last executing test programs:

6.956805905s ago: executing program 3 (id=624):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)

6.821931706s ago: executing program 3 (id=626):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18)

6.678043867s ago: executing program 3 (id=628):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='io\x00')
preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000500)=""/187, 0xe6}], 0x19, 0x4, 0xd301)

6.567729837s ago: executing program 3 (id=632):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))

6.333070199s ago: executing program 3 (id=637):
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_GET_THP_DISABLE(0x2a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x10, 0x0, @opaque="767bdaf667316fa9"}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})

5.222854596s ago: executing program 3 (id=644):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000380)=""/106, 0xbe}], 0x1, 0x40fb, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x409, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

2.540854883s ago: executing program 2 (id=659):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x6000, 0x1e8, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)

2.488502454s ago: executing program 4 (id=660):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0xccc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc9c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xf}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_POLICE={0xc60, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xec8, 0xffffffff, 0x2, 0x7, 0x7, 0x8001, 0x2, 0x3, 0x4b79, 0x667, 0xecd7, 0x7b, 0x1548, 0x7fff, 0x80000000, 0x0, 0x800, 0xa, 0x3, 0x10000, 0x6, 0x9, 0x8, 0x5, 0x1, 0x2, 0x200, 0x800, 0x0, 0x8000, 0x0, 0xb4, 0xfffffffa, 0x3, 0x4, 0x1, 0x7, 0x5, 0x3, 0xffffffff, 0x1, 0xb4d, 0x4, 0x0, 0x5, 0x1ff, 0x78, 0x0, 0x9, 0x6, 0x400, 0x0, 0x5, 0x81, 0x7fff, 0x7727637b, 0x3, 0x3, 0xe, 0x6, 0x80000000, 0xffffffff, 0x1, 0x2, 0x7, 0x6, 0x5cd, 0x7, 0x6, 0x8, 0x9, 0x4, 0x6d, 0x4, 0x7f08, 0x0, 0x5, 0x7, 0xfffffff1, 0xd2, 0x8000, 0x0, 0x312a, 0x6, 0x5, 0x3, 0x7, 0x80000001, 0x30a, 0x6, 0x4, 0xc4b, 0x7, 0x1000, 0x100, 0x0, 0x4, 0x2, 0x3, 0x9, 0x10000, 0xc5e, 0x0, 0x40, 0x5, 0x8, 0x5, 0x401, 0x4, 0x5, 0x7, 0x2, 0x80000001, 0xb, 0x0, 0x2883, 0x6, 0x2, 0x2, 0x4, 0x1, 0x8, 0x5, 0x64, 0x7, 0x2, 0x3, 0x6, 0x6, 0xf9, 0xfc000000, 0xd, 0xfffffffd, 0xfff, 0x3ff, 0x3, 0x80000000, 0x1, 0x1, 0xffff, 0x6, 0x7f, 0xa0000000, 0x2, 0x3, 0x1866, 0x8, 0x3, 0x3, 0x3, 0x100, 0x7, 0x7, 0x82, 0x7, 0x200, 0xa8, 0x5, 0x5a5, 0xc, 0x6, 0x101, 0x7, 0x25d, 0xffffffff, 0x80000001, 0x9, 0x176a, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x9, 0x78, 0x2, 0x26, 0x100, 0x2, 0x4, 0xffffffff, 0xc2c16dd9, 0xf58, 0x2, 0x4, 0xcf4, 0x795a33b2, 0x2, 0xe, 0x4, 0x8, 0x0, 0x8, 0x0, 0xd2000000, 0x1, 0x0, 0xc74, 0x9, 0x10001, 0x3, 0x9, 0x7, 0xa8, 0x3, 0x7, 0x8, 0x4, 0xfff, 0x66e945ea, 0xd47, 0xe, 0x8, 0x4, 0x1, 0x4, 0xfffffff7, 0x500000, 0x0, 0x7ff, 0x6, 0x5a, 0x80, 0x401, 0x0, 0xfffffc00, 0x4, 0x40, 0x4, 0x8, 0x7, 0x6, 0xffffffff, 0xfffffff8, 0x6, 0x7, 0x9, 0x4e09, 0x5, 0x8000, 0x80, 0x0, 0x1, 0x5, 0x800, 0xffffffff, 0x2, 0x3, 0x48, 0x4, 0x0, 0xfffffffc, 0x8, 0x2, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x1, 0x5184, 0xfffffe00, {0x6, 0x0, 0x5, 0xc, 0x5, 0x3ff}, {0x2b, 0x1, 0x3, 0x8, 0x8}, 0xf, 0x8000, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x6, 0x3, 0x6, 0xe3b9, 0x1, 0x4, 0x2, 0x3d7, 0xfffffff9, 0x40, 0x4, 0xe5, 0x3, 0x9, 0x1, 0x7, 0x6, 0x5, 0x5, 0x1, 0x8d, 0x8, 0x8, 0x400, 0x5, 0x7, 0x9, 0xb, 0x9, 0x3, 0x9, 0x9, 0x7, 0x6, 0xd6, 0x6, 0x7, 0x8, 0x9bc, 0x7, 0xffffffff, 0x8, 0x7, 0x4, 0xdc, 0xe, 0x9b5b, 0x3, 0x3, 0x9, 0x826, 0x4, 0x8, 0x1, 0x4, 0x5, 0x3, 0x0, 0x1ff, 0x5, 0x3, 0x40000000, 0x1, 0xfffffff2, 0xb06, 0x3, 0x7c0, 0x10, 0xfffffffe, 0x1, 0x3, 0xfffffffe, 0x8001, 0x7, 0x0, 0x101, 0x3, 0x5, 0x8001, 0x7, 0x7fff, 0xb, 0x8, 0x59c8, 0x2, 0xff, 0x0, 0x3a2e, 0x5, 0x61, 0x2, 0x8, 0x2, 0x1, 0x8, 0x7, 0x4, 0x2, 0x0, 0x6, 0x1, 0x1a2a, 0xf6, 0x7, 0x1, 0xfffffffe, 0x5, 0x3, 0xe129, 0xce2, 0x7f1, 0x3, 0xffff, 0xa100, 0x0, 0x10001, 0x2, 0xac, 0x72ba05b7, 0x2, 0x9, 0x7fffffff, 0x4, 0xfd, 0xbe43, 0x3ff, 0x9, 0x2, 0xff, 0x5, 0x9, 0x9, 0x4, 0x100000, 0x81, 0x3, 0x7348, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x5a, 0x1, 0x80000000, 0x2, 0x3, 0x5, 0x101, 0x2, 0x80000001, 0x4, 0x0, 0x5, 0x9, 0x8, 0x2, 0xd3af, 0xf, 0xd, 0xf, 0xaaee, 0x400, 0x7, 0xfffffff7, 0x7c, 0x1, 0xffffffef, 0x6, 0x100, 0x6, 0x1, 0x6, 0x3ff, 0x3, 0x678, 0x4, 0x10000, 0x5c09, 0x6, 0x4, 0x8, 0x9, 0x4, 0x7, 0x6, 0xe30d, 0x7ff, 0x1, 0x7c6a2ca8, 0x3ff, 0xd0f, 0x5, 0x10001, 0x4, 0xf, 0x4856, 0xff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x4, 0x5, 0x1, 0x100, 0x5, 0x3, 0x3, 0x7, 0x0, 0x10000, 0x1, 0x1, 0x80, 0x1, 0x3, 0xffff, 0x100, 0x8001, 0xfffffffb, 0xa, 0x8000, 0x0, 0x7, 0x9, 0x8, 0x211, 0x8, 0x1, 0x0, 0x1000, 0xc, 0x1, 0x800, 0xfffffeff, 0x8, 0x6, 0x3e9, 0x10000, 0x5, 0x3, 0x7, 0x4, 0x6, 0x7496b2ee, 0x81, 0x5, 0x1000, 0x33, 0x4, 0x5]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0xff, 0x5, 0x5, 0x5, 0x8, 0xe, 0xa27c, 0xffffffff, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x4, 0xfffffffd, 0x8000, 0x2, 0x1, 0x10001, 0xfffffff9, 0xd78, 0xfffffffb, 0x5, 0x3, 0x6, 0x5, 0x6, 0x3, 0x80, 0x0, 0x2, 0xf2a4, 0x10001, 0x7, 0x8, 0x0, 0x40, 0x4, 0x1a41, 0x6, 0xc1cb, 0x2, 0x0, 0x2, 0x7, 0x6, 0x5, 0x100, 0x5cf2, 0x8, 0x1, 0x20960f7b, 0x6, 0x9, 0x8, 0x6, 0x5, 0x7, 0x6a5, 0x18000, 0xe62, 0x1, 0x7, 0x80000001, 0xe, 0x401, 0x561d, 0xffff, 0x0, 0x32e, 0x6, 0x6, 0x7, 0x81e, 0x3, 0xfdf4, 0xffffffff, 0xfffffff9, 0x7, 0x5, 0x0, 0x9, 0xfffffff8, 0x4f, 0x81, 0x9, 0x1, 0x63, 0x7, 0x40, 0x3ff, 0x7fffffff, 0x4, 0xc, 0x8, 0x1, 0x9, 0x3, 0x0, 0x1, 0x97f9, 0xfffffffd, 0x6, 0x6, 0x81, 0x8, 0x8001, 0x4, 0x6a446555, 0x6, 0x1000, 0x8001, 0x3, 0x3, 0xffffffff, 0x40, 0x9, 0x9, 0x9, 0xf9, 0xffffffff, 0xc, 0x9, 0x61b6, 0xfffff123, 0x2653ab6c, 0x5, 0x0, 0x800, 0x0, 0xd, 0x3, 0x6, 0xca, 0x6, 0xc406, 0x5, 0xf, 0xff, 0xfffffff9, 0xfffffffc, 0x524, 0x80000000, 0x11, 0x8, 0x8, 0x2, 0x10000, 0x3, 0xfffff57a, 0x3, 0x3d2, 0x802, 0x9, 0x8, 0x6, 0x80, 0x1, 0x1, 0x80000000, 0xf, 0xc6f, 0x7, 0x7fffffff, 0x8, 0x12ba, 0x9, 0x1, 0xf99, 0x7, 0x3, 0x6, 0x1, 0x4, 0x7fff, 0x6195, 0x4, 0x45ca29e4, 0x40, 0x4, 0x40, 0x9, 0x101, 0x1, 0x8, 0xffffffc0, 0x8, 0x0, 0x8, 0x1, 0x5, 0x6d, 0x8, 0xffffffe4, 0x0, 0xfffffff9, 0x5, 0x9, 0x6, 0x8000, 0x608f, 0xfffffff8, 0x3288, 0x400, 0x10, 0x9, 0x10001, 0x3, 0x9, 0x7, 0x2, 0x1, 0xe, 0x800, 0x3fbb5ed2, 0x6, 0xfffffffc, 0x2719, 0x3, 0x7, 0x2, 0x8, 0x52, 0x9fa, 0xbe8, 0x7, 0x7, 0xffff, 0x400, 0x8, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8001, 0x3, 0x9, 0xa, 0x7ff, 0xc00, 0x5, 0x5, 0x8001, 0x8, 0x9]}]}]}}]}, 0xccc}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x10)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xac, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x7f, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@device_b, {0x6, 0x6}, @value=@ver_80211n={0x0, 0x61e, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x40, @val={0x10, 0x1, 0xf5}, [{0xdd, 0x54, "2723f16dd723c0b5a654fe006248c1c6440c805b16577201fe42d3008fcd9c3c82d842ca9d6909a1040f4cba6b2e87bc83c3da9bb61978b6fda47f9d4ae62c1479171cf614d08280a054af410a88fdc4664dea07"}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @remote}, 0x10)

2.441122814s ago: executing program 2 (id=662):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0)

2.412033454s ago: executing program 1 (id=663):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback, 0x826f}}}, 0x32)
sendmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040804)

2.358598735s ago: executing program 2 (id=664):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
setuid(0x0)

2.312085075s ago: executing program 4 (id=665):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00'}, 0x18)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530)

2.305382355s ago: executing program 1 (id=666):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x2, 0x2a, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
close(r0)

