last executing test programs:

1m11.3630239s ago: executing program 0 (id=1):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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")
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800003, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$nci(0xffffffffffffff9c, 0x0, 0x5400, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

1m9.122892254s ago: executing program 0 (id=13):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127b, &(0x7f00000011c0)="$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")
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
statfs(0x0, 0x0)

1m6.175717219s ago: executing program 0 (id=23):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x10)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

1m4.927097515s ago: executing program 0 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
unshare(0x22020400)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)

1m3.618031331s ago: executing program 0 (id=32):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c")

1m2.840445731s ago: executing program 0 (id=37):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000000000004)

59.936662827s ago: executing program 32 (id=37):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000000000004)

6.572142221s ago: executing program 4 (id=243):
socket$inet(0x2, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0)

6.497213122s ago: executing program 2 (id=244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r0}, 0x38)
r1 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="17000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r7, 0x400, 0x70bd2c, 0x80000000, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}}, 0xc010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10)
setitimer(0x2, 0x0, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r9=>0x0, 0x4, 0x7, 0x7, 0x530, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8000, 0x40, 0x6, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', r9, 0x7800, 0x7, 0xfffffff8, 0x7, {{0x1a, 0x4, 0x2, 0x5, 0x68, 0x66, 0x0, 0xb0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x7, 0x6, [@rand_addr=0x64010100]}, @generic={0x44, 0x8, "ad8762469c4c"}, @rr={0x7, 0x7, 0x50, [@local]}, @noop, @generic={0x44, 0x4, "01d4"}, @ssrr={0x89, 0x17, 0x27, [@local, @private=0xa010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2]}, @lsrr={0x83, 0x7, 0xe, [@remote]}, @noop, @cipso={0x86, 0x18, 0x3, [{0x1, 0x9, "bb140ef28c92e3"}, {0x2, 0x9, "f14dfb113f9711"}]}]}}}}})

5.660447683s ago: executing program 4 (id=246):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffff"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

4.670637739s ago: executing program 4 (id=249):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

4.660094427s ago: executing program 2 (id=250):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x200440, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c)
recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/67, 0x43}], 0x1}, 0xc45a}, {{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000001580)=@sco, 0x80, 0x0}, 0x29b6}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x10100, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x0)
sendmmsg$inet6(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}], 0x1, 0x10)
shutdown(r1, 0x2)
getresuid(&(0x7f0000000200), 0x0, 0x0)
lstat(0x0, &(0x7f00000003c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)

4.547869111s ago: executing program 3 (id=251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.525411287s ago: executing program 1 (id=252):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1, 0x100, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)

4.101514482s ago: executing program 3 (id=253):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x80)
r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

3.828292282s ago: executing program 5 (id=254):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
unshare(0x400)
socket$xdp(0x2c, 0x3, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)

3.791359109s ago: executing program 2 (id=255):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000015c0)=ANY=[], 0x1, 0x2aa, &(0x7f0000001300)="$eJzs3cFqK2UUAOAzSZpGXSSIG0VwQBeuyq1bN41yBbErJYK60OC9FyQJhRYCVjB21Sdw6Xv4CG7c+AaCW8Fdu6iMTGamSWhSQ40p9H7f6jD/f86czF/SVc589fpo8OQoibOL36PVSqJ2EAdxmUQnalH5IRoBADwcl1kWf2V3yWzUNt8NALANxf//wn33AgBsxyefff5R9/Dw8cdp2opX2+fjXhIRo/Nxr1jvPotvYhhP41G04yoiu1bEH3x4+Dgaaa4Tb40m416eOfry17J+98+Iaf5+tKOzPH8/LczlT8a9nXgx0ug+26labccry/PfWZIfvWa8/eZc/3vRjt++jqMYxpPIc2f53++n6fvZjxfffZHfJs9PatHbne6byerbPBcAAAAAAAAAAAAAAAAAAAAAAB62vTRNivE90/k9+aVy/k79arq+l1Y6i/N5ivykKlTMB8qiHNEzyeKnar7OozRNs3LjLL8RrzW8WAAAAAAAAAAAAAAAAAAAAAByJ9+eDvrD4dPjjQTVNIDqZ/13rXMwd+WNOB3066sL7q5/r/lpA3mvt26ORiM29Fj+LXgh72fjlXdnh/tpFEF1MBu918vvFUVPB/20XKoe8qCfRLN64MvTW9XB/Ty/1IzFzcl1wXUby6Z/ElfZ4pm2rltdzGpu6Gk0X1q69HeWZevVefeP4ozKK8l0xMZ6d98pg6UfMA9aN8/9l9UFV35l1P/TFw4AAAAAAAAAAAAAAAAAALDS7Ee/SxbPbk2t/W9NAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCWzd7/XwWtiFi8ciOYlMm37SmDZhyf3PNHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DnwTwAAAP//0hxJIw==")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b)

3.368562291s ago: executing program 1 (id=256):
socket$inet(0x2, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0)

3.296801101s ago: executing program 4 (id=257):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'geneve1\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14)
bind$packet(r0, &(0x7f0000000280)={0x11, 0xf8, 0x0, 0x1, 0x45, 0x6, @remote}, 0x14)

3.15337064s ago: executing program 3 (id=258):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
ioctl(0xffffffffffffffff, 0x1, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc03", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

3.050985995s ago: executing program 5 (id=259):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000006000000ff0f000003"], 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

2.642380541s ago: executing program 2 (id=260):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe9"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

2.635593047s ago: executing program 1 (id=261):
r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r0, 0x621b7fa40716df4d, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)

