] syzkaller1: entered promiscuous mode
[   62.982685][ T7393] syzkaller1: entered allmulticast mode
[   62.992316][ T7389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.047434][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.224058][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.282'.
[   63.234789][ T7414] loop4: detected capacity change from 0 to 2048
[   63.247591][ T7414] EXT4-fs: Ignoring removed nobh option
[   63.254980][ T7414] EXT4-fs: Ignoring removed mblk_io_submit option
[   63.284273][ T7414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.288376][ T7417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.285'.
[   63.363758][ T1778] IPVS: starting estimator thread 0...
[   63.384460][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.449236][ T7427] IPVS: using max 34 ests per chain, 81600 per kthread
[   63.633891][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'.
[   63.637591][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'.
[   63.639884][ T7447] loop4: detected capacity change from 0 to 1024
[   63.712355][ T7455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.299'.
[   63.715084][ T7447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.753718][ T7459] input: syz0 as /devices/virtual/input/input4
[   63.842725][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.934508][ T7466] syz_tun: entered allmulticast mode
[   63.981056][ T7468] loop4: detected capacity change from 0 to 128
[   64.094589][ T7466] lo speed is unknown, defaulting to 1000
[   64.106399][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[   64.119277][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'.
[   64.436970][ T7465] syz_tun: left allmulticast mode
[   64.443635][ T7494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'.
[   64.493235][ T2365] ieee802154 phy0 wpan0: encryption failed: -22
[   64.495409][ T2365] ieee802154 phy1 wpan1: encryption failed: -22
[   64.597786][   T30] kauditd_printk_skb: 60 callbacks suppressed
[   64.597802][   T30] audit: type=1326 audit(64.580:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7505 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.641801][   T30] audit: type=1326 audit(64.580:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7505 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.652637][   T30] audit: type=1326 audit(64.580:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7505 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.664913][   T30] audit: type=1326 audit(64.580:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7505 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.675062][   T30] audit: type=1326 audit(64.580:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7505 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.708568][   T30] audit: type=1326 audit(64.690:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.757102][   T30] audit: type=1326 audit(64.690:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.767174][   T30] audit: type=1326 audit(64.690:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.777290][   T30] audit: type=1326 audit(64.730:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.795201][   T30] audit: type=1326 audit(64.740:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   64.911287][ T7520] overlayfs: failed to clone upperpath
[   65.022549][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'.
[   65.398085][ T7531] loop3: detected capacity change from 0 to 512
[   65.428135][ T7531] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   65.484720][ T7531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.815622][ T6447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.125083][ T7574] lo speed is unknown, defaulting to 1000
[   66.537739][ T7593] 0�X���: renamed from caif0
[   66.598988][ T7593] 0�X���: entered allmulticast mode
[   66.600452][ T7593] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[   67.015050][ T7611] syzkaller1: entered promiscuous mode
[   67.019507][ T7611] syzkaller1: entered allmulticast mode
[   67.424240][ T7631] xt_bpf: check failed: parse error
[   67.805513][ T7641] loop3: detected capacity change from 0 to 512
[   67.850731][ T7641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.872597][ T7641] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   67.879330][ T7641] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   67.889088][ T7641] EXT4-fs (loop3): This should not happen!! Data will be lost
[   67.889088][ T7641] 
[   67.891612][ T7641] EXT4-fs (loop3): Total free blocks count 0
[   67.893092][ T7641] EXT4-fs (loop3): Free/Dirty block details
[   67.894610][ T7641] EXT4-fs (loop3): free_blocks=65280
[   67.895935][ T7641] EXT4-fs (loop3): dirty_blocks=1
[   67.897271][ T7641] EXT4-fs (loop3): Block reservation details
[   67.898757][ T7641] EXT4-fs (loop3): i_reserved_data_blocks=1
[   67.960160][ T6447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.237438][ T7651] xt_hashlimit: size too large, truncated to 1048576
[   68.277407][ T7654] __nla_validate_parse: 5 callbacks suppressed
[   68.277422][ T7654] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.380'.
[   68.359512][ T7659] 9pnet: p9_errstr2errno: server reported unknown error 
[   69.544683][ T7696] loop3: detected capacity change from 0 to 32768
[   69.576624][ T7696] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   69.604038][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'.