2.285105495s ago: executing program 2 (id=668):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0xccc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc9c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xf}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_POLICE={0xc60, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xec8, 0xffffffff, 0x2, 0x7, 0x7, 0x8001, 0x2, 0x3, 0x4b79, 0x667, 0xecd7, 0x7b, 0x1548, 0x7fff, 0x80000000, 0x0, 0x800, 0xa, 0x3, 0x10000, 0x6, 0x9, 0x8, 0x5, 0x1, 0x2, 0x200, 0x800, 0x0, 0x8000, 0x0, 0xb4, 0xfffffffa, 0x3, 0x4, 0x1, 0x7, 0x5, 0x3, 0xffffffff, 0x1, 0xb4d, 0x4, 0x0, 0x5, 0x1ff, 0x78, 0x0, 0x9, 0x6, 0x400, 0x0, 0x5, 0x81, 0x7fff, 0x7727637b, 0x3, 0x3, 0xe, 0x6, 0x80000000, 0xffffffff, 0x1, 0x2, 0x7, 0x6, 0x5cd, 0x7, 0x6, 0x8, 0x9, 0x4, 0x6d, 0x4, 0x7f08, 0x0, 0x5, 0x7, 0xfffffff1, 0xd2, 0x8000, 0x0, 0x312a, 0x6, 0x5, 0x3, 0x7, 0x80000001, 0x30a, 0x6, 0x4, 0xc4b, 0x7, 0x1000, 0x100, 0x0, 0x4, 0x2, 0x3, 0x9, 0x10000, 0xc5e, 0x0, 0x40, 0x5, 0x8, 0x5, 0x401, 0x4, 0x5, 0x7, 0x2, 0x80000001, 0xb, 0x0, 0x2883, 0x6, 0x2, 0x2, 0x4, 0x1, 0x8, 0x5, 0x64, 0x7, 0x2, 0x3, 0x6, 0x6, 0xf9, 0xfc000000, 0xd, 0xfffffffd, 0xfff, 0x3ff, 0x3, 0x80000000, 0x1, 0x1, 0xffff, 0x6, 0x7f, 0xa0000000, 0x2, 0x3, 0x1866, 0x8, 0x3, 0x3, 0x3, 0x100, 0x7, 0x7, 0x82, 0x7, 0x200, 0xa8, 0x5, 0x5a5, 0xc, 0x6, 0x101, 0x7, 0x25d, 0xffffffff, 0x80000001, 0x9, 0x176a, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x9, 0x78, 0x2, 0x26, 0x100, 0x2, 0x4, 0xffffffff, 0xc2c16dd9, 0xf58, 0x2, 0x4, 0xcf4, 0x795a33b2, 0x2, 0xe, 0x4, 0x8, 0x0, 0x8, 0x0, 0xd2000000, 0x1, 0x0, 0xc74, 0x9, 0x10001, 0x3, 0x9, 0x7, 0xa8, 0x3, 0x7, 0x8, 0x4, 0xfff, 0x66e945ea, 0xd47, 0xe, 0x8, 0x4, 0x1, 0x4, 0xfffffff7, 0x500000, 0x0, 0x7ff, 0x6, 0x5a, 0x80, 0x401, 0x0, 0xfffffc00, 0x4, 0x40, 0x4, 0x8, 0x7, 0x6, 0xffffffff, 0xfffffff8, 0x6, 0x7, 0x9, 0x4e09, 0x5, 0x8000, 0x80, 0x0, 0x1, 0x5, 0x800, 0xffffffff, 0x2, 0x3, 0x48, 0x4, 0x0, 0xfffffffc, 0x8, 0x2, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x1, 0x5184, 0xfffffe00, {0x6, 0x0, 0x5, 0xc, 0x5, 0x3ff}, {0x2b, 0x1, 0x3, 0x8, 0x8}, 0xf, 0x8000, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x6, 0x3, 0x6, 0xe3b9, 0x1, 0x4, 0x2, 0x3d7, 0xfffffff9, 0x40, 0x4, 0xe5, 0x3, 0x9, 0x1, 0x7, 0x6, 0x5, 0x5, 0x1, 0x8d, 0x8, 0x8, 0x400, 0x5, 0x7, 0x9, 0xb, 0x9, 0x3, 0x9, 0x9, 0x7, 0x6, 0xd6, 0x6, 0x7, 0x8, 0x9bc, 0x7, 0xffffffff, 0x8, 0x7, 0x4, 0xdc, 0xe, 0x9b5b, 0x3, 0x3, 0x9, 0x826, 0x4, 0x8, 0x1, 0x4, 0x5, 0x3, 0x0, 0x1ff, 0x5, 0x3, 0x40000000, 0x1, 0xfffffff2, 0xb06, 0x3, 0x7c0, 0x10, 0xfffffffe, 0x1, 0x3, 0xfffffffe, 0x8001, 0x7, 0x0, 0x101, 0x3, 0x5, 0x8001, 0x7, 0x7fff, 0xb, 0x8, 0x59c8, 0x2, 0xff, 0x0, 0x3a2e, 0x5, 0x61, 0x2, 0x8, 0x2, 0x1, 0x8, 0x7, 0x4, 0x2, 0x0, 0x6, 0x1, 0x1a2a, 0xf6, 0x7, 0x1, 0xfffffffe, 0x5, 0x3, 0xe129, 0xce2, 0x7f1, 0x3, 0xffff, 0xa100, 0x0, 0x10001, 0x2, 0xac, 0x72ba05b7, 0x2, 0x9, 0x7fffffff, 0x4, 0xfd, 0xbe43, 0x3ff, 0x9, 0x2, 0xff, 0x5, 0x9, 0x9, 0x4, 0x100000, 0x81, 0x3, 0x7348, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x5a, 0x1, 0x80000000, 0x2, 0x3, 0x5, 0x101, 0x2, 0x80000001, 0x4, 0x0, 0x5, 0x9, 0x8, 0x2, 0xd3af, 0xf, 0xd, 0xf, 0xaaee, 0x400, 0x7, 0xfffffff7, 0x7c, 0x1, 0xffffffef, 0x6, 0x100, 0x6, 0x1, 0x6, 0x3ff, 0x3, 0x678, 0x4, 0x10000, 0x5c09, 0x6, 0x4, 0x8, 0x9, 0x4, 0x7, 0x6, 0xe30d, 0x7ff, 0x1, 0x7c6a2ca8, 0x3ff, 0xd0f, 0x5, 0x10001, 0x4, 0xf, 0x4856, 0xff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x4, 0x5, 0x1, 0x100, 0x5, 0x3, 0x3, 0x7, 0x0, 0x10000, 0x1, 0x1, 0x80, 0x1, 0x3, 0xffff, 0x100, 0x8001, 0xfffffffb, 0xa, 0x8000, 0x0, 0x7, 0x9, 0x8, 0x211, 0x8, 0x1, 0x0, 0x1000, 0xc, 0x1, 0x800, 0xfffffeff, 0x8, 0x6, 0x3e9, 0x10000, 0x5, 0x3, 0x7, 0x4, 0x6, 0x7496b2ee, 0x81, 0x5, 0x1000, 0x33, 0x4, 0x5]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0xff, 0x5, 0x5, 0x5, 0x8, 0xe, 0xa27c, 0xffffffff, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x4, 0xfffffffd, 0x8000, 0x2, 0x1, 0x10001, 0xfffffff9, 0xd78, 0xfffffffb, 0x5, 0x3, 0x6, 0x5, 0x6, 0x3, 0x80, 0x0, 0x2, 0xf2a4, 0x10001, 0x7, 0x8, 0x0, 0x40, 0x4, 0x1a41, 0x6, 0xc1cb, 0x2, 0x0, 0x2, 0x7, 0x6, 0x5, 0x100, 0x5cf2, 0x8, 0x1, 0x20960f7b, 0x6, 0x9, 0x8, 0x6, 0x5, 0x7, 0x6a5, 0x18000, 0xe62, 0x1, 0x7, 0x80000001, 0xe, 0x401, 0x561d, 0xffff, 0x0, 0x32e, 0x6, 0x6, 0x7, 0x81e, 0x3, 0xfdf4, 0xffffffff, 0xfffffff9, 0x7, 0x5, 0x0, 0x9, 0xfffffff8, 0x4f, 0x81, 0x9, 0x1, 0x63, 0x7, 0x40, 0x3ff, 0x7fffffff, 0x4, 0xc, 0x8, 0x1, 0x9, 0x3, 0x0, 0x1, 0x97f9, 0xfffffffd, 0x6, 0x6, 0x81, 0x8, 0x8001, 0x4, 0x6a446555, 0x6, 0x1000, 0x8001, 0x3, 0x3, 0xffffffff, 0x40, 0x9, 0x9, 0x9, 0xf9, 0xffffffff, 0xc, 0x9, 0x61b6, 0xfffff123, 0x2653ab6c, 0x5, 0x0, 0x800, 0x0, 0xd, 0x3, 0x6, 0xca, 0x6, 0xc406, 0x5, 0xf, 0xff, 0xfffffff9, 0xfffffffc, 0x524, 0x80000000, 0x11, 0x8, 0x8, 0x2, 0x10000, 0x3, 0xfffff57a, 0x3, 0x3d2, 0x802, 0x9, 0x8, 0x6, 0x80, 0x1, 0x1, 0x80000000, 0xf, 0xc6f, 0x7, 0x7fffffff, 0x8, 0x12ba, 0x9, 0x1, 0xf99, 0x7, 0x3, 0x6, 0x1, 0x4, 0x7fff, 0x6195, 0x4, 0x45ca29e4, 0x40, 0x4, 0x40, 0x9, 0x101, 0x1, 0x8, 0xffffffc0, 0x8, 0x0, 0x8, 0x1, 0x5, 0x6d, 0x8, 0xffffffe4, 0x0, 0xfffffff9, 0x5, 0x9, 0x6, 0x8000, 0x608f, 0xfffffff8, 0x3288, 0x400, 0x10, 0x9, 0x10001, 0x3, 0x9, 0x7, 0x2, 0x1, 0xe, 0x800, 0x3fbb5ed2, 0x6, 0xfffffffc, 0x2719, 0x3, 0x7, 0x2, 0x8, 0x52, 0x9fa, 0xbe8, 0x7, 0x7, 0xffff, 0x400, 0x8, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8001, 0x3, 0x9, 0xa, 0x7ff, 0xc00, 0x5, 0x5, 0x8001, 0x8, 0x9]}]}]}}]}, 0xccc}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2.174044776s ago: executing program 0 (id=669):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x1}}, {{}, {0x0, 0x1}}], 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

2.173195576s ago: executing program 2 (id=670):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x800, 0x0)
ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000300)={'custom0\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xc8}, 0x8)
timer_settime(0x0, 0x5, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000003c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57ca81aad8f73b3ffcd92b66abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58635fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235e10f2a2dbaea8bb4d87d7cac18eeab0984d181efde07edf913", 0xe7}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9d", 0x35}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f", 0x9e}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee3", 0x45}, {&(0x7f0000001300)="9f289544783daada5fedb202b944a5d336217d3a5e4d71506342f371603141bb7a97644a5ed7d82b6e788c09793ec4e047cba8525ef9d17fc8457083a3018bdfc7d6911e486ddc867794efd70509c297900796bb264984193bd19cdd7343dddf3d102bf15b12f7c9578045cb2c429af49ea127da0f1e6fce7ca321f47054201952f0e318c68062c18bd61141d7b54ee3b81529572a116449ee773552cff69f641c4e69741ac10ec7b626d95931a92f805e75cb11af222ae79b977a16991b499925a82482d5ed16d6b0a0faecc057e3df07c33c8e16a5e083e47d48483bb047b17e6aae07e8587fcaea04019b1292864c9e30c679a7b0d3ac5ee9a6eedab246b6fb7afee2f319c653b0ae7132b4a52aba2e21b2cc725abfe5f825f285b38f78af0229684e8a3a0509b5bc10102c48309135ef698296bcd2eaf28793bf9fd3f6d721f58e18514613577833f6022dcad0b265ec7434cb0e461ea733111b5135f6db5156c05095418ae230addc50d9f0fe6dbe80bc89c462dab58cb7c311d183f99fd8ae8aaecd159e13b954dfc1ae0145bc4f34f01a391ed9eed0740459ae02351bf0ea537fad3a", 0x1a6}], 0x3}}], 0x3, 0x40400c0)

2.112085656s ago: executing program 1 (id=671):
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_GET_THP_DISABLE(0x2a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x14, 0x0, @opaque="767bdaf667316fa9910587b3"}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})

2.094242357s ago: executing program 0 (id=672):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x13, 0x4}, 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)

407.551228ms ago: executing program 2 (id=673):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000800))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket(0x15, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
getpid()
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
write$UHID_INPUT(r2, &(0x7f00000013c0)={0x8, {"5e33f1149365326a62406efc134b8aa1c668ec9170aff7131cd4cb665b6b0e68337b096feb87c146f390638dd01d41f42846d174c21a2bec79de24a4e816fe5fa086d8c38cb6b603c8c9e311ce4d89bac8530b6e3226f6ae487cb46a806bee3a85a3839453cbdc7b483d615c2da758a3a69d1493a7149a82b2d081cdcd07ddf8e06a5a190c2da87bd3f82fc39cb0880b87679215bb92d6165e87920d8df07a2d35df431c56ac5bc786ee0ed979becfcf3967077784aeec4d79a5fb0b05003941d07b68df70a794da01008468b2ef1c7ea7c7c0819ac1c39761e1dcc3102f08b8a6c5055cf3705a7d766a04b7255e648918cd69c2b95f23a5a67f5137b6b3bc791611760a50d8a1afbf58851b6df3a73ca62ffa3379bc48aa1d6b3a58a962aa912cad89cd8a476de6183916da226693831037f08daa03a38dcc960796df5e9bf9ec446314a907a757306bacf9cece1c60331d9fa1b28e3f482782523ccf64dc5b1bd2f05741828d8158cc45b3039d71fcfeeda2f4f2a0b2f89e0f779460d557d408d197b3ef9d1a99871efbe10cf29e1a8f758426ff405eb6b44e5d7e2bceecfaf86d48a50f5527c6b55fd4c784f8893fcd28f023c278726f3f0edc3b56499bd09791485d1a6fc6437cfff81ceb68f3cea3f2c52f1a1d8da399c65af80d4c937c368656b30fc7d4c941dc251aba6632a55f60a73d327175bd4e4425187db807f7e5af2794618e5f6e97f53a9fc7373ae835d892da36d597a1bf512d9a6b633e366e9573f9d00551bea2c5dd0cf060678b9c22e543a52d1fc822527ee50d201add260e9678ee78d99c69ce3e7085b20ea6edd2da2e10185d660f03af7932e1097b9424313306e4f8a188957e65885a06a3c3086460063896a9552432a11e1105a477075d8d7cb3e7a588029d47b1a2ca801bda4659ce1b899478abc2e4f80a523ea0673911dcb6442780985f2cccb489b44d03db7acc05046f426ac9553272330fe250bc44ee9ef4baaca06b0ae2afed416dab24ef72b4f17814fdccc524c861d339fe0cd15dc299619cc98af7a996571be3c99b1246e5dd3350d3eab30a35946885a27cfdea8d39fbac5c1e9fd64c88405fed27ab434ddcd81392003f9f01780b649eb70381cbaf99a143b9e08a88e1e5fd2f170dba939cb39f7f89ee3cf9180e50a17ed8b3ffaa95332709a44372a933aa90d150d7111d7f1cbb05f523412c24b763dc2a06b2c71cbe941f1d6dd91eb0aa8e57aaef4f8e160dc3ee28c733ec33504dd5eea8741faee36cfe5507b29515dc689407901f41b43c8f987ca64d9cb6c47eeeef607572baff24a590b3146b855c4008eb9f1cfe6ca9d2d42e90a90fa5863e5a1cfd59875c3c881dcdf2a46f31fc8445afe4a09692ca2434cbdf3a84f513045f148d8d4e79960fded8b7c2e3f049be240b11bc794eaffa48b6c695904f882c6fab676eac9392259a6eab9475619075c53f755cfd7809899875e8721d1fd1a84b421b0a9158d70cafeba892cf1cfd29cdd1200f6f495ffc3cc72c1e05186b53e226d48e5ddd8fc59943546f9e786ef7dfb04a28bdf9da583f875d4b6a8fe2d22433de367fb574565acd2c5d2a61fc493e13009e53876eec2f8b81ab0f8d451d8728af410d31dbebcfdf882ebe885536907a1bc73d410162510c76228fbb2473e183806abbaa827a001e2fb4f489899fadff08bedb82beaf9ed772bd8fffa98d730fcf98be870228375d88974cd3adea9f61549303dc806e293cdef848e7385912c162cc451f94686be66eaabb9fd05a5d2d2f1621c62559f4d7e30a01835882cf01c155e3f9e60e26146a4f49de5363a73bb16bdeeefd5c7acde1dea358b24db9b4dd6a17aa1974937a24d5b48acbf697bef70d82a555a3d1d4b40965091a09fa2b94ba700b12eaf4e55d8339e8e20765290cb2c1aeb17978a479e8d7241aeaf5ca3e84246955f9f716d4e58bca7d0a7e6881ba0f93487595f9cea5698fffb34cbfdeaf37f5cb27ccb91463900dbc5c2b42bb4cf4adb164d90bd8a13d0e2ad30f447ac55d71680a06957e1f553a4bf5c3b8949ee9d766876f245f5bd8abed65cab3b1d0da9a17ddcc0bb1916d3a8d0138625e5eaecb4af051fe9075ca9d2083d947d67342e6487fc431ee740e2550cd61a2e0a38081af2de412330a61801ebf4abea2a2d121ebcaeaa7eb4e8f5dc3616d6f1dc0c28cccbb3db7be7af5d01dae80a49438c71a761b296d71510fa0ddf8fc9e5474fce2ce4d4073b5a8cbc88f2a0a244b458619b5347c899697f9afc73e150ce70d0820065ba0bb7aeed3c11551b2cd97b84654d44be82338ee4a6899e0296b263bfd2df3ee6ee088f1055d72c94c99721212e6a0f7603d8c9ec166b9cd856dcf4ef997f207eff8d7197bfc619f8300d1192a84724ba82d7b7719ab060a84596c38be37c9a89264e0e9af380c7029a2ef14535e2ec0549c828abdd5f52b78ca520558488646694db7c11eb3571529e8a46c908ab61ad0d92d4efe20d4b1fef40f14b543499a8b3a547d2f32983150e10c9c4e02fcaf4b14c72894ea1fcbbe527c7e248fd089a25d647b4e39eb36703d07db47c4b50418c64e0b4da2bbbc0fd43897144889a0570866ba3848faefb95f6a9a94914a3a34af1d70479b22ed583a3b6d0bab73a90b6093981b5131963fd762ca06ef2e2c700b0ac4cd2625bc8c633875a644b14e19c902db47fdb5539407d53ee616a2866892b53d7cd0530a8744a6f5b8688a71cb1546f2a7db70b4f819283f5a0c82e6ec4c7c11015d04c7c88fb293c7dbfeeaef2216529b3496fbd4c3dd90a21430c1be66496cb32d428ad9aa5cfea89bd4c3ba2341eb19bc8842eb577a89fb237052007db048cedb0f8258e534981941ef9026a87b6a5d28f4e3f578ba6c851d4e502f0a5aaab87b285beae57ff674b48a6cd4ab6f9fd3824fea7f702357183b6d9c9553efd2b5dc3a2399cf9bb6a792b40602a83b19a96e269404e6487a7e5dc74dd1467c74df88155b919a02ea1c43be2e4c68ba7ef0655b6cabfadc0c8ef7755e51f6ae23f6deb39f065c972457d3aa6ce32e86ff94ead5a560219cff8f1d5fdabc8a1a127c24f5b2f1e97cd120b464e3f91e3b81050bfb5e2ed3892c0f6d9c07fb62ac40a16e1a85c0e026315f606722a1663b50d316afb7945f47f9e89b27e60e271160ba3515bf66fbffdbbe95029fa147574ec925f68f244bbd6fe54893350146c10351d38a0dafbba57321ed2a604bd8962c442f7a928329fe5f1c8c8c98bda12095166332783c61b079a44fc6e0b410f309e2c5ec51fdd9fad355a274df0956352d75c9aec8b5d1767ba09e82d6e94c140d850df1640c3d3b2b405dac84e030f639397d1f248913fafdbec7f7538825c3aca677b9663d9e3750ed18f3094313904f69103019bf2879019c5e8017bcb671fc5ce11523dc0d38dfe80cd7c2323239d4a250a7e47a98b8b04819beb7e22244535a7613af115b8310626bee9892178e821c28f853986a4195d78317a7678ffac892d305595d23ab2d208e8cd72eac2a0877f8d33b1bccd5ee3d99ea40b01103585e7088a9c73b39e5f1611b6b315784d31f1d2f7ed3ca4175d76fba5e4a483969dfc2878326d8fa0080a3d416acc8ea988948f6432236bcc63a1a777bbad4f3bbcaac5e073b1af2528ed5108446fd7ca7362550c5fb5ad8a26e29662f024a414feafd0b9a20305b719e11f183539a95e3e99590494a41d6556d30edd32d5b9a53622d60159d43807f1b0c18275de2d07c27cfd2a34bbd95ab057785c7b4b3b364d2b8fbaf8ae27f913c09fb166bab8827d99705aff378c4df729d12da6b6e4be242c8e4abcac213370e10678ffd5f9723db70d2a54914469f5420993b004d967fe87894a44e7477cf8c4de1689d16b2f1a645720bb6f4470200cbfb7005b4acbff24c9e335db7cc640c9d73a7cacb237f7c53237993430c5a99554415896cd88adf1a7b5e525df651e37376b6c1f789dad8f94847634d095a60e7c6767de718bdaf39008ba3692fa462610186a3cb35aef0df6cc4023af5b1e89174b2cb9e4c46cd2db57411b8cabeeb015e6775c44e9322740bbb55c6a37c5fc9713d5be9c6d9126428137348a0f2e1f9c8ab744df1b1b695a69d774dbd25cee1edcc3751ecb2411420d07d4590ea4d7a578e1deae0282d8081b081005d1f30bfdfe56380b90e34cafb11ec2ea4053d1f22f20a61a8856062ec6dbfc5c0d1ff0563efb5c10b3e9a95d60f44806533b8472add4f919cff90199253ccc775132e0d659d1f0f120fd2bc694e19eed4300fd88d2ea23f884f0f993118cc1568147eca5456ca0f1e7ef68f0235d516546fc588eed72c18eff5b2d76e13c993f2ced4fa1bde45bcbf1baddd52a56a0f7a2ae9edbef422a7f090b682741b5778586c3d4ca1b297a624931f798933ff3c20e71203fca60a50716b63fdac883f532ea12da660a9b0ae2e2d55a9f8319350c6232033df1d064582502209a74a49300fda0d5875827f6809bc5d159ce2b869a04bfadf6633cab3f923d892d91c2b56e8ff14b4a959d95f3aca26381ba1e0dc72fc312242337ff863a2a3c4144652c28411352bf2504ea5b50ab3c1778ab13f44dcde172dc1d2853d330d6d3922cdd92c6aaa3d0fdf9003f56eb88bc91c364b59b21d2a23d049a737eca6d76b5cc6ddce46cd22b2f99cee22cb18f345fcdbe04d7625e55a52b66133faeec8354c491bb6a8905fc4ef24c297d86d467bbd8840637f1bb563b9f4f8ad66601fe8089ab2127bf5e45dc4a9cf67e2dc54b6d1d224dd6509b1f46c7dbb26a0e642f21c770c96b93c56198612e3da5186de5bfee635a41115a45c22a0398906269ef15c7e9dab260be6a95c051f03318922954ab478d5713c0fde184eb516fa9cc9d99f1dad1a89dc6e9232d116f9c6508d06ebd5f514d301731c1f1e27f35d3e31f470678459d1c5a25f9e1d45d27606cbd7888ff2b5660afdd6669d40566ca05a5eefd76f6413becbe36413be387f472e3eb7675dc479e401cb2dca702c23ef393b4a1d936b8a72fc0f875102b66bb6a2e9588b6ae20b65f015bd5a4574822e056104c19cb24c7c88d51013c19fce90c5d879cdae4e6ef0ba3c1480c1c227f2ff9a4785fe54918c815382c807077f22ca6e02f76ee2215383130004321f767c0e6d83e73a395b2f5e08be7c9c391d30e978c833cb7b5c422a2d469e02d88c28f5f22492d804780c3083a2de5f5537e479435c6bf9c79413cadbcc04f6afb9b3fd3eedc20ce513bedec176bf7248367326fcd9db3d942c8dd9159c8243825dc3fd16453e03974279621cccce4d554907366388c02ea87905a5c065e49f95f580ae1521b89ecdc3be7f8056cea7fcb3813d3c165878ba5ff225ffae180ce11011214a690d505dd82e8d5ba58c043a525c0adb1c2790909cacb5308e7fb4a4592fcbe83c1b0f7c17365740646210502743a68f134406799064a94aa79651f5ad3cc9e7a553f918f9acff99cc1776307ab3bb1cd093deb171bbb0529c2afff3ae578e2635dfc5b5b043057cb0ee26fd376ac10a486335b05e408ab1be20af9728e56536c1e3e9740cbb0719520936da46d3a4b27b65f557202e70e9779b8cc6b657cd82dd0e7d74bc79718e849c6bd88c0d6acf10119f72efc4b24b3f31e6132f78664273e672f7d183a65f27805c94093c1ffbfc7be315ace7d684bc0657537be7f893e2256b54b360af02c685e7d01e1815f8ca998d1009d29d98cf0be5a1997d5bdc59c4730297ce8557d0c512d3329d18", 0x1000}}, 0x1006)
socket(0x1, 0x2, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000"], 0x0)
r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
writev(r4, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000000)="987aa19a510051e9ddefe01dba3369a8ecbbee78da6ebb00", 0x18}], 0x2)