2.495746962s ago: executing program 4 (id=262):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000000), 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r5, 0x1, 0x70bd26, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/15, @ANYRES32=0x0, @ANYBLOB="0500"/20, @ANYRES32=r7, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r9}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x2000000, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fdatasync(r1)
open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x2, 0x2, 0x0, 0x9, 0x29, 0x0, 0x400, 0x0, [@sadb_lifetime={0x4, 0x4, 0x5, 0xfffffffffffffffb}, @sadb_key={0x1e, 0x9, 0x740, 0x0, "eeda1b3dc7a82341795f6d34469a72c4bb17f237a5a57cc89a7027424e165a382d193a50a9a81ada7004c0d843e47314c7c91ac6fd6d986d6e58900d33e51dd72f33fabf7d89dfe865845160faf47d8913f0888b68511199d9c14db3e777c6ba7fd70c6aa79145a78028758034a64408dec55cbaa0e8d5f3cd32d50b0b5a03feaac3ba2c6d13869ae915e6002e92d7014b25bbf17aec5923a624f10efb6363d60e969df699f27a36a3b391ac4e501f6b6e0f8739a6deec980e07b3768c586f339358c653f00a6fad5109e7eef4345ab6c2755074fefe1cb67d17b051aa2c346eee7d9d5497876540"}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_port={0x1, 0x16}, @sadb_x_nat_t_type={0x1}]}, 0x148}, 0x1, 0x7}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2.328215184s ago: executing program 5 (id=263):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.895339983s ago: executing program 3 (id=264):
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e)

1.867330608s ago: executing program 1 (id=265):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x200440, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@private, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@private}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c)
recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/67, 0x43}], 0x1}, 0xc45a}, {{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000001580)=@sco, 0x80, 0x0}, 0x29b6}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x10100, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x0)
sendmmsg$inet6(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}], 0x1, 0x10)
shutdown(r1, 0x2)
getresuid(&(0x7f0000000200), 0x0, 0x0)
lstat(0x0, &(0x7f00000003c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)

1.69933805s ago: executing program 2 (id=266):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1, 0x100, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)

1.48547693s ago: executing program 5 (id=267):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

1.251802353s ago: executing program 1 (id=268):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x80)
r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

961.322272ms ago: executing program 3 (id=269):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00')
pread64(r2, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0)

864.35828ms ago: executing program 4 (id=270):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000015c0)=ANY=[], 0x1, 0x2aa, &(0x7f0000001300)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b)

778.416964ms ago: executing program 5 (id=271):
socket$inet(0x2, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0)

304.867388ms ago: executing program 1 (id=272):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f00000009c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x348}, 0x0, 0x800, 0x1})
io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0)

278.282128ms ago: executing program 2 (id=273):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000006000000ff0f000003"], 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

242.710827ms ago: executing program 3 (id=274):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
ioctl(0xffffffffffffffff, 0x1, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc03", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