[   69.631126][ T2279] cfg80211: failed to load regulatory.db
[   69.743011][ T7696] XFS (loop3): Ending clean mount
[   69.818946][   T30] kauditd_printk_skb: 24 callbacks suppressed
[   69.818962][   T30] audit: type=1326 audit(69.800:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7717 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf5ace8 code=0x7ffc0000
[   69.835433][   T30] audit: type=1326 audit(69.800:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7717 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf5ace8 code=0x7ffc0000
[   69.869001][   T30] audit: type=1326 audit(69.800:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7717 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9cf5ace8 code=0x7ffc0000
[   69.874385][   T30] audit: type=1326 audit(69.800:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7717 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf5ace8 code=0x7ffc0000
[   69.902199][   T30] audit: type=1326 audit(69.800:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7717 comm=A0 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cf5ace8 code=0x7ffc0000
[   69.910310][ T6447] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   69.958145][ T7699] loop4: detected capacity change from 0 to 32768
[   70.016330][ T7699] xfs: Unknown parameter 'biosize'
[   70.147813][   T30] audit: type=1326 audit(70.130:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7724 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d95ace8 code=0x7ffc0000
[   70.174717][   T30] audit: type=1326 audit(70.130:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7724 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d95ace8 code=0x7ffc0000
[   70.180575][ T7727] netlink: 277 bytes leftover after parsing attributes in process `syz.0.406'.
[   70.198952][   T30] audit: type=1326 audit(70.130:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7724 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8d95ace8 code=0x7ffc0000
[   70.204230][   T30] audit: type=1326 audit(70.130:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7724 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d95ace8 code=0x7ffc0000
[   70.236211][   T30] audit: type=1326 audit(70.130:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7724 comm="syz.3.404" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d95ace8 code=0x7ffc0000
[   71.558002][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'.
[   72.540896][ T7768] SET target dimension over the limit!
[   73.096900][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.426'.
[   73.374719][ T7784] netlink: 14 bytes leftover after parsing attributes in process `syz.0.430'.
[   73.731687][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.438'.
[   73.818356][ T7805] lo speed is unknown, defaulting to 1000
[   73.902642][ T7814] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 262145, id = 0
[   74.060588][ T7798] loop4: detected capacity change from 0 to 32768
[   74.116600][ T7798] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   74.209720][ T7798] XFS (loop4): Starting recovery (logdev: internal)
[   74.234971][ T7798] XFS (loop4): Ending recovery (logdev: internal)
[   74.267745][ T7836] netlink: 14 bytes leftover after parsing attributes in process `syz.2.448'.
[   74.551914][ T7844] fuse: Bad value for 'fd'
[   74.565090][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'.
[   74.643945][ T6440] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   74.883975][ T7865] tmpfs: Unknown parameter 'nolazyt+>eR�0-~��^��~��1"���V�I��Y�'
[   74.895540][ T7863] lo speed is unknown, defaulting to 1000
[   75.214454][ T7860] loop4: detected capacity change from 0 to 32768
[   75.237964][ T7860] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.368269][ T7860] XFS (loop4): Ending clean mount
[   75.395306][ T7897] dvmrp0: entered allmulticast mode
[   75.432180][ T7860] sch_tbf: burst 3936 is lower than device lo mtu (65550) !
[   75.516437][ T7860] 
@�: renamed from bond_slave_0 (while UP)
[   75.599822][ T6440] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.806453][ T7919] loop3: detected capacity change from 0 to 2048
[   75.808720][ T7919] udf: Bad value for 'mode'
[   75.914935][ T7931] xt_hashlimit: max too large, truncated to 1048576
[   75.917460][ T7931] xt_limit: Overflow, try lower: 0/0
[   75.977313][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'.
[   76.037526][ T7938] lo speed is unknown, defaulting to 1000
[   76.088437][ T7944] loop4: detected capacity change from 0 to 512
[   76.091623][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'.
[   76.139849][ T7944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.225503][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.355790][ T7965] netlink: 14 bytes leftover after parsing attributes in process `syz.4.491'.
[   76.526340][ T7977] lo speed is unknown, defaulting to 1000
[   77.096301][ T8023] loop4: detected capacity change from 0 to 2048
[   77.133646][ T8023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.440820][ T8041] lo speed is unknown, defaulting to 1000
[   77.680535][ T8057] geneve0: entered allmulticast mode
[   77.770741][ T8069] netlink: 14 bytes leftover after parsing attributes in process `syz.3.529'.
[   77.918195][ T8089] loop4: detected capacity change from 0 to 2048
[   77.960529][ T8089] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.026551][ T8089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.222261][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.486836][ T8132] rdma_rxe: rxe_newlink: failed to add lo
[   78.675663][ T8148] loop4: detected capacity change from 0 to 512
[   78.677848][ T8148] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.682461][ T8148] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   78.720229][ T8148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002]
[   78.722212][ T8148] System zones: 1-12
[   78.727043][ T8148] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.553: corrupted in-inode xattr: e_value size too large
[   78.732447][ T8148] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.553: couldn't read orphan inode 15 (err -117)
[   78.736731][ T8148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.813133][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.904156][ T8200] loop4: detected capacity change from 0 to 512
[   80.008651][ T8211] tmpfs: Unknown parameter 'nolazytime��'
[   80.046458][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.575'.