299.550128ms ago: executing program 1 (id=674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)

297.912338ms ago: executing program 4 (id=675):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0xccc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc9c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xf}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_POLICE={0xc60, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xec8, 0xffffffff, 0x2, 0x7, 0x7, 0x8001, 0x2, 0x3, 0x4b79, 0x667, 0xecd7, 0x7b, 0x1548, 0x7fff, 0x80000000, 0x0, 0x800, 0xa, 0x3, 0x10000, 0x6, 0x9, 0x8, 0x5, 0x1, 0x2, 0x200, 0x800, 0x0, 0x8000, 0x0, 0xb4, 0xfffffffa, 0x3, 0x4, 0x1, 0x7, 0x5, 0x3, 0xffffffff, 0x1, 0xb4d, 0x4, 0x0, 0x5, 0x1ff, 0x78, 0x0, 0x9, 0x6, 0x400, 0x0, 0x5, 0x81, 0x7fff, 0x7727637b, 0x3, 0x3, 0xe, 0x6, 0x80000000, 0xffffffff, 0x1, 0x2, 0x7, 0x6, 0x5cd, 0x7, 0x6, 0x8, 0x9, 0x4, 0x6d, 0x4, 0x7f08, 0x0, 0x5, 0x7, 0xfffffff1, 0xd2, 0x8000, 0x0, 0x312a, 0x6, 0x5, 0x3, 0x7, 0x80000001, 0x30a, 0x6, 0x4, 0xc4b, 0x7, 0x1000, 0x100, 0x0, 0x4, 0x2, 0x3, 0x9, 0x10000, 0xc5e, 0x0, 0x40, 0x5, 0x8, 0x5, 0x401, 0x4, 0x5, 0x7, 0x2, 0x80000001, 0xb, 0x0, 0x2883, 0x6, 0x2, 0x2, 0x4, 0x1, 0x8, 0x5, 0x64, 0x7, 0x2, 0x3, 0x6, 0x6, 0xf9, 0xfc000000, 0xd, 0xfffffffd, 0xfff, 0x3ff, 0x3, 0x80000000, 0x1, 0x1, 0xffff, 0x6, 0x7f, 0xa0000000, 0x2, 0x3, 0x1866, 0x8, 0x3, 0x3, 0x3, 0x100, 0x7, 0x7, 0x82, 0x7, 0x200, 0xa8, 0x5, 0x5a5, 0xc, 0x6, 0x101, 0x7, 0x25d, 0xffffffff, 0x80000001, 0x9, 0x176a, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x9, 0x78, 0x2, 0x26, 0x100, 0x2, 0x4, 0xffffffff, 0xc2c16dd9, 0xf58, 0x2, 0x4, 0xcf4, 0x795a33b2, 0x2, 0xe, 0x4, 0x8, 0x0, 0x8, 0x0, 0xd2000000, 0x1, 0x0, 0xc74, 0x9, 0x10001, 0x3, 0x9, 0x7, 0xa8, 0x3, 0x7, 0x8, 0x4, 0xfff, 0x66e945ea, 0xd47, 0xe, 0x8, 0x4, 0x1, 0x4, 0xfffffff7, 0x500000, 0x0, 0x7ff, 0x6, 0x5a, 0x80, 0x401, 0x0, 0xfffffc00, 0x4, 0x40, 0x4, 0x8, 0x7, 0x6, 0xffffffff, 0xfffffff8, 0x6, 0x7, 0x9, 0x4e09, 0x5, 0x8000, 0x80, 0x0, 0x1, 0x5, 0x800, 0xffffffff, 0x2, 0x3, 0x48, 0x4, 0x0, 0xfffffffc, 0x8, 0x2, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x1, 0x5184, 0xfffffe00, {0x6, 0x0, 0x5, 0xc, 0x5, 0x3ff}, {0x2b, 0x1, 0x3, 0x8, 0x8}, 0xf, 0x8000, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x6, 0x3, 0x6, 0xe3b9, 0x1, 0x4, 0x2, 0x3d7, 0xfffffff9, 0x40, 0x4, 0xe5, 0x3, 0x9, 0x1, 0x7, 0x6, 0x5, 0x5, 0x1, 0x8d, 0x8, 0x8, 0x400, 0x5, 0x7, 0x9, 0xb, 0x9, 0x3, 0x9, 0x9, 0x7, 0x6, 0xd6, 0x6, 0x7, 0x8, 0x9bc, 0x7, 0xffffffff, 0x8, 0x7, 0x4, 0xdc, 0xe, 0x9b5b, 0x3, 0x3, 0x9, 0x826, 0x4, 0x8, 0x1, 0x4, 0x5, 0x3, 0x0, 0x1ff, 0x5, 0x3, 0x40000000, 0x1, 0xfffffff2, 0xb06, 0x3, 0x7c0, 0x10, 0xfffffffe, 0x1, 0x3, 0xfffffffe, 0x8001, 0x7, 0x0, 0x101, 0x3, 0x5, 0x8001, 0x7, 0x7fff, 0xb, 0x8, 0x59c8, 0x2, 0xff, 0x0, 0x3a2e, 0x5, 0x61, 0x2, 0x8, 0x2, 0x1, 0x8, 0x7, 0x4, 0x2, 0x0, 0x6, 0x1, 0x1a2a, 0xf6, 0x7, 0x1, 0xfffffffe, 0x5, 0x3, 0xe129, 0xce2, 0x7f1, 0x3, 0xffff, 0xa100, 0x0, 0x10001, 0x2, 0xac, 0x72ba05b7, 0x2, 0x9, 0x7fffffff, 0x4, 0xfd, 0xbe43, 0x3ff, 0x9, 0x2, 0xff, 0x5, 0x9, 0x9, 0x4, 0x100000, 0x81, 0x3, 0x7348, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x5a, 0x1, 0x80000000, 0x2, 0x3, 0x5, 0x101, 0x2, 0x80000001, 0x4, 0x0, 0x5, 0x9, 0x8, 0x2, 0xd3af, 0xf, 0xd, 0xf, 0xaaee, 0x400, 0x7, 0xfffffff7, 0x7c, 0x1, 0xffffffef, 0x6, 0x100, 0x6, 0x1, 0x6, 0x3ff, 0x3, 0x678, 0x4, 0x10000, 0x5c09, 0x6, 0x4, 0x8, 0x9, 0x4, 0x7, 0x6, 0xe30d, 0x7ff, 0x1, 0x7c6a2ca8, 0x3ff, 0xd0f, 0x5, 0x10001, 0x4, 0xf, 0x4856, 0xff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x4, 0x5, 0x1, 0x100, 0x5, 0x3, 0x3, 0x7, 0x0, 0x10000, 0x1, 0x1, 0x80, 0x1, 0x3, 0xffff, 0x100, 0x8001, 0xfffffffb, 0xa, 0x8000, 0x0, 0x7, 0x9, 0x8, 0x211, 0x8, 0x1, 0x0, 0x1000, 0xc, 0x1, 0x800, 0xfffffeff, 0x8, 0x6, 0x3e9, 0x10000, 0x5, 0x3, 0x7, 0x4, 0x6, 0x7496b2ee, 0x81, 0x5, 0x1000, 0x33, 0x4, 0x5]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0xff, 0x5, 0x5, 0x5, 0x8, 0xe, 0xa27c, 0xffffffff, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x4, 0xfffffffd, 0x8000, 0x2, 0x1, 0x10001, 0xfffffff9, 0xd78, 0xfffffffb, 0x5, 0x3, 0x6, 0x5, 0x6, 0x3, 0x80, 0x0, 0x2, 0xf2a4, 0x10001, 0x7, 0x8, 0x0, 0x40, 0x4, 0x1a41, 0x6, 0xc1cb, 0x2, 0x0, 0x2, 0x7, 0x6, 0x5, 0x100, 0x5cf2, 0x8, 0x1, 0x20960f7b, 0x6, 0x9, 0x8, 0x6, 0x5, 0x7, 0x6a5, 0x18000, 0xe62, 0x1, 0x7, 0x80000001, 0xe, 0x401, 0x561d, 0xffff, 0x0, 0x32e, 0x6, 0x6, 0x7, 0x81e, 0x3, 0xfdf4, 0xffffffff, 0xfffffff9, 0x7, 0x5, 0x0, 0x9, 0xfffffff8, 0x4f, 0x81, 0x9, 0x1, 0x63, 0x7, 0x40, 0x3ff, 0x7fffffff, 0x4, 0xc, 0x8, 0x1, 0x9, 0x3, 0x0, 0x1, 0x97f9, 0xfffffffd, 0x6, 0x6, 0x81, 0x8, 0x8001, 0x4, 0x6a446555, 0x6, 0x1000, 0x8001, 0x3, 0x3, 0xffffffff, 0x40, 0x9, 0x9, 0x9, 0xf9, 0xffffffff, 0xc, 0x9, 0x61b6, 0xfffff123, 0x2653ab6c, 0x5, 0x0, 0x800, 0x0, 0xd, 0x3, 0x6, 0xca, 0x6, 0xc406, 0x5, 0xf, 0xff, 0xfffffff9, 0xfffffffc, 0x524, 0x80000000, 0x11, 0x8, 0x8, 0x2, 0x10000, 0x3, 0xfffff57a, 0x3, 0x3d2, 0x802, 0x9, 0x8, 0x6, 0x80, 0x1, 0x1, 0x80000000, 0xf, 0xc6f, 0x7, 0x7fffffff, 0x8, 0x12ba, 0x9, 0x1, 0xf99, 0x7, 0x3, 0x6, 0x1, 0x4, 0x7fff, 0x6195, 0x4, 0x45ca29e4, 0x40, 0x4, 0x40, 0x9, 0x101, 0x1, 0x8, 0xffffffc0, 0x8, 0x0, 0x8, 0x1, 0x5, 0x6d, 0x8, 0xffffffe4, 0x0, 0xfffffff9, 0x5, 0x9, 0x6, 0x8000, 0x608f, 0xfffffff8, 0x3288, 0x400, 0x10, 0x9, 0x10001, 0x3, 0x9, 0x7, 0x2, 0x1, 0xe, 0x800, 0x3fbb5ed2, 0x6, 0xfffffffc, 0x2719, 0x3, 0x7, 0x2, 0x8, 0x52, 0x9fa, 0xbe8, 0x7, 0x7, 0xffff, 0x400, 0x8, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8001, 0x3, 0x9, 0xa, 0x7ff, 0xc00, 0x5, 0x5, 0x8001, 0x8, 0x9]}]}]}}]}, 0xccc}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x10)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xac, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x7f, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@device_b, {0x6, 0x6}, @value=@ver_80211n={0x0, 0x61e, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x40, @val={0x10, 0x1, 0xf5}, [{0xdd, 0x54, "2723f16dd723c0b5a654fe006248c1c6440c805b16577201fe42d3008fcd9c3c82d842ca9d6909a1040f4cba6b2e87bc83c3da9bb61978b6fda47f9d4ae62c1479171cf614d08280a054af410a88fdc4664dea07"}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @remote}, 0x10)