0s ago: executing program 5 (id=275):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(0x0, r0)
sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r1, 0x621b7fa40716df4d, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts.
[  203.947996][ T5769] cgroup: Unknown subsys name 'net'
[  204.097789][ T5769] cgroup: Unknown subsys name 'cpuset'
[  204.115871][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  229.448943][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  229.455798][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  258.929977][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  264.569501][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  264.597300][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  264.617006][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  264.693581][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  264.769884][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  264.778935][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  264.790623][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  264.799497][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  264.814695][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  264.838727][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  264.850512][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  264.865115][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  264.874778][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  264.896519][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  264.916024][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  264.925770][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  264.936761][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  264.947154][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  264.965955][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  264.984445][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  264.984671][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  264.997477][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  265.009026][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  265.019376][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  265.091621][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  265.116901][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  265.126619][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  265.141850][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  265.153411][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  265.162967][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  266.655690][ T5785] chnl_net:caif_netlink_parms(): no params data found
[  266.807652][ T5789] chnl_net:caif_netlink_parms(): no params data found
[  266.865691][ T5792] Bluetooth: hci0: command tx timeout
[  266.991627][ T5794] chnl_net:caif_netlink_parms(): no params data found
[  267.107758][ T5792] Bluetooth: hci1: command tx timeout
[  267.111793][ T5793] chnl_net:caif_netlink_parms(): no params data found
[  267.113429][   T51] Bluetooth: hci3: command tx timeout
[  267.126196][   T51] Bluetooth: hci2: command tx timeout
[  267.348998][ T5795] Bluetooth: hci4: command tx timeout
[  267.708990][ T5798] chnl_net:caif_netlink_parms(): no params data found
[  268.038929][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.049721][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.057799][ T5785] bridge_slave_0: entered allmulticast mode
[  268.067533][ T5785] bridge_slave_0: entered promiscuous mode
[  268.081261][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.091740][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.099723][ T5794] bridge_slave_0: entered allmulticast mode
[  268.109222][ T5794] bridge_slave_0: entered promiscuous mode
[  268.211815][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.219799][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.230022][ T5785] bridge_slave_1: entered allmulticast mode
[  268.239945][ T5785] bridge_slave_1: entered promiscuous mode
[  268.252072][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.260106][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.270238][ T5794] bridge_slave_1: entered allmulticast mode
[  268.279781][ T5794] bridge_slave_1: entered promiscuous mode
[  268.501960][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.511873][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.519866][ T5789] bridge_slave_0: entered allmulticast mode
[  268.529638][ T5789] bridge_slave_0: entered promiscuous mode
[  268.636665][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.647715][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.655714][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.663497][ T5789] bridge_slave_1: entered allmulticast mode
[  268.673096][ T5789] bridge_slave_1: entered promiscuous mode
[  268.700128][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.708808][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.716797][ T5793] bridge_slave_0: entered allmulticast mode
[  268.726109][ T5793] bridge_slave_0: entered promiscuous mode
[  268.773393][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.792393][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.837098][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.945119][ T5795] Bluetooth: hci0: command tx timeout
[  268.980394][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.988391][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.996320][ T5793] bridge_slave_1: entered allmulticast mode
[  269.004693][ T5793] bridge_slave_1: entered promiscuous mode
[  269.185477][ T5795] Bluetooth: hci1: command tx timeout
[  269.187387][ T5792] Bluetooth: hci2: command tx timeout
[  269.191102][ T5795] Bluetooth: hci3: command tx timeout
[  269.222226][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.276065][ T5785] team0: Port device team_slave_0 added
[  269.291177][ T5794] team0: Port device team_slave_0 added
[  269.343129][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.391245][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.398974][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.406916][ T5798] bridge_slave_0: entered allmulticast mode
[  269.415661][ T5798] bridge_slave_0: entered promiscuous mode
[  269.430447][ T5795] Bluetooth: hci4: command tx timeout
[  269.430704][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.443890][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.451945][ T5798] bridge_slave_1: entered allmulticast mode
[  269.461453][ T5798] bridge_slave_1: entered promiscuous mode
[  269.479645][ T5785] team0: Port device team_slave_1 added
[  269.535492][ T5794] team0: Port device team_slave_1 added
[  269.553047][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.729216][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.745815][ T5789] team0: Port device team_slave_0 added
[  269.801959][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.889461][ T5789] team0: Port device team_slave_1 added
[  269.939529][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.946888][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.973295][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.997155][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.008902][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.016551][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.042872][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.058798][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.066063][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.092391][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.145814][ T5793] team0: Port device team_slave_0 added
[  270.211016][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.218337][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.244921][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.298662][ T5793] team0: Port device team_slave_1 added
[  270.367582][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.374772][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.401805][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.492601][ T5798] team0: Port device team_slave_0 added
[  270.502410][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.509788][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.536099][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.633853][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.641652][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.668135][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.688261][ T5798] team0: Port device team_slave_1 added
[  270.698374][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.705770][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.732069][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.827837][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.836756][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.863132][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.891124][ T5785] hsr_slave_0: entered promiscuous mode
[  270.903735][ T5785] hsr_slave_1: entered promiscuous mode
[  270.997668][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.005243][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.025228][ T5795] Bluetooth: hci0: command tx timeout
[  271.031721][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.253836][ T5794] hsr_slave_0: entered promiscuous mode
[  271.264266][ T5794] hsr_slave_1: entered promiscuous mode
[  271.266429][ T5795] Bluetooth: hci3: command tx timeout
[  271.273462][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.275626][ T5795] Bluetooth: hci2: command tx timeout