[   80.064337][ T8212] netlink: 'syz.4.575': attribute type 4 has an invalid length.
[   80.087769][ T8210] syzkaller1: entered promiscuous mode
[   80.096038][ T8210] syzkaller1: entered allmulticast mode
[   80.196416][ T8220] loop4: detected capacity change from 0 to 512
[   80.226707][ T8220] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.578: invalid indirect mapped block 4294967295 (level 1)
[   80.234633][ T8220] EXT4-fs (loop4): Remounting filesystem read-only
[   80.236623][ T8220] EXT4-fs (loop4): 2 truncates cleaned up
[   80.238478][ T8220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.287538][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.330013][ T8227] rdma_rxe: rxe_newlink: failed to add lo
[   80.515616][ T8242] fuse: Bad value for 'fd'
[   81.079353][ T8271] overlayfs: failed to clone upperpath
[   81.091638][ T8271] overlayfs: failed to clone upperpath
[   81.319610][   T30] kauditd_printk_skb: 10 callbacks suppressed
[   81.319625][   T30] audit: type=1326 audit(81.310:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8815ace8 code=0x7fc00000
[   81.337142][ T8283] overlayfs: failed to clone upperpath
[   81.412582][ T8285] loop3: detected capacity change from 0 to 512
[   81.463917][ T8285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.464058][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'.
[   81.596828][ T8293] fuse: Bad value for 'fd'
[   81.602475][ T6447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.813679][ T8299] netlink: 184 bytes leftover after parsing attributes in process `syz.1.608'.
[   81.969530][ T8303] netlink: 14 bytes leftover after parsing attributes in process `syz.3.610'.
[   82.239667][ T8287] loop4: detected capacity change from 0 to 65536
[   82.267175][ T8320] netlink: 'syz.1.616': attribute type 72 has an invalid length.
[   82.274998][ T8287] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   82.330032][ T8287] XFS (loop4): totally zeroed log
[   82.343720][ T8287] XFS (loop4): Internal error hlen <= 0 || hlen > bufsize at line 2972 of file fs/xfs/xfs_log_recover.c.  Caller xlog_valid_rec_header+0x228/0x344
[   82.347623][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.4.604 Not tainted 6.14.0-rc3-syzkaller-ga1c24ab82279 #0
[   82.347639][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   82.347647][ T8287] Call trace:
[   82.347650][ T8287]  show_stack+0x2c/0x3c (C)
[   82.347680][ T8287]  dump_stack_lvl+0xe4/0x150
[   82.347697][ T8287]  dump_stack+0x1c/0x28
[   82.347711][ T8287]  xfs_corruption_error+0x13c/0x198
[   82.347728][ T8287]  xlog_valid_rec_header+0x2c0/0x344
[   82.347741][ T8287]  xlog_do_recovery_pass+0x2c0/0xbe0
[   82.347754][ T8287]  xlog_verify_head+0x1d0/0x4cc
[   82.347767][ T8287]  xlog_find_tail+0x77c/0xa90
[   82.347778][ T8287]  xlog_recover+0xd4/0x4b4
[   82.347790][ T8287]  xfs_log_mount+0x208/0x39c
[   82.347801][ T8287]  xfs_mountfs+0xc18/0x1cd0
[   82.347814][ T8287]  xfs_fs_fill_super+0xee4/0x1198
[   82.347828][ T8287]  get_tree_bdev_flags+0x38c/0x494
[   82.347843][ T8287]  get_tree_bdev+0x2c/0x3c
[   82.347857][ T8287]  xfs_fs_get_tree+0x28/0x38
[   82.347871][ T8287]  vfs_get_tree+0x90/0x28c
[   82.347885][ T8287]  do_new_mount+0x278/0x900
[   82.347899][ T8287]  path_mount+0x590/0xe04
[   82.347913][ T8287]  __arm64_sys_mount+0x4f4/0x5d0
[   82.347927][ T8287]  invoke_syscall+0x98/0x2b8
[   82.347941][ T8287]  el0_svc_common+0x130/0x23c
[   82.347954][ T8287]  do_el0_svc+0x48/0x58
[   82.347967][ T8287]  el0_svc+0x54/0x168
[   82.347979][ T8287]  el0t_64_sync_handler+0x84/0x108
[   82.347989][ T8287]  el0t_64_sync+0x198/0x19c
[   82.348004][ T8287] XFS (loop4): Corruption detected. Unmount and run xfs_repair
[   82.399500][ T8287] XFS (loop4): Torn write (CRC failure) detected at log block 0x928. Truncating head block from 0x0.
