last executing test programs:

18.658272362s ago: executing program 3 (id=71):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x894b, 0x0)

18.523118514s ago: executing program 3 (id=74):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
close(r1)

18.123806389s ago: executing program 3 (id=81):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001e40)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x20000000, 0x0)

17.573180868s ago: executing program 3 (id=85):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
timer_create(0x1, 0x0, &(0x7f0000000340)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f00000003c0)={{0x77359400}}, 0x0)
pipe2$9p(&(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rxrpc_connect_call\x00', r0, 0x0, 0x100000001}, 0x18)
copy_file_range(r6, 0x0, r6, 0x0, 0x863, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry")
r7 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0)
fallocate(r7, 0x0, 0x0, 0x1001f0)
fallocate(r7, 0x3, 0x2, 0x10000)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
clock_adjtime(0x3, &(0x7f0000000b00)={0xfd0, 0x0, 0x4100, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x5, 0x5})
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000000000002"], 0x2c}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

16.667435642s ago: executing program 3 (id=96):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3f5, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0)

13.225779385s ago: executing program 3 (id=120):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040000)
close(r1)

12.952783449s ago: executing program 32 (id=120):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040000)
close(r1)

9.151547268s ago: executing program 2 (id=154):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe(&(0x7f0000000200))

8.971692431s ago: executing program 2 (id=156):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

8.761149884s ago: executing program 2 (id=159):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
unshare(0x22020600)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26, 0x0, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10)

8.557459657s ago: executing program 2 (id=162):
syz_io_uring_setup(0x250b, &(0x7f0000000100)={0x0, 0x10645c, 0x800, 0x400040, 0x240}, &(0x7f0000000300), &(0x7f0000000200))
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x4)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r5, &(0x7f0000000100), 0x0, 0x2100, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000002000100000000001d4e5c8405723ca05d6ad100000000000000"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0x0, 0x3}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4800)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x4, 0x3, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

8.39254712s ago: executing program 2 (id=164):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x80}]}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1={0xfc, 0x1, '\x00', 0x1}, 0xaffe}, {0xa, 0x4e20, 0x0, @loopback, 0x7fffffff}, 0xffffffffffffffff, 0x403}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30)
syz_open_dev$mouse(&(0x7f0000000080), 0x1ff, 0x200)
gettid()

4.030221788s ago: executing program 1 (id=198):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

3.781270211s ago: executing program 4 (id=200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$eJzs3V1v3FgZB/D/mZnMTLLQjQBVq6rbnKaslIoy9Uy2qUYBCeM5MzHMjEe2A4mEtCo0WUWddKEtEp2bNje8SMsHgLu94YILPsJKXHC13wKuQFqBkBArEDLysT2v9qRD0u6W/n/V7njsx+ccH7t+6sQ+BhEREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREUFYDcOoCrTt7u6ezGY1XKeTfMljZnlU2hKuRxPX59W5FNYLiPA/lMt4I5r9xpdGIRfD/63jcvTtMsrhRxmD1y6ubn+xkEvWn9Pg/wUWLfDh48G9O/3+wYNniM1DFy+wcC2fCuSeIailurbn2B2zpaTtObK+tWXc3Gl6smm3lbfv+aojLVflfMeVG9Z1Wa3XN6Wq7Du73VbDbKtk5u2v1gxjS36rFO1oABXP2rHbbbvb0jHh4jDmtnz/e1GAMjtSHh71DzbH2vMkrXPDoGpK43PjwWFQ7bTNrRm1WrVaq1W3btVv3TaMwswMIySMIcxEnPtBSy+Z8z2BE51Bzmr82/ijANooo4td7EGm/rHQgAsHnYzlsST/v3VTza13PP8nWX5ptPgSdP6/En27EqaFQkr+z2iLhNR5JG2JyJi/2J8lnagkHuIxBriHO+ijjwM8OIeyJeTamUsoGnFPnr01mFNSCwpd2PDgwEYHJlr4PGQ8R6KOLWzBwDvYQRMeJJqw0YaCh3148KHCI6oYlq9gwocDFxIbsHAdElXUUcfrkFCoYB8OdtFFCw2Y+GcQBIc40v2+GbfnaUpbkQRVMzawhEKyjQeozemJrPz//SfR2nH+N5j/X1XRcVCKPj6aF0P0GRDE1/8LWns+rSEiIiIiIiKi50Hon74L/Vv5NwEEaNptZYwtz/S73ItpIhERERERERGdkUBQwuXwMl/fffcmxOT1PxERERERERG9/IR+xk4AWNE39YvR41LP8kOA/AtoIhERERERERGdkb6//0oRCPSgFWsQC13/ExEREREREdFL4OdjY+wX8vEY+0Hya/0cgLU/lcSHfy3BXRInvb0vi2MzXGIexzEzdwD4zUviQjxQr/4oAtDfLHVZxLVJ4B/jowt8fJg+1v/TICKEcKcaUMxnDE8w3gAR1rxViL/hfVyNVrkajzN/d5CDXhKNKLzStNuqYjnt7SpM80LOV3v+j+8f/QRwh9t5eNQ/qPzgvf5d3ZaTcNbJcVjok4nm5NI7Y9SWR3q8Bf3MRdrbDZbRTKr8RbezInS9RrL9eZjHufGKMnfAr1a3t5aBaCt/ivVon60HUezKYDjivgDW9OAP1YreZRNb7y6JUSuq01uetiMytrysW3Etirm2cS36SPokLCcnyl/JA7XK7D6YaEVtvBWn94X421T/z28FRDnsi82wFb8PC5pqxXc/jFbe7O3Fo73Ob0XwejQ5fRQQEX1aDkdZSA9iPjPGfpIekpPas+adi6soAPFZLiO7j2oJ4vyRZPdHvw6iDJUHCvHvJtJrSfIKwjP6htDlFKMB3QuXUs7oRuWTIAjMC2WMn9H/EwTJBhkLZLeTIAimz+i/Hb0DKW72TCv+FQTBdlVnkl9OZdUPwhU+yKzXa9fyKKOER8c/1APgh949ePfgfq22uWW8bRi3aljS/1SIP/LI/BcIERG9uibfsZP2jj0dkZsTId7G1aiMq3f/8lY0NZHxvhDfUqDdBPp6qIH4FQJr6aWu4BBf/3t0G8KN6KoVWF+JPlcG8uLqdnhVO4w9EgX9hpcbmVd1OpdGsfr2htowNnnv0PQV4Ch28/nuBCIiohdsPSMPAxP5H5P5vzyR/29gI4rYuJR63b0ydkvhjeTqeHhJP3jtJDW2enrjv3HOnUFERPSKUO7HYsX/mXBdu/dOtV6vmv6Okq5jfVu6dqOlpN31lWvtmN2Wkj3X8R3Lacuei5K9rDzp7fZ6juvLpuPKnuPZe/rN7zJ+9bunOmbXty2v11amp6TldH3T8mXD9izZ2/1m2/Z2lKtX9nrKspu2Zfq205Wes+taqiKlp9RYoN1QXd9u2uFkV/Zcu2O6+/I7Tnu3o2RDeZZr93wnKjCpy+42Hbeji60gWPhFh0RERP+PHj4e3LvT7x88mJ5YDi/NozknyIiZnSimFJgHAo4TRERE9BkyStcLrFR+jg0iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIqIZpz/St+DEUtrDgsBwzo8uxHPwFKNHDGfKEThrez5x/6AH9kuLKQKYt3pu0UqTRyIG9z6aE7w8nJN0/3jMySKVYhWYH/Ne9qI/fw54Tc9BNKdwjgfA7POj536MpU187TDq0awYvTB1UWm4Lwrn/9chnLj/m9lFIuz5IAiC+auXJvuwOGcDpyYKAB4U5+yC5VOOn9POHDPjfxPRS+a/AQAA//+63zmW")