[  271.283079][ T5794] Cannot create hsr debugfs directory
[  271.288917][ T5795] Bluetooth: hci1: command tx timeout
[  271.468164][ T5789] hsr_slave_0: entered promiscuous mode
[  271.478577][ T5789] hsr_slave_1: entered promiscuous mode
[  271.487434][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.495297][ T5789] Cannot create hsr debugfs directory
[  271.505122][ T5795] Bluetooth: hci4: command tx timeout
[  271.571681][ T5793] hsr_slave_0: entered promiscuous mode
[  271.582166][ T5793] hsr_slave_1: entered promiscuous mode
[  271.591272][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.599168][ T5793] Cannot create hsr debugfs directory
[  271.696964][ T5798] hsr_slave_0: entered promiscuous mode
[  271.706622][ T5798] hsr_slave_1: entered promiscuous mode
[  271.715318][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.723052][ T5798] Cannot create hsr debugfs directory
[  273.138614][ T5795] Bluetooth: hci0: command tx timeout
[  273.140597][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  273.230446][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  273.260026][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  273.281677][ T5794] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  273.332257][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  273.345422][ T5795] Bluetooth: hci1: command tx timeout
[  273.351105][ T5795] Bluetooth: hci2: command tx timeout
[  273.357101][   T51] Bluetooth: hci3: command tx timeout
[  273.363023][ T5794] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  273.411560][ T5794] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  273.468897][ T5794] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  273.585609][ T5795] Bluetooth: hci4: command tx timeout
[  273.652842][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  273.775795][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  273.803839][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  273.829444][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  273.895853][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  273.938826][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  273.974346][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  274.005884][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  274.053611][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  274.082988][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  274.154572][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  274.209325][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  275.000324][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.174164][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[  275.225222][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.232970][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.321917][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.341678][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.349490][ T5074] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.453719][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.659393][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[  275.765557][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[  275.823529][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.831342][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.946185][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.990987][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.998790][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.016441][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.024223][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.119811][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.127680][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.283581][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.350189][ T5798] 8021q: adding VLAN 0 to HW filter on device team0
[  276.508072][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.515903][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.582302][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[  276.643514][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.651504][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.726636][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  276.852205][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.860134][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.891379][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.899221][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.161971][ T5798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  277.172743][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  278.245025][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.685627][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.847234][ T5785] veth0_vlan: entered promiscuous mode
[  279.033156][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.069285][ T5785] veth1_vlan: entered promiscuous mode
[  279.279493][ T5789] veth0_vlan: entered promiscuous mode
[  279.481225][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.514409][ T5789] veth1_vlan: entered promiscuous mode
[  279.548259][ T5785] veth0_macvtap: entered promiscuous mode
[  279.637061][ T5785] veth1_macvtap: entered promiscuous mode
[  279.681520][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.876277][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.980103][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.038448][ T5789] veth0_macvtap: entered promiscuous mode
[  280.161355][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.171159][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.180574][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.189740][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.214387][ T5798] veth0_vlan: entered promiscuous mode
[  280.243647][ T5789] veth1_macvtap: entered promiscuous mode
[  280.352227][ T5793] veth0_vlan: entered promiscuous mode
[  280.433580][ T5798] veth1_vlan: entered promiscuous mode
[  280.472985][ T5793] veth1_vlan: entered promiscuous mode
[  280.511831][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.523831][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.539676][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.700375][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.711522][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.727186][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.854414][ T5798] veth0_macvtap: entered promiscuous mode
[  280.919606][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.928917][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.938108][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.947242][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.983156][ T5798] veth1_macvtap: entered promiscuous mode
[  281.104615][ T5793] veth0_macvtap: entered promiscuous mode
[  281.217047][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.229654][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.239989][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.250792][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.267131][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.300740][ T5793] veth1_macvtap: entered promiscuous mode
[  281.381769][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.393203][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.403455][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.414366][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.429761][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.598382][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.607703][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.617025][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.626170][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.653800][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.666833][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.678583][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.689473][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.699836][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.710801][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.726366][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.939908][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.952309][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.964991][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.976290][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.986506][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.997284][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.012576][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.323941][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.334154][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.345208][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.355158][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.618576][ T5794] veth0_vlan: entered promiscuous mode
[  282.730642][ T5794] veth1_vlan: entered promiscuous mode
[  283.144516][ T5794] veth0_macvtap: entered promiscuous mode
[  283.234579][ T5794] veth1_macvtap: entered promiscuous mode