[   82.420699][ T8287] XFS (loop4): failed to locate log tail
[   82.422269][ T8287] XFS (loop4): log mount/recovery failed: error -74
[   82.425441][ T8329] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   82.434633][ T8287] XFS (loop4): log mount failed
[   82.560516][ T8329] lo speed is unknown, defaulting to 1000
[   84.317632][ T8363] rdma_rxe: rxe_newlink: failed to add lo
[   84.506954][ T8343] sch_tbf: burst 3936 is lower than device lo mtu (65550) !
[   85.609745][ T8409] netlink: 14 bytes leftover after parsing attributes in process `syz.4.642'.
[   86.646297][ T8449] netlink: 14 bytes leftover after parsing attributes in process `syz.2.656'.
[   86.995976][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'.
[   87.337874][ T8424] sch_tbf: burst 3936 is lower than device lo mtu (65550) !
[   87.387724][   T30] audit: type=1107 audit(87.370:166): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='�'
[   87.509933][ T8477] fuse: Bad value for 'fd'
[   87.552913][ T8476] lo speed is unknown, defaulting to 1000
[   87.888344][ T8463] loop4: detected capacity change from 0 to 32768
[   87.946153][ T8463] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   88.134180][ T8463] XFS (loop4): Ending clean mount
[   88.296877][ T6440] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   88.349464][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'.
[   88.953922][ T8518] input: syz0 as /devices/virtual/input/input5
[   89.022739][ T8520] netlink: 9 bytes leftover after parsing attributes in process `syz.4.674'.
[   89.038241][ T8520] 0�X��D: entered promiscuous mode
[   89.042219][ T8520] 0�X��D: left allmulticast mode
[   89.076098][ T8521] netlink: 5 bytes leftover after parsing attributes in process `syz.4.674'.
[   89.098108][ T8521] 1�X��D: renamed from 
30�X��D
[   89.130365][ T8521] 1�X��D: left promiscuous mode
[   89.132971][ T8521] 1�X��D: entered allmulticast mode
[   89.135408][ T8521] A link change request failed with some changes committed already. Interface 
31�X��D may have been left with an inconsistent configuration, please check.
[   89.861313][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'.
[   90.815054][ T8574] loop4: detected capacity change from 0 to 128
[   90.826991][ T8574] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   90.867695][ T8574] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   90.937425][ T8572] lo speed is unknown, defaulting to 1000
[   91.106043][ T8580] fuse: Bad value for 'fd'
[   91.168978][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'.
[   91.389603][ T8593] xt_hashlimit: size too large, truncated to 1048576
[   91.754449][ T8607] loop4: detected capacity change from 0 to 128
[   91.780186][ T8604] lo speed is unknown, defaulting to 1000
[   91.826245][ T8607] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   91.901332][ T8607] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.054753][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.708'.
[   92.366426][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'.
[   92.441181][   T25] IPVS: starting estimator thread 0...
[   92.588972][ T8627] IPVS: using max 33 ests per chain, 79200 per kthread
[   92.838772][ T8634] lo speed is unknown, defaulting to 1000
[   92.839486][ T8603] sch_tbf: burst 3936 is lower than device lo mtu (65550) !
[   92.889280][ T8631] syz.0.715 uses obsolete (PF_INET,SOCK_PACKET)
[   93.347663][ T8649] netlink: 9 bytes leftover after parsing attributes in process `syz.2.722'.
[   93.376422][ T8649] gretap0: entered promiscuous mode
[   93.401460][ T8647] lo speed is unknown, defaulting to 1000
[   93.403913][ T8650] netlink: 5 bytes leftover after parsing attributes in process `syz.2.722'.
[   93.406159][ T8650] 0�X��D: renamed from gretap0
[   93.430522][ T8650] 0�X��D: left promiscuous mode
[   93.431866][ T8650] 0�X��D: entered allmulticast mode
[   93.451466][ T8650] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[   93.515852][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'.
[   93.776948][ T8660] lo speed is unknown, defaulting to 1000
[   93.800816][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'.
[   93.856348][ T8661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.726'.
[   93.887971][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'.
[   93.950807][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'.
[   94.030400][ T8671] loop3: detected capacity change from 0 to 512
[   94.034475][ T8671] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[   94.485701][ T8679] netlink: 'syz.1.732': attribute type 16 has an invalid length.
[   94.487777][ T8679] netlink: 'syz.1.732': attribute type 17 has an invalid length.
[   94.590426][ T8679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.455310][ T8666] sch_tbf: burst 3936 is lower than device lo mtu (65550) !
[   95.750859][ T8714] lo speed is unknown, defaulting to 1000
[   95.787050][   T30] audit: type=1326 audit(95.770:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8713 comm="syz.2.742" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x0
[   96.042018][ T8727] tmpfs: Unknown parameter '�N�2l�-����FּB�ɽ��'
[   96.262786][ T8735] __nla_validate_parse: 1 callbacks suppressed
[   96.262803][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'.
[   96.300929][ T8741] fuse: Bad value for 'fd'
[   96.317669][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'.