2.984358474s ago: executing program 0 (id=201):
syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x40085503, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0xf00, 0xe0, 0x0, 0x0, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5)
shutdown(r1, 0x1)

2.721699918s ago: executing program 4 (id=202):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$dupfd(r2, 0x0, r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
fchdir(0xffffffffffffffff)
getdents(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000002400)="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", 0x26b}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0)
io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x7608, 0x0, 0x0, 0x1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4)
syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.55795196s ago: executing program 1 (id=203):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0)

1.717857314s ago: executing program 0 (id=204):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = memfd_secret(0x80000)
fcntl$setlease(r7, 0x400, 0x0)
close(r7)
sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x48, 0x2, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xf}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x200000c1)
r8 = fcntl$getown(r5, 0x9)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000440)=<r9=>0x0)
kcmp(r8, r9, 0x2, r1, r0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.717354074s ago: executing program 1 (id=205):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
r2 = syz_open_dev$usbfs(0x0, 0x77, 0x41341)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
fsetxattr$security_capability(r2, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r5, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)

1.214209411s ago: executing program 0 (id=206):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x4, 0x22f0}, @void, @eth={@random="31d27b228e30", @local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00\x00V', 0x44, 0x29, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}}, 0x82)

922.982715ms ago: executing program 0 (id=207):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x50)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x4004008)
close(0x3)

746.520169ms ago: executing program 4 (id=208):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)

674.00946ms ago: executing program 0 (id=209):
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x20040084)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7283a79b4a4040a88a709c59982b74"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000906010200000000004e2200020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
clock_gettime(0xb, &(0x7f00000000c0))
syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x88a80e, &(0x7f0000000180), 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e")
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ff0000b7040000000000008500000001000000950000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x9}, 0x18)
io_setup(0xc619, &(0x7f0000000280)=<r6=>0x0)
io_destroy(r6)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f0000000540))
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/77, 0xfffffffffe61a000, 0x800, 0x0, 0x1}, 0x1c)

673.44782ms ago: executing program 5 (id=121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000001204000000ffffffffe5fffb10000053560eae3dd24070b888ee7f16401e43df8e17d0c6b9fd34ca2378e5446a9dcd0fa7559159b427204751f234c9f384c80c34b7c8a4f28421acfc9bdae35fa23f55df7d2be824dc81e0390c755b502aa32f16c3213af70fd9ec8fa6f3f7208ad6f44e85a7f295cd554832f3a6f25baf6845d703843b5a2cf45a890565f053fd53c19c87", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x1, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x892b4618e8d4450c)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r3, 0x1)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)

574.835181ms ago: executing program 1 (id=210):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0)

567.218301ms ago: executing program 2 (id=211):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
fdatasync(r4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r4, 0x5)

494.239692ms ago: executing program 4 (id=212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b70300000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

429.012443ms ago: executing program 4 (id=213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)

412.112814ms ago: executing program 1 (id=214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840)

262.809046ms ago: executing program 0 (id=215):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000500))
socket(0x2d, 0xa, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='jbd2_run_stats\x00', r2, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x40, &(0x7f0000000840)={[], [{@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@appraise_type}, {@uid_eq}, {@smackfsdef={'smackfsdef', 0x3d, 'GPL\x00'}}, {@obj_user}, {@smackfsdef={'smackfsdef', 0x3d, 'GPL\x00'}}]}, 0x1, 0x581, &(0x7f0000002800)="$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")
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x90)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0)

261.838756ms ago: executing program 5 (id=216):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x12)

163.272747ms ago: executing program 4 (id=217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@dax_always}, {@oldalloc}]}, 0x0, 0x50e, &(0x7f0000000340)="$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")