292.681108ms ago: executing program 0 (id=676):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000e4ff0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8fa00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x93, &(0x7f0000003e40)=""/222, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

229.204609ms ago: executing program 0 (id=677):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
r1 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r1, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10, 0x0}, 0x4045094)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c)
accept4$inet6(r1, 0x0, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0)

228.504359ms ago: executing program 4 (id=678):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
restart_syscall()

136.107459ms ago: executing program 1 (id=679):
r0 = socket$isdn(0x22, 0x2, 0x25)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

135.802309ms ago: executing program 0 (id=680):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0xccc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc9c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xf}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_POLICE={0xc60, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xec8, 0xffffffff, 0x2, 0x7, 0x7, 0x8001, 0x2, 0x3, 0x4b79, 0x667, 0xecd7, 0x7b, 0x1548, 0x7fff, 0x80000000, 0x0, 0x800, 0xa, 0x3, 0x10000, 0x6, 0x9, 0x8, 0x5, 0x1, 0x2, 0x200, 0x800, 0x0, 0x8000, 0x0, 0xb4, 0xfffffffa, 0x3, 0x4, 0x1, 0x7, 0x5, 0x3, 0xffffffff, 0x1, 0xb4d, 0x4, 0x0, 0x5, 0x1ff, 0x78, 0x0, 0x9, 0x6, 0x400, 0x0, 0x5, 0x81, 0x7fff, 0x7727637b, 0x3, 0x3, 0xe, 0x6, 0x80000000, 0xffffffff, 0x1, 0x2, 0x7, 0x6, 0x5cd, 0x7, 0x6, 0x8, 0x9, 0x4, 0x6d, 0x4, 0x7f08, 0x0, 0x5, 0x7, 0xfffffff1, 0xd2, 0x8000, 0x0, 0x312a, 0x6, 0x5, 0x3, 0x7, 0x80000001, 0x30a, 0x6, 0x4, 0xc4b, 0x7, 0x1000, 0x100, 0x0, 0x4, 0x2, 0x3, 0x9, 0x10000, 0xc5e, 0x0, 0x40, 0x5, 0x8, 0x5, 0x401, 0x4, 0x5, 0x7, 0x2, 0x80000001, 0xb, 0x0, 0x2883, 0x6, 0x2, 0x2, 0x4, 0x1, 0x8, 0x5, 0x64, 0x7, 0x2, 0x3, 0x6, 0x6, 0xf9, 0xfc000000, 0xd, 0xfffffffd, 0xfff, 0x3ff, 0x3, 0x80000000, 0x1, 0x1, 0xffff, 0x6, 0x7f, 0xa0000000, 0x2, 0x3, 0x1866, 0x8, 0x3, 0x3, 0x3, 0x100, 0x7, 0x7, 0x82, 0x7, 0x200, 0xa8, 0x5, 0x5a5, 0xc, 0x6, 0x101, 0x7, 0x25d, 0xffffffff, 0x80000001, 0x9, 0x176a, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x9, 0x78, 0x2, 0x26, 0x100, 0x2, 0x4, 0xffffffff, 0xc2c16dd9, 0xf58, 0x2, 0x4, 0xcf4, 0x795a33b2, 0x2, 0xe, 0x4, 0x8, 0x0, 0x8, 0x0, 0xd2000000, 0x1, 0x0, 0xc74, 0x9, 0x10001, 0x3, 0x9, 0x7, 0xa8, 0x3, 0x7, 0x8, 0x4, 0xfff, 0x66e945ea, 0xd47, 0xe, 0x8, 0x4, 0x1, 0x4, 0xfffffff7, 0x500000, 0x0, 0x7ff, 0x6, 0x5a, 0x80, 0x401, 0x0, 0xfffffc00, 0x4, 0x40, 0x4, 0x8, 0x7, 0x6, 0xffffffff, 0xfffffff8, 0x6, 0x7, 0x9, 0x4e09, 0x5, 0x8000, 0x80, 0x0, 0x1, 0x5, 0x800, 0xffffffff, 0x2, 0x3, 0x48, 0x4, 0x0, 0xfffffffc, 0x8, 0x2, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x1, 0x5184, 0xfffffe00, {0x6, 0x0, 0x5, 0xc, 0x5, 0x3ff}, {0x2b, 0x1, 0x3, 0x8, 0x8}, 0xf, 0x8000, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x6, 0x3, 0x6, 0xe3b9, 0x1, 0x4, 0x2, 0x3d7, 0xfffffff9, 0x40, 0x4, 0xe5, 0x3, 0x9, 0x1, 0x7, 0x6, 0x5, 0x5, 0x1, 0x8d, 0x8, 0x8, 0x400, 0x5, 0x7, 0x9, 0xb, 0x9, 0x3, 0x9, 0x9, 0x7, 0x6, 0xd6, 0x6, 0x7, 0x8, 0x9bc, 0x7, 0xffffffff, 0x8, 0x7, 0x4, 0xdc, 0xe, 0x9b5b, 0x3, 0x3, 0x9, 0x826, 0x4, 0x8, 0x1, 0x4, 0x5, 0x3, 0x0, 0x1ff, 0x5, 0x3, 0x40000000, 0x1, 0xfffffff2, 0xb06, 0x3, 0x7c0, 0x10, 0xfffffffe, 0x1, 0x3, 0xfffffffe, 0x8001, 0x7, 0x0, 0x101, 0x3, 0x5, 0x8001, 0x7, 0x7fff, 0xb, 0x8, 0x59c8, 0x2, 0xff, 0x0, 0x3a2e, 0x5, 0x61, 0x2, 0x8, 0x2, 0x1, 0x8, 0x7, 0x4, 0x2, 0x0, 0x6, 0x1, 0x1a2a, 0xf6, 0x7, 0x1, 0xfffffffe, 0x5, 0x3, 0xe129, 0xce2, 0x7f1, 0x3, 0xffff, 0xa100, 0x0, 0x10001, 0x2, 0xac, 0x72ba05b7, 0x2, 0x9, 0x7fffffff, 0x4, 0xfd, 0xbe43, 0x3ff, 0x9, 0x2, 0xff, 0x5, 0x9, 0x9, 0x4, 0x100000, 0x81, 0x3, 0x7348, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x5a, 0x1, 0x80000000, 0x2, 0x3, 0x5, 0x101, 0x2, 0x80000001, 0x4, 0x0, 0x5, 0x9, 0x8, 0x2, 0xd3af, 0xf, 0xd, 0xf, 0xaaee, 0x400, 0x7, 0xfffffff7, 0x7c, 0x1, 0xffffffef, 0x6, 0x100, 0x6, 0x1, 0x6, 0x3ff, 0x3, 0x678, 0x4, 0x10000, 0x5c09, 0x6, 0x4, 0x8, 0x9, 0x4, 0x7, 0x6, 0xe30d, 0x7ff, 0x1, 0x7c6a2ca8, 0x3ff, 0xd0f, 0x5, 0x10001, 0x4, 0xf, 0x4856, 0xff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x4, 0x5, 0x1, 0x100, 0x5, 0x3, 0x3, 0x7, 0x0, 0x10000, 0x1, 0x1, 0x80, 0x1, 0x3, 0xffff, 0x100, 0x8001, 0xfffffffb, 0xa, 0x8000, 0x0, 0x7, 0x9, 0x8, 0x211, 0x8, 0x1, 0x0, 0x1000, 0xc, 0x1, 0x800, 0xfffffeff, 0x8, 0x6, 0x3e9, 0x10000, 0x5, 0x3, 0x7, 0x4, 0x6, 0x7496b2ee, 0x81, 0x5, 0x1000, 0x33, 0x4, 0x5]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0xff, 0x5, 0x5, 0x5, 0x8, 0xe, 0xa27c, 0xffffffff, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x4, 0xfffffffd, 0x8000, 0x2, 0x1, 0x10001, 0xfffffff9, 0xd78, 0xfffffffb, 0x5, 0x3, 0x6, 0x5, 0x6, 0x3, 0x80, 0x0, 0x2, 0xf2a4, 0x10001, 0x7, 0x8, 0x0, 0x40, 0x4, 0x1a41, 0x6, 0xc1cb, 0x2, 0x0, 0x2, 0x7, 0x6, 0x5, 0x100, 0x5cf2, 0x8, 0x1, 0x20960f7b, 0x6, 0x9, 0x8, 0x6, 0x5, 0x7, 0x6a5, 0x18000, 0xe62, 0x1, 0x7, 0x80000001, 0xe, 0x401, 0x561d, 0xffff, 0x0, 0x32e, 0x6, 0x6, 0x7, 0x81e, 0x3, 0xfdf4, 0xffffffff, 0xfffffff9, 0x7, 0x5, 0x0, 0x9, 0xfffffff8, 0x4f, 0x81, 0x9, 0x1, 0x63, 0x7, 0x40, 0x3ff, 0x7fffffff, 0x4, 0xc, 0x8, 0x1, 0x9, 0x3, 0x0, 0x1, 0x97f9, 0xfffffffd, 0x6, 0x6, 0x81, 0x8, 0x8001, 0x4, 0x6a446555, 0x6, 0x1000, 0x8001, 0x3, 0x3, 0xffffffff, 0x40, 0x9, 0x9, 0x9, 0xf9, 0xffffffff, 0xc, 0x9, 0x61b6, 0xfffff123, 0x2653ab6c, 0x5, 0x0, 0x800, 0x0, 0xd, 0x3, 0x6, 0xca, 0x6, 0xc406, 0x5, 0xf, 0xff, 0xfffffff9, 0xfffffffc, 0x524, 0x80000000, 0x11, 0x8, 0x8, 0x2, 0x10000, 0x3, 0xfffff57a, 0x3, 0x3d2, 0x802, 0x9, 0x8, 0x6, 0x80, 0x1, 0x1, 0x80000000, 0xf, 0xc6f, 0x7, 0x7fffffff, 0x8, 0x12ba, 0x9, 0x1, 0xf99, 0x7, 0x3, 0x6, 0x1, 0x4, 0x7fff, 0x6195, 0x4, 0x45ca29e4, 0x40, 0x4, 0x40, 0x9, 0x101, 0x1, 0x8, 0xffffffc0, 0x8, 0x0, 0x8, 0x1, 0x5, 0x6d, 0x8, 0xffffffe4, 0x0, 0xfffffff9, 0x5, 0x9, 0x6, 0x8000, 0x608f, 0xfffffff8, 0x3288, 0x400, 0x10, 0x9, 0x10001, 0x3, 0x9, 0x7, 0x2, 0x1, 0xe, 0x800, 0x3fbb5ed2, 0x6, 0xfffffffc, 0x2719, 0x3, 0x7, 0x2, 0x8, 0x52, 0x9fa, 0xbe8, 0x7, 0x7, 0xffff, 0x400, 0x8, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8001, 0x3, 0x9, 0xa, 0x7ff, 0xc00, 0x5, 0x5, 0x8001, 0x8, 0x9]}]}]}}]}, 0xccc}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

135.660119ms ago: executing program 4 (id=681):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
unshare(0x22020600)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)

122.552439ms ago: executing program 1 (id=682):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r0, @ANYRES16=<r1=>r0], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000002000000000000000000000080000000de500500e53bbbdbd6ae327f9042", @ANYRES32=0x0, @ANYBLOB='\x00\x00\'\n'], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20000000000000f4, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_pts(0xffffffffffffffff, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000280), 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
close(r4)
socket$phonet_pipe(0x23, 0x5, 0x2)

94.67198ms ago: executing program 0 (id=683):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x800, 0x0)
ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000300)={'custom0\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xc8}, 0x8)
timer_settime(0x0, 0x5, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000003c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57ca81aad8f73b3ffcd92b66abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58635fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235e10f2a2dbaea8bb4d87d7cac18eeab0984d181efde07edf913", 0xe7}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9d", 0x35}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f", 0x9e}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee3", 0x45}, {&(0x7f0000001300)="9f289544783daada5fedb202b944a5d336217d3a5e4d71506342f371603141bb7a97644a5ed7d82b6e788c09793ec4e047cba8525ef9d17fc8457083a3018bdfc7d6911e486ddc867794efd70509c297900796bb264984193bd19cdd7343dddf3d102bf15b12f7c9578045cb2c429af49ea127da0f1e6fce7ca321f47054201952f0e318c68062c18bd61141d7b54ee3b81529572a116449ee773552cff69f641c4e69741ac10ec7b626d95931a92f805e75cb11af222ae79b977a16991b499925a82482d5ed16d6b0a0faecc057e3df07c33c8e16a5e083e47d48483bb047b17e6aae07e8587fcaea04019b1292864c9e30c679a7b0d3ac5ee9a6eedab246b6fb7afee2f319c653b0ae7132b4a52aba2e21b2cc725abfe5f825f285b38f78af0229684e8a3a0509b5bc10102c48309135ef698296bcd2eaf28793bf9fd3f6d721f58e18514613577833f6022dcad0b265ec7434cb0e461ea733111b5135f6db5156c05095418ae230addc50d9f0fe6dbe80bc89c462dab58cb7c311d183f99fd8ae8aaecd159e13b954dfc1ae0145bc4f34f01a391ed9eed0740459ae02351bf0ea537fad3a", 0x1a6}], 0x3}}], 0x3, 0x40400c0)