[   96.697152][ T8758] loop3: detected capacity change from 0 to 512
[   96.720454][ T8758] ext4: Bad value for 'stripe'
[   97.272607][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'.
[   97.293127][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'.
[   98.023742][ T8831] No control pipe specified
[   98.232766][ T8840] loop4: detected capacity change from 0 to 736
[   98.234883][ T8840] iso9660: Bad value for 'mode'
[   98.350449][ T8747] sch_tbf: burst 3936 is lower than device lo mtu (65550) !
[   98.574306][ T8848] bridge: RTM_NEWNEIGH with invalid state 0x0
[   98.591650][ T8847] lo speed is unknown, defaulting to 1000
[   98.787421][ T8857] evm: overlay not supported
[   98.815551][   T30] audit: type=1326 audit(98.800:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   98.836396][   T30] audit: type=1326 audit(98.800:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   98.892999][   T30] audit: type=1326 audit(98.810:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   98.934045][   T30] audit: type=1326 audit(98.810:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   98.973996][   T30] audit: type=1326 audit(98.810:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   99.009549][   T30] audit: type=1326 audit(98.810:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   99.014746][   T30] audit: type=1326 audit(98.810:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   99.070066][   T30] audit: type=1326 audit(98.810:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   99.105981][   T30] audit: type=1326 audit(98.810:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8858 comm="syz.2.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff85f5ace8 code=0x7ffc0000
[   99.357344][ T8871] 9pnet_fd: Insufficient options for proto=fd
[  100.277002][ T8892] fuse: Bad value for 'fd'
[  100.289688][ T8890] overlayfs: failed to resolve './file0/../file0': -2
[  100.320422][ T8894] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  100.322754][ T8894] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  100.343113][ T8894] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  100.928153][ T8885] loop3: detected capacity change from 0 to 32768
[  101.046314][ T8885] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.125434][ T8885] XFS (loop3): Ending clean mount
[  101.376433][ T6447] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.447305][ T8925] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.449964][ T8925] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.452311][ T8925] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.454521][ T8925] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.538768][ T8926] capability: warning: `syz.0.800' uses 32-bit capabilities (legacy support in use)
[  102.501446][ T8942] loop4: detected capacity change from 0 to 1024
[  102.578367][ T8942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.684705][ T8942] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  102.810327][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.895098][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'.
[  102.897551][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'.
[  103.302249][ T8962] pim6reg1: entered promiscuous mode
[  103.303776][ T8962] pim6reg1: entered allmulticast mode
[  103.445524][ T8963] Process accounting resumed
[  104.442037][ T8983] loop4: detected capacity change from 0 to 512
[  104.525184][ T8983] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.819: invalid indirect mapped block 11 (level 0)
[  104.554935][ T8983] EXT4-fs (loop4): Remounting filesystem read-only
[  104.566356][ T8983] EXT4-fs (loop4): 1 truncate cleaned up
[  104.568241][ T8983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.804812][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.223853][ T8999] loop4: detected capacity change from 0 to 128
[  105.264644][ T8999] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  105.295331][ T8999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.586779][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'.
[  106.317301][ T9020] bridge_slave_0: default FDB implementation only supports local addresses
[  106.408622][ T9003] loop4: detected capacity change from 0 to 32768
[  106.470061][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'.
[  106.473389][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'.
[  106.504480][ T9029] xt_bpf: check failed: parse error
[  106.614323][ T9003] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.803271][ T9003] XFS (loop4): Ending clean mount
[  106.884064][ T6440] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.992941][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.836'.
[  106.996429][ T9043] loop3: detected capacity change from 0 to 512
[  107.006670][ T9043] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  107.051338][ T9043] block device autoloading is deprecated and will be removed.
[  107.056314][ T9043] syz.3.843: attempt to access beyond end of device
[  107.056314][ T9043] md0: rw=0, sector=2, nr_sectors = 2 limit=0
[  107.068234][ T9043] EXT4-fs (loop3): couldn't read superblock of external journal
[  107.551453][ T9056] lo speed is unknown, defaulting to 1000
[  107.605720][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'.
[  107.608361][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'.
[  107.621978][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'.
[  107.671178][ T9061] fuse: Bad value for 'fd'
[  107.724793][ T9058] netlink: 32 bytes leftover after parsing attributes in process `syz.2.848'.