103.541478ms ago: executing program 1 (id=218):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$dupfd(r2, 0x0, r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
fchdir(0xffffffffffffffff)
getdents(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000002400)="9917b1ad3d06a27855d01141e914353e8c663ed1065e32301b8acd1815ed897020c9092fe19ef95bd3c69397d675e3c19835f4c930a9bcbd49c4d872b7679a32e22015d7df39001b2d750fe2484101ef67cb628910e4cde2d8285b9017f55e84b67b72840813a8d080b71200f197d5b65f243ac4ac17d0cba3d08c98ceedf43365fc78aa0f52585ef7d8d525c049e1ae193a110f2dcfce4e6114b15de04b2720d6bd946506004cf479e742dcf73534e370150d97a55b559b5a1bedbc9290cbcac428f960e016fb88cfc21d86da2974ec3f2632992a27a4e5864623e05722eb07d27139b45171ec0cefa44e98f05dd4ff957056265edbacd81a611e4dfacb2b4879517e00c52e84728b1de1193bc88e509860ff143fc216c5100c41667a3ba5b157db616145a6d5ddb592e6b9589cdc93e3e8ef63da3cb4033d9f676cec3dcbb003ae54940e30203e1dc7b939c9c32029ad645b46ee269892e7a786bd36c2f7d962aad3b8d6e9d946adfa984a52cf7d35c5b2f492ab267c1ca948a5c0323d628364a612004c1c7feb2671a984f4dc05330a968e4b8cbe9200f111597c8ecc7ea7681ec281e168edbadc83d98de2b0dda7b187f509e487d63300932f3c76a1b66b4e01dffb07b4c80b5f5273a84b3cb0732b691738bba87517d53cf2b88b481cb325b8b912f54cee9d2546f2fdb96931bda2821eb66554abd4a21a8281c3c461df633a97f5cb3cf924fb324782399df0dc72d18d22b320e605dddf1123417dffc6452835a63fca230fbb002fd9c204b0819c56c4ce398423518b59dc8220bbf0c8b66f54c8009f1170f4c5582bfc703938bdf4d88ffe3eb87f4d2a62d442bb08ba405e11984c919fed63f9e8", 0x26b}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0)
io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x7608, 0x0, 0x0, 0x1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4)
syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 5 (id=219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0xf00}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2420f8ebcd310b47}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.15.199' (ED25519) to the list of known hosts.
[   59.456087][ T4158] cgroup: Unknown subsys name 'net'
[   59.571289][ T4158] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   61.006364][ T4158] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   62.397124][ T4170] chnl_net:caif_netlink_parms(): no params data found
[   62.607214][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.615137][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.623545][ T4170] device bridge_slave_0 entered promiscuous mode
[   62.640922][ T4179] chnl_net:caif_netlink_parms(): no params data found
[   62.656424][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.663505][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.671853][ T4170] device bridge_slave_1 entered promiscuous mode
[   62.683187][ T4169] chnl_net:caif_netlink_parms(): no params data found
[   62.701830][ T4171] chnl_net:caif_netlink_parms(): no params data found
[   62.750062][ T4168] chnl_net:caif_netlink_parms(): no params data found
[   62.769321][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.804870][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.865211][ T4170] team0: Port device team_slave_0 added
[   62.894525][ T4170] team0: Port device team_slave_1 added
[   62.935561][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.942695][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.950879][ T4179] device bridge_slave_0 entered promiscuous mode
[   62.958987][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.966170][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.974016][ T4169] device bridge_slave_0 entered promiscuous mode
[   63.002222][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.009532][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.017585][ T4179] device bridge_slave_1 entered promiscuous mode
[   63.025124][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.032200][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.040241][ T4169] device bridge_slave_1 entered promiscuous mode
[   63.054188][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.061356][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.069405][ T4171] device bridge_slave_0 entered promiscuous mode
[   63.078325][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.085374][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.111621][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.147895][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.155711][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.163581][ T4171] device bridge_slave_1 entered promiscuous mode
[   63.171218][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.178306][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.204446][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.232721][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.239959][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.248271][ T4168] device bridge_slave_0 entered promiscuous mode
[   63.270413][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.281585][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.291027][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.298630][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.307174][ T4168] device bridge_slave_1 entered promiscuous mode
[   63.323325][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.343254][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.374635][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.387609][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.421197][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.432520][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.452936][ T4179] team0: Port device team_slave_0 added
[   63.491751][ T4179] team0: Port device team_slave_1 added
[   63.500627][ T4169] team0: Port device team_slave_0 added
[   63.510713][ T4170] device hsr_slave_0 entered promiscuous mode
[   63.517745][ T4170] device hsr_slave_1 entered promiscuous mode
[   63.538213][ T4168] team0: Port device team_slave_0 added
[   63.547427][ T4171] team0: Port device team_slave_0 added
[   63.563903][ T4169] team0: Port device team_slave_1 added
[   63.580994][ T4168] team0: Port device team_slave_1 added
[   63.588461][ T4171] team0: Port device team_slave_1 added
[   63.629246][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.636727][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.663016][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.678569][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.685580][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.711897][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.723839][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.731126][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.757180][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.796269][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.803259][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.829870][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.841771][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.849198][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.875394][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.887198][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.894155][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.920238][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.943230][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.950353][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.976389][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.988235][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.995529][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.021667][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.098976][ T4179] device hsr_slave_0 entered promiscuous mode
[   64.106040][ T4179] device hsr_slave_1 entered promiscuous mode
[   64.112788][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.121581][ T4179] Cannot create hsr debugfs directory
[   64.146789][ T4171] device hsr_slave_0 entered promiscuous mode
[   64.153481][ T4171] device hsr_slave_1 entered promiscuous mode
[   64.160321][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.168187][ T4171] Cannot create hsr debugfs directory
[   64.185746][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[   64.185746][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[   64.186256][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[   64.191934][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[   64.203688][   T21] Bluetooth: hci2: command 0x0409 tx timeout
[   64.219629][ T4169] device hsr_slave_0 entered promiscuous mode
[   64.226920][ T4169] device hsr_slave_1 entered promiscuous mode
[   64.233555][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.241203][ T4169] Cannot create hsr debugfs directory
[   64.283288][ T4168] device hsr_slave_0 entered promiscuous mode
[   64.290303][ T4168] device hsr_slave_1 entered promiscuous mode
[   64.297020][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.304712][ T4168] Cannot create hsr debugfs directory
[   64.593213][ T4170] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.605017][ T4170] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.618064][ T4170] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.634290][ T4170] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.667194][ T4169] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.676937][ T4169] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.695917][ T4169] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.705832][ T4169] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.783073][ T4179] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.793422][ T4179] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.819371][ T4179] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.829869][ T4179] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.857772][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.884139][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.897697][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.907156][ T4171] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.916987][ T4171] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.926253][ T4171] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.940070][ T4171] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.963652][ T4170] 8021q: adding VLAN 0 to HW filter on device team0
[   65.032000][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.042141][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.051631][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.058926][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.072317][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.081726][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.090815][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.099654][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.106773][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.117452][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.129545][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.144313][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.157680][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.168485][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.180887][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.206794][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.240386][ T4169] 8021q: adding VLAN 0 to HW filter on device team0
[   65.252018][ T4171] 8021q: adding VLAN 0 to HW filter on device team0