0s ago: executing program 4 (id=684):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x6}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x240445, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpquota}, {@noquota}, {@quota}, {@noload}, {@noload}]}, 0x0, 0x50c, &(0x7f0000001440)="$eJzs3c9rHG0dAPDvbHZr06Zv8qoHfcH6o5W0aHeTxrbBQ60geiqo9V5jsgkhm2zIbtomFE3xDxBEVPCkFy+Cf4AgBS8eRSjoWVFRRFs9eNCO7O4kTdPdZNtus2n284HJPM8zM/t9ng0zO8/Mw0wAA+tjEXEjIp6maXoxIkaz8lw2xVZraqz35PH92caURJre+kcSSVa2/VlJNj+dbXYyIr76pYhvJC/GrW1sLs1UKuW1LF+qL6+WahublxaXZxbKC+WVqanJq9PXpq9MT/SknWci4voX/vL97/z0i9d/+em7f7z9twvfbFRrJFu+ux0vKb/fwlbTC83vYvcGa68Y7CjKN1uYGW63xtALJQ/ecJ0AAGivcY7//oj4RERcjNEY2v90FgAAAHgLpZ8bif8mEWl7JzqUAwAAAG+RXHMMbJIrZmMBRiKXKxZbY3g/GKdylWqt/qn56vrKXGus7FgUcvOLlfJENlZ4LApJIz/ZTD/LX96Tn4qIdyPie6PDzXxxtlqZ6/fFDwAAABgQp/f0//892ur/AwAAAMfMWL8rAAAAALxx+v8AAABw/On/AwAAwLH25Zs3G1O6/f7ruTsb60vVO5fmyrWl4vL6bHG2urZaXKhWF5rP7Fs+6PMq1erqZ2Jl/V6pXq7VS7WNzdvL1fWV+u3F516BDQAAAByidz/68PdJRGx9drg5NZzobtMuVwOOqvxOKsnmbXbrP7zTmv/5kCoFHIqhflcA6Jt8vysA9E2h3xUA+i45YHnHwTu/yeYf7219AACA3hv/cOf7/7l9t9zafzFw5NmJYXC5/w+Dq3n/v9uRvE4W4FgpOAOAgffa9/8PlKYvVSEAAKDnRppTkitml/dGIpcrFiPONF8LUEjmFyvliYh4JyJ+N1p4XyM/2dwyObDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pGkSKQAAAHCsReT+mvyq9Sz/8dHzI3uvD5xI/jMa2StC7/7o1g/uzdTra5ON8n/ulNd/mJVf7scVDAAAABgIL/UC/+1++nY/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66cnj+7Pb02HG/fvnI2KsXfx8nGzOT0YhIk79K4n8ru2SiBjqQfzhxp8PtYufNKq1E7Jd/OEexN96sG/8GMu+hXbxT/cgPgyyh43jz409+1+6e432+18+4rn8q+p8/Iud499Qh/3/TJcx3nv081LH+A8i3su3P/5sx086xD/XZfyvf21zs9Oy9McR421/f5LnYpXqy6ul2sbmpcXlmYXyQnllamry6vS16SvTE6X5xUo5+9s2xnc/8oun+7X/VIf4Ywe0/3yX7f/fo3uPP9BKFtrFv3CuTfxf/yRb48X4uey375NZurF8fDu91UrvdvZnvz27X/vnOrT/oP//hS7bf/Er3/5Tl6sCAIegtrG5NFOplNeObaLRSz8C1RjMxI2jUY1OiW/19APTNG32HF/jc5I4Cl9LM9HvIxMAANBrz076+10TAAAAAAAAAAAAAAAAAAAAGFyH8TixvTG3dlJJLx6hDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQE/8PAAD//xaa2hE=")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffecd)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x304}, "331349eb08b1dc5e", "e765b6d239e3c20ae2e624c60cb7d845", "91694d07", "000079c60000f2bc"}, 0x28)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000b40)=0x20000, 0x4)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts.
[   45.597347][ T4018] cgroup: Unknown subsys name 'net'
[   45.883433][ T4018] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   46.244151][ T4018] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   47.706564][ T4038] chnl_net:caif_netlink_parms(): no params data found
[   47.748424][ T4033] chnl_net:caif_netlink_parms(): no params data found
[   47.774646][ T4029] chnl_net:caif_netlink_parms(): no params data found
[   47.852413][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.854168][ T4038] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.856568][ T4038] device bridge_slave_0 entered promiscuous mode
[   47.885385][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.887375][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.889696][ T4033] device bridge_slave_0 entered promiscuous mode
[   47.895387][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.897636][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.900188][ T4038] device bridge_slave_1 entered promiscuous mode
[   47.910794][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.912559][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.915074][ T4033] device bridge_slave_1 entered promiscuous mode
[   47.941164][ T4038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.946862][ T4038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.963818][ T4042] chnl_net:caif_netlink_parms(): no params data found
[   47.979066][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.980764][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.983055][ T4029] device bridge_slave_0 entered promiscuous mode
[   47.988673][ T4034] chnl_net:caif_netlink_parms(): no params data found
[   47.994500][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.005875][ T4038] team0: Port device team_slave_0 added
[   48.014314][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.016049][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.019260][ T4029] device bridge_slave_1 entered promiscuous mode
[   48.022910][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.032710][ T4038] team0: Port device team_slave_1 added
[   48.071236][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.072805][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.079494][ T4038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.105861][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.107657][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.113348][ T4038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.124593][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.129185][ T4033] team0: Port device team_slave_0 added
[   48.148674][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.151881][ T4033] team0: Port device team_slave_1 added
[   48.259786][ T4038] device hsr_slave_0 entered promiscuous mode
[   48.327636][ T4038] device hsr_slave_1 entered promiscuous mode
[   48.437837][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.439507][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.441890][ T4042] device bridge_slave_0 entered promiscuous mode
[   48.444800][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.446308][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.452765][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.456021][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.457916][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.460146][ T4034] device bridge_slave_0 entered promiscuous mode
[   48.473610][ T4029] team0: Port device team_slave_0 added
[   48.475524][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.477695][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.480077][ T4042] device bridge_slave_1 entered promiscuous mode
[   48.482685][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.484207][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.489877][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.492719][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.494338][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.497029][ T4034] device bridge_slave_1 entered promiscuous mode
[   48.507224][ T4029] team0: Port device team_slave_1 added
[   48.553057][ T4042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.564886][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.566445][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.572920][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.576817][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.578739][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.584514][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.594787][ T4042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.606487][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.610595][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.656164][ T4042] team0: Port device team_slave_0 added
[   48.659751][ T4042] team0: Port device team_slave_1 added
[   48.700023][ T4033] device hsr_slave_0 entered promiscuous mode
[   48.737674][ T4033] device hsr_slave_1 entered promiscuous mode
[   48.777362][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.779180][ T4033] Cannot create hsr debugfs directory
[   48.782550][ T4034] team0: Port device team_slave_0 added
[   48.819083][ T4034] team0: Port device team_slave_1 added
[   48.846750][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.848646][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.854282][ T4042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.919351][ T4029] device hsr_slave_0 entered promiscuous mode
[   48.957600][ T4029] device hsr_slave_1 entered promiscuous mode
[   48.997353][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.999018][ T4029] Cannot create hsr debugfs directory
[   49.003789][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.005429][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.011888][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.045153][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.046933][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.053438][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.059576][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.061242][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.067104][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.219543][ T4042] device hsr_slave_0 entered promiscuous mode
[   49.257666][ T4042] device hsr_slave_1 entered promiscuous mode
[   49.297576][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   49.299413][ T4042] Cannot create hsr debugfs directory
[   49.339446][ T4034] device hsr_slave_0 entered promiscuous mode
[   49.387699][ T4034] device hsr_slave_1 entered promiscuous mode
[   49.427401][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   49.429147][ T4034] Cannot create hsr debugfs directory
[   49.487855][ T4020] Bluetooth: hci4: command 0x0409 tx timeout
[   49.489285][ T4030] Bluetooth: hci0: command 0x0409 tx timeout
[   49.490128][ T4020] Bluetooth: hci2: command 0x0409 tx timeout
[   49.490799][ T4030] Bluetooth: hci1: command 0x0409 tx timeout
[   49.492341][ T4020] Bluetooth: hci3: command 0x0409 tx timeout
[   49.545176][ T4038] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   49.603586][ T4038] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   49.666647][ T4038] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   49.729514][ T4038] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   49.817025][ T4033] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.880455][ T4033] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.936180][ T4033] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.989814][ T4033] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.051829][ T4042] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.093324][ T4042] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.149487][ T4042] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.199455][ T4042] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.291450][ T4034] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   50.345055][ T4034] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   50.390299][ T4034] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   50.466696][ T4034] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   50.521478][ T4038] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.538671][ T4029] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.570331][ T4029] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.624788][ T4029] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.671084][ T4029] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.710524][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.714254][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.730205][ T4038] 8021q: adding VLAN 0 to HW filter on device team0
[   50.746723][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.751421][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.754126][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.756787][ T1715] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.758682][ T1715] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.762789][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.796212][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.799427][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.801572][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.803210][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.807052][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   50.826512][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.829368][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.834959][ T4033] 8021q: adding VLAN 0 to HW filter on device team0
[   50.838395][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   50.845916][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   50.856153][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   50.862985][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.874582][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.876927][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.880371][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.883566][ T1715] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.885069][ T1715] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.887025][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   50.890136][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.892562][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.906253][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.909137][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.920282][ T4042] 8021q: adding VLAN 0 to HW filter on device team0
[   50.923944][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.926442][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.929560][ T1715] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.931418][ T1715] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.933550][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   50.935831][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.962435][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   50.965003][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.971452][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.973639][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.975191][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.979368][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   50.981744][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.984120][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.995247][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.037086][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.045532][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.066189][  T334] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.071693][  T334] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.089549][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.113500][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.118569][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.121034][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.123595][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.136155][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.138585][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.141435][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.153366][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.169445][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.172113][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.174732][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.177038][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.206024][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.208538][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.211209][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.213662][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.216186][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.228222][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.230600][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.240934][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.252425][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.255126][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.269456][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.272427][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.290977][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.296650][ T4034] 8021q: adding VLAN 0 to HW filter on device team0
[   51.315571][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   51.318490][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   51.323679][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.331738][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.334376][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.336534][ T1715] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.338185][ T1715] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.355166][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.358131][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.360402][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.362702][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.373327][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.375762][ T1715] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.377558][ T1715] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.386957][ T4038] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.393050][ T4029] 8021q: adding VLAN 0 to HW filter on device team0
[   51.397718][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.425404][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.429066][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.431538][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.436792][  T334] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.438470][  T334] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.442752][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.468901][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.471675][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.474104][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   51.476730][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   51.484395][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.486743][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.490656][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.495432][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.500584][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.502723][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.504297][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.512335][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   51.516235][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.522075][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.541539][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.544000][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.554315][ T4034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   51.557821][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.566591][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.569300][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.571691][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.574644][ T4020] Bluetooth: hci3: command 0x041b tx timeout
[   51.576122][ T4020] Bluetooth: hci1: command 0x041b tx timeout
[   51.579792][ T4020] Bluetooth: hci2: command 0x041b tx timeout
[   51.580812][ T4038] device veth0_vlan entered promiscuous mode
[   51.581429][ T4020] Bluetooth: hci0: command 0x041b tx timeout
[   51.584421][ T4020] Bluetooth: hci4: command 0x041b tx timeout
[   51.594077][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   51.596498][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.600081][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   51.602014][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   51.603872][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.612397][ T4038] device veth1_vlan entered promiscuous mode
[   51.620302][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.629095][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.631309][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.633407][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   51.648524][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.651287][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.653715][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   51.656217][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.668275][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.678391][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   51.681556][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.684155][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.721180][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.723725][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.726089][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   51.729924][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.732190][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   51.734430][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.737060][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.741244][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.747957][ T4029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   51.750859][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.756922][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.759567][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.771561][ T4033] device veth0_vlan entered promiscuous mode
[   51.795215][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   51.799583][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.803967][ T4038] device veth0_macvtap entered promiscuous mode
[   51.819296][ T4038] device veth1_macvtap entered promiscuous mode
[   51.830078][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.838295][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   51.840571][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   51.842810][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   51.844729][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   51.846439][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   51.850619][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.853360][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.855620][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.866920][ T4033] device veth1_vlan entered promiscuous mode
[   51.885593][ T4042] device veth0_vlan entered promiscuous mode
[   51.902060][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   51.915233][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.926529][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.929455][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.949454][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.952834][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.955363][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.972103][ T4042] device veth1_vlan entered promiscuous mode
[   51.986568][ T4038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.990695][ T4038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.992624][ T4038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.994670][ T4038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.999735][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   52.001608][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   52.018806][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.041022][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   52.043480][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.050843][ T4033] device veth0_macvtap entered promiscuous mode
[   52.064423][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   52.066868][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   52.070424][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.078896][ T4033] device veth1_macvtap entered promiscuous mode
[   52.111516][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   52.113933][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   52.116353][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.143805][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   52.146404][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.151089][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   52.153623][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.156179][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.160695][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.164327][ T4034] device veth0_vlan entered promiscuous mode
[   52.174163][ T4042] device veth0_macvtap entered promiscuous mode
[   52.188682][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.191156][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.194855][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.212627][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   52.215023][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   52.220567][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.224140][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.226464][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.230559][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.235611][ T4042] device veth1_macvtap entered promiscuous mode
[   52.241043][ T4034] device veth1_vlan entered promiscuous mode