[  108.662328][ T9093] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0
[  108.813461][ T9095] __nla_validate_parse: 2 callbacks suppressed
[  108.813479][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  108.818090][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  109.168349][ T9109] loop4: detected capacity change from 0 to 164
[  109.214748][ T9109] rock: directory entry would overflow storage
[  109.216533][ T9109] rock: sig=0x4f50, size=4, remaining=3
[  109.218003][ T9109] iso9660: Corrupted directory entry in block 4 of inode 1792
[  110.064263][ T9134] loop3: detected capacity change from 0 to 128
[  110.199482][ T9134] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.228419][ T9132] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10)
[  110.245392][ T9130] loop4: detected capacity change from 0 to 4096
[  110.266126][ T9130] EXT4-fs: Ignoring removed nomblk_io_submit option
[  110.709256][ T9142] overlayfs: failed to clone upperpath
[  110.797211][ T9130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.823926][ T6447] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.384600][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.787717][ T9201] bond_slave_1: entered promiscuous mode
[  117.980154][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'.
[  118.309730][ T9201] bond0: (slave bond_slave_1): Releasing backup interface
[  118.370758][ T9201] bond_slave_1 (unregistering): left promiscuous mode
[  118.481715][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'.
[  118.996296][ T9179] loop4: detected capacity change from 0 to 32768
[  119.177694][ T9179] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop4": -EINTR
[  119.565269][ T9224] loop3: detected capacity change from 0 to 1024
[  120.131198][ T9235] loop3: detected capacity change from 0 to 1024
[  122.270640][ T6709] hfsplus: b-tree write err: -5, ino 4
[  122.276952][ T9238] overlayfs: empty lowerdir
[  122.494295][ T9248] xt_socket: unknown flags 0x4
[  125.668598][ T9275] libceph: resolve '.
[  125.668598][ T9275] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  125.668598][ T9275] ' (ret=-3): failed
[  126.239581][ T2365] ieee802154 phy0 wpan0: encryption failed: -22
[  126.241395][ T2365] ieee802154 phy1 wpan1: encryption failed: -22
[  130.138166][ T9321] libceph: resolve '.
[  130.138166][ T9321] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  130.138166][ T9321] ' (ret=-3): failed
[  130.172645][ T9319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.927'.
[  131.453942][ T9336] libceph: resolve '.
[  131.453942][ T9336] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  131.453942][ T9336] ' (ret=-3): failed
[  134.368820][    C1] sched: DL replenish lagged too much
[  136.764891][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.4.940'.
[  137.537125][ T9382] qrtr: Invalid version 0
[  141.980226][ T9407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.952'.
[  142.186943][ T9410] loop4: detected capacity change from 0 to 512
[  142.347679][ T9410] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  142.380269][ T9410] syz.4.954: attempt to access beyond end of device
[  142.380269][ T9410] md0: rw=0, sector=2, nr_sectors = 2 limit=0
[  142.477981][ T9410] EXT4-fs (loop4): couldn't read superblock of external journal
[  145.157382][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.967'.
[  147.244195][ T9480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.978'.
[  147.282251][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'.
[  148.509478][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'.
[  148.516512][ T9504] warning: `syz.0.983' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  149.367540][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.0.991'.
[  150.911109][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'.
[  152.170723][ T9552] loop4: detected capacity change from 0 to 512
[  152.213746][ T9552] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  152.216174][ T9552] syz.4.1001: attempt to access beyond end of device
[  152.216174][ T9552] md0: rw=0, sector=2, nr_sectors = 2 limit=0
[  152.272838][ T9552] EXT4-fs (loop4): couldn't read superblock of external journal
[  152.936769][ T9561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1003'.
[  154.216117][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'.
[  157.910247][ T9591] netlink: 'syz.0.1013': attribute type 1 has an invalid length.
[  158.070123][ T9596] veth9: entered promiscuous mode
[  158.086322][ T9596] bond1: (slave veth9): Enslaving as a backup interface with a down link
[  158.871449][ T9611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1019'.
[  158.971886][ T9582] Bluetooth: hci3: command 0x0406 tx timeout
[  158.973550][ T9582] Bluetooth: hci1: command 0x0406 tx timeout
[  158.975935][ T9582] Bluetooth: hci2: command 0x0406 tx timeout
[  158.977564][ T9582] Bluetooth: hci0: command 0x0406 tx timeout
[  158.979216][ T9582] Bluetooth: hci4: command 0x0406 tx timeout
[  158.999554][ T9613] netlink: 'syz.3.1020': attribute type 1 has an invalid length.
[  159.149948][ T9617] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.669261][ T9620] veth3: entered promiscuous mode
[  159.800763][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'.
[  162.181684][ T9653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1031'.
[  165.919297][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.658949][ T9680] libceph: resolve '.
[  167.658949][ T9680] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  167.658949][ T9680] ' (ret=-3): failed
[  168.898085][ T9707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1044'.
[  169.260292][ T9721] netlink: 'syz.2.1049': attribute type 1 has an invalid length.
[  169.447518][ T9725] libceph: resolve '.
[  169.447518][ T9725] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  169.447518][ T9725] ' (ret=-3): failed
[  169.722370][ T9721] veth9: entered promiscuous mode
[  169.725517][ T9721] bond1: (slave veth9): Enslaving as a backup interface with a down link
[  170.845621][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1058'.