[   65.265321][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.273196][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.282017][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.291029][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.300079][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.309885][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.319214][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.328067][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.335175][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.343200][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.354336][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.364249][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.382712][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.391756][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.400958][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.409855][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.417056][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.428553][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.437171][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.445667][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.452926][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.462087][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.485717][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.494363][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.505117][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.512224][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.520302][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.529991][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.540272][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.572760][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.582002][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.591121][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.600373][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.610491][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.619318][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.628149][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.636839][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.646833][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.673097][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.691800][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.699262][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.707520][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.717795][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.727061][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.737160][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.746259][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.754981][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.764384][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.791621][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.800404][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.809069][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.817994][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.826898][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.835935][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.859054][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.878400][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.893387][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.910916][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.926628][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.935492][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.943244][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.962375][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.976223][ T4179] 8021q: adding VLAN 0 to HW filter on device team0
[   65.995975][  T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.014297][  T563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.060182][ T4168] 8021q: adding VLAN 0 to HW filter on device team0
[   66.073931][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.103087][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.113322][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.120471][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.129946][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.139747][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.148468][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.155597][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.163317][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.190454][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.200160][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.211676][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.223430][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.230597][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.245486][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.254399][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.265280][ T4218] Bluetooth: hci2: command 0x041b tx timeout
[   66.270133][   T23] Bluetooth: hci4: command 0x041b tx timeout
[   66.275339][ T4218] Bluetooth: hci0: command 0x041b tx timeout
[   66.279378][   T23] Bluetooth: hci3: command 0x041b tx timeout
[   66.296905][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.314786][   T23] Bluetooth: hci1: command 0x041b tx timeout
[   66.318250][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.327929][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.337011][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.346142][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.354998][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.363718][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.382082][ T4179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.392614][ T4179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.415255][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.423395][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.432966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.445213][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.453686][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.462621][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.472277][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.481436][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.490185][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.499147][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.508746][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.518646][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.543520][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.557711][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.584246][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.601778][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.611324][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.632282][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.645607][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.653949][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.662261][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.670758][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.679349][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.689786][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.702581][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.726060][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.739932][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.759526][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.791168][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.854797][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.863631][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.902660][ T4169] device veth0_vlan entered promiscuous mode
[   66.926120][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.937054][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.946146][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.954955][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.982039][ T4169] device veth1_vlan entered promiscuous mode
[   66.998827][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.013481][ T4171] device veth0_vlan entered promiscuous mode
[   67.037584][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.046351][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.055331][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.063669][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.072228][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.081109][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.090003][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.099484][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.108150][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.136605][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.145244][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.152715][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.164158][ T4171] device veth1_vlan entered promiscuous mode
[   67.191898][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.201153][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.211031][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.220637][ T4169] device veth0_macvtap entered promiscuous mode
[   67.233352][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.268783][ T4169] device veth1_macvtap entered promiscuous mode
[   67.278815][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.289582][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.298143][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.308321][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.319117][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.327973][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.337114][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.352033][ T4170] device veth0_vlan entered promiscuous mode
[   67.363604][ T4179] device veth0_vlan entered promiscuous mode
[   67.389527][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.397400][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.405995][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.414502][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.423904][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.433835][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.442792][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.451639][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.460005][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.468638][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.477065][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.500013][ T4171] device veth0_macvtap entered promiscuous mode
[   67.523556][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.536344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.547012][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.556468][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.574530][ T4171] device veth1_macvtap entered promiscuous mode
[   67.583294][ T4170] device veth1_vlan entered promiscuous mode
[   67.592335][ T4179] device veth1_vlan entered promiscuous mode
[   67.610555][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.618971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.627715][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.645770][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.653122][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.661880][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.670457][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.679229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.697079][ T4168] device veth0_vlan entered promiscuous mode
[   67.723843][ T4179] device veth0_macvtap entered promiscuous mode
[   67.737041][ T4179] device veth1_macvtap entered promiscuous mode
[   67.745312][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.753945][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.763310][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.777476][ T4168] device veth1_vlan entered promiscuous mode
[   67.792873][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.801900][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.811304][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.820909][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.832078][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.843454][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.855940][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.865833][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.878834][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.891316][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.899322][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.908003][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.916712][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.926168][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.935727][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.944466][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.973368][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.982318][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.995884][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.008055][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.017656][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.039581][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.083350][ T4170] device veth0_macvtap entered promiscuous mode