[  283.477838][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.488828][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.499178][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.510112][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.520492][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.531372][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.541735][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.552556][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.568277][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.787225][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.798269][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.808519][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.819369][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.831494][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.844296][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.856418][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.867335][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.882441][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.269386][ T5794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.280547][ T5794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.289935][ T5794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.299131][ T5794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.046922][ T4743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.056450][ T4743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.327120][ T5074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.335278][ T5074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.449054][ T4743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.457331][ T4743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.715134][ T3972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.723258][ T3972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.272255][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.280526][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.308346][ T5785] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  289.584139][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.596849][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.867907][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.876270][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.173090][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.182235][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.897903][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  290.904619][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  291.208282][ T5977] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3'.
[  291.401912][ T5977] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  291.411160][ T5977] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  291.423646][ T5977] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  291.769332][ T5983] loop0: detected capacity change from 0 to 1024
[  291.992107][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.231144][ T5988] loop3: detected capacity change from 0 to 2048
[  292.265984][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.273976][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.436644][ T5988]  loop3: p1 < > p4
[  292.543493][ T5988] loop3: p4 size 8388608 extends beyond EOD, truncated
[  292.580051][ T5074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.588435][ T5074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.748141][ T5996] loop2: detected capacity change from 0 to 512
[  292.903605][ T5996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.920572][ T5996] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.301656][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.189081][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.296042][ T6013] loop1: detected capacity change from 0 to 164
[  294.408851][ T6013] rock: directory entry would overflow storage
[  294.415567][ T6013] rock: sig=0x66, size=4, remaining=3
[  294.587037][ T6013] rock: directory entry would overflow storage
[  294.593572][ T6013] rock: sig=0x66, size=4, remaining=3
[  295.262258][ T6016] loop2: detected capacity change from 0 to 512
[  295.354615][ T6016] EXT4-fs: Ignoring removed oldalloc option
[  295.431753][ T6009] loop0: detected capacity change from 0 to 8192
[  295.536988][ T6016] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.15: Parent and EA inode have the same ino 15
[  295.606210][ T6016] EXT4-fs (loop2): Remounting filesystem read-only
[  295.613350][ T6016] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  295.626971][ T6016] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[  295.637776][ T6016] EXT4-fs (loop2): 1 orphan inode deleted
[  295.645754][ T6016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.859107][ T6009] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  295.868131][ T6009] FAT-fs (loop0): Filesystem has been set read-only
[  296.096973][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.884034][ T6035] loop2: detected capacity change from 0 to 512
[  297.100424][ T6035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.121003][ T6035] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.767828][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.293287][ T6050] loop4: detected capacity change from 0 to 164
[  298.351624][ T6048] =======================================================
[  298.351624][ T6048] WARNING: The mand mount option has been deprecated and
[  298.351624][ T6048]          and is ignored by this kernel. Remove the mand
[  298.351624][ T6048]          option from the mount to silence this warning.
[  298.351624][ T6048] =======================================================
[  298.496375][ T6050] rock: directory entry would overflow storage
[  298.502786][ T6050] rock: sig=0x66, size=4, remaining=3
[  298.635579][ T6050] rock: directory entry would overflow storage
[  298.641994][ T6050] rock: sig=0x66, size=4, remaining=3
[  299.486561][   T29] audit: type=1326 audit(1740331680.350:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.545268][ T3001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.607424][   T29] audit: type=1326 audit(1740331680.430:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.630060][   T29] audit: type=1326 audit(1740331680.430:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.656676][   T29] audit: type=1326 audit(1740331680.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.681248][   T29] audit: type=1326 audit(1740331680.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.706152][   T29] audit: type=1326 audit(1740331680.460:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.728552][   T29] audit: type=1326 audit(1740331680.470:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.750647][   T29] audit: type=1326 audit(1740331680.470:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.775748][   T29] audit: type=1326 audit(1740331680.470:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.798745][   T29] audit: type=1326 audit(1740331680.470:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  299.923838][ T3001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.168814][ T3001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.418316][ T3001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.564175][ T6071] netlink: 'syz.2.39': attribute type 3 has an invalid length.
[  301.076139][ T3001] bridge_slave_1: left allmulticast mode
[  301.082195][ T3001] bridge_slave_1: left promiscuous mode
[  301.089618][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.218907][ T3001] bridge_slave_0: left allmulticast mode
[  301.224995][ T3001] bridge_slave_0: left promiscuous mode
[  301.231709][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.976010][ T3001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.003223][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.019112][ T3001] bond0 (unregistering): Released all slaves
[  302.717469][ T3001] hsr_slave_0: left promiscuous mode
[  302.755372][ T3001] hsr_slave_1: left promiscuous mode
[  302.763472][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.771706][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.860582][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.869564][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.040175][ T3001] veth1_macvtap: left promiscuous mode
[  303.051005][ T3001] veth0_macvtap: left promiscuous mode
[  303.059453][ T3001] veth1_vlan: left promiscuous mode
[  303.065197][ T3001] veth0_vlan: left promiscuous mode
[  303.106809][ T2078] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  303.117103][ T6091] loop4: detected capacity change from 0 to 1024
[  303.167787][ T2078] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  303.626697][ T6091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.134485][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.233487][ T6102] loop2: detected capacity change from 0 to 164
[  304.251142][ T3001] team0 (unregistering): Port device team_slave_1 removed
[  304.357632][ T6102] rock: directory entry would overflow storage
[  304.364060][ T6102] rock: sig=0x66, size=4, remaining=3
[  304.382258][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  304.388265][ T3001] team0 (unregistering): Port device team_slave_0 removed
[  304.507116][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  304.526000][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  304.557139][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  304.570428][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  304.580532][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  304.770622][ T6102] rock: directory entry would overflow storage
[  304.777455][ T6102] rock: sig=0x66, size=4, remaining=3
[  306.956073][ T5792] Bluetooth: hci3: command tx timeout
[  306.982027][ T6103] chnl_net:caif_netlink_parms(): no params data found
[  307.220395][ T6129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'.
[  307.920733][ T6134] loop4: detected capacity change from 0 to 512