[  171.986450][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'.
[  172.893542][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1069'.
[  173.332245][ T9791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.351429][ T9791] loop3: detected capacity change from 0 to 128
[  175.816754][ T9821] libceph: resolve '.
[  175.816754][ T9821] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  175.816754][ T9821] ' (ret=-3): failed
[  176.276627][ T9829] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  176.298755][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.321187][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.919295][ T9832] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  179.109673][ T9847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.690367][ T9861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.072875][ T9882] lo speed is unknown, defaulting to 1000
[  185.505455][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'.
[  187.379455][ T2365] ieee802154 phy0 wpan0: encryption failed: -22
[  187.381193][ T2365] ieee802154 phy1 wpan1: encryption failed: -22
[  187.860151][ T9907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.397916][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'.
[  189.851992][ T9920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.863203][ T9925] bridge: RTM_NEWNEIGH with invalid ether address
[  193.518358][ T6010] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  193.531852][ T6010] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  193.534843][ T6010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  193.538494][ T6010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  193.541813][ T6010] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  193.543885][ T6010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  195.489555][ T9963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.649427][ T6010] Bluetooth: hci5: command tx timeout
[  197.470686][ T9950] lo speed is unknown, defaulting to 1000
[  197.724597][ T6010] Bluetooth: hci5: command tx timeout
[  197.780709][ T9950] chnl_net:caif_netlink_parms(): no params data found
[  199.179631][ T9950] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.194055][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.207469][ T9950] bridge_slave_0: entered allmulticast mode
[  199.228382][ T9950] bridge_slave_0: entered promiscuous mode
[  199.278984][ T9950] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.286481][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.308516][ T9950] bridge_slave_1: entered allmulticast mode
[  199.322648][ T9950] bridge_slave_1: entered promiscuous mode
[  199.768943][ T6010] Bluetooth: hci5: command tx timeout
[  199.837241][T10007] 9pnet_fd: Insufficient options for proto=fd
[  199.955167][   T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.006726][ T9950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.019694][ T9950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.091175][ T9950] team0: Port device team_slave_0 added
[  200.504361][   T44] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.516075][ T9950] team0: Port device team_slave_1 added
[  200.532650][T10016] veth11: entered promiscuous mode
[  200.720124][   T44] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.006365][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.014688][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.025947][ T9950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.523339][   T44] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.561210][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.625321][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.657525][ T9950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.735820][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.738298][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.768409][ T9950] hsr_slave_0: entered promiscuous mode
[  201.774948][ T9950] hsr_slave_1: entered promiscuous mode
[  201.782818][ T9950] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.788974][ T9950] Cannot create hsr debugfs directory
[  201.849037][ T6010] Bluetooth: hci5: command tx timeout
[  204.322979][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'.
[  204.339390][   T44] dvmrp0 (unregistering): left allmulticast mode
[  205.442970][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.487052][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.530523][   T44] bond0 (unregistering): Released all slaves
[  208.901945][   T44] bond1 (unregistering): Released all slaves
[  208.978639][T10085] tipc: Started in network mode
[  208.988123][T10085] tipc: Node identity ac1414aa, cluster identity 4711
[  208.995445][T10085] tipc: Enabled bearer <udp:syz2>, priority 10
[  209.039188][   T44] IPVS: stopping master sync thread 6943 ...
[  209.114465][ T9950] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  209.321347][ T9950] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  210.131595][ T6747] tipc: Node number set to 2886997162
[  222.786804][ T9950] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  230.208926][ T9950] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  241.649162][T10155] xt_hashlimit: size too large, truncated to 1048576
[  249.149160][ T2365] ieee802154 phy0 wpan0: encryption failed: -22
[  249.337547][ T2365] ieee802154 phy1 wpan1: encryption failed: -22
[  266.719611][ T6443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  268.769149][ T6010] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  274.016346][ T6493] page_pool_release_retry() stalled pool shutdown: id 31, 1000 inflight 60 sec
[  274.716641][T10168] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  310.471260][ T2365] ieee802154 phy0 wpan0: encryption failed: -22
[  310.475381][ T2365] ieee802154 phy1 wpan1: encryption failed: -22
[  317.454149][ T6010] Bluetooth: hci5: command 0x0406 tx timeout
[  322.431181][   T44] hsr_slave_0: left promiscuous mode
[  323.433679][   T44] hsr_slave_1: left promiscuous mode
[  323.479076][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.339452][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.814235][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.028962][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.106449][   T44] veth1_macvtap: left promiscuous mode
[  332.121495][   T44] veth0_macvtap: left promiscuous mode
[  332.136552][   T44] veth1_vlan: left promiscuous mode
[  332.288982][   T44] veth0_vlan: left promiscuous mode
[  334.254748][ T6493] page_pool_release_retry() stalled pool shutdown: id 31, 993 inflight 120 sec
[  352.829183][ T6443] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  361.035033][ T6443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  366.675144][T10183] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  371.711319][ T2365] ieee802154 phy0 wpan0: encryption failed: -22
[  371.715514][ T2365] ieee802154 phy1 wpan1: encryption failed: -22
[  394.421704][ T6747] page_pool_release_retry() stalled pool shutdown: id 31, 993 inflight 180 sec
[  416.649363][ T6443] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  424.269667][ T6443] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  427.199565][T10188] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  430.250193][ T6443] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  433.151502][ T2365] ieee802154 phy0 wpan0: encryption failed: -22
[  433.155868][ T2365] ieee802154 phy1 wpan1: encryption failed: -22
[  434.166176][ T6443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  435.327841][T10193] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  454.744173][ T6747] page_pool_release_retry() stalled pool shutdown: id 31, 993 inflight 241 sec
[  463.919014][   T31] INFO: task dhcpcd:6112 blocked for more than 143 seconds.