[   52.244644][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   52.247029][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   52.250262][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   52.252725][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.263272][ T4033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.265217][ T4033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.267064][ T4033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.271448][ T4033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.276502][  T334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.279338][  T334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.285862][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   52.289299][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   52.293494][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   52.299294][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.333985][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.335149][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.336046][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.343320][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.345476][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.348088][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.351638][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.353501][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.355727][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.359146][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   52.361499][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   52.363879][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.366415][ T4029] device veth0_vlan entered promiscuous mode
[   52.389126][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.391421][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.393653][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.395940][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.400150][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.411372][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   52.413816][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.429998][ T4029] device veth1_vlan entered promiscuous mode
[   52.433368][ T4042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.435253][ T4042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.439365][ T4042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.441503][ T4042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.474202][ T4034] device veth0_macvtap entered promiscuous mode
[   52.487357][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   52.489731][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   52.492083][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   52.494845][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.518967][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   52.566467][ T4034] device veth1_macvtap entered promiscuous mode
[   52.598597][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.600679][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.603723][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   52.606216][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   52.640651][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.643047][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.645125][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.650998][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.653154][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.655545][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.660817][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.665894][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   52.668947][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.695491][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   52.698366][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.726716][ T4029] device veth0_macvtap entered promiscuous mode
[   52.731467][ T4029] device veth1_macvtap entered promiscuous mode
[   52.738162][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.740432][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.742517][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.748977][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.751257][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.753556][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.757010][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.784285][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   52.786757][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   52.790191][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   52.793509][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.800973][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.803408][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.805597][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.816371][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.818951][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.821251][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.823627][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.825801][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.836270][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.844060][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   52.846631][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.859980][ T1715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.861805][ T1715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.870684][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   52.892792][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.895166][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.897845][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.900087][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.902283][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.904693][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.906884][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.909296][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.912527][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.915217][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.918292][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.920198][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.922035][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.925314][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   52.929839][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   52.932478][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.935294][  T334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.948295][  T334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.960916][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   52.976956][ T4029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.980128][ T4029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.982292][ T4029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.984315][ T4029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.016825][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.019827][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.042044][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   53.261451][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.263412][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.266164][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   53.336480][ T4122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'.
[   53.339433][ T4122] netlink: 'syz.2.8': attribute type 7 has an invalid length.
[   53.341106][ T4122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   53.370396][ T4122] device erspan0 entered promiscuous mode
[   53.409477][ T4122] device batadv_slave_1 entered promiscuous mode
[   53.451546][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.453507][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.486340][ T4126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'.
[   53.491614][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.493502][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.496802][ T4126] netlink: 'syz.2.8': attribute type 7 has an invalid length.
[   53.501291][ T4126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   53.588394][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[   53.590778][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   53.593875][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   53.617884][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.619780][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.622273][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   53.648892][ T4078] Bluetooth: hci4: command 0x040f tx timeout
[   53.650354][ T4078] Bluetooth: hci0: command 0x040f tx timeout
[   53.653540][ T4126] Zero length message leads to an empty skb
[   53.657624][ T4078] Bluetooth: hci2: command 0x040f tx timeout
[   53.659264][ T4078] Bluetooth: hci1: command 0x040f tx timeout
[   53.660647][ T4078] Bluetooth: hci3: command 0x040f tx timeout
[   53.822717][ T4140] No such timeout policy "syz0"
[   53.882819][ T4140] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   53.893856][   T26] audit: type=1326 audit(53.840:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4145 comm="syz.4.14" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x0
[   53.955359][ T4148] loop1: detected capacity change from 0 to 1024
[   54.000625][ T4148] EXT4-fs (loop1): Ignoring removed orlov option
[   54.002211][ T4148] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   54.017663][ T4148] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   54.034480][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'.
[   54.059702][ T4152] netlink: 'syz.0.16': attribute type 10 has an invalid length.
[   54.062755][ T4152] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.065146][ T4152] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.085522][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.087326][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.089943][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.091664][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.098879][ T4156] udc-core: couldn't find an available UDC or it's busy
[   54.100460][ T4156] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   54.103904][ T4152] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   54.163262][ T4160] netlink: 'syz.0.18': attribute type 10 has an invalid length.
[   54.165739][ T4160] device syz_tun entered promiscuous mode
[   54.195657][ T4158] loop2: detected capacity change from 0 to 2048
[   54.198393][ T4160] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   54.330125][ T4158] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   54.593987][ T4174] loop2: detected capacity change from 0 to 1024
[   54.606902][ T4174] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   54.647008][ T4174] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,block_validity,stripe=0x0000000000000401,noquota,nogrpid,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none.
[   54.716130][   T26] audit: type=1326 audit(54.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   54.724410][   T26] audit: type=1326 audit(54.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   54.733301][   T26] audit: type=1326 audit(54.680:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   54.755532][   T26] audit: type=1326 audit(54.680:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   54.776782][   T26] audit: type=1326 audit(54.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   54.782628][   T26] audit: type=1326 audit(54.680:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   54.798688][   T26] audit: type=1326 audit(54.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   54.878628][ T4191] loop4: detected capacity change from 0 to 512
[   54.979947][ T4191] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback.
[   54.993302][ T4191] Quota error (device loop4): find_tree_dqentry: Getting block too big (1538 >= 6)
[   54.995616][ T4191] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   55.008490][ T4191] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.31: Failed to acquire dquot type 1
[   55.248295][ T4204] loop4: detected capacity change from 0 to 1764
[   55.255928][ T4206] loop0: detected capacity change from 0 to 1024
[   55.273651][ T4206] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   55.298136][ T4204] =======================================================
[   55.298136][ T4204] WARNING: The mand mount option has been deprecated and
[   55.298136][ T4204]          and is ignored by this kernel. Remove the mand
[   55.298136][ T4204]          option from the mount to silence this warning.
[   55.298136][ T4204] =======================================================
[   55.314498][ T4206] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none.
[   55.420882][ T4204] loop4: detected capacity change from 0 to 1024
[   55.453080][ T4204] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   55.455433][ T4204] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   55.461660][ T4215] netlink: 'syz.2.40': attribute type 10 has an invalid length.
[   55.469128][ T4204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814e01c, mo2=0003]
[   55.471505][ T4215] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.473281][ T4215] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.475746][ T4204] System zones: 0-1, 3-36
[   55.481463][ T4204] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,init_itable=0x000000000000000f,debug,jqfmt=vfsold,bsddf,nomblk_io_submit,nouid32,,errors=continue. Quota mode: writeback.
[   55.543701][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.545300][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.547091][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.549170][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.602394][ T4215] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   55.728211][ T4020] Bluetooth: hci3: command 0x0419 tx timeout
[   55.729687][ T4020] Bluetooth: hci1: command 0x0419 tx timeout
[   55.737893][ T4020] Bluetooth: hci2: command 0x0419 tx timeout
[   55.739437][ T4020] Bluetooth: hci0: command 0x0419 tx timeout
[   55.741484][ T4020] Bluetooth: hci4: command 0x0419 tx timeout
[   55.927920][ T4237] loop4: detected capacity change from 0 to 512
[   55.977396][ T4237] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x000000000000002f,dioread_lock,,errors=continue. Quota mode: writeback.
[   56.030733][ T4237] Process accounting resumed
[   56.104775][ T4237] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[   56.629290][ T4265] tipc: Started in network mode
[   56.630872][ T4265] tipc: Node identity 7f000001, cluster identity 4711
[   56.636858][ T4265] tipc: Enabled bearer <udp:syz1>, priority 10
[   57.438268][ T4273] netlink: 'syz.3.56': attribute type 10 has an invalid length.
[   57.448530][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.450351][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.475538][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.477242][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.479570][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.481167][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.533158][ T4273] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   57.675648][ T4287] No such timeout policy "syz0"
[   57.678474][ T4291] loop3: detected capacity change from 0 to 512
[   57.748209][   T25] tipc: Node number set to 2130706433
[   57.763746][ T4295] loop2: detected capacity change from 0 to 512
[   57.780631][ T4291] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   57.790524][ T4295] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   57.793366][ T4295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   57.817606][ T4295] EXT4-fs (loop2): 1 truncate cleaned up
[   57.818956][ T4295] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,barrier,sysvgroups,mb_optimize_scan=0x0000000000000000,jqfmt=vfsv0,nogrpid,,errors=continue. Quota mode: none.
[   58.156823][ T4334] netlink: 'syz.2.73': attribute type 10 has an invalid length.
[   58.190812][ T4341] No such timeout policy "syz0"
[   58.208954][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.210894][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.375248][ T4354] loop2: detected capacity change from 0 to 256
[   58.432295][ T4354] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ0x0000000000000000" or missing value
[   58.480822][ T4366] netlink: 104 bytes leftover after parsing attributes in process `syz.3.89'.
[   58.735664][ T4383] bond0: option all_slaves_active: invalid value (127)
[   58.737524][   T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   58.935931][ T4393] syz.3.96 uses obsolete (PF_INET,SOCK_PACKET)
[   59.260952][   T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   59.263330][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.266658][   T25] usb 1-1: Product: syz
[   59.267894][   T25] usb 1-1: Manufacturer: syz
[   59.268949][   T25] usb 1-1: SerialNumber: syz
[   59.363772][   T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   59.398242][   T25] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2
[   59.399643][ T4409] device batadv0 entered promiscuous mode
[   59.400283][   T25] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw
[   59.459146][ T4409] device batadv_slave_0 entered promiscuous mode
[   59.464919][ T4409] device batadv_slave_0 left promiscuous mode
[   59.472922][ T4409] device batadv0 left promiscuous mode
[   59.629899][ T4418] hub 5-0:1.0: USB hub found
[   59.637605][ T4418] hub 5-0:1.0: 8 ports detected
[   59.652840][ T4420] udc-core: couldn't find an available UDC or it's busy
[   59.654587][ T4420] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   59.923701][   T26] kauditd_printk_skb: 1 callbacks suppressed
[   59.923714][   T26] audit: type=1326 audit(59.870:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   59.933588][   T26] audit: type=1326 audit(59.870:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   59.955792][   T26] audit: type=1326 audit(59.870:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   59.992419][   T26] audit: type=1326 audit(59.870:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   60.008463][   T26] audit: type=1326 audit(59.870:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   60.055544][ T4442] device veth0_to_team entered promiscuous mode
[   60.171065][ T4441] loop4: detected capacity change from 0 to 8192
[   60.234501][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'.
[   60.443621][ T4454] Cannot find del_set index 0 as target
[   60.973029][ T4474] udc-core: couldn't find an available UDC or it's busy
[   60.983204][ T4474] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   61.814006][ T3320] usb 1-1: USB disconnect, device number 2
[   61.899601][ T4485] loop3: detected capacity change from 0 to 128
[   61.990280][ T4489] tipc: Enabled bearer <udp:s>, priority 10
[   62.112785][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   62.165300][ T4494] netlink: 'syz.1.136': attribute type 10 has an invalid length.
[   62.201222][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.203240][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.258033][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.259819][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.261495][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.263194][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.289107][ T4494] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   62.350794][ T4505] loop2: detected capacity change from 0 to 764
[   62.424587][ T4512] loop1: detected capacity change from 0 to 1024
[   62.473858][ T4512] EXT4-fs (loop1): Ignoring removed nobh option
[   62.475264][ T4512] EXT4-fs (loop1): Ignoring removed orlov option
[   62.560717][ T4512] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,abort,block_validity,init_itable=0x0000000000000006,block_validity,max_dir_size_kb=0x00000000000001ff,nobh,block_validity,orlov,user_xattr,init_itable=0x0000000000000400,,errors=continue. Quota mode: none.
[   62.602722][ T4523] loop2: detected capacity change from 0 to 512
[   62.707352][ T4523] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   63.237737][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   63.370620][   T26] audit: type=1326 audit(63.320:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   63.384015][   T26] audit: type=1326 audit(63.330:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   63.392075][ T4553] loop1: detected capacity change from 0 to 512
[   63.415877][   T26] audit: type=1326 audit(63.330:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   63.440559][   T26] audit: type=1326 audit(63.330:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   63.452712][ T4559] netlink: 'syz.4.159': attribute type 2 has an invalid length.
[   63.458498][   T26] audit: type=1326 audit(63.330:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   63.479443][ T4553] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   63.590347][ T4553] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   63.643048][ T4566] loop0: detected capacity change from 0 to 128
[   63.816464][ T4575] netlink: 'syz.2.165': attribute type 10 has an invalid length.
[   63.820506][ T4573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.164'.
[   63.875496][ T4575] batman_adv: batadv0: Adding interface: team0
[   63.895812][ T4575] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.920414][ T4575] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   63.926538][ T4577] netlink: 'syz.2.165': attribute type 10 has an invalid length.
[   63.934249][ T4577] netlink: 2 bytes leftover after parsing attributes in process `syz.2.165'.
[   63.946379][ T4577] device team0 entered promiscuous mode
[   63.950454][ T4577] device team_slave_0 entered promiscuous mode
[   63.954476][ T4577] device team_slave_1 entered promiscuous mode
[   63.986265][ T4577] 8021q: adding VLAN 0 to HW filter on device team0
[   63.998623][ T4577] batman_adv: batadv0: Interface activated: team0
[   64.005384][ T4577] batman_adv: batadv0: Interface deactivated: team0
[   64.010583][ T4577] batman_adv: batadv0: Removing interface: team0
[   64.036795][ T4577] bridge0: port 3(team0) entered blocking state
[   64.046084][ T4577] bridge0: port 3(team0) entered disabled state
[   64.056037][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'.
[   64.362637][ T4599] loop1: detected capacity change from 0 to 128
[   64.393403][ T4601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.177'.
[   64.407334][ T4599] EXT4-fs (loop1): Ignoring removed nobh option
[   64.429271][ T4567] loop4: detected capacity change from 0 to 32768
[   64.434453][ T4599] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[   64.509605][ T4591] udc-core: couldn't find an available UDC or it's busy
[   64.511192][ T4591] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   65.815037][ T4625] loop4: detected capacity change from 0 to 164
[   65.913645][ T4632] loop1: detected capacity change from 0 to 512
[   65.949924][ T4625] rock: directory entry would overflow storage
[   65.951375][ T4625] rock: sig=0x4f50, size=4, remaining=3
[   65.952628][ T4625] iso9660: Corrupted directory entry in block 4 of inode 1792
[   65.968808][ T4632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[   65.971206][ T4632] EXT4-fs (loop1): orphan cleanup on readonly fs
[   65.985632][ T4632] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.190: bg 0: block 328: padding at end of block bitmap is not set
[   66.037427][ T4632] EXT4-fs (loop1): Remounting filesystem read-only
[   66.047525][ T4632] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem
[   66.059021][ T4632] EXT4-fs (loop1): Remounting filesystem read-only
[   66.062971][ T4632] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.190: invalid indirect mapped block 65280 (level 0)
[   66.086726][ T4632] EXT4-fs (loop1): Remounting filesystem read-only
[   66.092780][ T4632] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.190: attempt to clear invalid blocks 33619980 len 1
[   66.106556][ T4632] EXT4-fs (loop1): Remounting filesystem read-only
[   66.108600][ T4632] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.190: invalid indirect mapped block 1819239214 (level 0)
[   66.137429][ T4632] EXT4-fs (loop1): Remounting filesystem read-only
[   66.138954][ T4632] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.190: invalid indirect mapped block 1819239214 (level 1)
[   66.162742][ T4632] EXT4-fs (loop1): Remounting filesystem read-only
[   66.164560][ T4632] EXT4-fs (loop1): 1 orphan inode deleted
[   66.171982][ T4632] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noblock_validity,. Quota mode: none.
[   66.285955][   T26] kauditd_printk_skb: 42 callbacks suppressed