[  307.951472][ T6135] loop2: detected capacity change from 0 to 256
[  308.049300][ T6134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  308.287473][ T6134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.301054][ T6134] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.490730][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  308.490809][   T29] audit: type=1800 audit(1740331689.380:20): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.52" name="file1" dev="loop4" ino=15 res=0 errno=0
[  308.643775][ T6134] veth0_to_bridge: entered promiscuous mode
[  308.651110][ T6134] veth0_to_bridge: entered allmulticast mode
[  308.670355][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.692049][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.700339][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.708451][ T6103] bridge_slave_0: entered allmulticast mode
[  308.718213][ T6103] bridge_slave_0: entered promiscuous mode
[  308.757537][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.765622][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.773459][ T6103] bridge_slave_1: entered allmulticast mode
[  308.794356][ T6103] bridge_slave_1: entered promiscuous mode
[  309.034006][ T5792] Bluetooth: hci3: command tx timeout
[  309.171153][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.340950][ T6103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.372124][ T6153] loop3: detected capacity change from 0 to 2048
[  309.448821][ T6103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.621059][ T6153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.816657][ T6103] team0: Port device team_slave_0 added
[  309.834028][   T29] audit: type=1800 audit(1740331690.720:21): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="bus" dev="loop3" ino=18 res=0 errno=0
[  309.876026][ T6103] team0: Port device team_slave_1 added
[  310.052458][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.059858][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.091883][ T6103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.243199][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.250790][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.277356][ T6103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.325583][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.792996][ T2078] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  310.934664][ T2078] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  311.108900][ T5792] Bluetooth: hci3: command tx timeout
[  311.127567][ T6103] hsr_slave_0: entered promiscuous mode
[  311.141246][ T6103] hsr_slave_1: entered promiscuous mode
[  311.151168][ T6103] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.159065][ T6103] Cannot create hsr debugfs directory
[  311.730393][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.64'.
[  312.516489][ T6187] loop3: detected capacity change from 0 to 256
[  312.801263][ T6190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  313.205859][ T5795] Bluetooth: hci3: command tx timeout
[  313.230982][ T6103] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  313.281983][ T6103] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  313.336951][ T6103] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  313.416760][ T6103] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  313.443964][ T6193] loop4: detected capacity change from 0 to 512
[  313.501466][ T6193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  313.673792][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.687386][ T6193] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.891302][   T29] audit: type=1800 audit(1740331694.770:22): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.69" name="file1" dev="loop4" ino=15 res=0 errno=0
[  313.994089][ T6193] team_slave_0: entered promiscuous mode
[  314.000240][ T6193] team_slave_0: entered allmulticast mode
[  314.499304][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.735923][ T6103] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.904316][ T6103] 8021q: adding VLAN 0 to HW filter on device team0
[  315.012056][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.020067][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.162389][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.170261][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.151327][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'.
[  317.120315][ T6235] loop1: detected capacity change from 0 to 256
[  317.873161][ T6103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.367936][ T6248] loop4: detected capacity change from 0 to 512
[  318.442094][ T6248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  318.636089][ T6248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.649826][ T6248] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.909873][   T29] audit: type=1800 audit(1740331699.780:23): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.84" name="file1" dev="loop4" ino=15 res=0 errno=0
[  318.937591][ T6248] hsr_slave_0: entered allmulticast mode
[  319.377131][ T6266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.89'.
[  319.449368][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.637566][ T6103] veth0_vlan: entered promiscuous mode
[  320.752359][ T6103] veth1_vlan: entered promiscuous mode
[  320.986097][ T6283] loop4: detected capacity change from 0 to 256
[  321.205223][ T6103] veth0_macvtap: entered promiscuous mode
[  321.295539][ T6103] veth1_macvtap: entered promiscuous mode
[  321.421228][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.432366][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.442891][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.454462][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.465019][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.475816][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.492535][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.505296][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.521035][ T6103] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.619538][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.631402][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.641797][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.652737][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.662946][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.673805][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.691076][ T6103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.703825][ T6103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.719556][ T6103] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.043426][ T6103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.054524][ T6103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.064030][ T6103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.073525][ T6103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.696594][ T6301] loop1: detected capacity change from 0 to 512
[  322.751935][ T6301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  322.950448][ T6301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.963840][ T6301] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.140138][   T29] audit: type=1800 audit(1740331704.020:24): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.100" name="file1" dev="loop1" ino=15 res=0 errno=0
[  323.212103][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.100'.
[  323.379075][ T6311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.101'.
[  323.720804][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.078762][ T6336] loop2: detected capacity change from 0 to 256
[  326.828878][ T6356] loop3: detected capacity change from 0 to 512
[  326.935220][ T6356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  327.011723][ T6361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'.
[  327.104598][ T6356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.125751][ T6356] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.459846][   T29] audit: type=1800 audit(1740331708.340:25): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.113" name="file1" dev="loop3" ino=15 res=0 errno=0
[  327.509567][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.113'.
[  328.105890][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.796658][ T6385] loop1: detected capacity change from 0 to 256
[  329.833186][ T4112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.842068][ T4112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.918148][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'.
[  330.045417][ T4112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.053533][ T4112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.242906][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.126'.
[  330.833742][ T6413] loop1: detected capacity change from 0 to 512
[  330.928828][ T6413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  331.020398][ T6413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.033783][ T6413] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.179118][   T29] audit: type=1800 audit(1740331712.060:26): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.128" name="file1" dev="loop1" ino=15 res=0 errno=0
[  331.247508][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'.
[  331.602028][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.195419][ T6428] loop1: detected capacity change from 0 to 256
[  332.376487][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'.
[  333.110738][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.139'.