[  463.920996][   T31]       Not tainted 6.14.0-rc3-syzkaller-ga1c24ab82279 #0
[  463.925238][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  463.927341][   T31] task:dhcpcd          state:D stack:0     pid:6112  tgid:6112  ppid:6111   task_flags:0x400140 flags:0x00000004
[  465.473632][   T31] Call trace:
[  465.474494][   T31]  __switch_to+0x414/0x788 (T)
[  465.475684][   T31]  __schedule+0x1360/0x257c
[  465.476793][   T31]  schedule+0xbc/0x238
[  465.477782][   T31]  schedule_preempt_disabled+0x18/0x2c
[  466.859084][   T31]  __mutex_lock_common+0xd30/0x24b8
[  466.860385][   T31]  mutex_lock_nested+0x2c/0x38
[  466.861618][   T31]  rtnl_dumpit+0x8c/0x1d0
[  466.862866][   T31]  netlink_dump+0x4f0/0xbc0
[  466.864063][   T31]  __netlink_dump_start+0x4d8/0x720
[  466.865446][   T31]  rtnetlink_rcv_msg+0x8fc/0xa9c
[  466.866784][   T31]  netlink_rcv_skb+0x234/0x408
[  466.867927][   T31]  rtnetlink_rcv+0x28/0x38
[  468.468940][   T31]  netlink_unicast+0x668/0x8a4
[  468.470182][   T31]  netlink_sendmsg+0x7b4/0xa9c
[  468.471434][   T31]  __sys_sendto+0x360/0x4d8
[  468.472536][   T31]  __arm64_sys_sendto+0xd8/0xf8
[  468.473780][   T31]  invoke_syscall+0x98/0x2b8
[  468.474908][   T31]  el0_svc_common+0x130/0x23c
[  468.476128][   T31]  do_el0_svc+0x48/0x58
[  468.477335][   T31]  el0_svc+0x54/0x168
[  468.478399][   T31]  el0t_64_sync_handler+0x84/0x108
[  470.398992][   T31]  el0t_64_sync+0x198/0x19c
[  470.400318][   T31] 
[  470.400318][   T31] Showing all locks held in the system:
[  470.402197][   T31] 3 locks held by kworker/u8:0/11:
[  470.403398][   T31]  #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x674/0x1638
[  470.406098][   T31]  #1: ffff800097d37ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x708/0x1638
[  470.408742][   T31]  #2: ffff800092b71168 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  471.901251][   T31] 3 locks held by kworker/u8:1/13:
[  471.902497][   T31] 3 locks held by kworker/1:0/25:
[  471.903816][   T31]  #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x674/0x1638
[  471.906352][   T31]  #1: ffff800097e27ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x708/0x1638
[  471.939041][   T31]  #2: ffff800092e4bae8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x30/0xe4
[  471.942021][   T31] 4 locks held by kworker/1:1/27:
[  471.943294][   T31]  #0: ffff0000c2ecd948 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x674/0x1638
[  472.660030][   T31]  #1: ffff800097e47ba0 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x708/0x1638
[  472.662895][   T31]  #2: ffff0000d5a75250 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x84/0x350
[  472.665451][   T31]  #3: ffff800092b71168 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  472.667587][   T31] 1 lock held by khungtaskd/31:
[  472.668775][   T31]  #0: ffff80008fda2220 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0xc/0x44
[  473.614583][T10205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  473.629073][T10205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  473.631867][   T31] 4 locks held by kworker/u8:3/44:
[  473.633165][   T31]  #0: ffff0000c1899948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x674/0x1638
[  473.635870][   T31]  #1: ffff8000993b7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x708/0x1638
[  473.638566][   T31]  #2: ffff800092b64a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x148/0xa48