[   68.115656][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.127043][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.136467][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.146546][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.156762][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.167410][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.178195][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.189597][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.200836][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.215897][ T4170] device veth1_macvtap entered promiscuous mode
[   68.228644][ T4168] device veth0_macvtap entered promiscuous mode
[   68.240887][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.249832][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.258430][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.268132][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.279157][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.290370][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.301100][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.311622][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.322968][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.350041][ T4247] Bluetooth: hci1: command 0x040f tx timeout
[   68.356261][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.367787][ T4247] Bluetooth: hci3: command 0x040f tx timeout
[   68.374406][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.387917][ T4179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.396889][ T4247] Bluetooth: hci0: command 0x040f tx timeout
[   68.401961][ T4179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.402987][ T4247] Bluetooth: hci4: command 0x040f tx timeout
[   68.412381][ T4179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.425059][ T4247] Bluetooth: hci2: command 0x040f tx timeout
[   68.428907][ T4179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.452665][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.463232][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.473465][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.484272][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.494143][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.505477][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.517779][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.527256][ T4168] device veth1_macvtap entered promiscuous mode
[   68.548811][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.558884][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.569157][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.588119][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.601154][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.611289][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.621821][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.631738][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.642203][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.661969][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.674971][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.683703][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.692951][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.701807][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.727413][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.741223][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.757333][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.772266][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.782504][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.795963][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.806098][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.817112][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.827790][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.838631][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.851002][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.885364][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.894077][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.908703][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.920632][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.930916][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.941706][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.951582][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.962042][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.971907][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.982632][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.997184][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.021078][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.031776][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.046766][  T563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.046928][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.063786][  T563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.069615][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.081121][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.090074][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.128151][  T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.157981][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.184336][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.195927][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.203914][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.241865][  T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.251456][  T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.268083][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.280773][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.303402][  T563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.315118][  T563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.322538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.339245][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.406995][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.419056][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.439302][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.451510][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.469310][  T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.489972][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.498565][  T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.515902][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.527945][  T563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.588749][  T563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.607223][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.622265][  T563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.633003][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.673737][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.700556][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.847901][ T4258] Zero length message leads to an empty skb
[   70.426094][   T26] audit: type=1326 audit(1750032203.533:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4267 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   70.463467][ T4247] Bluetooth: hci4: command 0x0419 tx timeout
[   70.743451][ T4247] Bluetooth: hci0: command 0x0419 tx timeout
[   70.751415][ T4247] Bluetooth: hci3: command 0x0419 tx timeout
[   70.757576][ T4247] Bluetooth: hci1: command 0x0419 tx timeout
[   70.768378][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   70.778028][   T26] audit: type=1326 audit(1750032203.593:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4267 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   70.856985][   T26] audit: type=1326 audit(1750032203.853:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4267 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   70.918188][   T26] audit: type=1326 audit(1750032203.853:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4267 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   70.944731][   T26] audit: type=1326 audit(1750032203.853:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4267 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   71.318697][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.325386][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.572252][ T4299] loop3: detected capacity change from 0 to 128
[   71.673019][   T26] audit: type=1326 audit(1750032204.783:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   71.751818][   T26] audit: type=1326 audit(1750032204.823:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   71.809385][   T26] audit: type=1326 audit(1750032204.823:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   71.832990][   T26] audit: type=1326 audit(1750032204.823:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   71.855273][   T26] audit: type=1326 audit(1750032204.823:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4304 comm="syz.1.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   72.764166][ T4314] loop1: detected capacity change from 0 to 512
[   72.843927][ T4314] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   72.865137][ T4323] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET)
[   72.905412][ T4314] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   72.945024][ T4314] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   72.970917][ T4318] loop0: detected capacity change from 0 to 1024
[   73.020383][ T4318] =======================================================
[   73.020383][ T4318] WARNING: The mand mount option has been deprecated and
[   73.020383][ T4318]          and is ignored by this kernel. Remove the mand
[   73.020383][ T4318]          option from the mount to silence this warning.
[   73.020383][ T4318] =======================================================
[   73.117106][ T4314] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   73.131417][ T4314] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[   73.155945][ T4318] EXT4-fs (loop0): Unrecognized mount option "obj_role=ext4" or missing value
[   73.197591][ T4314] EXT4-fs (loop1): 1 truncate cleaned up
[   73.243980][ T4314] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,nomblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[   73.270123][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'.
[   73.408904][ T4314] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpquota,noquota,quota,noload,noload,. Quota mode: writeback.
[   74.997035][ T4368] loop1: detected capacity change from 0 to 1024
[   76.584884][   T26] kauditd_printk_skb: 134 callbacks suppressed
[   76.584927][   T26] audit: type=1326 audit(1750032209.693:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f3993929 code=0x7ffc0000
[   76.646693][   T26] audit: type=1326 audit(1750032209.753:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3f3993929 code=0x7ffc0000
[   76.714565][    C1] sched: RT throttling activated
[   77.367526][ T4383] loop2: detected capacity change from 0 to 1024
[   77.742372][ T4368] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.36: Invalid block bitmap block 0 in block_group 0
[   77.757944][ T4368] Quota error (device loop1): write_blk: dquota write failed
[   77.765747][ T4368] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   77.775844][ T4368] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.36: Failed to acquire dquot type 0
[   77.789162][ T4368] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.36: Freeing blocks not in datazone - block = 0, count = 4096
[   77.805349][ T4368] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.36: Invalid inode bitmap blk 0 in block_group 0