[  333.422308][   T29] audit: type=1326 audit(1740331714.240:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000
[  333.447900][   T29] audit: type=1326 audit(1740331714.240:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000
[  333.476855][   T29] audit: type=1326 audit(1740331714.280:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000
[  333.501273][   T29] audit: type=1326 audit(1740331714.280:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000
[  333.524041][   T29] audit: type=1326 audit(1740331714.280:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000
[  333.546505][   T29] audit: type=1326 audit(1740331714.290:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000
[  333.575304][   T29] audit: type=1326 audit(1740331714.310:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000
[  333.801444][   T29] audit: type=1326 audit(1740331714.500:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000
[  333.823971][   T29] audit: type=1326 audit(1740331714.500:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000
[  333.847007][   T29] audit: type=1326 audit(1740331714.530:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000
[  334.254739][ T6455] loop3: detected capacity change from 0 to 512
[  334.326849][ T6455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  334.488071][ T6455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.501551][ T6455] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.816334][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'.
[  335.312637][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.389300][ T6473] loop1: detected capacity change from 0 to 256
[  335.597614][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.151'.
[  335.896728][ T6479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.154'.
[  336.690126][ T6491] IPv6: Can't replace route, no match found
[  337.450629][ T6498] loop2: detected capacity change from 0 to 512
[  337.495031][ T6498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  337.618164][ T6498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.631709][ T6498] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.850817][ T6508] loop5: detected capacity change from 0 to 256
[  337.919445][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'.
[  338.082846][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'.
[  338.308540][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.936421][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.167'.
[  339.782282][ T6530] loop2: detected capacity change from 0 to 512
[  339.799590][ T6532] netem: change failed
[  339.852628][ T6530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  339.866790][ T6530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  339.955094][ T6530] EXT4-fs (loop2): 1 truncate cleaned up
[  339.963076][ T6530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.069082][ T6539] loop1: detected capacity change from 0 to 512
[  340.079332][ T6539] EXT4-fs: Ignoring removed oldalloc option
[  340.134399][ T6539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.175: Parent and EA inode have the same ino 15
[  340.150235][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'.
[  340.216135][ T6539] EXT4-fs (loop1): Remounting filesystem read-only
[  340.226008][ T6539] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[  340.237426][ T6539] EXT4-fs (loop1): 1 orphan inode deleted
[  340.245686][ T6539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.859092][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.878781][ T6549] loop4: detected capacity change from 0 to 512
[  340.919242][ T6549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  341.096026][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.182211][ T6549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.196078][ T6549] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.327907][ T6556] loop1: detected capacity change from 0 to 256
[  341.487990][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  341.488072][   T29] audit: type=1800 audit(1740331722.350:42): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.177" name="file1" dev="loop4" ino=15 res=0 errno=0
[  341.535641][ T6549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.177'.
[  341.824192][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[  341.852458][ T6563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.182'.
[  341.998217][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.409516][ T6585] loop4: detected capacity change from 0 to 512
[  343.419459][ T6585] EXT4-fs: Ignoring removed oldalloc option
[  343.565322][ T6585] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.189: Parent and EA inode have the same ino 15
[  343.621490][ T6585] EXT4-fs (loop4): Remounting filesystem read-only
[  343.628885][ T6585] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[  343.639894][ T6585] EXT4-fs (loop4): 1 orphan inode deleted
[  343.647844][ T6585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.784335][ T6587] loop5: detected capacity change from 0 to 512
[  343.916788][ T6587] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  344.042114][ T6587] EXT4-fs (loop5): 1 truncate cleaned up
[  344.050195][ T6587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.120785][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.257123][ T6587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.190'.
[  344.654660][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'.
[  344.944296][ T6604] loop4: detected capacity change from 0 to 512
[  345.033224][ T6103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.075276][ T6604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  345.158019][ T6606] loop2: detected capacity change from 0 to 256
[  345.187703][ T6604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.200948][ T6604] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.496415][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.194'.
[  345.506801][   T29] audit: type=1800 audit(1740331726.380:43): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.194" name="file1" dev="loop4" ino=15 res=0 errno=0
[  345.914847][    C0] Illegal XDP return value 16128 on prog  (id 66) dev bond_slave_1, expect packet loss!
[  346.117628][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.849533][ T6632] loop5: detected capacity change from 0 to 512
[  346.904070][ T6632] EXT4-fs: Ignoring removed oldalloc option
[  347.008152][ T6632] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.204: Parent and EA inode have the same ino 15
[  347.088838][ T6632] EXT4-fs (loop5): Remounting filesystem read-only
[  347.096353][ T6632] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[  347.106959][ T6632] EXT4-fs (loop5): 1 orphan inode deleted
[  347.114738][ T6632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.528974][ T6103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.178744][ T6647] loop5: detected capacity change from 0 to 512
[  348.245490][ T6647] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  348.315095][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'.
[  348.375559][ T6647] EXT4-fs (loop5): 1 truncate cleaned up
[  348.383420][ T6647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.547444][ T6654] loop4: detected capacity change from 0 to 256
[  348.571067][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.208'.
[  349.610493][ T6103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.883270][ T6687] loop2: detected capacity change from 0 to 512
[  350.958680][ T6687] EXT4-fs: Ignoring removed oldalloc option
[  351.089469][ T6687] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.218: Parent and EA inode have the same ino 15
[  351.215544][ T6687] EXT4-fs (loop2): Remounting filesystem read-only
[  351.222689][ T6687] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[  351.233449][ T6687] EXT4-fs (loop2): 1 orphan inode deleted
[  351.243228][ T6687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.725670][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.957036][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'.
[  352.336626][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  352.343331][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  352.388762][ T6709] loop2: detected capacity change from 0 to 256
[  352.656521][ T6710] loop4: detected capacity change from 0 to 512
[  352.745272][ T6710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  352.833873][ T6710] EXT4-fs (loop4): 1 truncate cleaned up
[  352.843113][ T6710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.089283][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'.
[  353.101773][ T6708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.226'.
[  353.277001][ T6714] syz.1.228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  353.852601][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.322903][ T6752] loop2: detected capacity change from 0 to 512
[  355.456327][ T6752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.470129][ T6752] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  355.514669][ T6755] loop1: detected capacity change from 0 to 256
[  356.037385][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.517049][ T6764] loop5: detected capacity change from 0 to 512
[  356.579007][ T6767] loop1: detected capacity change from 0 to 512
[  356.586696][ T6764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  356.631507][ T6767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  356.713328][ T6767] EXT4-fs (loop1): 1 truncate cleaned up