[   66.285969][   T26] audit: type=1326 audit(66.230:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.296190][   T26] audit: type=1326 audit(66.240:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.311827][   T26] audit: type=1326 audit(66.240:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.316817][   T26] audit: type=1326 audit(66.240:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.352455][   T26] audit: type=1326 audit(66.240:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.396902][   T26] audit: type=1326 audit(66.240:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.424445][   T26] audit: type=1326 audit(66.250:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.454160][   T26] audit: type=1326 audit(66.250:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.472868][   T26] audit: type=1326 audit(66.250:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.486789][   T26] audit: type=1326 audit(66.250:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   66.502347][ T4653] netlink: 'syz.3.198': attribute type 10 has an invalid length.
[   66.556688][ T4653] batman_adv: batadv0: Adding interface: team0
[   66.565092][ T4653] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.630903][ T4653] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   67.460076][ T4658] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   67.531998][ T4654] netlink: 'syz.3.198': attribute type 10 has an invalid length.
[   67.533667][ T4654] netlink: 2 bytes leftover after parsing attributes in process `syz.3.198'.
[   67.535708][ T4654] device team0 entered promiscuous mode
[   67.536894][ T4654] device team_slave_0 entered promiscuous mode
[   67.561318][ T4654] device team_slave_1 entered promiscuous mode
[   67.577767][ T4654] 8021q: adding VLAN 0 to HW filter on device team0
[   67.579475][ T4654] batman_adv: batadv0: Interface activated: team0
[   67.581006][ T4654] batman_adv: batadv0: Interface deactivated: team0
[   67.582543][ T4654] batman_adv: batadv0: Removing interface: team0
[   67.593329][ T4654] bridge0: port 3(team0) entered blocking state
[   67.603732][ T4654] bridge0: port 3(team0) entered disabled state
[   67.608149][ T4654] bridge0: port 3(team0) entered blocking state
[   67.609694][ T4654] bridge0: port 3(team0) entered forwarding state
[   67.626828][ T4669] tipc: Started in network mode
[   67.628082][ T4669] tipc: Node identity ac1414aa, cluster identity 4711
[   67.630837][ T4669] tipc: Enabled bearer <udp:s>, priority 10
[   67.859013][ T4679] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   67.861861][ T4682] device vlan0 entered promiscuous mode
[   67.958544][ T4682] device vlan0 left promiscuous mode
[   67.990790][ T4690] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   68.331373][ T4709] tipc: Started in network mode
[   68.340478][ T4709] tipc: Node identity ac1414aa, cluster identity 4711
[   68.349230][ T4709] tipc: Enabled bearer <udp:s>, priority 10
[   68.597122][ T4723] netlink: 14 bytes leftover after parsing attributes in process `syz.3.225'.
[   68.599943][ T4724] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   68.749285][ T4616] tipc: Node number set to 2886997162
[   68.970901][ T4745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.233'.
[   69.102803][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'.
[   69.117026][ T4752] device geneve2 entered promiscuous mode
[   69.140329][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'.
[   69.371210][ T4766] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   69.469243][ T4616] tipc: Node number set to 2886997162
[   69.548775][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'.
[   69.569575][ T4773] netlink: 'syz.2.243': attribute type 10 has an invalid length.
[   69.650274][ T2056] ieee802154 phy0 wpan0: encryption failed: -22
[   69.652540][ T2056] ieee802154 phy1 wpan1: encryption failed: -22
[   69.767850][ T4790] dccp_invalid_packet: P.Data Offset(5) too small
[   69.891910][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'.
[   70.141188][ T4808] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   70.358266][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'.
[   70.387902][ T4813] netlink: 'syz.3.256': attribute type 10 has an invalid length.
[   70.397638][ T4813] bridge0: port 3(team0) entered disabled state
[   70.399220][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.401089][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.421304][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'.
[   70.474874][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'.
[   70.658628][ T4828] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   70.670072][ T4829] lo speed is unknown, defaulting to 1000
[   70.671629][ T4829] lo speed is unknown, defaulting to 1000
[   70.674264][ T4829] lo speed is unknown, defaulting to 1000
[   70.727849][ T4829] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.759562][ T4829] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   70.821860][ T4838] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   70.843891][ T4829] lo speed is unknown, defaulting to 1000
[   70.846739][ T4829] lo speed is unknown, defaulting to 1000
[   70.905979][ T4836] lo speed is unknown, defaulting to 1000
[   70.924014][ T4829] lo speed is unknown, defaulting to 1000
[   70.926066][ T4829] lo speed is unknown, defaulting to 1000
[   70.952918][ T4829] lo speed is unknown, defaulting to 1000
[   70.955086][ T4829] lo speed is unknown, defaulting to 1000
[   71.031131][ T4847] loop0: detected capacity change from 0 to 128
[   71.048452][ T4829] lo speed is unknown, defaulting to 1000
[   71.147344][ T4845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.177902][ T4847] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   71.259978][ T4845] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.469135][ T4868] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   71.566688][   T26] kauditd_printk_skb: 89 callbacks suppressed
[   71.566734][   T26] audit: type=1326 audit(71.510:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   71.615641][   T26] audit: type=1326 audit(71.560:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   71.630396][   T26] audit: type=1326 audit(71.570:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   71.651422][   T26] audit: type=1326 audit(71.570:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   71.668071][   T26] audit: type=1326 audit(71.570:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   71.685984][   T26] audit: type=1326 audit(71.580:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   71.703475][   T26] audit: type=1326 audit(71.580:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   71.846843][   T26] audit: type=1326 audit(71.580:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   71.961641][ T4880] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   72.022927][   T26] audit: type=1326 audit(71.580:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   72.170393][   T26] audit: type=1326 audit(71.580:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   72.600066][ T4887] netlink: 'syz.0.280': attribute type 11 has an invalid length.
[   72.665454][ T4892] tipc: Started in network mode
[   72.667902][ T4892] tipc: Node identity ac1414aa, cluster identity 4711
[   72.669781][ T4892] tipc: Enabled bearer <udp:s>, priority 10
[   72.672040][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'.
[   72.765253][ T4899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'.
[   72.786565][ T4902] loop1: detected capacity change from 0 to 128
[   73.677293][   T13] tipc: Node number set to 2886997162
[   73.680435][ T4913] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   73.762201][ T4923] loop3: detected capacity change from 0 to 512
[   73.820875][ T4927] loop1: detected capacity change from 0 to 512
[   73.860392][ T4927] EXT4-fs (loop1): Ignoring removed nobh option
[   73.866538][ T4923] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x000000000000002f,dioread_lock,,errors=continue. Quota mode: writeback.
[   73.884731][ T4934] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   73.897804][ T4927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   73.930721][ T4927] EXT4-fs (loop1): 1 truncate cleaned up
[   73.932103][ T4927] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,nobh,data_err=ignore,nolazytime,grpjquota=,acl,,errors=continue. Quota mode: none.
[   73.959997][ T4935] netlink: 'syz.2.300': attribute type 10 has an invalid length.
[   74.131418][ T4946] loop3: detected capacity change from 0 to 512
[   76.269512][ T4961] loop1: detected capacity change from 0 to 256
[   76.905996][ T4946] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   77.104068][ T4966] __nla_validate_parse: 2 callbacks suppressed
[   77.104084][ T4966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.309'.
[   77.118797][   T21] cfg80211: failed to load regulatory.db
[   77.119142][ T4946] EXT4-fs (loop3): orphan cleanup on readonly fs
[   77.153511][ T4946] __quota_error: 20 callbacks suppressed
[   77.153528][ T4946] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5
[   77.167683][ T4946] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   77.170181][ T4946] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.302: Failed to acquire dquot type 1
[   77.187575][ T4946] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.302: bg 0: block 40: padding at end of block bitmap is not set
[   77.271260][ T4946] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem
[   77.292249][ T4946] EXT4-fs (loop3): 1 truncate cleaned up
[   77.298832][ T4946] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   77.349989][   T26] audit: type=1326 audit(77.300:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   77.476262][ T4978] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   77.578242][ T4983] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   77.603143][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'.
[   77.634625][ T4986] netlink: 'syz.3.314': attribute type 10 has an invalid length.
[   77.970334][ T5001] sp0: Synchronizing with TNC
[   80.445218][   T26] audit: type=1326 audit(80.380:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   80.445279][   T26] audit: type=1326 audit(80.380:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   80.445316][   T26] audit: type=1326 audit(80.380:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   80.445352][   T26] audit: type=1326 audit(80.380:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   80.445387][   T26] audit: type=1326 audit(80.380:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   80.445422][   T26] audit: type=1326 audit(80.380:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   80.445456][   T26] audit: type=1326 audit(80.380:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5015 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   80.779409][ T5033] loop4: detected capacity change from 0 to 512
[   80.851082][ T5033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   80.885702][ T5033] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   80.893918][ T5033] EXT4-fs (loop4): 1 truncate cleaned up
[   80.896482][ T5033] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,acl,barrier,,errors=continue. Quota mode: none.
[   81.174395][ T5048] lo speed is unknown, defaulting to 1000
[   81.282033][ T5064] loop4: detected capacity change from 0 to 512
[   81.346416][ T5069] netlink: 144 bytes leftover after parsing attributes in process `syz.2.348'.
[   81.365849][ T5064] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   81.406891][ T5064] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   81.424764][ T5064] System zones: 0-2, 18-18, 34-34
[   81.472937][ T5064] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.346: bad orphan inode 15
[   81.489092][ T5064] ext4_test_bit(bit=14, block=18) = 1
[   81.490278][ T5064] is_bad_inode(inode)=0
[   81.491181][ T5064] NEXT_ORPHAN(inode)=2264924160
[   81.492247][ T5064] max_ino=32
[   81.492985][ T5064] i_nlink=0
[   81.493723][ T5064] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   81.526967][ T5064] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.346: corrupted inode contents
[   81.553295][ T5064] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #15: comm syz.4.346: mark_inode_dirty error
[   81.587745][ T5073] device vlan2 entered promiscuous mode
[   81.589012][ T5073] device bond0 entered promiscuous mode
[   81.590191][ T5073] device bond_slave_0 entered promiscuous mode
[   81.591617][ T5073] device bond_slave_1 entered promiscuous mode
[   81.593003][ T5073] device bridge0 entered promiscuous mode
[   81.605561][ T5064] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.346: corrupted inode contents
[   81.628017][ T5064] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2961: inode #15: comm syz.4.346: mark_inode_dirty error
[   81.637592][ T5064] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2964: inode #15: comm syz.4.346: mark inode dirty (error -117)
[   81.637981][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[   81.644095][ T5064] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117)
[   81.646351][ T5064] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[   81.659892][ T5082] capability: warning: `syz.1.352' uses 32-bit capabilities (legacy support in use)
[   81.677480][ T5064] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.346: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   81.688552][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[   81.701629][ T5064] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.346: bg 0: block 80: padding at end of block bitmap is not set
[   81.840264][ T5086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.354'.
[   82.006094][ T4223] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   82.020460][ T5095] udc-core: couldn't find an available UDC or it's busy
[   82.028971][ T4223] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   82.031329][ T5095] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   82.042062][ T5092] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[   82.100912][ T5099] IPv6: Can't replace route, no match found
[   82.200660][   T26] kauditd_printk_skb: 52 callbacks suppressed
[   82.200673][   T26] audit: type=1326 audit(82.150:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5105 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   82.208006][   T26] audit: type=1326 audit(82.150:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5105 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   82.226028][ T5104] loop3: detected capacity change from 0 to 2048
[   82.229287][   T26] audit: type=1326 audit(82.160:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5105 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=76 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   82.248160][   T26] audit: type=1326 audit(82.160:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5105 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   82.253097][   T26] audit: type=1326 audit(82.160:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5105 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   82.297235][   T26] audit: type=1326 audit(82.230:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5109 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2149328 code=0x7ffc0000
[   82.322508][   T26] audit: type=1326 audit(82.270:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5109 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa2149328 code=0x7ffc0000
[   82.334467][ T5104] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.335041][ T5111] udc-core: couldn't find an available UDC or it's busy
[   82.349006][   T26] audit: type=1326 audit(82.280:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5109 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2149328 code=0x7ffc0000
[   82.349931][ T5104] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm +}[@: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   82.366579][ T5111] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   82.374233][   T26] audit: type=1326 audit(82.280:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5109 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa2149328 code=0x7ffc0000
[   82.397290][   T26] audit: type=1326 audit(82.280:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5109 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2149328 code=0x7ffc0000
[   82.409153][ T5115] netlink: 9 bytes leftover after parsing attributes in process `syz.1.367'.
[   82.436312][ T5115] device gretap0 entered promiscuous mode
[   83.352977][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'.
[   83.431258][ T5125] device bond1 entered promiscuous mode
[   83.450536][ T5125] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.464965][ T5134] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   83.565476][ T5137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'.
[   83.608275][ T5141] netlink: 'syz.4.374': attribute type 10 has an invalid length.
[   83.610148][ T5141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.374'.
[   83.626006][ T5141] bridge0: port 3(dummy0) entered blocking state
[   83.630801][ T5141] bridge0: port 3(dummy0) entered disabled state
[   83.634285][ T5141] device dummy0 entered promiscuous mode
[   83.639113][ T5141] bridge0: port 3(dummy0) entered blocking state
[   83.640632][ T5141] bridge0: port 3(dummy0) entered forwarding state
[   83.662839][ T5143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[   83.810037][ T4080] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   83.814384][ T4080] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   83.820580][ T5153] udc-core: couldn't find an available UDC or it's busy
[   83.830037][ T5153] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   83.854469][ T5156] rtc-efi rtc-efi.0: write status is 3
[   84.038152][ T5162] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   84.059305][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.061314][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.062926][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.064600][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.066326][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.074399][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.077766][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.081945][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.084880][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.087748][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.091951][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.094793][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.097667][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.101929][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.104772][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.107611][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.110605][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.113452][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.125020][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.132895][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.135855][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.145871][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.151283][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.155540][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.167658][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.173086][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.179907][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.185823][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.191233][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.196570][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.203254][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.205091][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.223531][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.230870][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.234914][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.245799][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.251134][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.256302][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.262964][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.270917][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.275501][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.282132][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.288623][ T4080] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   84.305464][ T4080] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   84.458038][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'.
[   84.655368][ T5184] tipc: Started in network mode
[   84.656609][ T5184] tipc: Node identity ac1414aa, cluster identity 4711
[   84.665729][ T5184] tipc: Enabled bearer <udp:s>, priority 10
[   85.787276][ T4080] tipc: Node number set to 2886997162
[   85.875245][ T4080] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   85.882746][ T5199] udc-core: couldn't find an available UDC or it's busy
[   85.884287][ T5199] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   85.918570][ T4080] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   85.997890][ T5205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.405'.
[   86.101990][ T5212] device veth1_macvtap left promiscuous mode
[   86.103582][ T5212] device macsec0 entered promiscuous mode
[   86.115131][ T5219] loop1: detected capacity change from 0 to 128
[   86.144919][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'.
[   86.151613][ T5217] netlink: 'syz.0.410': attribute type 10 has an invalid length.
[   86.160613][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.162351][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.204451][ T5219] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.538940][ T5236] netlink: 'syz.3.418': attribute type 4 has an invalid length.
[   86.545744][ T5239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.419'.
[   87.355192][ T5242] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   87.437573][ T5251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'.
[   87.670168][   T26] kauditd_printk_skb: 2 callbacks suppressed
[   87.670180][   T26] audit: type=1326 audit(87.620:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   87.684929][   T26] audit: type=1326 audit(87.630:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   87.722063][ T5268] udc-core: couldn't find an available UDC or it's busy
[   87.723697][ T5268] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   87.731692][   T26] audit: type=1326 audit(87.630:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=100 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   87.736520][   T26] audit: type=1326 audit(87.630:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   87.749549][ T4080] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   87.759146][ T4080] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   87.772407][   T26] audit: type=1326 audit(87.630:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5265 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   87.940516][ T5278] loop0: detected capacity change from 0 to 512
[   87.944476][ T5280] loop3: detected capacity change from 0 to 764
[   88.765234][ T5278] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002]
[   88.767062][ T5278] System zones: 1-12
[   88.770408][ T5278] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.435: inode #1: comm syz.0.435: iget: illegal inode #
[   88.785913][ T5278] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.435: error while reading EA inode 1 err=-117
[   88.790124][ T5278] EXT4-fs (loop0): 1 orphan inode deleted
[   88.791399][ T5278] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback.
[   88.791740][ T5288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.436'.
[   88.870351][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'.
[   88.873679][ T5290] netlink: 'syz.4.437': attribute type 10 has an invalid length.
[   88.898458][ T5290] bridge0: port 3(dummy0) entered disabled state
[   88.899983][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.901657][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.906639][ T5293] netlink: 408 bytes leftover after parsing attributes in process `syz.3.439'.
[   89.000490][ T5290] bridge0: port 3(dummy0) entered blocking state
[   89.002075][ T5290] bridge0: port 3(dummy0) entered forwarding state
[   89.003555][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.005193][ T5290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.006829][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.008412][ T5290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.055121][ T5290] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   89.145953][ T5309] loop0: detected capacity change from 0 to 512
[   89.224462][ T5315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.449'.
[   89.296732][ T5320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.451'.
[   89.399626][ T5309] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   90.364705][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsdgroups,nodiscard,min_batch_time=0x0000000000000003,delalloc,,errors=continue. Quota mode: writeback.
[   90.491873][ T5331] device syzkaller0 entered promiscuous mode
[   90.592422][ T5343] loop2: detected capacity change from 0 to 512