[   77.819581][ T4368] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[   77.840237][ T4368] EXT4-fs (loop1): 1 orphan inode deleted
[   77.846109][ T4368] EXT4-fs (loop1): mounted filesystem without journal. Opts: ��; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback.
[   77.864392][ T4273] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9)
[   77.911682][ T4383] EXT4-fs (loop2): Unrecognized mount option "obj_role=ext4" or missing value
[   77.931196][ T4273] EXT4-fs error (device loop1): ext4_release_dquot:6240: comm kworker/u4:8: Failed to release dquot type 0
[   77.980345][ T4387] loop4: detected capacity change from 0 to 512
[   78.047638][   T26] audit: type=1326 audit(1750032211.163:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f3993929 code=0x7ffc0000
[   78.101260][   T26] audit: type=1326 audit(1750032211.163:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f3993929 code=0x7ffc0000
[   78.146326][   T26] audit: type=1326 audit(1750032211.233:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3f3993929 code=0x7ffc0000
[   78.192951][   T26] audit: type=1326 audit(1750032211.233:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f3993929 code=0x7ffc0000
[   78.221423][   T26] audit: type=1326 audit(1750032211.243:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f3993929 code=0x7ffc0000
[   78.240340][ T4387] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.302541][ T4387] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   79.558842][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'.
[   79.605909][ T4415] loop9: detected capacity change from 0 to 7
[   79.633296][ T4415] Dev loop9: unable to read RDB block 7
[   79.668975][ T4415]  loop9: unable to read partition table
[   79.669156][ T4415] loop9: partition table beyond EOD, truncated
[   79.669178][ T4415] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[   79.669178][ T4415] 
U�������) failed (rc=-5)
[   79.792042][ T4423] netlink: 'syz.2.58': attribute type 11 has an invalid length.
[   80.120624][ T4427] loop1: detected capacity change from 0 to 8192
[   80.127629][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'.
[   82.855236][ T4469] netlink: 'syz.0.70': attribute type 21 has an invalid length.
[   82.996745][ T4474] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.191173][   T26] kauditd_printk_skb: 62 callbacks suppressed
[   83.191189][   T26] audit: type=1326 audit(1750032216.303:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   83.247471][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   83.300780][   T26] audit: type=1326 audit(1750032216.303:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   83.322238][ T4483] IPVS: Error joining to the multicast group
[   83.352531][ T4489] loop1: detected capacity change from 0 to 1024
[   83.451246][   T26] audit: type=1326 audit(1750032216.353:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   83.506013][ T4489] EXT4-fs (loop1): Unrecognized mount option "obj_role=ext4" or missing value
[   83.560386][ T4496] loop4: detected capacity change from 0 to 2048
[   83.608879][   T26] audit: type=1326 audit(1750032216.513:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f2e0e929 code=0x7ffc0000
[   83.637653][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880608cc800: rx timeout, send abort
[   83.763690][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   83.865948][   T26] audit: type=1326 audit(1750032216.513:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f2e0e929 code=0x7ffc0000
[   83.964331][   T26] audit: type=1326 audit(1750032216.513:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f93f2e0e929 code=0x7ffc0000
[   84.023133][ T4506] syz.3.85[4506] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   84.023298][ T4506] syz.3.85[4506] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   84.093734][ T4508] loop3: detected capacity change from 0 to 1024
[   84.146880][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880608cc800: abort rx timeout. Force session deactivation
[   84.164624][   T26] audit: type=1326 audit(1750032216.543:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f2e0e929 code=0x7ffc0000
[   84.250425][   T26] audit: type=1326 audit(1750032216.543:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93f2e411e5 code=0x7ffc0000
[   84.369353][ T4508] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none.
[   84.382589][   T26] audit: type=1326 audit(1750032216.563:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f93f2e0e929 code=0x7ffc0000
[   84.581020][   T26] audit: type=1326 audit(1750032216.583:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.1.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   84.659718][ T4526] loop1: detected capacity change from 0 to 512
[   84.722507][ T4171] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /18/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   84.786188][ T4526] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   84.851546][ T4526] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   84.894611][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   84.901863][ T4171] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   84.930384][ T4526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0002]
[   84.942186][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   84.950237][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   84.963002][ T4171] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /18/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   84.978565][ T4526] EXT4-fs (loop1): orphan cleanup on readonly fs
[   85.000150][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   85.015005][ T4171] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   85.041676][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   85.050693][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   85.063569][ T4171] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /18/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   85.089626][ T4526] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33619980: comm syz.1.94: invalid block
[   85.101909][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   85.102268][ T4171] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   85.140925][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   85.150866][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   85.161560][ T4526] EXT4-fs (loop1): Remounting filesystem read-only
[   85.180774][ T4526] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.94: invalid indirect mapped block 2185560079 (level 1)
[   85.197609][ T4171] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /18/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   85.221635][ T4526] EXT4-fs (loop1): Remounting filesystem read-only
[   85.243174][ T4526] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.94: bg 0: block 361: padding at end of block bitmap is not set
[   85.280735][ T4526] EXT4-fs (loop1): Remounting filesystem read-only
[   85.287879][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   85.287957][ T4526] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem
[   85.324872][ T4171] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   85.334991][ T4526] EXT4-fs (loop1): Remounting filesystem read-only
[   85.380813][ T4545] loop4: detected capacity change from 0 to 1024
[   85.411882][ T4526] EXT4-fs (loop1): 1 truncate cleaned up
[   85.418193][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   85.423671][ T4526] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,usrquota,errors=remount-ro,abort. Quota mode: writeback.
[   85.437590][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   85.462721][ T4171] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /18/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   85.492604][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   85.525278][ T4545] EXT4-fs (loop4): Unrecognized mount option "obj_role=ext4" or missing value
[   85.541641][ T4171] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   85.570254][ T4171] EXT4-fs (loop3): Remounting filesystem read-only
[   85.583953][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   85.638563][ T4526] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.94: dx entry: limit 0 != root limit 125
[   85.684628][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   85.686982][ T4552] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in;
[   85.686982][ T4552]    program syz.1.94 not setting count and/or reply_len properly
[   85.702921][ T4526] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.94: Corrupt directory, running e2fsck is recommended
[   85.762828][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   85.846154][ T4526] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.94: dx entry: limit 0 != root limit 125
[   85.858227][ T4526] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.94: Corrupt directory, running e2fsck is recommended
[   85.879350][ T4526] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 5: comm syz.1.94: path /17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   85.917646][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   85.957471][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   85.987399][ T4171] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[   86.686618][ T1325] cfg80211: failed to load regulatory.db
[   87.786810][ T4589] loop0: detected capacity change from 0 to 512
[   87.846878][ T4589] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   87.942695][ T4598] loop1: detected capacity change from 0 to 1024
[   87.959660][ T4589] EXT4-fs (loop0): 1 orphan inode deleted
[   88.006930][ T4589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.037168][ T4589] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.058178][ T4598] EXT4-fs (loop1): Unrecognized mount option "obj_role=ext4" or missing value
[   88.147486][ T4589] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[   88.456133][   T26] kauditd_printk_skb: 69 callbacks suppressed
[   88.456150][   T26] audit: type=1326 audit(1750032221.573:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4604 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   88.485553][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'.
[   88.503013][   T26] audit: type=1326 audit(1750032221.613:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4604 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ff0975290 code=0x7ffc0000
[   88.525780][ T4606] sd 0:0:1:0: device reset
[   88.614049][   T26] audit: type=1326 audit(1750032221.613:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4604 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   88.765019][   T26] audit: type=1326 audit(1750032221.613:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4604 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   88.885246][   T26] audit: type=1326 audit(1750032221.643:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4604 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   89.000066][   T26] audit: type=1326 audit(1750032221.663:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4604 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   89.125399][   T26] audit: type=1326 audit(1750032221.663:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4604 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   89.246585][ T4628] process 'syz.1.130' launched '/dev/fd/3' with NULL argv: empty string added
[   89.361373][   T26] audit: type=1326 audit(1750032222.473:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4630 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   89.445412][   T26] audit: type=1326 audit(1750032222.473:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4630 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   89.504613][   T26] audit: type=1326 audit(1750032222.513:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4630 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f5072929 code=0x7ffc0000
[   89.671724][ T4635] loop1: detected capacity change from 0 to 512
[   89.877218][ T4635] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   89.934359][ T4646] loop2: detected capacity change from 0 to 1024
[   89.977954][ T4635] EXT4-fs (loop1): invalid journal inode
[   90.030964][ T4635] EXT4-fs (loop1): can't get journal size