[  356.724258][ T6767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.810127][ T6764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.823499][ T6764] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.026079][   T29] audit: type=1800 audit(1740331737.910:44): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.241" name="file1" dev="loop5" ino=15 res=0 errno=0
[  357.058712][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.5.241'.
[  357.111977][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'.
[  357.153740][ T6764] macvlan0: entered promiscuous mode
[  357.159662][ T6764] macvlan0: entered allmulticast mode
[  357.202544][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'.
[  357.773747][ T6103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.008373][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.066253][ T6808] capability: warning: `syz.5.254' uses deprecated v2 capabilities in a way that may be insecure
[  359.141296][ T6809] loop2: detected capacity change from 0 to 256
[  359.827596][ T6817] Zero length message leads to an empty skb
[  359.835993][ T6816] loop3: detected capacity change from 0 to 512
[  359.937146][ T6816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  360.081886][ T6816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.103187][ T6816] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.273913][   T29] audit: type=1800 audit(1740331741.150:45): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.258" name="file1" dev="loop3" ino=15 res=0 errno=0
[  360.285363][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.258'.
[  360.535801][ T6826] loop4: detected capacity change from 0 to 512
[  360.580525][ T6826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  360.631514][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.725824][ T6826] EXT4-fs (loop4): 1 truncate cleaned up
[  360.733541][ T6826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.874650][ T6826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.262'.
[  361.662158][ T5794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.220784][ T6848] loop4: detected capacity change from 0 to 256
[  362.615332][ T6852] =====================================================
[  362.622689][ T6852] BUG: KMSAN: uninit-value in cmsghdr_from_user_compat_to_kern+0x568/0x10d0
[  362.632414][ T6852]  cmsghdr_from_user_compat_to_kern+0x568/0x10d0
[  362.639291][ T6852]  ____sys_sendmsg+0x22c/0xda0
[  362.646392][ T6852]  __sys_sendmsg_sock+0x42/0x60
[  362.651456][ T6852]  io_sendmsg+0x36a/0xe30
[  362.656925][ T6852]  io_issue_sqe+0x394/0x1fb0
[  362.658337][ T6853] loop3: detected capacity change from 0 to 512
[  362.661709][ T6852]  io_submit_sqes+0x11c3/0x2ff0
[  362.673846][ T6852]  __se_sys_io_uring_enter+0x41d/0x4da0
[  362.679912][ T6852]  __ia32_sys_io_uring_enter+0x11d/0x1a0
[  362.685947][ T6852]  ia32_sys_call+0xd59/0x4180
[  362.690866][ T6852]  __do_fast_syscall_32+0xb0/0x110
[  362.696459][ T6852]  do_fast_syscall_32+0x38/0x80
[  362.701585][ T6852]  do_SYSENTER_32+0x1f/0x30
[  362.706457][ T6852]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  362.713101][ T6852] 
[  362.715870][ T6853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  362.726562][ T6852] Uninit was stored to memory at:
[  362.731882][ T6852]  io_sendmsg+0x694/0xe30
[  362.736585][ T6852]  io_issue_sqe+0x394/0x1fb0
[  362.741423][ T6852]  io_submit_sqes+0x11c3/0x2ff0
[  362.748650][ T6852]  __se_sys_io_uring_enter+0x41d/0x4da0
[  362.754467][ T6852]  __ia32_sys_io_uring_enter+0x11d/0x1a0
[  362.761085][ T6852]  ia32_sys_call+0xd59/0x4180
[  362.766159][ T6852]  __do_fast_syscall_32+0xb0/0x110
[  362.771496][ T6852]  do_fast_syscall_32+0x38/0x80
[  362.776866][ T6852]  do_SYSENTER_32+0x1f/0x30
[  362.781594][ T6852]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  362.788403][ T6852] 
[  362.790855][ T6852] Uninit was created at:
[  362.795557][ T6852]  __alloc_frozen_pages_noprof+0x9a7/0xe00
[  362.801689][ T6852]  alloc_pages_mpol+0x4cd/0x890
[  362.806912][ T6852]  alloc_frozen_pages_noprof+0x1bf/0x1e0
[  362.812814][ T6852]  allocate_slab+0x23a/0x1110
[  362.817886][ T6852]  ___slab_alloc+0x1287/0x3540
[  362.822910][ T6852]  kmem_cache_alloc_bulk_noprof+0x486/0x1330
[  362.829495][ T6852]  __io_alloc_req_refill+0x84/0x5b0
[  362.835167][ T6852]  io_submit_sqes+0x90f/0x2ff0
[  362.840186][ T6852]  __se_sys_io_uring_enter+0x41d/0x4da0
[  362.846127][ T6852]  __ia32_sys_io_uring_enter+0x11d/0x1a0
[  362.854016][ T6852]  ia32_sys_call+0xd59/0x4180
[  362.859758][ T6852]  __do_fast_syscall_32+0xb0/0x110
[  362.865249][ T6852]  do_fast_syscall_32+0x38/0x80
[  362.870342][ T6852]  do_SYSENTER_32+0x1f/0x30
[  362.875223][ T6852]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  362.881856][ T6852] 
[  362.884335][ T6852] CPU: 1 UID: 0 PID: 6852 Comm: syz.1.272 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0
[  362.895508][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  362.905909][ T6852] =====================================================
[  362.912995][ T6852] Disabling lock debugging due to kernel taint
[  362.919435][ T6852] Kernel panic - not syncing: kmsan.panic set ...
[  362.926044][ T6852] CPU: 1 UID: 0 PID: 6852 Comm: syz.1.272 Tainted: G    B              6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0
[  362.938353][ T6852] Tainted: [B]=BAD_PAGE
[  362.942618][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  362.952847][ T6852] Call Trace:
[  362.956270][ T6852]  <TASK>
[  362.959332][ T6852]  dump_stack_lvl+0x216/0x2d0
[  362.964200][ T6852]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  362.970258][ T6852]  dump_stack+0x1e/0x24
[  362.974592][ T6852]  panic+0x4e2/0xcf0
[  362.978743][ T6852]  ? kmsan_get_metadata+0xc1/0x1c0
[  362.984116][ T6852]  kmsan_report+0x2c7/0x2d0
[  362.988849][ T6852]  ? kmsan_get_metadata+0xc0/0x1c0
[  362.994198][ T6852]  ? __msan_warning+0x95/0x120
[  362.999164][ T6852]  ? cmsghdr_from_user_compat_to_kern+0x568/0x10d0
[  363.005910][ T6852]  ? ____sys_sendmsg+0x22c/0xda0
[  363.011035][ T6852]  ? __sys_sendmsg_sock+0x42/0x60
[  363.016242][ T6852]  ? io_sendmsg+0x36a/0xe30
[  363.020965][ T6852]  ? io_issue_sqe+0x394/0x1fb0
[  363.025940][ T6852]  ? io_submit_sqes+0x11c3/0x2ff0
[  363.031189][ T6852]  ? __se_sys_io_uring_enter+0x41d/0x4da0
[  363.037140][ T6852]  ? __ia32_sys_io_uring_enter+0x11d/0x1a0
[  363.043185][ T6852]  ? ia32_sys_call+0xd59/0x4180
[  363.048249][ T6852]  ? __do_fast_syscall_32+0xb0/0x110
[  363.053752][ T6852]  ? do_fast_syscall_32+0x38/0x80
[  363.059003][ T6852]  ? do_SYSENTER_32+0x1f/0x30
[  363.063895][ T6852]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  363.070659][ T6852]  ? kernel_text_address+0x129/0x1b0
[  363.076178][ T6852]  ? kmsan_get_metadata+0x13e/0x1c0
[  363.081596][ T6852]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  363.088165][ T6852]  ? kmsan_get_metadata+0x13e/0x1c0
[  363.093601][ T6852]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  363.099687][ T6852]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  363.105754][ T6852]  ? kmsan_get_metadata+0x13e/0x1c0
[  363.111185][ T6852]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  363.117739][ T6852]  ? kmsan_get_metadata+0x13e/0x1c0
[  363.123170][ T6852]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  363.129212][ T6852]  __msan_warning+0x95/0x120
[  363.134009][ T6852]  cmsghdr_from_user_compat_to_kern+0x568/0x10d0
[  363.140605][ T6852]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  363.146701][ T6852]  ? stack_depot_save_flags+0x6db/0x750
[  363.152495][ T6852]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  363.159082][ T6852]  ? kmsan_get_metadata+0x13e/0x1c0
[  363.164547][ T6852]  ____sys_sendmsg+0x22c/0xda0
[  363.169512][ T6852]  ? __fget_files+0x42b/0x500
[  363.174431][ T6852]  ? kmsan_get_metadata+0xc0/0x1c0
[  363.179782][ T6852]  __sys_sendmsg_sock+0x42/0x60
[  363.184918][ T6852]  io_sendmsg+0x36a/0xe30
[  363.189517][ T6852]  ? __pfx_io_sendmsg+0x10/0x10
[  363.194604][ T6852]  io_issue_sqe+0x394/0x1fb0
[  363.199527][ T6852]  io_submit_sqes+0x11c3/0x2ff0
[  363.204629][ T6852]  ? kmsan_get_metadata+0xc0/0x1c0
[  363.209970][ T6852]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  363.216613][ T6852]  __se_sys_io_uring_enter+0x41d/0x4da0
[  363.222453][ T6852]  ? finish_task_switch+0x1c8/0x8f0
[  363.227905][ T6852]  ? do_futex+0x380/0x4a0
[  363.232476][ T6852]  ? kmsan_get_metadata+0x13e/0x1c0
[  363.237905][ T6852]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  363.243962][ T6852]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  363.250022][ T6852]  __ia32_sys_io_uring_enter+0x11d/0x1a0
[  363.255925][ T6852]  ia32_sys_call+0xd59/0x4180
[  363.260837][ T6852]  __do_fast_syscall_32+0xb0/0x110
[  363.266213][ T6852]  do_fast_syscall_32+0x38/0x80
[  363.271356][ T6852]  do_SYSENTER_32+0x1f/0x30
[  363.276077][ T6852]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  363.282690][ T6852] RIP: 0023:0xf745d579
[  363.286920][ T6852] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  363.306750][ T6852] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa
[  363.315548][ T6852] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000008aa
[  363.323697][ T6852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  363.331843][ T6852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  363.340010][ T6852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  363.348170][ T6852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  363.356333][ T6852]  </TASK>
[  363.359647][ T6852] Kernel Offset: disabled
[  363.364073][ T6852] Rebooting in 86400 seconds..