[   91.054829][ T5343] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   91.555606][ T5361] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   91.675848][ T5372] loop0: detected capacity change from 0 to 1024
[   91.742895][ T5372] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   91.752280][ T5372] EXT4-fs error (device loop0): ext4_get_journal_inode:5160: inode #32: comm syz.0.471: iget: special inode unallocated
[   91.759987][ T5372] EXT4-fs (loop0): no journal found
[   91.761154][ T5372] EXT4-fs (loop0): can't get journal size
[   91.783870][ T5372] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.471: iget: special inode unallocated
[   91.813913][ T5372] EXT4-fs (loop0): failed to initialize system zone (-117)
[   91.815764][ T5372] EXT4-fs (loop0): mount failed
[   91.820013][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'.
[   91.906293][   T26] audit: type=1326 audit(91.850:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[   91.914509][   T26] audit: type=1326 audit(91.860:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[   91.931331][   T26] audit: type=1326 audit(91.870:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[   91.943862][ T5387] loop2: detected capacity change from 0 to 128
[   91.954357][   T26] audit: type=1326 audit(91.870:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[   91.979089][   T26] audit: type=1326 audit(91.870:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5386 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[   91.987838][ T5387] EXT4-fs (loop2): Ignoring removed nobh option
[   92.035147][ T5394] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   92.061261][ T5387] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[   92.223988][ T5404] tipc: New replicast peer: 255.255.255.255
[   92.226037][ T5404] tipc: Enabled bearer <udp:syz2>, priority 10
[   92.233823][   T21] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   92.244186][   T21] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   92.256364][ T5405] udc-core: couldn't find an available UDC or it's busy
[   92.258420][ T5405] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   92.552227][ T5426] loop2: detected capacity change from 0 to 128
[   92.566241][ T5422] loop3: detected capacity change from 0 to 512
[   92.641560][ T5422] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #2: comm syz.3.492: corrupted xattr block 255
[   92.698751][ T5422] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   92.700637][ T5422] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.noload,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[   92.705753][ T5422] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #2: comm syz.3.492: corrupted xattr block 255
[   93.186405][ T4616] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   93.189601][ T4616] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   93.212180][ T5462] udc-core: couldn't find an available UDC or it's busy
[   93.221794][ T5462] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   93.494372][ T5466] sp0: Synchronizing with TNC
[   94.055985][   T26] kauditd_printk_skb: 33 callbacks suppressed
[   94.056001][   T26] audit: type=1326 audit(94.000:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   94.062448][   T26] audit: type=1326 audit(94.000:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=238 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   94.066997][   T26] audit: type=1326 audit(94.000:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   94.094877][   T26] audit: type=1326 audit(94.000:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaedc8328 code=0x7ffc0000
[   94.175318][ T5480] loop2: detected capacity change from 0 to 512
[   94.256443][ T5480] EXT4-fs (loop2): Invalid want_extra_isize 6
[   94.301904][   T26] audit: type=1326 audit(94.250:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   94.329649][   T26] audit: type=1326 audit(94.280:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   94.338995][   T26] audit: type=1326 audit(94.290:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   94.343767][   T26] audit: type=1326 audit(94.290:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   94.359552][   T26] audit: type=1326 audit(94.290:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   94.366923][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'.
[   94.374340][ T5442] loop0: detected capacity change from 0 to 512
[   94.386155][   T26] audit: type=1326 audit(94.290:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=140 compat=0 ip=0xffff9d1a6328 code=0x7ffc0000
[   94.515783][ T5442] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback.
[   94.580537][ T5504] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   94.675999][ T5509] udc-core: couldn't find an available UDC or it's busy
[   94.676022][ T5509] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   94.715231][ T4079] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   94.738484][ T4079] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   94.841843][ T5519] loop2: detected capacity change from 0 to 512
[   94.846168][ T5511] device veth0_vlan left promiscuous mode
[   94.886974][ T5519] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   94.889655][ T5519] EXT4-fs (loop2): group descriptors corrupted!
[   95.142914][ T5530] netlink: 'syz.2.536': attribute type 10 has an invalid length.
[   95.304155][ T5541] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   95.492084][ T5551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'.
[   95.522639][ T5551] sctp: [Deprecated]: syz.1.545 (pid 5551) Use of int in maxseg socket option.
[   95.522639][ T5551] Use struct sctp_assoc_value instead
[   95.562330][ T5562] netlink: 'syz.3.551': attribute type 10 has an invalid length.
[   95.589588][   T21] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   95.602328][   T21] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   95.610579][ T5564] udc-core: couldn't find an available UDC or it's busy
[   95.614904][ T5564] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   95.639949][ T5566] loop2: detected capacity change from 0 to 1024
[   95.670225][ T5566] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   95.753795][ T5573] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   95.765773][ T5566] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none.
[   95.780457][ T5566] process 'syz.2.552' launched './file0/file0' with NULL argv: empty string added
[   95.941508][ T4238] udevd[4238]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   96.016251][ T5252] udevd[5252]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   96.070638][ T5595] loop2: detected capacity change from 0 to 256
[   96.085681][ T4238] udevd[4238]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   96.121528][ T5601] loop3: detected capacity change from 0 to 512
[   96.159901][ T5601] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback.
[   96.166231][ T5608] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   96.170742][ T5601] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.567: path /126/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   96.179816][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.188672][ T5601] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz.3.567: path /126/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   96.194947][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.197029][ T5601] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.567: path /126/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   96.207845][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.209375][ T5601] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz.3.567: path /126/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   96.227842][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.229322][ T5601] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz.3.567: path /126/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   96.261966][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.263807][ T5601] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.567: path /126/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   96.283587][ T5612] loop1: detected capacity change from 0 to 512
[   96.285803][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.288227][ T5601] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz.3.567: path /126/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   96.293463][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.295053][ T5601] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 18: comm syz.3.567: lblock 23 mapped to illegal pblock 18 (length 1)
[   96.300283][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.302014][ T5601] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz.3.567: path /126/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   96.309423][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.311164][ T5601] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 20: comm syz.3.567: path /126/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[   96.328599][ T5601] EXT4-fs (loop3): Remounting filesystem read-only
[   96.366492][ T5612] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   96.884927][ T5635] capability: warning: `syz.0.580' uses deprecated v2 capabilities in a way that may be insecure
[   96.966927][ T5637] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   97.264718][ T5649] netlink: 'syz.1.586': attribute type 21 has an invalid length.
[   97.426576][ T5664] loop2: detected capacity change from 0 to 1024
[   97.515531][ T5669] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   97.572196][ T5672] loop1: detected capacity change from 0 to 512
[   97.580491][ T5672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   97.608548][ T5665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.589'.
[   97.656918][ T5676] snd_dummy snd_dummy.0: control 4:-4099:-2147483640:syz0:5 is already present
[   97.674952][ T5672] EXT4-fs (loop1): 1 orphan inode deleted
[   97.676413][ T5672] EXT4-fs (loop1): 1 truncate cleaned up
[   97.682165][ T5672] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback.
[   97.704817][ T5672] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.1.594: path /107/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[   97.722278][ T5672] EXT4-fs (loop1): Remounting filesystem read-only
[   97.723072][ T5664] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x000000000000007f,nolazytime,noload,nombcache,acl,,errors=continue. Quota mode: none.
[   97.868448][ T5680] loop3: detected capacity change from 0 to 256
[   97.922343][ T5683] loop1: detected capacity change from 0 to 512
[   97.925642][ T5680] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[   97.988149][ T4616] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[   97.991521][ T5683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   97.993816][ T4616] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   97.995063][ T5687] udc-core: couldn't find an available UDC or it's busy
[   98.016308][ T5687] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   98.022085][ T5690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'.
[   98.817300][ T5703] lo speed is unknown, defaulting to 1000
[   99.168383][ T5706] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   99.273964][ T5710] loop3: detected capacity change from 0 to 512
[   99.318984][ T5717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.614'.
[   99.321363][ T5710] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   99.371618][ T5710] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #17: comm syz.3.610: iget: bad i_size value: -6917529027641081756
[   99.390465][ T5710] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.610: couldn't read orphan inode 17 (err -117)
[   99.409679][ T5710] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   99.414543][   T26] kauditd_printk_skb: 41 callbacks suppressed
[   99.414556][   T26] audit: type=1326 audit(99.360:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   99.431347][   T26] audit: type=1326 audit(99.360:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=53 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   99.436110][   T26] audit: type=1326 audit(99.360:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   99.474487][   T26] audit: type=1326 audit(99.360:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   99.533572][   T26] audit: type=1326 audit(99.360:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[   99.705012][ T5733] udc-core: couldn't find an available UDC or it's busy
[   99.706731][ T5733] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  100.335387][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'.
[  100.536813][ T5734] sched: RT throttling activated
[  100.561140][   T26] audit: type=1326 audit(99.360:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[  100.566022][   T26] audit: type=1326 audit(99.360:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[  100.586620][ T5738] loop4: detected capacity change from 0 to 512
[  100.589376][   T26] audit: type=1326 audit(99.360:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[  100.615248][   T26] audit: type=1326 audit(99.370:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[  100.639466][   T26] audit: type=1326 audit(99.370:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.0.613" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa6665328 code=0x7ffc0000
[  100.656369][ T4223] hid-generic 0000:0000:0000.000B: unknown main item tag 0x7
[  100.658435][ T4223] hid-generic 0000:0000:0000.000B: ignoring exceeding usage max
[  100.666187][ T4223] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  100.678646][ T4223] hid-generic 0000:0000:0000.000B: unknown main item tag 0x6
[  100.684648][ T4223] hid-generic 0000:0000:0000.000B: unknown main item tag 0xd
[  100.719099][ T4223] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  100.751661][ T5738] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.621: Parent and EA inode have the same ino 15
[  100.755120][ T5738] EXT4-fs (loop4): 1 orphan inode deleted
[  100.756696][ T5738] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  100.873186][ T5748] Cannot find del_set index 0 as target
[  101.022888][ T5752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.627'.
[  101.104693][ T4616] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  101.109930][ T4616] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  101.117836][ T5755] udc-core: couldn't find an available UDC or it's busy
[  101.119553][ T5755] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  101.354035][ T5777] loop1: detected capacity change from 0 to 128
[  101.374476][ T5775] lo speed is unknown, defaulting to 1000
[  101.701841][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'.
[  102.645420][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'.
[  103.851258][ T4223] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  103.854894][ T4223] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  103.880095][ T5819] udc-core: couldn't find an available UDC or it's busy
[  103.882389][ T5819] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  104.165534][ T5826] netlink: 'syz.2.655': attribute type 1 has an invalid length.
[  104.178918][ T5826] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.655'.
[  104.557061][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'.
[  105.160605][ T5834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'.
[  105.162708][ T5834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'.
[  105.182695][ T5832] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  105.283220][ T5836] netlink: 'syz.4.660': attribute type 10 has an invalid length.
[  105.299413][ T5836] bridge0: port 3(dummy0) entered disabled state
[  105.300989][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.302661][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.383312][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  105.383327][   T26] audit: type=1326 audit(105.330:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  105.410137][   T26] audit: type=1326 audit(105.360:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  105.414877][   T26] audit: type=1326 audit(105.360:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  105.477311][   T26] audit: type=1326 audit(105.360:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  105.482381][   T26] audit: type=1326 audit(105.360:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  105.506112][   T26] audit: type=1326 audit(105.360:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  105.533627][   T26] audit: type=1326 audit(105.360:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  105.552413][   T26] audit: type=1326 audit(105.360:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=146 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  105.572831][   T26] audit: type=1326 audit(105.360:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  105.592377][   T26] audit: type=1326 audit(105.360:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bba1328 code=0x7ffc0000
[  106.454967][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[  107.349019][ T5862] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  107.425979][   T13] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  107.429927][ T5868] udc-core: couldn't find an available UDC or it's busy
[  107.432000][   T13] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  107.434432][ T5868] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  107.469251][ T5870] netlink: 'syz.4.675': attribute type 10 has an invalid length.
[  107.583601][ T5880] delete_channel: no stack
[  107.762624][ T5887] 
[  107.763154][ T5887] ======================================================
[  107.764585][ T5887] WARNING: possible circular locking dependency detected
[  107.766189][ T5887] 5.15.173-syzkaller #0 Not tainted
[  107.767307][ T5887] ------------------------------------------------------
[  107.768950][ T5887] syz.1.682/5887 is trying to acquire lock:
[  107.770177][ T5887] ffff0000c9af8b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0
[  107.772566][ T5887] 
[  107.772566][ T5887] but task is already holding lock:
[  107.774234][ T5887] ffff0000c9af8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060
[  107.776417][ T5887] 
[  107.776417][ T5887] which lock already depends on the new lock.
[  107.776417][ T5887] 
[  107.778659][ T5887] 
[  107.778659][ T5887] the existing dependency chain (in reverse order) is:
[  107.780746][ T5887] 
[  107.780746][ T5887] -> #3 (&hdev->req_lock){+.+.}-{3:3}:
[  107.782358][ T5887]        __mutex_lock_common+0x194/0x2154
[  107.783408][ T5887]        mutex_lock_nested+0xa4/0xf8
[  107.784372][ T5887]        hci_dev_do_close+0x64/0x1060
[  107.785359][ T5887]        hci_rfkill_set_block+0xdc/0x1d0
[  107.786382][ T5887]        rfkill_set_block+0x18c/0x37c
[  107.787375][ T5887]        rfkill_fop_write+0x594/0x750
[  107.788498][ T5887]        vfs_write+0x280/0xb44
[  107.789544][ T5887]        ksys_write+0x15c/0x26c
[  107.790601][ T5887]        __arm64_sys_write+0x7c/0x90
[  107.791741][ T5887]        invoke_syscall+0x98/0x2b8
[  107.792896][ T5887]        el0_svc_common+0x138/0x258
[  107.794182][ T5887]        do_el0_svc+0x58/0x14c
[  107.795303][ T5887]        el0_svc+0x7c/0x1f0
[  107.796384][ T5887]        el0t_64_sync_handler+0x84/0xe4
[  107.797623][ T5887]        el0t_64_sync+0x1a0/0x1a4
[  107.798782][ T5887] 
[  107.798782][ T5887] -> #2 (rfkill_global_mutex){+.+.}-{3:3}:
[  107.800503][ T5887]        __mutex_lock_common+0x194/0x2154
[  107.801759][ T5887]        mutex_lock_nested+0xa4/0xf8
[  107.802999][ T5887]        rfkill_register+0x44/0x7a4
[  107.804129][ T5887]        hci_register_dev+0x3e0/0x880
[  107.805352][ T5887]        vhci_create_device+0x2c4/0x568
[  107.806555][ T5887]        vhci_write+0x318/0x3b8
[  107.807233][ T5893] loop4: detected capacity change from 0 to 512
[  107.807675][ T5887]        vfs_write+0x884/0xb44
[  107.810095][ T5887]        ksys_write+0x15c/0x26c
[  107.811115][ T5887]        __arm64_sys_write+0x7c/0x90
[  107.812293][ T5887]        invoke_syscall+0x98/0x2b8
[  107.813364][ T5887]        el0_svc_common+0x138/0x258
[  107.814512][ T5887]        do_el0_svc+0x58/0x14c
[  107.815577][ T5887]        el0_svc+0x7c/0x1f0
[  107.816537][ T5887]        el0t_64_sync_handler+0x84/0xe4
[  107.817868][ T5887]        el0t_64_sync+0x1a0/0x1a4
[  107.818975][ T5887] 
[  107.818975][ T5887] -> #1 (&data->open_mutex){+.+.}-{3:3}:
[  107.820717][ T5887]        __mutex_lock_common+0x194/0x2154
[  107.822036][ T5887]        mutex_lock_nested+0xa4/0xf8
[  107.823168][ T5887]        vhci_send_frame+0x8c/0x10c
[  107.824440][ T5887]        hci_send_frame+0x194/0x2f0
[  107.825633][ T5887]        hci_tx_work+0x9ac/0x16cc
[  107.826805][ T5887]        process_one_work+0x790/0x11b8
[  107.828064][ T5887]        worker_thread+0x910/0x1034
[  107.829192][ T5887]        kthread+0x37c/0x45c
[  107.830209][ T5887]        ret_from_fork+0x10/0x20
[  107.831321][ T5887] 
[  107.831321][ T5887] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  107.833419][ T5887]        __lock_acquire+0x32d4/0x7638
[  107.834600][ T5887]        lock_acquire+0x240/0x77c
[  107.835830][ T5887]        __flush_work+0xf8/0x1c0
[  107.836949][ T5887]        flush_work+0x24/0x38
[  107.837995][ T5887]        hci_dev_do_close+0x16c/0x1060
[  107.839330][ T5887]        hci_rfkill_set_block+0xdc/0x1d0
[  107.840664][ T5887]        rfkill_set_block+0x18c/0x37c
[  107.841813][ T5887]        rfkill_fop_write+0x594/0x750
[  107.842962][ T5887]        vfs_write+0x280/0xb44
[  107.843971][ T5887]        ksys_write+0x15c/0x26c
[  107.845080][ T5887]        __arm64_sys_write+0x7c/0x90
[  107.846224][ T5887]        invoke_syscall+0x98/0x2b8
[  107.847412][ T5887]        el0_svc_common+0x138/0x258
[  107.848554][ T5887]        do_el0_svc+0x58/0x14c
[  107.849705][ T5887]        el0_svc+0x7c/0x1f0
[  107.850753][ T5887]        el0t_64_sync_handler+0x84/0xe4
[  107.851986][ T5887]        el0t_64_sync+0x1a0/0x1a4
[  107.853053][ T5887] 
[  107.853053][ T5887] other info that might help us debug this:
[  107.853053][ T5887] 
[  107.855312][ T5887] Chain exists of:
[  107.855312][ T5887]   (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock
[  107.855312][ T5887] 
[  107.858790][ T5887]  Possible unsafe locking scenario:
[  107.858790][ T5887] 
[  107.860339][ T5887]        CPU0                    CPU1
[  107.861571][ T5887]        ----                    ----
[  107.862704][ T5887]   lock(&hdev->req_lock);
[  107.863739][ T5887]                                lock(rfkill_global_mutex);
[  107.865297][ T5887]                                lock(&hdev->req_lock);
[  107.866841][ T5887]   lock((work_completion)(&hdev->tx_work));
[  107.868157][ T5887] 
[  107.868157][ T5887]  *** DEADLOCK ***
[  107.868157][ T5887] 
[  107.870028][ T5887] 2 locks held by syz.1.682/5887:
[  107.871122][ T5887]  #0: ffff800016e77268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750
[  107.873406][ T5887]  #1: ffff0000c9af8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060
[  107.875673][ T5887] 
[  107.875673][ T5887] stack backtrace:
[  107.876972][ T5887] CPU: 0 PID: 5887 Comm: syz.1.682 Not tainted 5.15.173-syzkaller #0
[  107.878778][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  107.881082][ T5887] Call trace:
[  107.881775][ T5887]  dump_backtrace+0x0/0x530
[  107.882760][ T5887]  show_stack+0x2c/0x3c
[  107.883678][ T5887]  dump_stack_lvl+0x108/0x170
[  107.884654][ T5887]  dump_stack+0x1c/0x58
[  107.885571][ T5887]  print_circular_bug+0x150/0x1b8
[  107.886739][ T5887]  check_noncircular+0x2cc/0x378
[  107.887810][ T5887]  __lock_acquire+0x32d4/0x7638
[  107.888846][ T5887]  lock_acquire+0x240/0x77c
[  107.889835][ T5887]  __flush_work+0xf8/0x1c0
[  107.890776][ T5887]  flush_work+0x24/0x38
[  107.891716][ T5887]  hci_dev_do_close+0x16c/0x1060
[  107.892794][ T5887]  hci_rfkill_set_block+0xdc/0x1d0
[  107.893838][ T5887]  rfkill_set_block+0x18c/0x37c
[  107.894836][ T5887]  rfkill_fop_write+0x594/0x750
[  107.895848][ T5887]  vfs_write+0x280/0xb44
[  107.896754][ T5887]  ksys_write+0x15c/0x26c
[  107.897693][ T5887]  __arm64_sys_write+0x7c/0x90
[  107.898763][ T5887]  invoke_syscall+0x98/0x2b8
[  107.899888][ T5887]  el0_svc_common+0x138/0x258
[  107.900953][ T5887]  do_el0_svc+0x58/0x14c
[  107.901946][ T5887]  el0_svc+0x7c/0x1f0
[  107.902798][ T5887]  el0t_64_sync_handler+0x84/0xe4
[  107.903921][ T5887]  el0t_64_sync+0x1a0/0x1a4
[  108.428777][ T5893] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  108.430536][ T5893] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  108.445852][ T5893] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  108.447676][ T5893] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  108.471927][ T5893] EXT4-fs (loop4): 1 truncate cleaned up
[  108.479876][ T5893] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  108.624834][ T5893] EXT4-fs (loop4): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpquota,noquota,quota,noload,noload,. Quota mode: writeback.