[   90.039244][ T4646] EXT4-fs (loop2): Unrecognized mount option "obj_role=ext4" or missing value
[   90.115511][ T4649] capability: warning: `syz.4.137' uses 32-bit capabilities (legacy support in use)
[   90.134277][ T4635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[   90.166190][ T4635] System zones: 1-12, 13-13
[   90.201822][ T4616] chnl_net:caif_netlink_parms(): no params data found
[   90.208918][ T4635] EXT4-fs (loop1): 1 truncate cleaned up
[   90.255126][ T4635] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback.
[   91.328543][ T1325] Bluetooth: hci3: command 0x0409 tx timeout
[   91.437551][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.498447][ T4616] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.507153][ T4616] device bridge_slave_0 entered promiscuous mode
[   91.517031][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.524296][ T4616] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.545581][ T4616] device bridge_slave_1 entered promiscuous mode
[   91.578754][ T4667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   91.709199][ T4616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.750090][ T4616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.895789][ T4616] team0: Port device team_slave_0 added
[   91.985257][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'.
[   92.015178][ T4616] team0: Port device team_slave_1 added
[   92.034443][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'.
[   92.097226][ T4616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.099806][ T4667] syz.1.141 (4667) used greatest stack depth: 21096 bytes left
[   92.133659][ T4616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.227385][ T4616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.270461][ T4616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.311952][ T4616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.347050][ T4701] loop1: detected capacity change from 0 to 1024
[   92.404828][ T4701] EXT4-fs (loop1): Unrecognized mount option "obj_role=ext4" or missing value
[   92.467212][ T4616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.656977][ T4616] device hsr_slave_0 entered promiscuous mode
[   92.680367][ T4616] device hsr_slave_1 entered promiscuous mode
[   92.699820][ T4616] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.714605][ T4616] Cannot create hsr debugfs directory
[   93.165935][ T4724] syz.1.165 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   93.209074][ T4616] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   93.250495][ T4616] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   93.311445][ T4616] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   93.362928][ T4616] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   93.369560][ T4730] loop4: detected capacity change from 0 to 512
[   93.394842][ T4218] Bluetooth: hci3: command 0x041b tx timeout
[   93.507899][ T4730] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   93.562003][ T4730] EXT4-fs (loop4): orphan cleanup on readonly fs
[   93.670594][ T4730] __quota_error: 63 callbacks suppressed
[   93.670611][ T4730] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5
[   93.708860][ T4730] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   93.721616][ T4730] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.158: Failed to acquire dquot type 1
[   93.751596][ T4730] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.158: bg 0: block 40: padding at end of block bitmap is not set
[   93.770231][ T4730] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem
[   93.782754][ T4730] EXT4-fs (loop4): 1 truncate cleaned up
[   93.790633][ T4730] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   93.816485][   T26] audit: type=1326 audit(1750032226.933:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4739 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   93.932407][ T4241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.973621][   T26] audit: type=1326 audit(1750032227.083:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   94.014720][ T4616] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.086017][   T26] audit: type=1326 audit(1750032227.123:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   94.088467][ T4241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.184973][   T26] audit: type=1326 audit(1750032227.123:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   94.201775][ T4616] 8021q: adding VLAN 0 to HW filter on device team0
[   94.240732][ T4722] infiniband syz1: set active
[   94.259946][   T26] audit: type=1326 audit(1750032227.123:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   94.274787][ T4753] loop0: detected capacity change from 0 to 1024
[   94.283910][ T4722] infiniband syz1: added syz_tun
[   94.315687][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   94.325844][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   94.372383][ T4241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.373161][ T4722] infiniband syz1: Couldn't open port 1
[   94.396501][   T26] audit: type=1326 audit(1750032227.123:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   94.430168][   T26] audit: type=1326 audit(1750032227.253:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   94.465952][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   94.480200][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.495299][ T4753] EXT4-fs (loop0): Unrecognized mount option "obj_role=ext4" or missing value
[   94.530838][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.537377][   T26] audit: type=1326 audit(1750032227.253:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[   94.537995][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.588039][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   94.591305][ T4722] RDS/IB: syz1: added
[   94.604202][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.614025][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.621169][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.649468][ T4722] smc: adding ib device syz1 with port count 1
[   94.686549][ T4761] loop4: detected capacity change from 0 to 512
[   94.693274][ T4722] smc:    ib device syz1 port 1 has pnetid 
[   94.708258][ T4241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.757912][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   94.767019][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.776158][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.816310][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   94.830479][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.837091][ T4761] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   94.850696][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   94.862646][ T4761] EXT4-fs (loop4): orphan cleanup on readonly fs
[   94.876715][ T4761] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.176: Block bitmap for bg 0 marked uninitialized
[   94.898730][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.910448][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   94.933701][ T4761] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem
[   94.943190][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.958208][ T4616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.986848][ T4761] EXT4-fs (loop4): 1 orphan inode deleted
[   94.993267][ T4761] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   95.018426][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   95.029128][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   95.042023][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   95.051036][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.464791][ T4218] Bluetooth: hci3: command 0x040f tx timeout
[   95.667758][ T4788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.697181][ T4788] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.751982][ T4788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.784724][ T4788] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.940203][ T4803] loop1: detected capacity change from 0 to 1024
[   95.974352][ T4803] EXT4-fs (loop1): Unrecognized mount option "obj_role=ext4" or missing value
[   96.027528][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'.
[   96.169391][ T4797] device hsr_slave_0 left promiscuous mode
[   96.220656][ T4616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.309700][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   96.322900][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   96.983379][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   97.009585][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.098700][ T4839] loop4: detected capacity change from 0 to 256
[   97.124947][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.133395][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.147444][ T4217] kernel write not supported for file /98/oom_score_adj (pid: 4217 comm: kworker/1:4)
[   97.167171][ T4616] device veth0_vlan entered promiscuous mode
[   97.224723][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.233670][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.261014][ T4616] device veth1_vlan entered promiscuous mode
[   97.396041][ T4616] device veth0_macvtap entered promiscuous mode
[   97.409929][ T4616] device veth1_macvtap entered promiscuous mode
[   97.552490][ T4174] Bluetooth: hci3: command 0x0419 tx timeout
[   98.340487][ T4857] loop4: detected capacity change from 0 to 164
[   98.353957][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.393351][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.430131][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.440966][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.456773][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.471001][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.483430][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.495807][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.507867][ T4616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.518633][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   98.544116][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   98.552974][ T4857] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   98.573287][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   98.589701][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   98.605412][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   98.623942][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   98.634224][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.818430][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.834559][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.844413][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.864584][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.874447][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.319831][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.629950][ T4616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.698058][ T4616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.721563][ T4616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.766023][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   99.774359][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   99.801057][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   99.856274][ T4616] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.875611][ T4616] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.894668][ T4616] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.913790][ T4616] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.220756][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.238413][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.299576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.337079][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.370161][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.457888][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.804910][ T4894] loop0: detected capacity change from 0 to 2048
[  100.922804][ T4905] loop2: detected capacity change from 0 to 1024
[  100.960593][   T26] kauditd_printk_skb: 128 callbacks suppressed
[  100.960607][   T26] audit: type=1326 audit(1750032234.073:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[  101.025286][ T4905] EXT4-fs (loop2): Ignoring removed orlov option
[  101.176577][ T4905] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none.
[  101.181637][   T26] audit: type=1326 audit(1750032234.123:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[  101.224108][   T26] audit: type=1326 audit(1750032234.123:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[  101.248326][   T26] audit: type=1326 audit(1750032234.123:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[  101.328990][   T26] audit: type=1326 audit(1750032234.123:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[  101.363464][ T4923] loop4: detected capacity change from 0 to 512
[  101.370641][ T4928] loop0: detected capacity change from 0 to 1024
[  101.556569][ T4928] EXT4-fs (loop0): Unrecognized mount option "obj_role=ext4" or missing value
[  101.569009][ T4923] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  101.735140][ T4923] EXT4-fs (loop4): Ignoring removed oldalloc option
[  101.801262][ T4923] EXT4-fs (loop4): DAX unsupported by block device.
[  101.847438][   T26] audit: type=1326 audit(1750032234.123:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[  102.435350][ T4905] 
[  102.437733][ T4905] ======================================================
[  102.444760][ T4905] WARNING: possible circular locking dependency detected
[  102.451807][ T4905] 5.15.185-syzkaller #0 Not tainted
[  102.457015][ T4905] ------------------------------------------------------
[  102.464050][ T4905] syz.2.211/4905 is trying to acquire lock:
[  102.469969][ T4905] ffff88807a1ccc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0
[  102.481057][ T4905] 
[  102.481057][ T4905] but task is already holding lock:
[  102.488438][ T4905] ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  102.498138][ T4905] 
[  102.498138][ T4905] which lock already depends on the new lock.
[  102.498138][ T4905] 
[  102.508550][ T4905] 
[  102.508550][ T4905] the existing dependency chain (in reverse order) is:
[  102.517579][ T4905] 
[  102.517579][ T4905] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  102.525590][ T4905]        __mutex_lock_common+0x1eb/0x2390
[  102.531338][ T4905]        mutex_lock_nested+0x17/0x20
[  102.536639][ T4905]        rfkill_register+0x33/0x8a0
[  102.541864][ T4905]        hci_register_dev+0x452/0x970
[  102.547257][ T4905]        vhci_create_device+0x32c/0x5c0
[  102.552813][ T4905]        vhci_write+0x391/0x450
[  102.557679][ T4905]        vfs_write+0x712/0xd00
[  102.562469][ T4905]        ksys_write+0x14d/0x250
[  102.564405][   T26] audit: type=1326 audit(1750032234.123:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[  102.567338][ T4905]        do_syscall_64+0x4c/0xa0
[  102.567361][ T4905]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  102.567386][ T4905] 
[  102.567386][ T4905] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  102.567416][ T4905]        __mutex_lock_common+0x1eb/0x2390
[  102.567436][ T4905]        mutex_lock_nested+0x17/0x20
[  102.567453][ T4905]        vhci_send_frame+0x88/0x100
[  102.567472][ T4905]        hci_send_frame+0x1a9/0x2e0
[  102.593600][   T26] audit: type=1326 audit(1750032234.123:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[  102.594548][ T4905]        hci_tx_work+0x9f9/0x1710
[  102.594575][ T4905]        process_one_work+0x863/0x1000
[  102.601213][   T26] audit: type=1326 audit(1750032234.143:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff0976929 code=0x7ffc0000
[  102.608802][ T4905]        worker_thread+0xaa8/0x12a0
[  102.608823][ T4905]        kthread+0x436/0x520
[  102.608838][ T4905]        ret_from_fork+0x1f/0x30
[  102.608859][ T4905] 
[  102.608859][ T4905] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  102.608890][ T4905]        __flush_work+0xdd/0x1b0
[  102.608906][ T4905]        hci_dev_do_close+0x1e7/0x1030
[  102.608924][ T4905]        hci_unregister_dev+0x2d7/0x580
[  102.608943][ T4905]        vhci_release+0x73/0xc0
[  102.608958][ T4905]        __fput+0x234/0x930
[  102.608977][ T4905]        task_work_run+0x125/0x1a0
[  102.608994][ T4905]        do_exit+0x616/0x20a0
[  102.609013][ T4905]        do_group_exit+0x12e/0x300
[  102.609032][ T4905]        __x64_sys_exit_group+0x3b/0x40
[  102.609052][ T4905]        do_syscall_64+0x4c/0xa0
[  102.609070][ T4905]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  102.609101][ T4905] 
[  102.609101][ T4905] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  102.609130][ T4905]        __mutex_lock_common+0x1eb/0x2390
[  102.609150][ T4905]        mutex_lock_nested+0x17/0x20
[  102.609167][ T4905]        bg_scan_update+0x44/0x3b0
[  102.609188][ T4905]        process_one_work+0x863/0x1000
[  102.609206][ T4905]        worker_thread+0xaa8/0x12a0
[  102.609224][ T4905]        kthread+0x436/0x520
[  102.609239][ T4905]        ret_from_fork+0x1f/0x30
[  102.609257][ T4905] 
[  102.609257][ T4905] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  102.609285][ T4905]        __lock_acquire+0x2c33/0x7c60
[  102.609307][ T4905]        lock_acquire+0x197/0x3f0
[  102.609326][ T4905]        __flush_work+0xdd/0x1b0
[  102.609342][ T4905]        __cancel_work_timer+0x3ac/0x520
[  102.609359][ T4905]        hci_request_cancel_all+0xcc/0x300
[  102.609380][ T4905]        hci_dev_do_close+0x4e/0x1030
[  102.609398][ T4905]        hci_rfkill_set_block+0x10a/0x190
[  102.609415][ T4905]        rfkill_set_block+0x1c6/0x420
[  102.609437][ T4905]        rfkill_fop_write+0x458/0x560
[  102.609453][ T4905]        vfs_write+0x300/0xd00
[  102.873030][ T4905]        ksys_write+0x14d/0x250
[  102.877902][ T4905]        do_syscall_64+0x4c/0xa0
[  102.882952][ T4905]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  102.889389][ T4905] 
[  102.889389][ T4905] other info that might help us debug this:
[  102.889389][ T4905] 
[  102.899618][ T4905] Chain exists of:
[  102.899618][ T4905]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  102.899618][ T4905] 
[  102.915348][ T4905]  Possible unsafe locking scenario:
[  102.915348][ T4905] 
[  102.922795][ T4905]        CPU0                    CPU1
[  102.928157][ T4905]        ----                    ----
[  102.933513][ T4905]   lock(rfkill_global_mutex);
[  102.938272][ T4905]                                lock(&data->open_mutex);
[  102.945396][ T4905]                                lock(rfkill_global_mutex);
[  102.952699][ T4905]   lock((work_completion)(&hdev->bg_scan_update));
[  102.959444][ T4905] 
[  102.959444][ T4905]  *** DEADLOCK ***
[  102.959444][ T4905] 
[  102.967605][ T4905] 1 lock held by syz.2.211/4905:
[  102.972544][ T4905]  #0: ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  102.982644][ T4905] 
[  102.982644][ T4905] stack backtrace:
[  102.988536][ T4905] CPU: 1 PID: 4905 Comm: syz.2.211 Not tainted 5.15.185-syzkaller #0
[  102.996602][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  103.006666][ T4905] Call Trace:
[  103.009950][ T4905]  <TASK>
[  103.012894][ T4905]  dump_stack_lvl+0x168/0x230
[  103.017573][ T4905]  ? load_image+0x3b0/0x3b0
[  103.022076][ T4905]  ? show_regs_print_info+0x20/0x20
[  103.027276][ T4905]  ? print_circular_bug+0x12b/0x1a0
[  103.032473][ T4905]  check_noncircular+0x274/0x310
[  103.037409][ T4905]  ? add_chain_block+0x940/0x940
[  103.042344][ T4905]  ? lockdep_lock+0xdc/0x1e0
[  103.046938][ T4905]  ? __lock_acquire+0x12d9/0x7c60
[  103.051964][ T4905]  ? lockdep_lock+0x1e0/0x1e0
[  103.056640][ T4905]  ? mark_lock+0x94/0x320
[  103.060977][ T4905]  __lock_acquire+0x2c33/0x7c60
[  103.065838][ T4905]  ? verify_lock_unused+0x140/0x140
[  103.071042][ T4905]  ? verify_lock_unused+0x140/0x140
[  103.076265][ T4905]  lock_acquire+0x197/0x3f0
[  103.080780][ T4905]  ? __flush_work+0xc1/0x1b0
[  103.085372][ T4905]  ? __lock_acquire+0x7c60/0x7c60
[  103.090401][ T4905]  ? read_lock_is_recursive+0x10/0x10
[  103.095774][ T4905]  ? start_flush_work+0x776/0x820
[  103.100800][ T4905]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  103.106698][ T4905]  ? _raw_spin_unlock+0x40/0x40
[  103.111549][ T4905]  __flush_work+0xdd/0x1b0
[  103.115966][ T4905]  ? __flush_work+0xc1/0x1b0
[  103.120552][ T4905]  ? flush_work+0x20/0x20
[  103.124877][ T4905]  ? try_to_grab_pending+0xf3/0x7e0
[  103.130078][ T4905]  ? lockdep_hardirqs_off+0x70/0x100
[  103.135368][ T4905]  ? mark_lock+0x94/0x320
[  103.139710][ T4905]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  103.145703][ T4905]  ? lock_chain_count+0x20/0x20
[  103.150558][ T4905]  ? mark_lock+0x94/0x320
[  103.154895][ T4905]  ? __cancel_work_timer+0x331/0x520
[  103.160179][ T4905]  __cancel_work_timer+0x3ac/0x520
[  103.165295][ T4905]  ? cancel_work_sync+0x20/0x20
[  103.170141][ T4905]  ? __cancel_work+0x1f4/0x2d0
[  103.174902][ T4905]  ? lockdep_hardirqs_on+0x94/0x140
[  103.180102][ T4905]  ? __cancel_work+0x26f/0x2d0
[  103.184862][ T4905]  ? cancel_work+0x20/0x20
[  103.189275][ T4905]  ? lock_chain_count+0x20/0x20
[  103.194125][ T4905]  hci_request_cancel_all+0xcc/0x300
[  103.199418][ T4905]  hci_dev_do_close+0x4e/0x1030
[  103.204275][ T4905]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  103.210173][ T4905]  ? _raw_spin_unlock+0x40/0x40
[  103.215024][ T4905]  hci_rfkill_set_block+0x10a/0x190
[  103.220223][ T4905]  ? rcu_lock_release+0x20/0x20
[  103.225073][ T4905]  rfkill_set_block+0x1c6/0x420
[  103.229933][ T4905]  rfkill_fop_write+0x458/0x560
[  103.234788][ T4905]  ? rfkill_fop_read+0x4b0/0x4b0
[  103.239733][ T4905]  ? common_file_perm+0x160/0x1c0
[  103.244757][ T4905]  ? fsnotify_perm+0x5d/0x560
[  103.249440][ T4905]  ? security_file_permission+0x75/0xa0
[  103.254990][ T4905]  ? rfkill_fop_read+0x4b0/0x4b0
[  103.259936][ T4905]  vfs_write+0x300/0xd00
[  103.264281][ T4905]  ? file_end_write+0x250/0x250
[  103.269152][ T4905]  ? __fget_files+0x40f/0x480
[  103.273849][ T4905]  ? __fdget_pos+0x1e2/0x370
[  103.278442][ T4905]  ? ksys_write+0x71/0x250
[  103.282866][ T4905]  ksys_write+0x14d/0x250
[  103.287197][ T4905]  ? __ia32_sys_read+0x80/0x80
[  103.291963][ T4905]  ? lockdep_hardirqs_on+0x94/0x140
[  103.297164][ T4905]  do_syscall_64+0x4c/0xa0
[  103.301580][ T4905]  ? clear_bhb_loop+0x30/0x80
[  103.306254][ T4905]  ? clear_bhb_loop+0x30/0x80
[  103.310931][ T4905]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  103.316850][ T4905] RIP: 0033:0x7fb3f3993929
[  103.321266][ T4905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.340873][ T4905] RSP: 002b:00007fb3f17fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  103.349286][ T4905] RAX: ffffffffffffffda RBX: 00007fb3f3bbafa0 RCX: 00007fb3f3993929
[  103.357266][ T4905] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006
[  103.365240][ T4905] RBP: 00007fb3f3a15b39 R08: 0000000000000000 R09: 0000000000000000
[  103.373209][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.381185][ T4905] R13: 0000000000000000 R14: 00007fb3f3bbafa0 R15: 00007ffed5c19038
[  103.389164][ T4905]  </TASK>
[  103.413544][   T26] audit: type=1107 audit(1750032234.203:512): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  103.618781][ T4241] device hsr_slave_0 left promiscuous mode
[  103.626491][ T4241] device hsr_slave_1 left promiscuous mode
[  103.633910][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.642495][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.653501][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.662555][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.670436][ T4241] device bridge_slave_1 left promiscuous mode
[  103.676961][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.691871][ T4241] device bridge_slave_0 left promiscuous mode
[  103.698554][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.741879][ T4241] device veth1_macvtap left promiscuous mode
[  103.750884][ T4241] device veth0_macvtap left promiscuous mode
[  103.760094][ T4241] device veth1_vlan left promiscuous mode
[  103.768637][ T4241] device veth0_vlan left promiscuous mode
[  103.959480][ T4241] team0 (unregistering): Port device team_slave_1 removed
[  103.970334][ T4241] team0 (unregistering): Port device team_slave_0 removed
[  103.985176][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.997967][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.045114][ T4241] bond0 (unregistering): Released all slaves